{"id":"https://openalex.org/W2967455120","doi":"https://doi.org/10.1515/jmc-2015-0046","title":"On the quantum attacks against schemes relying on the hardness of finding a short generator of an ideal in \u211a(\ud835\udf01 <sub> 2 <sup>\ud835\udc60</sup> </sub> )","display_name":"On the quantum attacks against schemes relying on the hardness of finding a short generator of an ideal in \u211a(\ud835\udf01 <sub> 2 <sup>\ud835\udc60</sup> </sub> )","publication_year":2019,"publication_date":"2019-08-14","ids":{"openalex":"https://openalex.org/W2967455120","doi":"https://doi.org/10.1515/jmc-2015-0046","mag":"2967455120"},"language":"en","primary_location":{"id":"doi:10.1515/jmc-2015-0046","is_oa":true,"landing_page_url":"https://doi.org/10.1515/jmc-2015-0046","pdf_url":"https://www.degruyter.com/document/doi/10.1515/jmc-2015-0046/pdf","source":{"id":"https://openalex.org/S100611479","display_name":"Journal of Mathematical Cryptology","issn_l":"1862-2976","issn":["1862-2976","1862-2984"],"is_oa":false,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310313990","host_organization_name":"De Gruyter","host_organization_lineage":["https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Mathematical Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://www.degruyter.com/document/doi/10.1515/jmc-2015-0046/pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030566023","display_name":"Jean\u2010Fran\u00e7ois Biasse","orcid":"https://orcid.org/0000-0001-8591-8408"},"institutions":[{"id":"https://openalex.org/I2613432","display_name":"University of South Florida","ror":"https://ror.org/032db5x82","country_code":"US","type":"education","lineage":["https://openalex.org/I2613432"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Jean-Fran\u00e7ois Biasse","raw_affiliation_strings":["Department of Mathematics & Statistics , University of South Florida , 4202 East Fowler Ave, CMC342 , Tampa , FL 33620-5700 , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Mathematics & Statistics , University of South Florida , 4202 East Fowler Ave, CMC342 , Tampa , FL 33620-5700 , USA","institution_ids":["https://openalex.org/I2613432"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064804413","display_name":"Fang Song","orcid":"https://orcid.org/0000-0002-3098-6451"},"institutions":[{"id":"https://openalex.org/I91045830","display_name":"Texas A&M University","ror":"https://ror.org/01f5ytq51","country_code":"US","type":"education","lineage":["https://openalex.org/I91045830"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fang Song","raw_affiliation_strings":["Department of Computer Science and Engineering , Texas A&M University , Harvey R Bright Building, 3112 TAMU , College Station , TX 77843-3112 , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering , Texas A&M University , Harvey R Bright Building, 3112 TAMU , College Station , TX 77843-3112 , USA","institution_ids":["https://openalex.org/I91045830"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5030566023"],"corresponding_institution_ids":["https://openalex.org/I2613432"],"apc_list":{"value":1000,"currency":"EUR","value_usd":1078},"apc_paid":{"value":1000,"currency":"EUR","value_usd":1078},"fwci":0.0,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.09366357,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":"13","issue":"3-4","first_page":"151","last_page":"168"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11130","display_name":"Coding theory and cryptography","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/multilinear-map","display_name":"Multilinear map","score":0.7456390261650085},{"id":"https://openalex.org/keywords/ideal","display_name":"Ideal (ethics)","score":0.6956623792648315},{"id":"https://openalex.org/keywords/ciphertext","display_name":"Ciphertext","score":0.6540061831474304},{"id":"https://openalex.org/keywords/learning-with-errors","display_name":"Learning with errors","score":0.6136707067489624},{"id":"https://openalex.org/keywords/generator","display_name":"Generator (circuit