Skip to main content
1 of 4
Turbo
  • 1k
  • 6
  • 14

Questions about LWE in NIST standards

LWE instances have the form $\vec{a}_i,b_i = <\vec{a}_i,\vec{s}>+e_i~mod~q$ for some integer $q$ and for $i=1,\dots,m$.

My questions are about the NIST proposed standards. In the standards

  1. Do we allow $q=2^t$ or $q=2^tl$ where $l$ is odd?

  2. How large can $m$ be?

Turbo
  • 1k
  • 6
  • 14