Provably weak instances of Ring-LWE

Yara Elias, Kristin E. Lauter, Ekin Ozman +1

The ring and polynomial learning with errors problems (Ring-LWE and Poly-LWE) have been proposed as hard problems to form the basis for cryptosystems, and various security reductio…