Generating a lattice basis for lattice-based cryptography

A computing system comprising:

• a data processing apparatus;
• a computer-readable medium storing instructions that are operable when executed by the data processing apparatus to perform operations comprising:
• obtaining a first parameter for a lattice-based cryptography system, wherein the first parameter is a first global system parameter of the lattice-based cryptography system, the first parameter comprising a first set of values;
• obtaining a mask;
• obtaining pseudorandom data from a pseudorandom generator;
• generating a lattice basis parameter for the lattice-based cryptography system based on the first parameter and the pseudorandom data, the lattice basis parameter comprising a second set of values, the second set of values comprising:
• a first subset selected from the first set of values based on the mask;
• a second subset generated based on the pseudorandom data, independent of the first parameter,
• wherein the lattice basis parameter comprises a first matrix having m columns, and the mask comprises a second matrix having a weight ω, where ω≥m;
• and
• establishing communication with another computing system using the lattice basis parameter in an execution of a lattice-based cryptography protocol in a communication system.

A non-transitory computer readable medium storing instructions that are operable when executed by a data processing apparatus of a computing system to perform operations comprising:

• obtaining a first parameter for a lattice-based cryptography system, wherein the first parameter is a first global system parameter of the lattice-based cryptography system, the first parameter comprising a first set of values;
• obtaining a mask;
• obtaining pseudorandom data from a pseudorandom generator;
• generating a lattice basis parameter for the lattice-based cryptography system based on the first parameter and the pseudorandom data, the lattice basis parameter comprising a second set of values, the second set of values comprising:
• a first subset selected from the first set of values based on the mask;
• and
• a second subset generated based on the pseudorandom data, independent of the first parameter,
• wherein the lattice basis parameter comprises a first matrix having m columns, and the mask comprises a second matrix having a weight ω, where ω≥m;
• and
• establishing communication with another computing system using the lattice basis parameter in an execution of a lattice-based cryptography protocol in a communication system.