
Learning with Quantization and Worst Case Lattice Problems
Learning with Quantization and Worst Case Lattice Problems is an IACR ePrint paper (2026/2613) by Ziwei Hong and Zhongqiu Fang. It proves that search and decision learning with quantization (LWQ) with public dither is as hard as quantum GapSVP and SIVP on arbitrary lattices, using the randomized polar lattice quantizer of Lyu et al. It also shows that a complete reduction for interval uniform error LWE (MAMBA Frost) and hardness at concrete MAMBA parameters are not established.
What it is
Paper 2026/2613 (ePrint, preprint, received 23 October 2026) by Ziwei Hong and Zhongqiu Fang studies worst case hardness of learning with quantization (LWQ) with public dither. It is motivated by the MAMBA proposals. The result is a quantum reduction from worst case lattice problems on arbitrary n-dimensional lattices to LWQ, with explicit approximation factors.
How it works
The authors use the randomized polar lattice quantizer of Lyu et al. to build explicit LWQ families with polynomial power-of-two moduli. The dither function can be any efficiently computable function, and the seed distribution any efficiently samplable one. The matrix is uniform and independent of both the secret and the seed. Conditional on the public seed, the comparison output is uniform in the prescribed dither coset and independent of the matrix.
Two families give two reductions:
| Family | Attacker success | GapSVP factor | SIVP factor |
|---|---|---|---|
| Search | Recovers the uniform secret in polynomial time with inverse polynomial probability | O(n log n) | O(n (log n)^2) |
| Decision | Distinguishes with inverse polynomial advantage in polynomial time | O(n (log n)^3) | O(n (log n)^4) |
The decision family needs stronger parameter conditions than the search family. The paper's abstract does not state what those conditions are.
Preconditions
The guarantees apply only to the paper's constructed families, with polynomial power-of-two moduli and a uniform secret. They are quantum reductions, so a classical attacker breaking LWQ does not by itself give a classical lattice algorithm.
Caveats
The paper also examines LWE with interval uniform errors, as used in MAMBA Frost. It finds obstacles from deterministic quantization boundaries and gives a local perturbation bound that depends explicitly on the number of observations. It states that this does not give a complete worst case reduction for these errors. It also does not show hardness at the concrete MAMBA parameters. The abstract gives no concrete parameter sets or security estimates, so it cannot be used to size a deployment.
Organisations named here
- GapSVP
- learning with quantization
- MAMBA
- MAMBA Frost
- polar lattice quantizer
- SIVP
- worst case reduction
Technologies named here
- MAMBA proposals
- LWE
Related in other

Rerandomizable Garbling for Arithmetic Circuits