theory)","score":0.5938777327537537},{"id":"https://openalex.org/keywords/homomorphic-encryption","display_name":"Homomorphic encryption","score":0.5874873995780945},{"id":"https://openalex.org/keywords/combinatorics","display_name":"Combinatorics","score":0.4723720848560333},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.4604324698448181},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.4589555859565735},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.44119590520858765},{"id":"https://openalex.org/keywords/principal-ideal","display_name":"Principal ideal","score":0.44073253870010376},{"id":"https://openalex.org/keywords/discrete-mathematics","display_name":"Discrete mathematics","score":0.43889230489730835},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.41240906715393066},{"id":"https://openalex.org/keywords/arithmetic","display_name":"Arithmetic","score":0.3615591526031494},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.32378047704696655},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.30565786361694336},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.2818511128425598},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.2761968672275543},{"id":"https://openalex.org/keywords/quantum-mechanics","display_name":"Quantum mechanics","score":0.16500991582870483},{"id":"https://openalex.org/keywords/pure-mathematics","display_name":"Pure mathematics","score":0.15796303749084473},{"id":"https://openalex.org/keywords/prime","display_name":"Prime (order theory)","score":0.12699025869369507}],"concepts":[{"id":"https://openalex.org/C84392682","wikidata":"https://www.wikidata.org/wiki/Q1952404","display_name":"Multilinear map","level":2,"score":0.7456390261650085},{"id":"https://openalex.org/C2776639384","wikidata":"https://www.wikidata.org/wiki/Q840396","display_name":"Ideal (ethics)","level":2,"score":0.6956623792648315},{"id":"https://openalex.org/C93974786","wikidata":"https://www.wikidata.org/wiki/Q1589480","display_name":"Ciphertext","level":3,"score":0.6540061831474304},{"id":"https://openalex.org/C2779014939","wikidata":"https://www.wikidata.org/wiki/Q6510239","display_name":"Learning with errors","level":3,"score":0.6136707067489624},{"id":"https://openalex.org/C2780992000","wikidata":"https://www.wikidata.org/wiki/Q17016113","display_name":"Generator (circuit theory)","level":3,"score":0.5938777327537537},{"id":"https://openalex.org/C158338273","wikidata":"https://www.wikidata.org/wiki/Q2154943","display_name":"Homomorphic encryption","level":3,"score":0.5874873995780945},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.4723720848560333},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4604324698448181},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.4589555859565735},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.44119590520858765},{"id":"https://openalex.org/C78766492","wikidata":"https://www.wikidata.org/wiki/Q44382","display_name":"Principal ideal","level":3,"score":0.44073253870010376},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.43889230489730835},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.41240906715393066},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.3615591526031494},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.32378047704696655},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.30565786361694336},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.2818511128425598},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2761968672275543},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.16500991582870483},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.15796303749084473},{"id":"https://openalex.org/C184992742","wikidata":"https://www.wikidata.org/wiki/Q7243229","display_name":"Prime (order theory)","level":2,"score":0.12699025869369507},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1515/jmc-2015-0046","is_oa":true,"landing_page_url":"https://doi.org/10.1515/jmc-2015-0046","pdf_url":"https://www.degruyter.com/document/doi/10.1515/jmc-2015-0046/pdf","source":{"id":"https://openalex.org/S100611479","display_name":"Journal