We show that the Learning with Errors (LWE) problem is classically at least as hard as standard worst-case lattice problems. Previously this was only known under quantum reductions.
No takes yet. Share an insight, caveat, or question.
Brakerski et al. (2013) studied this question.
Synapse has enriched one closely related paper. Consider it for comparative context: