All Questions
3 questions
3
votes
1
answer
279
views
Module LWE with an even modulus
Does module-LWE remains hard for an even modulus $q$, or a power of two?
This is true for Ring-LWE (pseudorandomness) and Module-LWR (SABER).
I can't find any reference to it!
- 505
8
votes
1
answer
712
views
NewHope and NIST's Post-quantum standardization
Where can I find NIST's reasoning to eliminate NewHope from the 3rd round of the post-quantum competition? I see all the lattice KEMs finalists are based on modules.
Is being a ring-based KEM ...
- 1,295
0
votes
0
answers
56
views
Binomial distribution sampling - concrete example
Can anyone give me an explicit example of how one can samples from the binomial distribution defined in NewHope's paper? What is the difference of sampling from rounded Gaussian in practice?
- 505