Worst-Case to Average-Case Hardness of LWE: An Alternative Perspective

Divesh Aggarwal
Friday 10th April 2026 | 4:00 PM – 5:00 PM IST
CC109

In this work, we study the worst-case to average-case hardness of the Learning with Errors problem (LWE) under an alternative measure of hardness, the maximum success probability achievable by a probabilistic polynomial-time (PPT) algorithm. Previous works by Regev (STOC 2005), Peikert (STOC 2009), and Brakerski, Peikert, Langlois, Regev, Stehle (STOC 2013) give worst-case to average-case reductions from lattice problems to LWE, specifically from the approximate decision variant of the Shortest Vector Problem (GapSVP) and the Bounded Distance Decoding (BDD) problem. 

These reductions, however, are lossy in the sense that even the strongest assumption on the worst-case hardness of GapSVP or BDD implies only mild hardness of LWE. Our alternative perspective gives a much tighter reduction and strongly relates the hardness of LWE to that of BDD. In particular, we show that under a reasonable assumption about the success probability of solving BDD via a PPT algorithm, we obtain a nearly tight lower bound on the highest possible success probability for solving LWE via a PPT algorithm. Our results not only refine our understanding of the computational complexity of LWE, but also provide a useful framework for analyzing the practical security implications.

 

Speaker Biography

Divesh Aggarwal is an Associate Professor in the Department of Computer Science and a Principal Investigator at the Centre for Quantum Technologies at the National University of Singapore. He earned his PhD from ETH Zurich. His research spans lattice-based cryptography, pseudorandomness, computational complexity, and coding theory. His key contributions include the fastest known algorithms for many different lattice problems and advancing the understanding of their computational hardness. His work also includes state-of-the-art constructions in non-malleable codes and extractors, which play a crucial role in many cryptographic protocols. In recognition of his research, he was awarded the NRF Investigatorship in 2024.