Paper 2026/1841

Avoiding Product-Denominator Blowup in Lattice-Folding Extraction

Xiang Wang, Guizhou Universtity
Shihui Fu, Shandong University
Michał Osadnik, Aalto University
Abstract

Coordinate-wise extraction in lattice folding naturally produces source openings normalized by challenge differences, while an inconsistency branch must ultimately yield a short integral SIS relation. Branchwise polynomial integralization converts each extracted tuple under one common multiplier before comparing the tuples; this collects the local challenge slacks into a global product and can push the resulting relation outside the useful shortness regime. We retain each local normalization until the two extracted tuples are compared. The resulting integral kernel relation depends only on local slack factors. In the sequential interactive setting, we realize this comparison by synchronizing two successful coordinate stars at the same numerical folding challenge. The remaining difficulty is probabilistic: the common challenge is inherited from a successful execution and is therefore success-biased. Acceptance-weighted shared-root synchronization gives additive raw extraction loss and linear unconditional expected retry-invocation complexity. For a Cyclo-compatible instantiation, this changes the concrete extraction regime. At arity two, the coefficient radii for local comparison and branchwise integralization have base-two logarithms 25.04 and 49.63, respectively, while the coefficientwise centered-modulus threshold is about 49. We also instantiate the required short unit-difference challenge interface and give a one-fold classical-ROM compilation.

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Preprint.
Keywords
Lattice foldingKnowledge extractionModule-SISNegacyclic rings
Contact author(s)
ee wangx24 @ gzu edu cn
shihuifu @ sdu edu cn
michal osadnik @ aalto fi
History
2026-09-01: approved
2026-08-31: received
See all versions
Short URL
https://ia.cr/2026/1841
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2026/1841,
      author = {Xiang Wang and Shihui Fu and Michał Osadnik},
      title = {Avoiding Product-Denominator Blowup in Lattice-Folding Extraction},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/1841},
      year = {2026},
      url = {https://eprint.iacr.org/2026/1841}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.