{"title":"通过平滑代码减少解码到 LPN 的局限性","authors":"Madhura Pathegama, Alexander Barg","doi":"arxiv-2408.03742","DOIUrl":null,"url":null,"abstract":"The Learning Parity with Noise (LPN) problem underlines several classic\ncryptographic primitives. Researchers have endeavored to demonstrate the\nalgorithmic difficulty of this problem by attempting to find a reduction from\nthe decoding problem of linear codes, for which several hardness results exist.\nEarlier studies used code smoothing as a technical tool to achieve such\nreductions, showing that they are possible for codes with vanishing rate. This\nhas left open the question of attaining a reduction with positive-rate codes.\nAddressing this case, we characterize the efficiency of the reduction in terms\nof the parameters of the decoding and LPN problems. As a conclusion, we isolate\nthe parameter regimes for which a meaningful reduction is possible and the\nregimes for which its existence is unlikely.","PeriodicalId":501082,"journal":{"name":"arXiv - MATH - Information Theory","volume":"23 1","pages":""},"PeriodicalIF":0.0000,"publicationDate":"2024-08-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Limitations of the decoding-to-LPN reduction via code smoothing\",\"authors\":\"Madhura Pathegama, Alexander Barg\",\"doi\":\"arxiv-2408.03742\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"The Learning Parity with Noise (LPN) problem underlines several classic\\ncryptographic primitives. Researchers have endeavored to demonstrate the\\nalgorithmic difficulty of this problem by attempting to find a reduction from\\nthe decoding problem of linear codes, for which several hardness results exist.\\nEarlier studies used code smoothing as a technical tool to achieve such\\nreductions, showing that they are possible for codes with vanishing rate. This\\nhas left open the question of attaining a reduction with positive-rate codes.\\nAddressing this case, we characterize the efficiency of the reduction in terms\\nof the parameters of the decoding and LPN problems. As a conclusion, we isolate\\nthe parameter regimes for which a meaningful reduction is possible and the\\nregimes for which its existence is unlikely.\",\"PeriodicalId\":501082,\"journal\":{\"name\":\"arXiv - MATH - Information Theory\",\"volume\":\"23 1\",\"pages\":\"\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2024-08-07\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"arXiv - MATH - Information Theory\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/arxiv-2408.03742\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"arXiv - MATH - Information Theory","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/arxiv-2408.03742","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
Limitations of the decoding-to-LPN reduction via code smoothing
The Learning Parity with Noise (LPN) problem underlines several classic
cryptographic primitives. Researchers have endeavored to demonstrate the
algorithmic difficulty of this problem by attempting to find a reduction from
the decoding problem of linear codes, for which several hardness results exist.
Earlier studies used code smoothing as a technical tool to achieve such
reductions, showing that they are possible for codes with vanishing rate. This
has left open the question of attaining a reduction with positive-rate codes.
Addressing this case, we characterize the efficiency of the reduction in terms
of the parameters of the decoding and LPN problems. As a conclusion, we isolate
the parameter regimes for which a meaningful reduction is possible and the
regimes for which its existence is unlikely.