estimator.bkw_coded

estimator.bkw_coded(n, alpha, q, secret_distribution=True, m=<Mock name='mock()' id='139938827128976'>, success_probability=0.99)[source]

Coded-BKW as described in [C:GuoJohSta15]

Parameters:
  • n – LWE dimension n > 0
  • alpha – noise rate 0 ≤ α < 1, noise will have standard deviation αq/sqrt{2π}
  • q – modulus 0 < q
  • success_probability – targeted success probability < 1
  • samples – the number of available samples

EXAMPLE:

sage: from estimator import Param, bkw_coded
sage: n, alpha, q = Param.Regev(64)
sage: bkw_coded(n, alpha, q)
     rop:   2^50.9
       m:   2^39.6
     mem:   2^39.6
       b:        3
      t1:        2
      t2:       10
       l:        2
    ncod:       53
    ntop:        0
   ntest:        6
[GuoJohSta15]Guo, Q., Johansson, T., & Stankovski, P. (2015). Coded-BKW: solving LWE using lattice codes. In R. Gennaro, & M. J. B. Robshaw, CRYPTO~2015, Part~I (pp. 23–42). : Springer, Heidelberg.