How to decrypt an LWE ciphertext
11:42
How to evaluate a block cipher
14:48
Module 7: Asymmetric Cryptography
23:05
Module 6: Hash Functions and MACs
22:32
Module 3: Security Models
13:21
Жыл бұрын
Module 1: Mathematical Foundations
25:05
A KEM based on Module-LWE
24:30
2 жыл бұрын
Modular Polynomials
17:21
2 жыл бұрын
Euclidean Lattices
18:35
2 жыл бұрын
Пікірлер
@johnusadispatch
@johnusadispatch 7 күн бұрын
2^256 and the story is ended... No algorithm can search this range... maybe quantum in the future
@linanwx6217
@linanwx6217 11 күн бұрын
Good video with mistake
@pbvideo5412
@pbvideo5412 Ай бұрын
The definition of linearity on the first slide is incorrect. It should be <λx+y, z> = λ<x, z> + <y, z>.
@ProfessorX12321
@ProfessorX12321 Ай бұрын
how can we do this for module lwe?
@Chipster-r6o
@Chipster-r6o Ай бұрын
Hi Jean-Francoise, I would like to thank you for sharing this amazing content on Lattice based cryptography , I just have one question ...based on the assumptions of the proof that works out the bound on lambda(L) @15: 34 , shouldn't the Volume of the hypercube be greater than 2^n * Vol (L) for Minkowski's theorem to be applicable ?
@W_Z_Y_X
@W_Z_Y_X 2 ай бұрын
When using the primal attack for MLWE, do you just plug A' found from the circulant matrix into the lattice (Im x n A'), or do you substitute A' as A from the LWE example?
@CynthiaHiggins-g7x
@CynthiaHiggins-g7x 2 ай бұрын
Fritz Ferry
@allaboutastronomyy
@allaboutastronomyy 2 ай бұрын
at 21:36, can you please explain how we got the A matrix? Thanks!
@JoeCharron-c4g
@JoeCharron-c4g 2 ай бұрын
Labadie Stravenue
@ScottHugo-t4d
@ScottHugo-t4d 2 ай бұрын
Arlie Ports
@LeopoldCamille-y3z
@LeopoldCamille-y3z 2 ай бұрын
Jude Circle
@RavenMariah-o3u
@RavenMariah-o3u 2 ай бұрын
Tierra Path
@HelenBrown-z1l
@HelenBrown-z1l 2 ай бұрын
Bernier Squares
@jimihendrixx11
@jimihendrixx11 3 ай бұрын
Well explained & taught 😊
@jimihendrixx11
@jimihendrixx11 3 ай бұрын
Cryptosystems😊
@MuscleTeamOfficial
@MuscleTeamOfficial 4 ай бұрын
Go bulls lol
@principalcookie2163
@principalcookie2163 4 ай бұрын
Do you have a source, explaining why this works?
@hosseinbornak
@hosseinbornak 4 ай бұрын
thank you very much
@JakeHemmerle
@JakeHemmerle 5 ай бұрын
at 6:08, why is Span(S) = R^3 and not Z^3? While V = R^3, the vectors are a subset of R (specifically, in Z), so wouldn't Span(S) be Z, since we're just using whole numbers, eg (0,1,0). Isn't Span(S) a subset of R^3?
@gameshoot8571
@gameshoot8571 5 ай бұрын
This channel is so underrated! Thanks!
@yacc1706
@yacc1706 5 ай бұрын
7:48 important: BS is a PBS, what divides in state Vx with cos2theta, and state Hy with sin2theta. The second PBS "recombines" the original state
@yacc1706
@yacc1706 5 ай бұрын
23:54 a possible explanation, I think, is that "something" goes both paths and recombines in space and time in the second PBS to give the original state. If a path is longer than the another, then it doesn't get the original state. And if we put detectors in both paths ONLY ONE will get a click
@yacc1706
@yacc1706 5 ай бұрын
23:04 erratum??? Is it not: cos H kl + sin V ku ???
@franciskv2859
@franciskv2859 6 ай бұрын
Very good
@bouncycrabboomz
@bouncycrabboomz 6 ай бұрын
Thanks for the clear and great proof on Minkowski's convex body theorem. It really helped alot
@sebastiannunez1362
@sebastiannunez1362 6 ай бұрын
Hi! I think you mean "How many functions F(0) = F(1) are there?"
@aspidistrax_x2722
@aspidistrax_x2722 10 ай бұрын
Thank you for ur awesome video. I only wish u added an example of asymmetric lwe in the end. Im a bit lost.
@PunmasterSTP
@PunmasterSTP 10 ай бұрын
I'm still trying to wrap my head around this material, but this was a nice clean lecture. Thank you for making and sharing it!
@PunmasterSTP
@PunmasterSTP 10 ай бұрын
I haven't come across Maple in a while; it's cool to see it again!
