In discrete mathematics, ideal lattices are a special class of lattices and a generalization of cyclic lattices.[1] Ideal lattices naturally occur in many parts of number theory, but also in other areas. In particular, they have a significant place in cryptography. Micciancio defined a generalization of cyclic lattices as ideal lattices. They can be used in cryptosystems to decrease by a square root the number of parameters necessary to describe a lattice, making them more efficient. Ideal lattices are a new concept, but similar lattice classes have been used for a long time. For example, cyclic lattices, a special case of ideal lattices, are used in NTRUEncrypt and NTRUSign.
Ideal lattices also form the basis for quantum computer attack resistant cryptography based on the Ring Learning with Errors.[2] These cryptosystems are provably secure under the assumption that the shortest vector problem (SVP) is hard in these ideal lattices.
^
Vadim Lyubashevsky. Lattice-Based Identification Schemes Secure Under Active Attacks. In Proceedings of the Practice and theory in public key cryptography, 11th international conference on Public key cryptography, 2008.
^Lyubashevsky, Vadim; Peikert, Chris; Regev, Oded (2010). "On ideal lattices and learning with errors over rings". In Proc. Of EUROCRYPT, Volume 6110 of LNCS: 1–23. CiteSeerX 10.1.1.297.6108.
In discrete mathematics, ideallattices are a special class of lattices and a generalization of cyclic lattices. Ideallattices naturally occur in many...
{\displaystyle \mathbb {Z} ^{n}} itself is a cyclic lattice. Lattices corresponding to any ideal in the quotient polynomial ring R = Z [ x ] / ( x n −...
but which does not require ideallattices. Instead, they show that the somewhat homomorphic component of Gentry's ideallattice-based scheme can be replaced...
structure of ideallattices. It is widely believed that solving SVP (and all other lattice problems) in ideallattices is as hard as in regular lattices." The...
distributive lattice. See the entry distributivity (order theory). A join-semilattice is distributive if and only if the lattice of its ideals (under inclusion)...
In mathematics, a distributive lattice is a lattice in which the operations of join and meet distribute over each other. The prototypical examples of such...
A lattice phase equaliser or lattice filter is an example of an all-pass filter. That is, the attenuation of the filter is constant at all frequencies...
appropriate notions of ideals, for example, rings and prime ideals (of ring theory), or distributive lattices and maximal ideals (of order theory). This...
diffraction. Fluctuations of atoms about the ideallattice positions that preserve the long-range order of the lattice only give rise to the Debye-Waller factor...
mathematics, a complete lattice is a partially ordered set in which all subsets have both a supremum (join) and an infimum (meet). A lattice that satisfies at...
SWIFFT is at least as difficult as finding short vectors in cyclic/ideallattices in the worst case. By giving a security reduction to the worst-case...
Bravais lattice. The lengths of the principal axes, or edges, of the unit cell and the angles between them are the lattice constants, also called lattice parameters...
directly related to the problem of finding approximate short vectors in an ideallattice. This article will closely follow the RLWE work of Ding in "A Simple...
number, together with the zero ideal. Primitive ideals are prime, and prime ideals are both primary and semiprime. An ideal P of a commutative ring R is...
Riesz space, lattice-ordered vector space or vector lattice is a partially ordered vector space where the order structure is a lattice. Riesz spaces...
In the branch of mathematics called order theory, a modular lattice is a lattice that satisfies the following self-dual condition, Modular law a ≤ b implies...
the mathematical discipline of order theory, a complemented lattice is a bounded lattice (with least element 0 and greatest element 1), in which every...
below has a provable reduction to the Shortest Vector Problem in an ideallattice. This means that if an attack can be found on the Ring-LWE cryptosystem...
congruence lattice problem asks whether every algebraic distributive lattice is isomorphic to the congruence lattice of some other lattice. The problem...
In mathematics, the Leech lattice is an even unimodular lattice Λ24 in 24-dimensional Euclidean space, which is one of the best models for the kissing...