RLWE/PLWE equivalence for the maximal totally real subextension of the $2^{r}pq$-th cyclotomic field

Abstract

We prove the RLWE/PLWE equivalence for the maximal totally real subextension of the $2^{r}pq$-th cyclotomic field and discuss some of its applications to cryptoanalysis.

Cited by in corpus (1)

• Trace-based cryptanalysis of cyclotomic $R_{q,0}\times R_q$-PLWE for the non-split case