Choosing Parameters for NTRUEncrypt

DOI10.1007/978-3-319-52153-4_1zbMath1383.94022OpenAlexW2592691626MaRDI QIDQ2975792

Joseph H. Silverman, Zhenfei Zhang, William Whyte, Jeffrey Hoffstein, Jill Pipher, John M. Schanck

Publication date: 12 April 2017

Published in: Topics in Cryptology – CT-RSA 2017 (Search for Journal in Brave)

Full work available at URL: https://doi.org/10.1007/978-3-319-52153-4_1

zbMATH Keywords

cryptanalysisparameter derivationpublic-key cryptography/NTRUEncrypt

Mathematics Subject Classification ID

Cryptography (94A60)

Related Items (15)

Cryptanalysis of NTRU where the private polynomial has one or more consecutive zero coefficients ⋮ A detailed analysis of the hybrid lattice-reduction and meet-in-the-middle attack ⋮ NTRU over Galois rings ⋮ A Key Recovery Attack on MDPC with CCA Security Using Decoding Errors ⋮ On the measurement and simulation of the BKZ behavior for \(q\)-ary lattices ⋮ Compact lattice gadget and its applications to hash-and-sign signatures ⋮ Choosing Parameters for NTRUEncrypt ⋮ NTRU prime: reducing attack surface at low cost ⋮ How to securely outsource the extended Euclidean algorithm for large-scale polynomials over finite fields ⋮ Revisiting Lattice Attacks on Overstretched NTRU Parameters ⋮ Unnamed Item ⋮ Achievable upper bound for the sup-norm of the product of elements of the ring of truncated polynomials and its application to the analysis of NTRU-like cryptosystems ⋮ Modular lattice signatures, revisited ⋮ The Whole is Less Than the Sum of Its Parts: Constructing More Efficient Lattice-Based AKEs ⋮ A Subfield Lattice Attack on Overstretched NTRU Assumptions

Uses Software

• BKZ
• NTRU
• GitHub

Cites Work

• Unnamed Item
• Unnamed Item
• Random small Hamming weight products with applications to cryptography
• Lattice Signatures and Bimodal Gaussians
• Choosing Parameters for NTRUEncrypt
• Making NTRU as Secure as Worst-Case Problems over Ideal Lattices
• BKZ 2.0: Better Lattice Security Estimates
• A Hybrid Lattice-Reduction and Meet-in-the-Middle Attack Against NTRU
• Predicting Lattice Reduction
• Topics in Cryptology – CT-RSA 2005

This page was built for publication: Choosing Parameters for NTRUEncrypt