In this paper, we present a simple attack on LWE and Ring LWE encryption schemes used directly as Key Encapsulation Mechanisms (KEMs). This attack could work due to the fact that a key mismatch in a KEM is accessible to an adversary. Our method clearly indicates that any LWE or RLWE (or any similar type of construction) encryption directly used as KEM can be broken by modifying our attack method according to the respective cases.

No abstract uploaded!

No abstract uploaded!

In this paper we prove a well-posedness result for the Cauchy problem. We study a class of first order hyperbolic differential [2] operators of rank zero on an involutive submanifold of$T$^{*}$R$^{$n$+1}-{0} and prove that under suitable assumptions on the symmetrizability of the lifting of the principal symbol to a natural blow up of the “singular part” of the characteristic set, the operator is strongly hyperbolic.

Let$α$_{1},$α$_{2},…,$α$_{$m$}be linear forms defined on ℂ^{$n$}and $\mathcal{X}=\mathbb{C}^{n}\setminus\bigcup_{i=1}^{m}V(\alpha_{i})$ , where$V$($α$_{$i$})={$p$∈ℂ^{$n$}$:$$α$_{$i$}($p$)=0}. The coordinate ring $O_{\mathcal{X}}$ of $\mathcal{X}$ is a holonomic$A$_{$n$}-module, where$A$_{$n$}is the$n$th Weyl algebra and since holonomic$A$_{$n$}-modules have finite length, $O_{\mathcal{X}}$ has finite length. We consider a “twisted” variant of this$A$_{$n$}-module which is also holonomic. Define M_{$α$}^{$β$}to be the free rank-1 ℂ[$x$]_{$α$}-module on the generator$α$^{$β$}(thought of as a multivalued function), where $\alpha^{\beta}=\alpha_{1}^{\beta_{1}},\ldots,\alpha_{m}^{\beta_{m}}$ and the multi-index$β$=($β$_{1},…,$β$_{$m$})∈ℂ^{$m$}. Our main result is the computation of the number of decomposition factors of M_{$α$}^{$β$}and their description when$n$=2.