Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Algebraic aspects of solving Ring-LWE, including ring-based improvements
  in the Blum-Kalai-Wasserman algorithm   We provide a reduction of the Ring-LWE problem to Ring-LWE problems in
subrings, in the presence of samples of a restricted form (i.e. $(a,b)$ such
that $a$ is restricted to a multiplicative coset of the subring). To create and
exploit such restricted samples, we propose Ring-BKW, a version of the
Blum-Kalai-Wasserman algorithm which respects the ring structure. Off-the-shelf
BKW dimension reduction (including coded-BKW and sieving) can be used for the
reduction phase. Its primary advantage is that there is no need for
back-substitution, and the solving/hypothesis-testing phase can be
parallelized. We also present a method to exploit symmetry to reduce table
sizes, samples needed, and runtime during the reduction phase. The results
apply to two-power cyclotomic Ring-LWE with parameters proposed for practical
use (including all splitting types).

9
The categories of this paper are: nlin
28
The categories of this paper are: alg-geom
4
The categories of this paper are: cond-mat
8
The categories of this paper are: hep-ex
18
The categories of this paper are: econ
27
The categories of this paper are: comp-gas
16
The categories of this paper are: stat
6
The categories of this paper are: astro-ph
14
The categories of this paper are: math-ph
12
The categories of this paper are: nucl-th
31
The categories of this paper are: ao-sci
3
The categories of this paper are: physics
29
The categories of this paper are: funct-an
0
The categories of this paper are: hep-ph
36
The categories of this paper are: cmp-lg
24
The categories of this paper are: dg-ga