Evasive circular LWE ⇒ ABE

Standard model · HLL23

Statement

Assuming public-coin circular evasive LWE, a circular variant of evasive LWE, there is a lattice-based ABE scheme for circuits of unbounded depth — HLL23.

Notes

• The master public key and ciphertexts have size linear in the attribute length, and secret keys have constant size, independent of the circuit’s depth and size — HLL23.
• Public-coin circular evasive LWE as HLL23 state it is false: AMYY25 exhibit a sampler for which the pre-condition holds but the post-condition fails.