All Questions
Tagged with lattice-crypto implementation
11 questions
1
vote
0
answers
38
views
CRYSTALS-Kyber Central Binomial Distribution reference inplementation in c
In lines 8 to 10, why it does not get input bytes as it is (i.e., line 8)? It first does some changes (line 9 and 10).
Do authors do this changes as we cannot work with binary form of a variable ...
- 586
0
votes
0
answers
34
views
How to get a sample from $D_{q\mathbb{Z}+c,r}$？
In the paper Compact Lattice Gadget and Its Applications to Hash-and-Sign Signatures, the preimage sampling boils down to only n times sampling of $D_{q\mathbb{Z}+c,r}$. How can we obtain a sample ...
- 51
0
votes
0
answers
84
views
CKKS encoding. Why not just use fft
I am studying the ckks scheme from this blog post. In the vanilla encoding part we want to encode a complex vector of size N to a complex polynomial of degree N-1. This of course is possible if we ...
1
vote
0
answers
77
views
Difference between TFHE and CKKS?
What are the differences in parameters while implementing CKKS vs TFHE?
For example modulus size, ring dimensions, bit security. Any pointers to literature would be appreciated
- 19
1
vote
1
answer
139
views
Do you know any library for implementing lattice-based schemes? [closed]
Good afternoon! I'm trying to write a code for a lattice based scheme (based on the SIS problem).
I'm looking for a library that may help me in this task without taking care of the implementation of ...
- 11
2
votes
1
answer
94
views
$\epsilon$ parameter choice in lattice-based schemes
I am trying to implement Pei10 and BB13, but I am confused about what concrete parameters to use.
In Pei10, Algorithm 1 takes a rounding parameter $r = \omega(\sqrt{\log n})$ as parameter, but it does ...
- 365
1
vote
0
answers
70
views
Good libraries for lattice-crypto [closed]
I'm searching good libraries to manipulate lattice tools to do cryptography.
I'm mainly interested by C/C++. But I'm also interested if it is in python.
- 2,635
4
votes
0
answers
438
views
Which parts of CRYSTALS-Kyber and CRYSTALS-Dilithium are compatible?
The papers CRYSTALS-Kyber and CRYSTALS-Dilithium both have been written by quite different authors. It seems that at least the key generation is very different from each other. CRYSTALS mainly seems ...
- 94.5k
8
votes
0
answers
316
views
How are the constants found in the AVX2 implementation of CRYSTALS-KYBER round 2 generated?
The post-quantum lattice-based cryptosystem CRYSTALS-KYBER which has made it to the second round of NIST PQC includes two implementations: 1) a baseline reference implementation in C and 2) an ...
- 315
5
votes
0
answers
748
views
Lattices with hidden short vectors and an algorithm for a special case of the SVP
For the purpose of testing algorithms for lattice basis reduction or finding short vectors, it would be useful to have examples of lattices where short vectors are hidden, that is, a nontrivial ...
- 51
8
votes
1
answer
323
views
LWE: error and float operations
Background
I'm trying to make sense of the error in implementations of LWE and R-LWE. In LWE and R-LWE error is added to vectors in lattices to make it computationally infeasible to recover any ...
- 214