arXiv subjects

Camilla Hollanti

Publications and source records attributed to Camilla Hollanti.

At least 19 recordsLinked to original sources

arXiv2026

A $q$-Polymatroid Framework for Information Leakage in Secure Linear Network Coding

We study information leakage in secure linear network coding schemes based on nested rank-metric codes. We show that the amount of information leaked to an adversary that observes a subset of network links is characterized by the conditional rank function of a representable $q$-polymatroid associated with the underlying rank-metric code pair. Building on this connection, we introduce the notions of $q$-polymatroid ports and $q$-access structures and describe their structural properties. Moreover, we relate minimal codewords in the rank-metric setting to minimal reconstructing spaces and prove a $q$-analogue of the Brickell--Davenport theorem.

cs.IT↗

arXiv2026

Algebraic Geometry Codes Approach the Half-Singleton Bound with Constant Field Size

We study linear codes for insertion and deletion (insdel) errors through the lens of evaluation codes. We develop a general framework for analyzing random puncturings of evaluation codes, where the edit distance is controlled by only the size of the evaluation domain and the maximum number of zeros of a nonzero function in the underlying function space. Our proof generalizes the results of Con, Guo, Li, and Zhang (ICALP 2025), and simultaneously simplifies their arguments by avoiding an in-depth analysis of longest common subsequences. We demonstrate the applicability of our core theorem by instantiating it with random puncturings of Reed--Muller codes. We then recover the result that random Reed--Solomon codes approach the half-Singleton bound over linear-sized fields while also improving the dependence on the additive gap $\varepsilon$ from $2^{O(1/\varepsilon^2)}$ to $2^{O(1/\varepsilon)}$. Finally, by applying the framework to algebraic geometry codes arising from asymptotically good towers of function fields, we show that there exist randomized families of structured linear codes over constant-sized fields that approach the half-Singleton bound.

cs.IT↗

arXiv2026

Secret Sharing in the Rank Metric

The connection between secret sharing and matroid theory is well established. In this paper, we generalize the concepts of secret sharing and matroid ports to $q$-polymatroids. Specifically, we introduce the notion of an access structure on a vector space, and consider properties related to duality, minors, and the relationship to $q$-polymatroids. Finally, we show how rank-metric codes give rise to secret sharing schemes within this framework.

cs.IT↗

arXiv2026

The Star Product of Uniformly Random Codes

We consider the problem of determining the expected dimension of the star product of two uniformly random linear codes that are not necessarily of the same dimension. We use a correspondence between the star product and the evaluation of bilinear forms to provide an explicit lower bound on the expected star product dimension. We prove that the expected dimension asymptotically reaches its maximum possible value as the field size increases. Furthermore, we show that the same maximal dimension is achieved asymptotically as the code dimensions increase, subject to a condition bounding their relative growth rates. We also analyze the variance of the star product dimension, providing explicit asymptotic upper bounds. Finally, we discuss the implications of these results for private information retrieval, secure distributed matrix multiplication, quantum error correction, and cryptanalysis.

cs.IT↗

arXiv2026

Structured lattices and their applications to security

Euclidean lattices are an interesting object of study in many regards and can have a rich structure arising from various constructions, e.g., from number field extensions. A particularly interesting class is the one of well-rounded lattices, as they relate to the well-known densest sphere packing problem in geometry, theta function minimization, and the famous Minkowski and Woods conjectures. In addition to being an important mathematical object in their own right, lattices also play a central role in many applications. This paper offers a survey of structured lattices and discusses their recent applications in lattice-based cryptography and secure wireless communications. Our goal is to spark the interest of mathematicians and adjacent communities in these fascinating topics in the intersection of lattices, number theory, cryptography, and wireless communications.

math.NT↗

arXiv2026

Function-Correcting Codes With Data Protection

Function-correcting codes (FCCs) are designed to provide error protection for the value of a function computed on the data. Existing work typically focuses solely on protecting the function value and not the underlying data. In this work, we propose a general framework that offers protection for both the data and the function values. Since protecting the data inherently contributes to protecting the function value, we focus on scenarios where the function value requires stronger protection than the data itself. We first introduce a more general approach and a framework for function-correcting codes that incorporates data protection along with protection of function values. A two-step construction procedure for such codes is proposed, and bounds on the optimal redundancy of general FCCs with data protection are reported. Using these results, we exhibit examples that show that data protection can be added to existing FCCs without increasing redundancy. Using our two-step construction procedure, we present explicit constructions of FCCs with data protection for specific families of functions, such as locally bounded functions and the Hamming weight function. We associate a graph called minimum-distance graph to a code and use it to show that perfect codes and maximum distance separable (MDS) codes cannot provide additional protection to function values over and above the amount of protection for data for any function. Then we focus on linear FCCs and provide some results for linear functions, leveraging their inherent structural properties. To the best of our knowledge, this is the first instance of FCCs with a linear structure. Finally, we generalize the Plotkin and Hamming bounds well known in classical error-correcting coding theory to FCCs with data protection.

