diff --git a/docs/algorithms/lwe-dual.rst b/docs/algorithms/lwe-dual.rst index 7422907..893199a 100644 --- a/docs/algorithms/lwe-dual.rst +++ b/docs/algorithms/lwe-dual.rst @@ -6,6 +6,7 @@ LWE Dual Attacks We construct an (easy) example LWE instance:: from estimator import * + from estimator.lwe_dual import dual_hybrid, matzov params = LWE.Parameters(n=200, q=7981, Xs=ND.SparseTernary(384, 16), Xe=ND.CenteredBinomial(4)) params @@ -15,8 +16,12 @@ The simples (and quickest to estimate) algorithm is the "plain" dual attack as d We can improve these results by considering a dual hybrid attack as in [EC:Albrecht17,INDOCRYPT:EspJouKha20]_:: - LWE.dual_hybrid(params) + dual_hybrid(params) Further improvements are possible using a meet-in-the-middle approach [EPRINT:CHHS19]_:: - LWE.dual_hybrid(params, mitm_optimization=True) + dual_hybrid(params, mitm_optimization=True) + +We consider the variant fron [MATZOV22]_:: + + matzov(params)