of Mathematical Cryptology","issn_l":"1862-2976","issn":["1862-2976","1862-2984"],"is_oa":false,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310313990","host_organization_name":"De Gruyter","host_organization_lineage":["https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Mathematical Cryptology","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:a30bdf9d19f3439198b9bf19b71eccd0","is_oa":true,"landing_page_url":"https://doaj.org/article/a30bdf9d19f3439198b9bf19b71eccd0","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Mathematical Cryptology, Vol 13, Iss 3-4, Pp 151-168 (2019)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1515/jmc-2015-0046","is_oa":true,"landing_page_url":"https://doi.org/10.1515/jmc-2015-0046","pdf_url":"https://www.degruyter.com/document/doi/10.1515/jmc-2015-0046/pdf","source":{"id":"https://openalex.org/S100611479","display_name":"Journal of Mathematical Cryptology","issn_l":"1862-2976","issn":["1862-2976","1862-2984"],"is_oa":false,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310313990","host_organization_name":"De Gruyter","host_organization_lineage":["https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Mathematical Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1828394723","display_name":null,"funder_award_id":"1839805","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G1839924431","display_name":null,"funder_award_id":"1846166","funder_id":"https://openalex.org/F4320335353","funder_display_name":"National Science Foundation of Sri Lanka"},{"id":"https://openalex.org/G351953454","display_name":"EAGER: Quantum-Safe Cryptosystems Based on Isogenies","funder_award_id":"1839805","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3833370212","display_name":"CAREER: Algebraic Methods for the Computation of Approximate Short Vectors in Ideal Lattices","funder_award_id":"1846166","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5903682999","display_name":"TOOLS FOR THE STANDARDIZATION OF POST-QUANTUM CRYPTOGRAPHY","funder_award_id":"60NANB17D184","funder_id":"https://openalex.org/F4320332178","funder_display_name":"National Institute of Standards and Technology"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320332178","display_name":"National Institute of Standards and Technology","ror":"https://ror.org/05xpvk416"},{"id":"https://openalex.org/F4320335353","display_name":"National Science Foundation of Sri Lanka","ror":"https://ror.org/010xaa060"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2967455120.pdf","grobid_xml":"https://content.openalex.org/works/W2967455120.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W120063373","https://openalex.org/W1499237070","https://openalex.org/W1558606648","https://openalex.org/W1575598731","https://openalex.org/W1603256047","https://openalex.org/W2035829038","https://openalex.org/W2041027673","https://openalex.org/W2060301675","https://openalex.org/W2060509762","https://openalex.org/W2090828985","https://openalex.org/W2091712624","https://openalex.org/W2135124252","https://openalex.org/W2489377303","https://openalex.org/W3023478445","https://openalex.org/W3111297213","https://openalex.org/W4250253042"],"related_works":["https://openalex.org/W2947510282","https://openalex.org/W2963103512","https://openalex.org/W2363701519","https://openalex.org/W2601739120","https://openalex.org/W3029045823","https://openalex.org/W2400565204","https://openalex.org/W2885113919","https://openalex.org/W3121459986","https://openalex.org/W3174551526","https://openalex.org/W2951883561"],"abstract_inverted_index":{"Abstract":[0],"A":[1,395],"family":[2],"of":[3,10,41,74,79,123,188,204,222,311,341,403,410,417],"ring-based":[4],"cryptosystems,":[5],"including":[6],"the":[7,36,72,158,162,186,249,312,330,342,375,400,411],"multilinear":[8,16],"maps":[9,17],"Garg,":[11],"Gentry":[12],"and":[13,35,43,52,148,198,225,283,357,392],"Halevi":[14],"[Candidate":[15],"from":[18,220,329],"ideal":[19,82,126],"lattices,":[20],"Advances":[21],"in":[22,27,61,84,89,127,164,207,251,294,332,365],"Cryptology\u2014EUROCRYPT":[23],"2013,":[24,33],"Lecture":[25,59],"Notes":[26,60],"Comput.":[28,62],"Sci.":[29,63],"7881,":[30],"Springer,":[31,65],"Heidelberg":[32],"1\u201317]":[34],"fully":[37],"homomorphic":[38,46],"encryption":[39,47],"scheme":[40],"Smart":[42],"Vercauteren":[44],"[Fully":[45],"with":[48],"relatively":[49],"small":[50],"key":[51],"ciphertext":[53],"sizes,":[54],"Public":[55],"Key":[56],"Cryptography\u2014PKC":[57],"2010,":[58,67],"6056,":[64],"Berlin":[66],"420\u2013443],":[68],"are":[69],"based":[70],"on":[71,161,354,415],"hardness":[73],"finding":[75,304],"a":[76,80,85,115,121,124,228,300,325,346],"short":[77,202,326],"generator":[78,122,307,327,331],"principal":[81,125,205,314],"(short-PIP)":[83],"number":[86,407],"field":[87],"typically":[88],"<m:math":[90,128,165,252],"xmlns:m=\"http://www.w3.org/1998/Math/MathML\">":[91,129,166,253],"<m:mrow>":[92,95,130,133,167,170,254,257],"<m:mi>\u211a</m:mi>":[93,131,168,255],"<m:mo>\u2062</m:mo>":[94,132,169,256],"<m:mo>(</m:mo>":[96,134,171,258],"<m:msub>":[97,135,172,259],"<m:mi>\u03b6</m:mi>":[98,136,173,260],"<m:msup>":[99,137,174,261],"<m:mn>2</m:mn>":[100,138,175,262],"<m:mi>s</m:mi>":[101,139,176,263],"</m:msup>":[102,140,177,264],"</m:msub>":[103,141,178,265],"<m:mo>)</m:mo>":[104,142,179,266],"</m:mrow>":[105,106,143,144,180,181,267,268],"</m:math>":[107,145,182,269],"{\\mathbb{Q}(\\zeta_{2^{s}})}":[108,146,183,270],".":[109,271],"In":[110,349],"this":[111,152,233,350],"paper,":[112,351],"we":[113,149,352,358,370],"present":[114],"polynomial-time":[116],"quantum":[117,245,301,366,396],"algorithm":[118,246,302,373,397],"for":[119,247,289,303,374,398],"recovering":[120],",":[147],"recall":[150],"how":[151],"can":[153,363],"be":[154],"used":[155],"to":[156,323,382],"attack":[157,234],"schemes":[159],"relying":[160],"short-PIP":[163,275,291],"by":[184,237,280,344],"using":[185],"work":[187],"Cramer":[189,335],"et":[190,336,384],"al.":[191,337,385],"[R.":[192],"Cramer,":[193],"L.":[194],"Ducas,":[195],"C.":[196],"Peikert":[197],"O.":[199],"Regev,":[200],"Recovering":[201],"generators":[203],"ideals":[206],"cyclotomic":[208],"rings,":[209],"IACR":[210],"Cryptology":[211],"ePrint":[212],"Archive":[213],"2015,":[214],"https://eprint.iacr.org/2015/313":[215],"],":[216],"which":[217],"is":[218,276,321],"derived":[219],"observations":[221],"Campbell,":[223,281],"Groves":[224,282],"Shepherd":[226],"[SOLILOQUY,":[227],"cautionary":[229],"tale].":[230],"We":[231],"put":[232],"into":[235],"perspective":[236],"reviewing":[238],"earlier":[239],"attempts":[240],"at":[241],"providing":[242],"an":[243,287,305,372,404],"efficient":[244],"solving":[248,290],"PIP":[250],"The":[272],"assumption":[273],"that":[274,292,319,360],"hard":[277],"was":[278],"challenged":[279],"Shepherd.":[284],"They":[285],"proposed":[286],"approach":[288,343],"proceeds":[293],"two":[295],"steps:":[296],"first":[297],"they":[298,317],"sketched":[299],"arbitrary":[306,405],"(not":[308],"necessarily":[309],"short)":[310],"input":[313],"ideal.":[315],"Then":[316],"suggested":[318],"it":[320],"feasible":[322],"compute":[324],"efficiently":[328],"step":[333,339,355,361],"1.":[334],"validated":[338],"2":[340],"giving":[345],"detailed":[347],"analysis.":[348],"focus":[353],"1,":[356],"show":[359],"1":[362],"run":[364],"polynomial":[367],"time":[368],"if":[369],"use":[371],"continuous":[376],"hidden":[377],"subgroup":[378],"problem":[379],"(HSP)":[380],"due":[381],"Eisentr\u00e4ger":[383],"[K.":[386],"Eisentr\u00e4ger,":[387],"S.":[388],"Hallgren,":[389],"A.":[390],"Kitaev":[391],"F.":[393],"Song,":[394],"computing":[399],"unit":[401],"group":[402],"degree":[406],"field,":[408],"Proceedings":[409],"2014":[412],"ACM":[413],"Symposium":[414],"Theory":[416],"Computing\u2014STOC\u201914,":[418],"ACM,":[419],"New":[420],"York":[421],"2014,":[422],"293\u2013302].":[423]},"counts_by_year":[{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2019-08-22T00:00:00"}