New answers tagged

1

newR: [ -1, 1, 1, 0, -1, 0, 1, 0, 0, 1, -1 ] This polynomial is $f = -x^{10} + x^9 + x^6 - x^4 + x^2 + x - 1$ where you wanted: $f=x^{10}+x^9+x^6−x^4+x^2+x−1$ The sign for the $x^{10}$ was opposite. Your algorithm/code is actually correct. See the following calculation from sage: sage: f -x^10 + x^9 + x^6 - x^4 + x^2 + x - 1 sage: f_inv 30*x^10 ...


1

I am a cryptographic researcher at Security Innovation, which acquired NTRU Cryptosystems. Now, I wonder what is the most efficient attack one could do? Does it have to be comprehensive like the meet-in-the-middle one? The most efficient attack (the terminology "best known attack" is often used here) is the hybrid attack of lattice reduction and meet-...



Top 50 recent answers are included