Theory of Cryptography

Volume 5978 of the series Lecture Notes in Computer Science pp 382-400

Public-Key Cryptographic Primitives Provably as Secure as Subset Sum

  • Vadim LyubashevskyAffiliated withTel-Aviv University
  • , Adriana PalacioAffiliated withBowdoin College
  • , Gil SegevAffiliated withWeizmann Institute of Science


We propose a semantically-secure public-key encryption scheme whose security is polynomial-time equivalent to the hardness of solving random instances of the subset sum problem. The subset sum assumption required for the security of our scheme is weaker than that of existing subset-sum based encryption schemes, namely the lattice-based schemes of Ajtai and Dwork (STOC’97), Regev (STOC’03, STOC’05), and Peikert (STOC’09). Additionally, our proof of security is simple and direct. We also present a natural variant of our scheme that is secure against key-leakage attacks, and an oblivious transfer protocol that is secure against semi-honest adversaries.