Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

include chaloy bkz time estimation in the form as LaaMosPol14 #122

Open
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

gong-cr
Copy link
Contributor

@gong-cr gong-cr commented Sep 12, 2024

Add BKZ total time estimation for ChaLoy21 as ChaLoy21_BKZ.
Two cost models:
ChaLoy21: time estimation for quantum sieving algorithm (single SVP call within BKZ) based on the work [AC:ChaLoy21].
ChaLoy21_BKZ: total time estimation for BKZ including multiple calls to SVP oracle using sieving algorithm from [AC:ChaLoy21].

@malb
Copy link
Owner

malb commented Sep 13, 2024

Where does this formula come from? I'd be surprised if (0.2570 * beta + 16.4 + log(self.svp_repeat(beta, d), 2)) was correct.

@gong-cr
Copy link
Contributor Author

gong-cr commented Sep 13, 2024

The BKZ cost cost follows the same structure as in BDGL16 (classical) and LaaMosPol14 (quantum), but the coefficient is adjusted to align with the time complexity of the ChaLoy21 quantum sieving algorithm. I agree that the factor 16.4 may not be very solid, and other terms might also be questionable under the quantum regime. I’m not sure if there are any better alternatives at this point.

@malb
Copy link
Owner

malb commented Sep 13, 2024

Mhhh, now that I think about it, I don't think we should cost Quantum BKZ, i.e. change LaaMosPol14.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants