Noah Stephens-Davidowitz

Pseudorandomness of ring-LWE for any ring and modulus

2017

We give a polynomial-time quantum reduction from worst-case (ideal) lattice problems directly to decision (Ring-)LWE. This extends to decision all the worst-case hardness results that were previously known for the search version, for the same …