Laura Luzzi

CR
3papers
1citation
Novelty53%
AI Score36

3 Papers

12.5ITMar 30
Finite-blocklength performance of polar wiretap codes under a total variation secrecy constraint

Laura Luzzi, Valerio Bioglio

We study the performance of polarizing codes over a degraded symmetric wiretap channel under a total variation distance (TVD) secrecy constraint. We show that the leakage can be bounded by the sum of the TVDs of the bit-channels corresponding to the confidential and frozen bits. In the asymptotic regime, this gives a new criterion to design wiretap codes with vanishing TVD leakage. In finite blocklength, it allows us to compute lower bounds for the secrecy rate of different families of polarizing wiretap codes over a binary erasure wiretap channel.

CROct 4, 2021
Error Correction for FrodoKEM Using the Gosset Lattice

Charbel Saliba, Laura Luzzi, Cong Ling

We consider FrodoKEM, a lattice-based cryptosystem based on LWE, and propose a new error correction mechanism to improve its performance. Our encoder maps the secret key block-wise into the Gosset lattice $E_8$. We propose two sets of parameters for our modified implementation. Thanks to the improved error correction, the first implementation outperforms FrodoKEM in terms of concrete security by $10$ to $13$ bits by increasing the error variance; the second allows to reduce the bandwidth by $7\%$ by halving the modulus $q$. In both cases, the decryption failure probability is improved compared to the original FrodoKEM. Unlike some previous works on error correction for lattice-based protocols, we provide a rigorous error probability bound by decomposing the error matrix into blocks with independent error coefficients.

CRJan 13, 2020
A reconciliation approach to key generation based on Module-LWE

Charbel Saliba, Laura Luzzi, Cong Ling

We consider a key encapsulation mechanism (KEM) based on Module-LWE where reconciliation is performed on the 8-dimensional lattice $E_8$, which admits a fast CVP algorithm. Our scheme generates 256 bits of key and requires 3 or 4 bits of reconciliation per dimension. We show that it can outperform Kyber in terms of the modulus q with comparable error probability. We prove that our protocol is IND-CPA secure and improves the security level of Kyber by 7.3%.