@PunmasterSTP
@PunmasterSTP 10 ай бұрын
How'd you start with x0 = y0 = 2 and get x1 = 8 and y1 = 68? Anyway, this was a cool video 👍
@AmitYellin
@AmitYellin Ай бұрын
X²+4
@PunmasterSTP
@PunmasterSTP Ай бұрын
@@AmitYellin Yeah, I guess he just changed his mind while coming up with the example and forgot to update part of his script.
@akhsinak
@akhsinak Ай бұрын
true lol
@hanie.e
@hanie.e 10 ай бұрын
this helps a lot, thank you!
@omargaber3122
@omargaber3122 10 ай бұрын
Great thank
@jameskingsbery3644
@jameskingsbery3644 Жыл бұрын
The audio is pretty quiet on this one.
@pmatos0071
@pmatos0071 Жыл бұрын
Excelent video. Thanks for that. Pleasr keep up the good work. 🎉
@windy-j7f
@windy-j7f Жыл бұрын
Thanks for u video, but why did I get an A' in the form of some fractions?
@windy-j7f
@windy-j7f Жыл бұрын
emmm,I got the right consult,but What if the elements and modules in the matrix are not mutually prime。。。
@theping1920
@theping1920 Жыл бұрын
how is x1 = 8 and y1 = 68 shouldnt it be x1 = 5 and y1 = 26 ?
@karthiksk2748
@karthiksk2748 Жыл бұрын
That's what Im too confused
@dwightschrute4056
@dwightschrute4056 Жыл бұрын
Same doubt here
@0phir123
@0phir123 Жыл бұрын
same here lol, happy X-MASS btw :D
@PunmasterSTP
@PunmasterSTP 10 ай бұрын
Yes, and I think we're all confused!
@Abcabraabc
@Abcabraabc 2 ай бұрын
i think he used p(x) = x^2 + 4 instead for some reason
@ThefamousMrcroissant
@ThefamousMrcroissant Жыл бұрын
Thanks again for making these easy to digest videos
@bennieterrell4139
@bennieterrell4139 Жыл бұрын
"Promo SM"
@jackbreeazy6710
@jackbreeazy6710 Жыл бұрын
I could barely hear you as well but the video is good otherwise...
@ThefamousMrcroissant
@ThefamousMrcroissant Жыл бұрын
The example of LWE is marvelous however. Bit heavy on the rounded Gaussian maybe (which didn't feel like it was important enough to take up 1/3 of the entire lecture), but overall easy to grasp. Thanks for publishing this to youtube as well.
@ThefamousMrcroissant
@ThefamousMrcroissant Жыл бұрын
This has to be the most confusing explanation of Gaussian elemination I've ever seen. For example in slide 4:28 what are the indices here? In step 1 they are (column, row), but in step 3 they're suddenly rows? This is one of the extremely few instances were Wikipedia is actually way more understandable than some introductory video. At around 6:13 you reduce row 1 by subtracting row's 2 coefficients from it twice, but how does that result in -2 when the residue class is already at 0 at that point?
@IP1kachuI
@IP1kachuI Жыл бұрын
The video is too silent, (much) louder would be better
@morrisbarnett4457
@morrisbarnett4457 Жыл бұрын
promo sm
@danceordrink
@danceordrink Жыл бұрын
Thank you but why does x2 also contribute to the second qubit?
@sumanghosh8390
@sumanghosh8390 2 жыл бұрын
calculation mistake when calculating c'=c.P^{-1}=(1,0,0,1,1) it should be (1,1,0,1,1) so we can get back the correct message (1,1)
@niafally1240
@niafally1240 2 жыл бұрын
Great Video! Thank you! The only thing I'm not sure about is: what exactly is the difference between Ring LWE and Module LWE? If you could explain, i'd be very grateful! Thanks again!
@usfcryptocenter9924
@usfcryptocenter9924 2 жыл бұрын
Good question! Ring-LWE is Module LWE with k=1. Check out our notes here: www.usf-crypto.org/lattice-based-crypto/ (apologies for the typos).
@niafally1240
@niafally1240 2 жыл бұрын
@@usfcryptocenter9924 awesome! Thanks! :)
@harshgill3374
@harshgill3374 3 жыл бұрын
Great lecture, very clear you deserve more views! keep it up
@flecart
@flecart 3 жыл бұрын
cool
@aleksanderaksenov1363
@aleksanderaksenov1363 3 жыл бұрын
Sir, what is the exact construction of space VxW,what is the dimension of that space?
@m.kamalmkhallalati119
@m.kamalmkhallalati119 4 жыл бұрын
Perfect my friend
@sebastiancosta55
@sebastiancosta55 4 жыл бұрын
greater than or greater than or equal to??? it's throwing me off, I'm following the notation...not the explanation
@devanshparadkar2933
@devanshparadkar2933 4 жыл бұрын
yes encrypted message and decrypted message itself is different? WTF?