Algorithms for the Approximate Common Divisor Problem

Abstract. The security of homomorphic encryption over the integers and its variants depends on the hardness of the Approximate Common Divisor (ACD) problem. In this paper we review and compare existing algorithms to solve the ACD problem using lattices. In particular we consider the simultaneous Diophantine approximation method, the orthogonal lattice method, and a method based on multivariate polynomials and Coppersmith’s algorithm that was studied in detail by Cohn and Heninger. We give a novel analysis of these algorithms that is appropriate for some of the recent variants of the ACD problem. One of our main contributions is to compare the multivariate polynomial approach with other methods. We find that Cohn and Heninger made certain assumptions that give a misleading view of the best choices of parameters for that algorithm. Instead, the best parameters seem to be those for which the algorithm becomes the orthogonal lattice algorithm. Another contribution is to consider a sampl...

• Type: Journal
• Year: 2016
• Where: IACR
• Authors: Steven D. Galbraith, Shishay W. Gebregiyorgis, Sean Murphy
• Keywords: Biometrics, IACR 2016