Abstract Future assaults from quantum computers will be able to resist most contemporary public key cryptosystems. Post-quantum encryption has attracted much attention recently because of the mathematical tools it provides to guard communications and data against these types of attacks. Based on the challenging mathematical difficulties in high-dimensional lattice theory, lattice-based encryption—which boasts great efficiency, reasonable size, and robust security—may be a kind of post-quantum encryption. With any chance, this survey will address all the foundations of lattice-based cryptography. The writers start by summarizing the fundamental lattice problems in mathematics. They then provide the theoretical foundation for lattice-based encryption as well as the essential cryptanalytic methods.
Abstract Future assaults from quantum computers will be able to resist most contemporary public key cryptosystems. Post-quantum encryption has attracted much attention recently because of the mathematical tools it provides to guard communications and data against these types of attacks. Based on the challenging mathematical difficulties in high-dimensional lattice theory, lattice-based encryption—which boasts great efficiency, reasonable size, and robust security—may be a kind of post-quantum encryption. With any chance, this survey will address all the foundations of lattice-based cryptography. The writers start by summarizing the fundamental lattice problems in mathematics. They then provide the theoretical foundation for lattice-based encryption as well as the essential cryptanalytic methods.
The security of classical public-key cryptosystems, which operate based on the computational intractability of integer factorization and discrete logarithm problems, is profoundly threatened by the rapid development of quantum computing. Post-Quantum Cryptography (PQC) has been proposed to improve security against quantum attacks. Lattice-based cryptography is widely regarded as one of the most promising PQC method because of its proven security, efficient implementation, and functional versatility, and it has achieved significant progress in both algorithmic design and engineering implementation in recent years. This paper presents a systematic survey of the status of research on lattice-based cryptographic algorithms. First, the fundamental theory of lattices and their core hard problems are discussed. Next, the technical characteristics and performance of encryption and key encapsulation mechanisms, digital signature schemes, and key exchange protocols constructed based on lattice hard problems are reviewed and compared. Subsequently, the principles and optimization paths of two key technologies for lattice cryptography implementation, namely polynomial multiplication using the fast Number Theoretic Transform (NTT) and pre-image sampling algorithms, are discussed. Finally, considering the PQC standardization process of the National Institute of Standards and Technology (NIST), an outlook on future research directions for lattice-based cryptography is presented. The research directions include the development of more "succinct" fundamental hard problems, strengthening security proofs, improving algorithm efficiency, and countering novel attacks. This review serves as a reference for promoting the practical deployment and further research of lattice-based cryptography.
Lattice cryptography has become one of the focal points in the era of quantum computing development. RSA and ECC, traditional public key cryptosystems, may become insecure in the face of quantum computers. In contrast, lattice cryptography is considered a potential solution for cryptographic security in the quantum computing age due to its inherent mathematical problems that require the use of quantum computers to solve. Moreover, lattice cryptographic algorithms can achieve efficient encryption and decryption processes and support a variety of cryptographic constructions, including encryption, signatures, and fully homomorphic encryption (FHE). With its high efficiency, multifunctionality, and high security, lattice cryptography has applications in various fields such as finance, e-commerce, government agencies, military, and network communications. It has also become one of the top contenders for the post-quantum cryptographic algorithm standards that have been recognized by the National Institute of Standards and Technology (NIST). This paper discusses the main contributions of lattice cryptography to society and its potential future development directions, as well as the challenges it may face and potential solutions. This thesis elaborates on lattice-based cryptography and comprehensively discusses the key technologies of lattice cryptography, its applications, security analysis, performance evaluation, and the latest progress.
The imminent threat posed by the development of cryptographically relevant quantum computers necessitates a paradigm shift in public-key cryptography. Traditional cryptosystems like RSA and Elliptic Curve Cryptography (ECC), which underpin global digital security, are vulnerable to quantum algorithms such as Shor's algorithm. This vulnerability mandates a proactive migration to post-quantum cryptography (PQC) to secure long-term sensitive data. Among the various candidates for post-quantum security, lattice-based cryptography has emerged as a particularly promising and robust solution. This paper explores the fundamental principles of lattice-based cryptography, detailing its security foundations rooted in the presumed hardness of lattice problems like the Short Integer Solution (SIS) and Learning With Errors (LWE) problems. We review the significant progress in the field, including its selection as a primary candidate in the NIST Post-Quantum Cryptography standardization process. We discuss its advantages in terms of provable security, versatility, and potential for efficient implementation across diverse platforms, from cloud infrastructure to the Internet of Things (IoT). We also address the practical implications and challenges of its deployment, asserting its indispensable role in fortifying public-key security against future quantum attacks, thereby establishing it as a post-quantum imperative.
This chapter introduces lattice-based cryptography, a critical mathematical framework for securing communications in the post-quantum era. While classical public-key cryptosystems rely on the intractability of integer factorization and discrete logarithms, these foundations are fundamentally vulnerable to quantum computing threats, specifically Shor's algorithm. To address this vulnerability, the text explores cryptosystems built upon the algebraic structure of lattices, defined as discrete points in n-dimensional Euclidean space generated by linearly independent vectors. The chapter systematically covers the mathematical properties of lattices, associated computational problems, and distance metrics. It provides an in-depth examination of lattice basis reduction algorithms, which are fundamental to both the design and security evaluation of these systems. Furthermore, the chapter details the operational mechanics—including encryption, decryption, and cryptanalysis—of prominent post-quantum architectures, specifically the GGH and NTRU public-key cryptosystems. By transitioning from classical number theory to high-dimensional geometry, this chapter equips readers with the cryptographic primitives necessary to withstand future quantum attacks.