cs.IT↗

arXiv2026

Existence and Constructions of Strict Function-Correcting Codes with Data Protection

Function-correcting codes with data protection simultaneously protect both the data and a function of the data at distinct error-correction levels. When the function receives strictly stronger protection than the data, such a code is called a strict function-correcting code with data protection. While prior work showed that perfect and MDS codes cannot serve as strict function-correcting codes, which codes can serve this role, and how to construct them, has remained open. In this paper, we address the existence and construction of strict function-correcting codes for linear codes through three main contributions. First, using the $α$-distance graph framework from our prior work, we establish a graph-theoretic existence condition under which a code can serve as a strict function-correcting code. For linear codes, we prove this distance graph is isomorphic to a Cayley graph, which implies the connected components are cosets of the subcode generated by low-weight codewords. This transforms the existence problem into a subcode generation problem. Second, a classical result of Simonis shows any linear code can be transformed into one with the same parameters whose basis consists entirely of minimum-weight codewords. We develop a converse construction: under certain conditions on the weight distribution, a linear code can be transformed into a new code with the same parameters but fewer independent minimum-weight codewords, thereby producing codes suitable for use as strict function-correcting codes. As a source of codes satisfying these conditions, we introduce chain codes, an infinite family of linear codes generated by their minimum-weight codewords. Third, we present an independent construction of strict function-correcting codes from narrow-sense BCH codes with designed distance three, by proving the minimum-weight codewords of such codes are contained in a proper subcode.

cs.IT↗

arXiv2026

Attacking the Polynomials in the Maze of Finite Fields problem

In April 2025 GMV announced a competition for finding the best method to solve a particular polynomial system over a finite field. In this paper we provide a method for solving the given equation system significantly faster than what is possible by brute-force or standard Gröbner basis approaches. The method exploits the structured sparsity of the polynomial system to compute a univariate polynomial in the associated ideal through successive computations of resultants. A solution to the system can then be efficiently recovered from this univariate polynomial. Pseudocode is given for the proposed ResultantSolver algorithm, along with experiments and comparisons to rival methods. We also discuss further potential improvements, such as parallelizing parts of the computations.

cs.CC↗

arXiv2026

Function-Correcting Partition Codes

We introduce function-correcting partition codes (FCPCs), which are a natural generalization of function-correcting codes (FCCs). An FCPC is defined directly on a partition of the message space, rather than on a specific target function. We show that any FCC for a function $f$ is exactly an FCPC with respect to the domain partition induced by $f$, which makes these codes a natural generalization of FCCs. We use the join of domain partitions to construct a single code that protects multiple functions simultaneously. We define the notions of partition gains to measure the bandwidth saved by using a single FCPC for multiple functions instead of constructing separate FCCs for each function. We derive general lower and upper bounds on the redundancy of such FCPCs and illustrate the achievable gains through examples. We specialize this concept of using single code for protecting multiple functions to linear functions via coset partition of the intersection of their kernels. We also present explicit FCPC constructions for locally bounded partitions and grouped weight partitions. Then, we associate a partition graph with any given partition of $\mathbb{F}_q^k$, and show that the existence of a suitable clique in this graph yields a set of representative information vectors that achieves the optimal redundancy. Using the existence of a full-size clique in the weight partition and support partition, we obtain lower and upper bounds on the optimal redundancy of FCPCs for these partitions. We introduce the notion of a block-preserving contraction for a partition, which helps reduce the problem size of finding optimal redundancy for an FCPC. We further show that such a contraction exists for all weight-based partitions. Finally, we observe that FCPCs naturally provide a form of partial privacy in the sense that only the domain partition of the function needs to be revealed to the transmitter.

