Memory-Sample Lower Bounds for LWE

Ask about this paper

Ask your agent about it.

Lune has read the top-tier papers around this one, so every answer names the papers it rests on.

Related papers

• Bitwise Garbling Schemes - A Model with $\frac{3}{2}\lambda$-Bit Lower Bound of CiphertextsFei Xu, Honggang Hu, Changhong XuCRYPTO 2025 · 2 citations
• Low Weight Discrete Logarithm and Subset Sum in 20.65n with Polynomial MemoryAndre Esser, Alexander MayEUROCRYPT 2020 · 14 citations
• Refined Attack on LWE with Hints: Constructing Lattice via Gaussian EliminationJinzheng Cao, Haodong Jiang, Qingfeng ChengCRYPTO 2025 · 3 citations
• Secure Multiparty Computation with Sublinear PreprocessingElette Boyle, Niv Gilboa, Yuval Ishai, Ariel NofEUROCRYPT 2022 · 12 citations
• Adaptively Secure Computation for RAM ProgramsLaasya Bangalore, Rafail Ostrovsky, Oxana Poburinnaya, Muthuramakrishnan VenkitasubramaniamEUROCRYPT 2022