Christian Knabenhans @cknabs.bsky.social · 09/12/2024Lova 💕 (aka lattice Nova): Duc Tu Pham, @giacomofenzi.bsky.social, Ngoc Khanh Nguyen and I built a folding scheme from (unstructured) lattice assumptions, which will be presented at Asiacrypt this week! (1/8) 171
Christian Knabenhans @cknabs.bsky.social · 09/12/2024Lattice folding schemes face two issues: witness norm growth (completeness), and norm growth when extracting (non-relaxed knowledge soundness). We use a split-and-fold technique to get around #1, and we use witness cross-terms (which we also fold) for #2. (2/8) 110
Christian Knabenhans @cknabs.bsky.social · 09/12/2024One thing I’m proud of in this paper is the notation: while lattice crypto papers are typically heavy notationally, we use matrix notation throughout which leads to a very concise (and imho elegant) notation. Here’s the entire protocol for our core folding step! (3/8) 120
