Rick
  • Member for 5 years, 11 months
  • Last seen more than a month ago
Security estimation of LWE using "On dual lattice attacks against small-secret LWE and parameter choices in HElib and SEAL"
Accepted answer
4 votes

I asked the question to the author directly. To answer the first question, authors of NewHope estimate their security very conservatively, whereas the estimator takes many other things into account. ...

View answer