Multilinear Maps and Attacks I
summary
Describes lattice-based multilinear maps built over R = Z[x]/(x^n+1) with encodings as short numerators modulo an ideal generated by a small g and masked by powers of a secret Z (level‑k encodings ~ C / Z^k), sampling from wide Gaussians to get uniform cosets, and equality via a zero‑testing parameter H·Z^k·g that yields CH/Z small iff g divides C. Presents the GGH scheme and CLT variants, notes concrete attacks that recover structure for many parameters, and cites Coron et al. as a recent fix resilient to known attacks.
AI-written summary · about
chapters (7)
- 0:00Start
- 2:16Cryptographic Bilinear Maps
- 2:48Bilinear Maps – Definitions
- 14:46Multilinear Maps: Classical Notion
- 19:44Bilinear Maps: Our visualization
- 35:50Background
- 54:58Equality Checking - Correctness II
related talks
01h 16mMultilinear Maps Over the Integers: From Design to Security
54mGraph-Induced Multilinear Maps from Lattices
01h 29mLattices, Multilinear Maps and Program Obfuscation
01h 06mObfuscation: Past, Present, and Possible Futures
01h 04mHow to Encrypt a Functionality
01h 04mUsing Lattices for Cryptanalysis
57mTutorial: Encrypted Computation from Lattices
01h 07mLattices and Encrypted Computation
