You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This is a bug, I'd expect a reasonable value of q for this parameter set to be roughly in the same range as those seen in the tables of this document: http://homomorphicencryption.org/wp-content/uploads/2018/11/HomomorphicEncryptionStandardv1.1.pdf (e.g. q ~ 2^100 for n = 2^12 to achieve 128-bits of security). Increasing q to such a large value (e.g. 2^790) would reduce security significantly. This can be confirmed by checking the other estimates:
Running:
LWE.primal_usvp(LWE.Parameters(n=2^11, q=2^790, Xs=ND.DiscreteGaussian(2.0), Xe=ND.DiscreteGaussian(2.0)))
outputs:rop: ≈2^44.2, red: ≈2^44.2, δ: 1.012950, β: 40, d: 2166, tag: usvp
This matches my expectations.
However running:
LWE.primal_usvp(LWE.Parameters(n=2^12, q=2^790, Xs=ND.DiscreteGaussian(2.0), Xe=ND.DiscreteGaussian(2.0)))
outputs:
rop: ≈2^1179.1, red: ≈2^1179.1, δ: 1.000667, β: 4112, d: 4113, tag: usvp
Should I expect sudden increase in security? Or there's something wrong with the calculation.
The text was updated successfully, but these errors were encountered: