LWE is the one of the most promising post quantum strategy.

How does parameters (key sizes, time for encryption etc) for LWE compare with modern deployed standards such as Factoring or discrete log based solutions for various problems such as:

  1. Signature,

  2. Key exchange,

  3. Homomorphic encryption,

  4. authentication,

  5. various other practical problems?


closed as too broad by e-sushi May 18 '17 at 22:41

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • $\begingroup$ we don't have (fully) homomorhic encryption schemes that use factorization or discete log. $\endgroup$ – 111 Apr 27 '17 at 12:41