All Questions
2 questions
2
votes
1
answer
108
views
Calculation of failure probability in basic Ring-LWE-DH key agreement
This is the basic unauthenticated Ring-LWE-based Diffie-Hellman key exchange, based on Peikert's Ring-LWE KEM: (from BCNS15)
Alice and Bob have shared public polynomial $a$ randomly drawn from $R_q = ...
- 438
0
votes
0
answers
79
views
Discrete Gaussian Sampling in Authenticated key exchange from ideal lattices
I am implementing the key exchange scheme proposed by zhang et al. on Sage. In the implementation of the scheme, they have used the two distributions $\chi_{\alpha}, \chi_{\beta}$.
How to choose $\...
- 207