International Association for Cryptologic Research

International Association
for Cryptologic Research


Paper: When Bad News Become Good News: Towards Usable Instances of Learning with Physical Errors

Davide Bellizia , UCLouvain
Clément Hoffmann , UCLouvain
Dina Kamel , UCLouvain
Pierrick Méaux , Luxembourg University
François-Xavier Standaert , UC Louvain
Search ePrint
Search Google
Presentation: Slides
Abstract: Hard physical learning problems have been introduced as an alternative option to implement cryptosystems based on hard learning problems. Their high-level idea is to use inexact computing to generate erroneous computations directly, rather than to first compute correctly and add errors afterwards. Previous works focused on the applicability of this idea to the Learning Parity with Noise (LPN) problem as a first step, and formalized it as Learning Parity with Physical Noise (LPPN). In this work, we generalize it to the Learning With Errors (LWE) problem, formalized as Learning With Physical Errors (LWPE). We first show that the direct application of the design ideas used for LPPN prototypes leads to a new source of (mathematical) data dependencies in the error distributions that can reduce the security of the underlying problem. We then show that design tweaks can be used to avoid this issue, making LWPE samples natively robust against such data dependencies. We additionally put forward that these ideas open a quite wide design space that could make hard physical learning problems relevant in various applications. And we conclude by presenting a first prototype FPGA design confirming our claims.
  title={When Bad News Become Good News: Towards Usable Instances of Learning with Physical Errors},
  journal={IACR Transactions on Cryptographic Hardware and Embedded Systems},
  volume={2022, Issue 4},
  author={Davide Bellizia and Clément Hoffmann and Dina Kamel and Pierrick Méaux and François-Xavier Standaert},