Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Lecture notes in computer science

Tighter Security for Efficient Lattice Cryptography via the Rényi Divergence of Optimized Orders

Katsuyuki Takashima, Atsushi Takayasu

Published Jan 1, 2015• 18 citations
Publisher
DOI
10.1007/978-3-319-26059-4_23

Related papers

Tighter Security for Efficient Lattice Cryptography via the Rényi Divergence of Optimized Orders.

Katsuyuki Takashima, Atsushi Takayasu

•Jan 1, 2015•0 citations

Improved Security Proofs in Lattice-Based Cryptography: Using the Rényi Divergence Rather than the Statistical Distance

Shi Bai, Tancrède Lepoint, Adeline Roux-Langlois +3 more

Journal of Cryptology•Aug 28, 2017•66 citations

Improved Security Proofs in Lattice-Based Cryptography: Using the Rényi Divergence Rather Than the Statistical Distance

Shi Bai, Adeline Roux-Langlois, Tancrède Lepoint +2 more

Lecture notes in computer science•Jan 1, 2015•101 citations

New quantum Rényi divergences and their application to device-independent cryptography and quantum Shannon theory

Peter J. Brown, Omar Fawzi, Hamza Fawzi

•Feb 1, 2021•0 citations

Improved security proofs in lattice-based cryptography: using the Rényi divergence rather than the statistical distance.

Shi Bai, Adeline Roux-Langlois, Tancrède Lepoint +2 more

The Rényi divergence is a measure of closeness of two probabilitydistributions. We show that it can often be used as an alternativeto the statistical distance in security proofs for lattice-based cryptography.Using the Rényi divergence is particularly suited for security proofsof primitives in which the attacker is required to solve a search problem(e.g., forging a signature).We show that it may also be used in the case ofdistinguishing problems (e.g., semantic security of encryption schemes),when they enjoy a public sampleability property. The techniques lead tosecurity proofs for schemes with smaller parameters, and sometimes tosimpler security proofs than the existing ones.

•Jan 1, 2015•0 citations

Improved Rényi Arguments for Lattice-Based Threshold Encryption

Katharina Boudgoust, Costache, Anamaria

Threshold encryption schemes provide a common tool to secure a public-key encryption scheme against single point of failure attacks. Despite the success of lattices in building fully-homomorphic and presumably quantum-resistant encryption schemes, the task of thresholdizing those schemes remains challenging. The major bottleneck in the standard approach is the use of statistical noise flooding, leading to a significant efficiency loss and the need of stronger hardness assumptions. Recent works have replaced the heavy statistical noise flooding by a lighter one using the Rényi divergence. The new Rényi noise flooding both improves the efficiency and allows to use weaker hardness assumptions. However, arguing semantic security of lattice-based threshold schemes in the presence of Rényi noise flooding showed to be challenging. Chowdhury et al. (IACR ePrint'22) argued in the fully-homomorphic case that the Rényi divergence directly applies for semantic security by making use of an existing framework called public sampleability. In this work, we argue that their public sampleability framework was neither sufficient nor correctly used. To address both issues, we strengthen the framework and thoroughly apply it to prove semantic security of generic lattice-based threshold encryption constructions. We distinguish between the plain public-key and the fully-homomorphic settings, as different security notions are achieved. As a byproduct, this shows that the proof detour via one-way security made by Boudgoust and Scholl (Asiacrypt'23) was superfluous, now leading to tighter proofs in the standard model.

•Apr 27, 2025•0 citations
The Rényi divergence is a measure of closeness of two probabilitydistributions. We show that it can often be used as an alternativeto the statistical distance in security proofs for lattice-based cryptography.Using the Rényi divergence is particularly suited for security proofsof primitives in which the attacker is required to solve a search problem(e.g., forging a signature).We show that it may also be used in the case ofdistinguishing problems (e.g., semantic security of encryption schemes),when they enjoy a public sampleability property. The techniques lead tosecurity proofs for schemes with smaller parameters, and sometimes tosimpler security proofs than the existing ones.
Threshold encryption schemes provide a common tool to secure a public-key encryption scheme against single point of failure attacks. Despite the success of lattices in building fully-homomorphic and presumably quantum-resistant encryption schemes, the task of thresholdizing those schemes remains challenging. The major bottleneck in the standard approach is the use of statistical noise flooding, leading to a significant efficiency loss and the need of stronger hardness assumptions. Recent works have replaced the heavy statistical noise flooding by a lighter one using the Rényi divergence. The new Rényi noise flooding both improves the efficiency and allows to use weaker hardness assumptions. However, arguing semantic security of lattice-based threshold schemes in the presence of Rényi noise flooding showed to be challenging. Chowdhury et al. (IACR ePrint'22) argued in the fully-homomorphic case that the Rényi divergence directly applies for semantic security by making use of an existing framework called public sampleability. In this work, we argue that their public sampleability framework was neither sufficient nor correctly used. To address both issues, we strengthen the framework and thoroughly apply it to prove semantic security of generic lattice-based threshold encryption constructions. We distinguish between the plain public-key and the fully-homomorphic settings, as different security notions are achieved. As a byproduct, this shows that the proof detour via one-way security made by Boudgoust and Scholl (Asiacrypt'23) was superfluous, now leading to tighter proofs in the standard model.