You are looking at a specific version 20180211:142840 of this paper. See the latest version.

Paper 2018/150

Analysis of Error-Correcting Codes for Lattice-Based Key Exchange

Tim Fritzmann and Thomas Pöppelmann and Johanna Sepulveda

Abstract

Lattice problems allow the construction of very efficient key exchange and public-key encryption schemes. When using the Learning with Errors (LWE) or Ring-LWE (RLWE) problem such schemes exhibit an interesting trade-off between decryption error rate and security. The reason is that secret and error distributions with a larger standard deviation lead to better security but also increase the chance of decryption failures. As a consequence, various message/key encoding or reconciliation techniques have been proposed that usually encode one payload bit into several coefficients. In this work, we analyze how error-correcting codes can be used to enhance the error resilience of protocols like NewHope, Frodo, or Kyber. For our case study, we focus on the recently introduced NewHope Simple and propose and analyze four different options for error correction: i) BCH code; ii) combination of BCH code and additive threshold encoding; iii) LDPC code; and iv) combination of BCH and LDPC code. We show that lattice-based cryptography can profit from classical and modern codes by combining BCH and LDPC codes. This way we achieve quasi-error-free communication and increase the estimated bit-security against quantum attacks by 20.39% and decrease the communication overhead by 12.8%.

Metadata
Available format(s)
PDF
Category
Public-key cryptography
Publication info
Preprint. MINOR revision.
Keywords
post-quantum key exchangeNewHope Simpleerror-correcting codes
Contact author(s)
tim fritzmann @ tum de
History
2019-11-14: last of 2 revisions
2018-02-11: received
See all versions
Short URL
https://ia.cr/2018/150
License
Creative Commons Attribution
CC BY
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.