Lattices, Post-Quantum Security and Homomorphic Encryption

Daniele Micciancio (UC San Diego)
Richard M. Karp Distinguished Lecture Series, Spring 2020

Modern cryptography relies on mathematical problems that are computationally hard to solve, and exploits their hardness to build secure applications that are equally hard to break. During the last two decades, mathematical problems on point lattices have emerged as a very attractive class of problems to build new and powerful cryptographic functions. The talk will provide an overview of lattice-based cryptography, its roots in theoretical computer science, and some of its most distinctive features: resistance against powerful quantum adversaries, and the ability carry out computations on encrypted data.

[alinush]

I think on the LWE slide, at minute 21, the matrix A is in Z_q^{m, n} (not in Z_q^{n, m}) since the output b is an m-dimensional vector, as later revealed on that same slide.