Module lattice problems

The module analogues of the shortest-vector and shortest-independent-vectors problems, stated for lattices arising as modules over the ring of integers of a number field; Module-LWE and Module-SIS reduce from their worst-case hardness.

TODO: syntax and security definition.

Participates in

Builds on Module lattice problems