Module-LWE

Structured variant of LWE over module lattices — the middle ground between plain LWE's caution and Ring-LWE's speed that ML-KEM and ML-DSA build on.

Core Principles & Analysis

• Module structure lets one implementation scale security by adjusting rank instead of redesigning the ring.
• Polynomial arithmetic via the number-theoretic transform makes it orders of magnitude faster than plain LWE.
• Both FIPS 203 and FIPS 204 rest on its presumed hardness.

Specifications & Metrics

• TYPE: Hard problem
• YEAR: 2012