A copy of this work was available on the public web and has been preserved in the Wayback Machine. The capture dates from 2019; you can also visit the original URL.
The file type is `application/pdf`

.

##
###
LP Solutions of Vectorial Integer Subset Sums – Cryptanalysis of Galbraith's Binary Matrix LWE
[chapter]

2017
*
Lecture Notes in Computer Science
*

We consider Galbraith's space efficient LWE variant, where the (m × n)-matrix A is binary. In this binary case, solving a vectorial subset sum problem over the integers allows for decryption. We show how to solve this problem using (Integer) Linear Programming. Our attack requires only a fraction of a second for all instances in a regime for m that cannot be attacked by current lattice algorithms. E.g. we are able to solve 100 instances of Galbraith's small LWE challenge (n, m) = (256, 400) all

doi:10.1007/978-3-662-54365-8_1
fatcat:4ar73tgenfhqpcvqqcqo3ggei4