cs.IT↗

arXiv2026

Non-Existence of Some Function-Correcting Codes With Data Protection

In this paper, we consider the recently introduced concept of \emph{function-correcting codes (FCCs) with data protection}, which provide a certain level of error protection for the data and a higher level of protection for a desired function on the data. These codes are denoted by $(f\!:\!d_d,d_f)$-FCC, where $d_d$ is the minimum distance of the code and $d_f$ denotes the minimum distance between those codewords that correspond to different function values of a function $f:\mathbb{F}_q^k \to \mathrm{Im}(f)$, with $d_f \geq d_d$. We use a distance graph on a code based on the pairwise distances of its codewords, and show conditions under which a code cannot work as a \emph{strict} $(f\!:\!d_d,d_f)$-FCC, that is, code for which $d_f > d_d$. We then consider some well-known classes of codes, such as perfect codes and maximum distance separable (MDS) codes, and show that they cannot be used as \emph{strict} $(f\!:\!d_d,d_f)$-FCCs.

cs.IT↗

arXiv2025

Function-Correcting Codes for Locally Bounded Functions

In this paper, we introduce a class of functions that assume only a limited number $λ$ of values within a given Hamming $ρ$-ball and call them locally $(ρ, λ)$-bounded functions. We develop function-correcting codes (FCCs) for a subclass of these functions and propose an upper bound on the redundancy of FCCs. The bound is based on the minimum length of an error-correcting code with a given number of codewords and a minimum distance. Furthermore, we provide a sufficient optimality condition for FCCs when $λ= 4$. We also demonstrate that any function can be represented as a locally $(ρ, λ)$-bounded function, illustrating this with a representation of Hamming weight distribution functions. Furthermore, we present another construction of function-correcting codes for Hamming weight distribution functions.

cs.IT↗

arXiv2025

Perfectly-Private Analog Secure Aggregation in Federated Learning

In federated learning, multiple parties train models locally and share their parameters with a central server, which aggregates them to update a global model. To address the risk of exposing sensitive data through local models, secure aggregation via secure multiparty computation has been proposed to enhance privacy. At the same time, perfect privacy can only be achieved by a uniform distribution of the masked local models to be aggregated. This raises a problem when working with real valued data, as there is no measure on the reals that is invariant under the masking operation, and hence information leakage is bound to occur. Shifting the data to a finite field circumvents this problem, but as a downside runs into an inherent accuracy complexity tradeoff issue due to fixed point modular arithmetic as opposed to floating point numbers that can simultaneously handle numbers of varying magnitudes. In this paper, a novel secure parameter aggregation method is proposed that employs the torus rather than a finite field. This approach guarantees perfect privacy for each party's data by utilizing the uniform distribution on the torus, while avoiding accuracy losses. Experimental results show that the new protocol performs similarly to the model without secure aggregation while maintaining perfect privacy. Compared to the finite field secure aggregation, the torus-based protocol can in some cases significantly outperform it in terms of model accuracy and cosine similarity, hence making it a safer choice.

cs.LG↗

arXiv2025

Analog Secure Distributed Matrix Multiplication

In this paper, we present secure distributed matrix multiplication (SDMM) schemes over the complex numbers with good numerical stability and small mutual information leakage by utilizing polynomial interpolation with roots of unity. Furthermore, we give constructions utilizing the real numbers by first encoding the real matrices to smaller complex matrices using a technique we call complexification. These schemes over the real numbers enjoy many of the benefits of the schemes over the complex numbers, including good numerical stability, but are computationally more efficient. To analyze the numerical stability and the mutual information leakage, we give some bounds on the condition numbers of Vandermonde matrices whose evaluation points are roots of unity.

cs.IT↗

arXiv2025

CB-cPIR: Code-Based Computational Private Information Retrieval

A private information retrieval (PIR) scheme is a protocol that allows a user to retrieve a file from a database without revealing the identity of the desired file to a curious database. Given a distributed data storage system, efficient PIR can be achieved by making assumptions about the colluding capabilities of the storage servers holding the database. If these assumptions turn out to be incorrect, privacy is lost. In this work, we focus on the worst-case assumption: full collusion or, equivalently, viewing the storage system virtually as a single honest-but-curious server. We present CB-cPIR, a single-server code-based computational private information retrieval (cPIR) scheme that derives security from code-based cryptography. Specifically, the queries are protected by the hardness of decoding a random linear code. The scheme is heavily inspired by the pioneering code-based cPIR scheme proposed by Holzbaur, Hollanti, and Wachter-Zeh in [Holzbaur et al., "Computational Code-Based Single-Server Private Information Retrieval", 2020 IEEE ISIT] and fixes the vulnerabilities of the original scheme arising from highly probable rank differences in submatrices of the user's query. Recently, a new vulnerability was observed in [Lage, Bartz, "On the Security of a Code-Based PIR Scheme"], a simple modification to the scheme now fixes this vulnerability. For further validation of our scheme, we draw comparisons to the state-of-the-art lattice-based cPIR schemes.

