estimator.BKZ.ADPS16

static BKZ.ADPS16(beta, d, B=None, mode='classical')[source]

Runtime estimation from [ADPS16].

Parameters:
  • beta – block size
  • n – LWE dimension n > 0
  • B – bit-size of entries

EXAMPLE:

sage: from estimator import BKZ, Param, dual, partial
sage: cost_model = partial(BKZ.ADPS16, mode="paranoid")
sage: dual(*Param.LindnerPeikert(128), reduction_cost_model=cost_model)
    rop:   2^37.3
      m:      346
    red:   2^37.3
delta_0: 1.008209
   beta:      127
      d:      346
    |v|:  284.363
 repeat:     2000
epsilon: 0.062500
[ADPS16]Edem Alkim, Léo Ducas, Thomas Pöppelmann, & Peter Schwabe (2016). Post-quantum key exchange - A New Hope. In T. Holz, & S. Savage, 25th USENIX Security Symposium, USENIX Security 16 (pp. 327–343). USENIX Association.