In this paper, we present a new algorithm to solve algebraically the following lattice-related problems: 1) the small integer solution (SIS) problem under the condition: if the solution is bounded by an integer β in l_∞ norm, which we call a bounded SIS (BSIS) problem, and if the difference between the row dimension n and the column dimension m of the corresponding basis matrix is relatively small with respect the row dimension m; 2) the learning with errors (LWE) problems under the condition: if the errors are bounded - the errors do not span the whole prime finite field F_q but a fixed known subset of size D (D < q), which we call a learning with bounded errors (LWBE) problem. We will show that we can solve these problems with polynomial complexity.

Consider an unstable quantum system that has been found undecayed at an instant s and denote by R(t,s) the rate of its regeneration into an original (undecayed) state at a later instant t+s. It is proved that the reduced evolution is a semigroup, i.e., there is no regeneration at all, provided R(t,s)1/2 can be estimated by a sufficiently regular function that is nondecreasing in s and has zero derivative with respect to t at t=0 for every s. This generalizes the theorem of Misra and Sinha [Helv. Phys. Acta 45, 619 (1972)] in a different direction than in a recent paper by Nishioka [J. Math. Phys. 29, 1860 (1988)].

Many N=(2,2) two-dimensional nonlinear sigma models with Calabi-Yau target spaces admit ultraviolet descriptions as N=(2,2) gauge theories (gauged linear sigma models). We conjecture that the two-sphere partition function of such ultraviolet gauge theories -- recently computed via localization by Benini et al. and Doroud et al. -- yields the exact Kähler potential on the quantum Kähler moduli space for Calabi-Yau threefold target spaces. In particular, this allows one to compute the genus zero Gromov-Witten invariants for any such Calabi-Yau threefold without the use of mirror symmetry. More generally, when the infrared superconformal fixed point is used to compactify string theory, this provides a direct method to compute the spacetime Kähler potential of certain moduli (e.g., vector multiplet moduli in type IIA), exactly in {\alpha}'. We compute these quantities for the quintic and for Rødland's Pfaffian Calabi-Yau threefold and find agreement with existing results in the literature. We then apply our methods to a codimension four determinantal Calabi-Yau threefold in P^7, recently given a nonabelian gauge theory description by the present authors, for which no mirror Calabi-Yau is currently known. We derive predictions for its Gromov-Witten invariants and verify that our predictions satisfy nontrivial geometric checks.

In this paper, we propose an algebraic broadcast attack against NTRU, which recovers a single message encrypted multiple times using different NTRU public keys. Namely, when a message is broadcasted, under some reasonable assumptions, our attack can be completed in polynomial time and space. To the best of our knowledge, this is the first successful broadcast attack against NTRU.

No abstract uploaded!

In CT-RSA 2019, Bauer et al. have analyzed the case when the public key is reused for the NewHope key encapsulation mechanism (KEM), a second-round candidate in the NIST Post-quantum Standard process. They proposed an elegant method to recover coefficients ranging from −6 to 4 in the secret key. We repeat their experiments but there are two fundamental problems. First, even for coefficients in [−6, 4] we cannot recover at least 262 of them in each secret key with 1024 coefficients. Second, for the coefficient outside [−6, 4], they suggested an exhaustive search. But for each secret key on average there are 10 coefficients that need to be exhaustively searched, and each of them has 6 possibilities. This makes Bauer et al.’s method highly inefficient. We propose an improved method, which with 99.22% probability recovers all the coefficients ranging from −6 to 4 in the secret key. Then, inspired by Ding et al.’s key mismatch attack, we propose an efficient strategy which with a probability of 96.88% succeeds in recovering all the coefficients in the secret key. Experiments show that our proposed method is very efficient, which completes the attack in about 137.56 ms using the NewHope parameters.