cs.IR↗

arXiv2025

Fast Multiplication and the PLWE-RLWE Equivalence for an Infinite Family of Maximal Real Subfields of Cyclotomic Fields

We prove the equivalence between the Ring Learning With Errors (RLWE) and the Polynomial Learning With Errors (PLWE) problems for the maximal totally real subfield of the $2^r 3^s$-th cyclotomic field for $r \geq 3$ and $s \geq 1$. Moreover, we describe a fast algorithm for computing the product of two elements in the ring of integers of these subfields. This multiplication algorithm has quasilinear complexity in the dimension of the field, as it makes use of the fast Discrete Cosine Transform (DCT). Our approach assumes that the two input polynomials are given in a basis of Chebyshev-like polynomials, in contrast to the customary power basis. To validate this assumption, we prove that the change of basis from the power basis to the Chebyshev-like basis can be computed with $\mathcal{O}(n \log n)$ arithmetic operations, where $n$ is the problem dimension. Finally, we provide a heuristic and theoretical comparison of the vulnerability to some attacks for the $p$-th cyclotomic field versus the maximal totally real subextension of the $4p$-th cyclotomic field for a reasonable set of parameters of cryptographic size.

cs.CR↗

arXiv2024

Dense generic well-rounded lattices

It is well-known that the densest lattice sphere packings also typically have large kissing numbers. The sphere packing density maximization problem is known to have a solution among well-rounded lattices, of which the integer lattice $\mathbb{Z}^n$ is the simplest example. The integer lattice is also an example of a generic well-rounded lattice, i.e., a well-rounded lattice with a minimal kissing number. However, the integer lattice has the worst density among well-rounded lattices. In this paper, the problem of constructing explicit generic well-rounded lattices with dense sphere packings is considered. To this end, so-called tame lattices recently introduced by Damir and Mantilla-Soler are utilized. Tame lattices came to be as a generalization of the ring of integers of certain abelian number fields. The sublattices of tame lattices constructed in this paper are shown to always result in either a generic well-rounded lattice or the lattice $A_n$, with density ranging between that of $\mathbb{Z}^n$ and $A_n$. In order to find generic well-rounded lattices with densities beyond that of $A_n$, explicit deformations of some known densest lattice packings are constructed, yielding a family of generic well-rounded lattices with densities arbitrarily close to the optimum. In addition to being an interesting mathematical problem on its own right, the constructions are also motivated from a more practical point of view. Namely, generic well-rounded lattices with high packing density make good candidates for lattice codes used in secure wireless communications.

math.NT↗

arXiv2024

Secret Sharing for Secure and Private Information Retrieval: A Construction Using Algebraic Geometry Codes

Private information retrieval (PIR) considers the problem of retrieving a data item from a database or distributed storage system without disclosing any information about which data item was retrieved. Secure PIR complements this problem by further requiring the contents of the data to be kept secure. Privacy and security can be achieved by adding suitable noise to the queries and data using methods from secret sharing. In this paper, a new framework for homomorphic secret sharing in secure and private information retrieval from colluding servers is proposed, generalizing the original cross-subspace alignment (CSA) codes proposed by Jia, Sun, and Jafar. We utilize this framework to give a secure PIR construction using algebraic geometry codes over hyperelliptic curves of arbitrary genus. It is shown that the proposed scheme offers interesting tradeoffs between the field size, file size, number of colluding servers, and the total number of servers. When the field size is fixed, this translates in some cases to higher retrieval rates than those of the original scheme. In addition, the new schemes exist also for some parameters where the original ones do not.

cs.IT↗

arXiv2024

Algebraic Geometry Codes for Cross-Subspace Alignment in Private Information Retrieval

A new framework for interference alignment in secure and private information retrieval (PIR) from colluding servers is proposed, generalizing the original cross-subspace alignment (CSA) codes proposed by Jia, Sun, and Jafar. The general scheme is built on algebraic geometry codes and explicit constructions with replicated storage are given over curves of genus zero and one. It is shown that the proposed scheme offers interesting tradeoffs between the field size, file size, number of colluding servers, and the total number of servers. When the field size is fixed, this translates in some cases to higher retrieval rates than those of the original scheme. In addition, the new schemes exist also in cases where the original ones do not.

cs.IT↗