Subfield Algorithms for Ideal- and Module-SVP Based on the Decomposition Group

Christian Porter, Andrew Mendelsohn, Cong Ling

Whilst lattice-based cryptosystems are believed to be resistant to quantum attack, they are often forced to pay for that security with inefficiencies in implementation. This proble…