Lattice-Based Cryptography: From Protocol Design to Fast and Secure Implementation

Lattice-based cryptography is one of the most promising candidates for designing post-quantum cryptographic algorithms that resist emerging quantum computing attacks. The recently published NIST PQC standards provide practical lattice-based algorithms for basic cryptographic functionalities (namely digital signature and public-key encryption). However, these basic algorithms are not sufficient for transitioning to post-quantum security many applications that require more advanced privacy-preserving security functionalities, or have stringent implementation requirements, in terms of performance or security against side-channel attacks.