Crypto.Lol.RLWE.RLWR

Functions and types for working with ring-LWR samples.

Documentation

type Sample t m zq zp = (Cyc t m zq, Cyc t m zp)

An RLWR sample \( (a,b) \in R_q \times R_p\).

type RLWRCtx t m zq zp = (Fact m, Ring zq, RescaleCyc (Cyc t) zq zp, CElt t zq, CElt t zp)

Common constraints for working with RLWR.

sample :: (RLWRCtx t m zq zp, Random zq, MonadRandom rnd) => Cyc t m zq -> rnd (Sample t m zq zp)

An RLWR sample with the given secret.

roundedProd :: RLWRCtx t m zq zp => Cyc t m zq -> Cyc t m zq -> Cyc t m zp

The \(b\) component of an RLWR sample for secret \(s\) and given \(a\), produced by rounding \(a\cdot s\) in the decoding basis.