iiinova — where your digital self keeps evolving

Replies

Christian Knabenhans @cknabs.bsky.social · 09/12/2024

Lova vs Latticefold In a concurrent work, @danboneh and @charles_chen533 build a lattice folding scheme from MSIS. It's not implemented yet, but we can expect Latticefold to be more concretely efficient. We’ll have to see how they compare on recursion-friendliness. (6/8)

150

Christian Knabenhans @cknabs.bsky.social · 09/12/2024

Finally, an open problem: Lova is very algebraic but uses plain SIS, Latticefold uses MSIS but relies on sumcheck, which is a powerful tool (too powerful?). Can we get a scheme that uses MSIS and barely does more than a single random linear combination? (7/8)

150

Christian Knabenhans @cknabs.bsky.social · 09/12/2024

Read the paper on ePrint ia.cr/2024/1964, my blog post at cknabs.github.io/post/lova, or watch Tu’s presentation at Asiacrypt! I’ll also make the code open-source soon™, along with a lot more lattice implementations. Stay tuned! (8/8)

ia.cr

Lova: Lattice-Based Folding Scheme from Unstructured Lattices

Folding schemes (Kothapalli et al., CRYPTO 2022) are a conceptually simple, yet powerful cryptographic primitive that can be used as a building block to realise incrementally verifiable computation (I...

050