# Tag Info

## New answers tagged lattice-crypto

2

It is very hard to give a concrete, "apples-to-apples" comparison of lattice-based and pairing-based IBE schemes. There are many reasons: the research surrounding concrete secure parameters for LWE is still evolving, efficient implementations of operations used in lattice-based IBE (e.g., discrete Gaussian sampling) are still works in progress, one can ...

1

No. The key factor is the security level - a scheme has n bits of security if it takes roughly $2^n$ work ($\approx$ time x space) to break. So one can compare for example Diffie-Hellman key exchange in finite fields and over elliptic curves at the 128 bit security level and conclude that EC are more efficient (that is why they were invented, after all). ...

Top 50 recent answers are included