Computing generator in cyclotomic integer rings - Archive ouverte HAL
Communication Dans Un Congrès Année : 2017

Computing generator in cyclotomic integer rings

Résumé

The Principal Ideal Problem (resp. Short Principal Ideal Problem), shorten as PIP (resp. SPIP), consists in finding a generator (resp. short generator) of a principal ideal in the ring of integers of a number field. Several lattice-based cryptosystems rely on the presumed hardness of these two problems. In practice, most of them do not use an arbitrary number field but a power-of-two cyclotomic field. The Smart and Vercauteren fully homomorphic encryption scheme and the multilinear map of Garg, Gentry, and Halevi epitomize this common restriction. Recently, Cramer, Ducas, Peikert, and Regev showed that solving the SPIP in such cyclotomic rings boiled down to solving the PIP. In this paper, we present a heuristic algorithm that solves the PIP in prime-power cyclotomic fields in subexponential time L(1/2), where ∆ K denotes the discriminant of the number field. This is achieved by descending to its totally real subfield. The implementation of our algorithm allows to recover in practice the secret key of the Smart and Vercauteren scheme, for the smallest proposed parameters (in dimension 256).
Fichier principal
Vignette du fichier
142.pdf (596.09 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-01518438 , version 1 (04-05-2017)

Identifiants

Citer

Jean-François Biasse, Thomas Espitau, Pierre-Alain Fouque, Alexandre Gélin, Paul Kirchner. Computing generator in cyclotomic integer rings. 36th Annual International Conference on the Theory and Applications of Cryptographic Techniques (EUROCRYPT 2017), Apr 2017, Paris, France. pp.60-88, ⟨10.1007/978-3-319-56620-7_3⟩. ⟨hal-01518438⟩
382 Consultations
482 Téléchargements

Altmetric

Partager

More