#### Paper 2021/1161

Marc Joye

##### Abstract

Integers can be decomposed in multiple ways. The choice of a recoding technique is generally dictated by performance considerations. The usual metric for optimizing the decomposition is the Hamming weight. In this work, we consider a different metric and propose new modified forms (i.e., integer representations using signed digits) that satisfy minimality requirements under the new metric. Specifically, we introduce what we call balanced non-adjacent forms and prove that they feature a minimal Euclidean weight. We also present efficient algorithms to produce these new minimal forms. We analyze their asymptotic and exact distributions. We extend the definition to modular integers and show similar optimality results. The balanced non-adjacent forms find natural applications in fully homomorphic encryption as they optimally reduce the noise variance in LWE-type ciphertexts.

Available format(s)
Category
Implementation
Publication info
Contact author(s)
marc @ zama ai
History
Short URL
https://ia.cr/2021/1161

CC BY

BibTeX

@misc{cryptoeprint:2021/1161,
author = {Marc Joye},