I am new to lattice-based cryptography, so sorry that this question might seems stupid
May I ask that how can I choose the BGV parameter of ciphertext with plain text in mod 128, and error in gaussian distribution of std 3.19 and secret key in uniform distribution from -1 to 1? Do I need also need to take into account that the computation I want to do? Mine Computation is just multiply by a constant also in mod 128.
I.e. Enc(m) = $A^{T}r+m \mod q$, how can I choose the q?
And I recently find the lwe estimator, is there any way I could calculate the example I mentioned above using this tool?
Thanks a lot

  • $\begingroup$ homomorphicencryption.org/standard $\endgroup$
    – kelalaka
    Commented Oct 23, 2023 at 19:26
  • $\begingroup$ Dear friend, it is nice that you have been diving into it and this is now a new question. May be delete this and ask a much better question? $\endgroup$
    – kelalaka
    Commented Oct 24, 2023 at 17:21
  • $\begingroup$ You may want to check out the lattice estimator, a successor project to lwe estimator. I also posted an article here that shows how to use the tool to estimate RLWE security: jeremykun.com/2022/12/28/… $\endgroup$
    – JeremyKun
    Commented Oct 24, 2023 at 19:01
  • $\begingroup$ @kelalaka, thanks for the advice, I just ask a new question :) $\endgroup$
    – js wang
    Commented Oct 26, 2023 at 4:35
  • $\begingroup$ @JeremyKun, thanks a lot! I have recently tried to find posts/tutorials about using these kinds of tools but have not found one until now! $\endgroup$
    – js wang
    Commented Oct 26, 2023 at 4:37


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.