In one of my recent research, I need to compare the number of gates needed in Ring-LWE encryption to AES in the circuit model. For AES we can find some estimation like this site, but for Ring-LWE we can't find such an estimation.

  • Could anyone give me an estimation?
  • Is it safe to say the gate count for AES encryption is <1% of Ring-LWE under the same security parameters?


  • $\begingroup$ @kelalaka Actually this problem does not come from homomorphic encryption, so maybe the added tag is misleading. $\endgroup$ – Paul Nov 9 '18 at 23:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.