The reference of determining lwechallenge samples amount m in lwe_estimation.py - Githubissues

fplll / g6k

The General Sieve Kernel

GNU General Public License v2.0

99 stars 30 forks source link

The reference of determining lwechallenge samples amount m in lwe_estimation.py #95

Closed Summwer closed 3 years ago

Summwer commented 3 years ago

Hello, developer, Could you plz tell me The reference of determining lwe samples amount m in function decoupler() of lwe_estimation.py ?

malb commented 3 years ago

The strategy pursued was proposed in

Erdem Alkim, Léo Ducas, Thomas Pöppelmann, Peter Schwabe: Post-quantum Key Exchange - A New Hope. USENIX Security Symposium 2016: 327-343

And analysed in:

Martin R. Albrecht, Florian Göpfert, Fernando Virdia, Thomas Wunderer: Revisiting the Expected Cost of Solving uSVP and Applications to LWE. ASIACRYPT (1) 2017: 297-322
Eamonn W. Postlethwaite, Fernando Virdia: On the Success Probability of Solving Unique SVP via BKZ. Public Key Cryptography (1) 2021: 68-98