Secure group communication systems have become increasingly important for many emerging network applications. An efficient and robust group key management approach is indispensable to a secure group communication system. Motivated by the theory of hyper-sphere, this paper presents a new group key management approach with a group controller (GC). In our new design, a hyper-sphere is constructed for a group and each member in the group corresponds to a point on the hyper-sphere, which is called the member's private point. The GC computes the central point of the hyper-sphere, intuitively, whose “distance” from each member's private point is identical. The central point is published such that each member can compute a common group key, using a function by taking each member's private point and the central point of the hyper-sphere as the input. This approach is provably secure under the pseudo-random function (PRF) assumption. Compared with other similar schemes, by both theoretical analysis and experiments, our scheme (1) has significantly reduced memory and computation load for each group member; (2) can efficiently deal with massive membership change with only two re-keying messages, i.e., the central point of the hyper-sphere and a random number; and (3) is efficient and very scalable for large-size groups.

No abstract uploaded!

Properties of the subset of polygonal paths in the Hilbert space of paths referring to a<i>d</i>-dimensional quantum-mechanical system are examined. The results are used to discuss various types of polygonal-path approximations appearing in the functional-integration theory. The uniform approximation is applied to extend the definition of the Feynman maps from our previous paper and to prove consistency of this extension. Relations of the extended<i>F</i> _<i>i</i> map to the Wiener integral are given.

The Feynman maps introduced first by Truman are examined. The domain considered here consists of the Fresnel-integrable functions in the sense of Albeverio and Hoegh-Krohn; extensions to wider classes of functions will be studied in the following paper. The original definition of the F-maps is slightly modified: we start from the underlying measures on the Hilbert space of paths in order to avoid use of improper integrals. Some new properties of the F-maps are derived. In particular, the dominated convergence theorem is shown to be not valid for the F₁-map (or Feynman integral); this fact is of a certain importance for the classical limit of quantum mechanics.

Convergence theories and a deluxe dual and primal finite element tearing and interconnecting algorithm are developed for a hybrid staggered DG finite element approximation of H(curl) elliptic problems in two dimensions. In addition to the advantages of staggered DG methods, the basis functions of the new hybrid staggered DG method are all locally supported in the triangular elements, and a Lagrange multiplier approach is applied to enforce the global connections of these basis functions. The interface problem on the Lagrange multipliers is further reduced to the resulting problem on the subdomain interfaces, and a dual and primal finite element tearing and interconnecting algorithm with an enriched weight factor is then applied to the resulting problem. Our algorithm is shown to give a condition number bound of <i>C</i>(1+log(<i>H</i><i>h</i>))², independent of the two parameters, where <i>H</i><i>h</i> is the number of

We establish that boundary degrees of freedom associated with a generic codimension one null surface in D-dimensional pure Einstein gravity naturally admit a thermodynamical description. We expect the null surface thermodynamics to universally follow as a result of the diffeomorphism invariance of the theory, not relying on other special features of the null surface or the gravity theory. Using standard surface charge analysis and covariant phase-space method, we formulate laws of null surface thermodynamics which are local equations over an arbitrary null surface paralleling local versions of the zeroth- and first laws and the Gibbs-Duhem equation. This thermodynamical system is generally an open system and can be closed only when there is no flux of gravitons through the null surface. Our analysis extends the usual black hole thermodynamics to a universal feature of any area element on a generic null surface. We discuss the relevance of our study for the membrane paradigm and black hole microstates.

We bootstrap N=(1,0) superconformal field theories in six dimensions, by analyzing the four-point function of flavor current multiplets. Assuming E_8 flavor group, we present universal bounds on the central charge C_T and the flavor central charge C_J . Based on the numerical data, we conjecture that the rank-one E-string theory saturates the universal lower bound on C_J , and numerically determine the spectrum of long multiplets in the rank-one E-string theory. We comment on the possibility of solving the higher-rank E-string theories by bootstrap and thereby probing M-theory on AdS_7×S^4/Z_2.

