New answers tagged lattice-crypto
0
It is computed like that:
L is lattice with dimension i. B is BKZ reduction of lattice L.
$$Root Hermite Factor=( B[0].norm() / ( L.volume() )^{(1/i)})^{(1/i)}$$
If you want to calculate RHF, you can use Sage Math.
-2
You can't directly sample uniformly modulo a lattice unless you know what the lattice is. The Gaussian distribution can be sampled independently of knowledge of the lattice. This distinction is important in situations where the lattice is part of a cryptographic secret.
Top 50 recent answers are included
