CryptoRecords.info
LWE

Learning With Errors

Recover or distinguish a noisy linear system.

BKW · Regev · quantum / Grover

q ≍ n²; σ = q/(√(2πn) (log₂ n)²); independent fresh samples

3 results · 3 papers
QuantumHeuristic list modelLWE distribution2c n + o(n)
#PUBLICATION / AUTHORSDATETIME BOUNDSPACE BOUNDEVIDENCE
1The Asymptotic Complexity of Coded-BKW with Sieving Using Increasing Reduction FactorsErik MårtenssonISIT 2019SourceBibTeX / detailsquantum heuristic LWE BKW Regev regime unlimited samples coherent reads19 Jan 201920.8782 n + o(n)—PublishedSource checked
2On the Asymptotics of Solving the LWE Problem Using Coded-BKW with SievingQian Guo · Thomas Johansson · Erik Mårtensson · Paul Stankovski WagnerIEEE Trans. Information Theory 2019SourceBibTeX / detailsquantum heuristic LWE BKW Regev regime unlimited samples coherent reads9 Jan 201920.8795 n + o(n)—PublishedSource checked
3Coded-BKW with SievingQian Guo · Thomas Johansson · Erik Mårtensson · Paul StankovskiAsiacrypt 2017SourceBibTeX / detailsquantum heuristic LWE BKW Regev regime unlimited samples coherent reads3 Dec 201720.8856 n + o(n)—PublishedSource checked
Comparison definition & assumptions
Regime
q ≍ n²; σ = q/(√(2πn) (log₂ n)²); independent fresh samples
Computation
Quantum
Rigor
Heuristic list model
Instances
LWE distribution
Cost scale
2^{c n + o(n)}
Parameter
n
Description
Quantum-search variants of coded BKW with abundant classical input samples.
Comparison rules
Use the same Regev modulus, error and fresh classical sample convention as the classical category. Grover-based geometric searches assume coherent indexed reads of their working tables. Record the coherent-access assumption explicitly. A reusable-walk method that requires coherent writes or a stronger distribution model belongs in a separately tagged comparison category; no such unpublished claim is seeded here. Objective: Decision-LWE with constant target distinguishing advantage. Search-LWE algorithms are admissible as decision upper bounds; a search-only theorem is not silently identified with the source's optimized decision corollary.
Tags
quantum, heuristic, LWE, BKW, Regev regime, unlimited samples, coherent reads