estimator.mitm

estimator.mitm(n, alpha, q, secret_distribution=True, m=<Mock name='mock()' id='139938827128976'>, success_probability=0.99)[source]

Meet-in-the-Middle attack as described in [AlbPlaSco15]

Parameters:
  • n – LWE dimension n > 0
  • alpha – noise rate 0 ≤ α < 1, noise will have standard deviation αq/sqrt{2π}
  • q – modulus 0 < q
  • secret_distribution – distribution of secret, see module level documentation for details
  • m – number of LWE samples m > 0
  • success_probability – targeted success probability < 1
[AlbPlaSco15]Albrecht, M. R., Player, R., & Scott, S. (2015). On the concrete hardness of Learning with Errors. Journal of Mathematical Cryptology, 9(3), 169–203.