In this paper, we prove that the degree of regularity of the family of Square systems, an HFE type of systems, over a prime finite field of odd characteristics q is exactly q, and therefore prove that \begin{itemize} \item inverting Square systems algebraically is exponential, when q=O(n), where n is the number of variables of the system. \end{itemize}

The study of Rényi mutual information (RMI) sheds light on the AdS/CFT correspondence beyond classical order. In this article, we study the Rényi mutual information between two intervals at large distance in two-dimensional holographic warped conformal field theory, which is conjectured to be dual to the gravity on AdS3 or warped AdS3 spacetime under the Dirichlet-Newman boundary conditions. By using the operator product expansion of twist operators up to level 3, we read the leading oder and the next-toleading order RMI in the large central charge and small cross-ratio limits. The leading order result is furthermore confirmed using the conformal block expansion. Finally, we match the next-to-leading result by a 1-loop calculation in the bulk.

Recent studies have shown that the entropy production rate for the master equation consists of two nonnegative terms: the adiabatic and non-adiabatic parts, where the non-adiabatic part is also known as the dissipation rate of a Boltzmann-Shannon relative entropy. In this paper, we provide some nonzero lower bounds for the relative entropy, the entropy production rate, and its adiabatic and non-adiabatic parts. These nonzero lower bounds not only reveal some novel dissipative properties for general nonequilibrium processes which are much stronger than the second law of thermodynamics, but also impose some new constraints on thermodynamic constitutive relations. Moreover, we also provide a mathematical application of these nonzero lower bounds by studying the long-time behavior of the master equation. Extensions to the Tsallis statistics are also discussed, including the nonzero lower bounds for the Tsallis-type relative entropy and its dissipation rate.

A Cardy formula for 6d superconformal field theories (SCFTs) conjectured by Di Pietro and Komargodski governs the universal behavior of the supersymmetric partition function on S^1_β×S^5 in the limit of small β and fixed squashing of the S^5. For a general 6d SCFT, we study its 5d effective action, which is dominated by the supersymmetric completions of perturbatively gauge-invariant Chern-Simons terms in the small β limit. Explicitly evaluating these supersymmetric completions gives the precise squashing dependence in the Cardy formula. For SCFTs with a pure Higgs branch (also known as very Higgsable SCFTs), we determine the Chern-Simons levels by explicitly going onto the Higgs branch and integrating out the Kaluza-Klein modes of the 6d fields on S^1_β. We then discuss tensor branch flows, where an apparent mismatch between the formula in Di Pietro-Komargodski and the free field answer requires an additional contribution from BPS strings. This "missing contribution" is further sharpened by the relation between the fractional part of the Chern-Simons levels and the (mixed) global gravitational anomalies of the 6d SCFT. We also comment on the Cardy formula for 4d N=2 SCFTs in relation to Higgs branch and Coulomb branch flows.

We study a charged two-dimensional particle confined to a straight parabolic-potential channel and exposed to a homogeneous magnetic field under the influence of a potential perturbation W. If W is bounded and periodic along the channel, a perturbative argument yields the absolute continuity of the bottom of the spectrum. We show that it can have any finite number of open gaps provided that the confining potential is sufficiently strong. However, if W depends on the periodic variable only, we prove by the Thomas argument that the whole spectrum is absolutely continuous, irrespective of the size of the perturbation. On the other hand, if W is small and satisfies a weak localization condition in the the longitudinal direction, we prove by the Mourre method that a part of the absolutely continuous spectrum persists.

