It seems to me that the decryption formula in the implementation (LWE::Decrypt) disagrees with the decryption formula given in Section 3 of the paper. Can you kindly check?
I believe that the formula
"⌊t(b - a . s)q⌉ mod t"
on pages 5 and 6 of the paper should be
"⌊t(b - a . s) / q⌉ mod t".
Good day,
It seems to me that the decryption formula in the implementation (LWE::Decrypt) disagrees with the decryption formula given in Section 3 of the paper. Can you kindly check?
I believe that the formula "⌊t(b - a . s)q⌉ mod t" on pages 5 and 6 of the paper should be "⌊t(b - a . s) / q⌉ mod t".
Thank you!