International Association
for Cryptologic Research

We describe plausible lattice-based constructions with properties that

approximate the sought-after multilinear maps in hard-discrete-logarithm

groups, and show that some applications of such multi-linear maps can

be realized using our approximations.

The security of our constructions relies on seemingly hard problems in

ideal lattices, which can be viewed as extensions of the assumed

hardness of the NTRU function.