We revisit 't Hooft anomalies in (1+1)d non-spin quantum field theory, starting from the consistency and locality conditions, and find that consistent U(1) and gravitational anomalies cannot always be canceled by properly quantized (2+1)d classical Chern-Simons actions. On the one hand, we prove that certain exotic anomalies can only be realized by non-reflection-positive or non-compact theories; on the other hand, without insisting on reflection-positivity, the exotic anomalies present a caveat to the inflow paradigm. For the mixed U(1) gravitational anomaly, we propose an inflow mechanism involving a mixed U(1)×SO(2) classical Chern-Simons action with a boundary condition that matches the SO(2) gauge field with the (1+1)d spin connection. Furthermore, we show that this mixed anomaly gives rise to an isotopy anomaly of U(1) topological defect lines. The isotopy anomaly can be canceled by an extrinsic curvature improvement term, but at the cost of creating a periodicity anomaly. We survey the holomorphic bc ghost system which realizes all the exotic consistent anomalies, and end with comments on a subtlety regarding the anomalies of finite subgroups of U(1).

The SMS4 block cipher is part of the Chinese WAPI wireless standard. This paper describes the specification and offers a specification for a toy version called simplified SMS4 (S-SMS4). We explore algebraic attacks on SMS4 and S-SMS4 using Gröbner basis attacks on equation systems over GF(2) and GF(2^8), as well as attacks using a SAT solver derived from the GF(2) model. A comparison of SAT and Gröbner basis attacks is provided.

We investigate a charged two-dimensional particle in a homogeneous magnetic field interacting with a periodic array of point obstacles. We show that while Landau levels remain to be infinitely degenerate eigenvalues, between them the system has bands of absolutely continuous spectrum and exhibits thus a transport along the array. We also compute the band functions and the corresponding probability current.

In this paper, gold ball wire bonding at low temperature using a high frequency transducer was evaluated. The substrates used were FR-4 laminates with two different gold-plated surface finishes: electrolytic and immersion gold-plated. Bonding temperatures of 120/spl deg/C, 80/spl deg/C and 40/spl deg/C were investigated with 1 mil fine pitch gold wire. Prior to wire bonding, the laminates and dice were plasma treated. The surfaces were analyzed prior to and after plasma treatment before wire bonding using XPS and AFM. Bonded areas were also analyzed using SEM. Design of experiment (DOE) techniques have been employed to optimize the bonding parameters at each temperature. The response of the DOE was evaluated by using bond shear and bond pull. The results show that bonding at low temperature is viable with the use of a high frequency transducer wire bonder.

We study thermodynamic aspects of a tractable toy model of holography for extremal Kerr black holes proposed in [arXiv:1806.10127]. On the gravity side, the theory can be described by the worldsheet action of string theory on a warped AdS3 background supported by NS-NS flux. Once we turn on temperature, the deformed background is described by a black string solution of type IIB supergravity that features a locally warped AdS3 factor. The dual field theory is conjectured to be a single-trace version of a JT¯-deformed CFT at finite temperature. As evidence for the correspondence we show that the spectrum of strings winding on the deformed background agrees with the spectrum of JT¯-deformed CFTs. Furthermore, we show that the gravitational charges of the black string match the averaged charges of a thermal ensemble in the dual field theory. Finally, we reproduce the Bekenstein-Hawking entropy of the black string from the microscopic density of states of JT¯-deformed CFTs.

No abstract uploaded!

In 2006, Nie et al proposed an attack to break an instance of TTM cryptosystems. However, the inventor of TTM disputed this attack and he proposed two new instances of TTM to support his viewpoint. At this time, he did not give the detail of key construction --- the construction of the lock polynomials in these instances which would be used in decryption. The two instances are claimed to achieve a security of 2^{109} against Nie et al attack. In this paper, we show that these instances are both still insecure, and in fact, they do not achieve a better design in the sense that we can find a ciphertext-only attack utilizing the First Order Linearization Equations while for the previous version of TTM, only Second Order Linearization Equations can be used in the beginning stage of the previous attack. Different from previous attacks, we use an iterated linearization method to break these two instances. For any given valid ciphertext, we can find its corresponding plaintext within 2^{31} F_{2^8}-computations after performing once for any public key a computation of complexity less than 2^{44} . Our experiment result shows we have unlocked the lock polynomials after several iterations, though we do not know the detailed construction of lock polynomials.