Classical cryptography has been around for a long time in the documented human history, but most classical ciphers were broken and even solved by hand. Shannon introduced the notion of perfect secrecy that formally defines confidentiality in the information-theoretic sense, which is only possible in the restricted scenarios where the message is no longer than the encryption key. The invention of public-key cryptography (the Diffie-Hellman key exchange protocol in 1976 and the RSA crypto-system in 1977) marks the birth of modern cryptography, allowing parties to exchange messages securely without sharing any secrets in advance. Furthermore, it provides computational security based on the conjectured hardness of mathematical problems such as factorization and the discrete logarithm. Public-key cryptography has found numerous applications in the Internet, financial and banking industry, and blockchains, and it plays a crucial role in protecting information security and asset safety. Unfortunately, in the 1990s, Shor proposed efficient quantum algorithms that solve number-theoretic problems, including factorization and discrete logarithms in polynomial time. Once a quantum computer of a particular scale becomes a reality, it will cause a devastating blow to the existing public-key infrastructure. To deal with such a ‘quantum crisis’, academia and industry are looking into the design, analysis and standardization of cryptographic algorithms that can resist quantum computers referred to as post-quantum cryptography (PQC). The National Institute of Standards and Technology (NIST) has been soliciting proposals for the post-quantum public-key algorithms since 2016. More recently, the Chinese Association for Cryptologic Research (CACR) held a competition on designing cryptographic algorithms whose public-key cryptography track focused on post-quantum cryptographic algorithms. Lattice-based cryptography is considered by most to be the mainstream technical route of post-quantum cryptography, which is reflected in the number of proposals (and their percentage of the total) received in the NIST PQC process. To reflect the status quo of post-quantum cryptography, we invite leading experts in this area to contribute three technical perspectives that aim to help readers understand the algorithms, the underlying basic techniques and different technical routes to achieve quantum resistance. The first perspective, presented by Lu and Zhang, introduces public-key cryptographic algorithms whose quantum security is reducible from the conjectured quantum hardness of lattice problems. In particular, they mainly focus on public-key encryption (PKE) and the key encapsulation mechanism (KEM), which are essential building blocks for securing the confidentiality of communication without pre-shared secrets. Both types of crypto-systems are solicited by the NIST PQC standardization and the CACR algorithm design competition. This perspective gives a comprehensive survey on practical lattice-based PKEs/KEMs, and their best-known quantum and classical attacks. Another important post-quantum crypto-system is digital signature, which ensures that three goals of information security are met other than confidentiality, namely, integrity, authentication and non-repudiation. The second perspective is on lattice-based signature by Lyubashevsky. In this perspective, he surveys different techniques in building lattice-based post-quantum crypto-systems, discusses the challenges in overcoming performance issues and gives us state-of-the-art digital signature schemes. In addition to ensuring the ‘static’ security of information in storage and transmission, advanced cryptographic algorithms and protocols can guarantee information security during the computation process (possibly among multiple parties), referred to as privacy-preserving computation. Cryptographic techniques involved in privacy-preserving computation include secure multi-party computation, zero-knowledge proof and fully homomorphic encryption. There is a pressing need to migrate them to the post-quantum era. The third perspective, by Yu and Xie, presents practical instantiations of these algorithms and discusses possible ways to migrate them to their quantum-resistant counterparts. To summarize, post-quantum cryptography has received widespread attention and made significant progress in recent years. Some post-quantum cryptographic algorithms, such as the lattice-based candidate, also have other advantages (e.g., computational efficiency and full homomorphism) over their classical counterparts. Lattice-based cryptography is an emerging field with high theoretical value and wide application, and we encourage young researchers to enter and explore this new and exciting field.
The landscape of modern cryptography is fundamentally challenged by the advent of quantum computing. Current public-key cryptosystems, which form the bedrock of secure digital communication, rely on the computational hardness of problems such as integer factorization (RSA) and the discrete logarithm problem (ECC). However, Shor's algorithm, if implemented on a sufficiently powerful quantum computer, can efficiently break these schemes, rendering them insecure. This paper explores the critical transition from these classical number theory problems to lattice-based cryptography, presenting a comprehensive analysis of the motivations, theoretical underpinnings, and practical implications for forging post-quantum cryptographic security. We delve into the mathematical foundations of lattice problems, such as the Shortest Vector Problem (SVP) and Learning With Errors (LWE), which are believed to resist known quantum algorithms. Through a thorough literature review, we trace the evolution of cryptographic thought, detailing the vulnerabilities of pre-quantum schemes and the emergence of lattice-based constructions as leading candidates for post-quantum standardization. The methodology outlines a comparative theoretical analysis of security, efficiency, and robustness against both classical and quantum attacks. Results demonstrate the compelling advantages of lattice-based schemes in terms of provable security reductions and resistance to quantum threats, albeit with considerations for increased key and ciphertext sizes. The discussion highlights the challenges and opportunities in the deployment and standardization of these new cryptographic primitives, emphasizing their critical role in securing future digital infrastructures. This work concludes that lattice-based cryptography offers a robust and theoretically sound pathway to establishing enduring security in a quantum-threatened world.