CryptoRecords.info
LPN

Learning Parity with Noise

Recover a binary secret from uniformly random binary linear equations corrupted by independent Bernoulli noise.

Quantum · memory coefficient ≤ 2/3

Constant Bernoulli noise; limiting memory coefficient ≤2/3 on the n/log₂n scale

1 results · 1 papers
QuantumHeuristicUniform random equationslimsup log₂(T) log₂(n) / n
#PUBLICATION / AUTHORSDATETIME BOUNDSPACE BOUNDEVIDENCE
1Dissection-BKWAndre Esser · Felix Heuer · Robert Kübler · Alexander May · Christian SohlerCrypto 2018SourceBibTeX / detailsquantum heuristic LPN coherent reads20182((4/(2·3)) log₂(4)+ε) n/log₂ n2(log₂(4)/3+ε) n/log₂ nPublishedSource checked
Comparison definition & assumptions
Regime
Constant Bernoulli noise; limiting memory coefficient ≤2/3 on the n/log₂n scale
Computation
Quantum
Rigor
Heuristic
Instances
Uniform random equations
Cost scale
limsup log₂(T) log₂(n) / n
Parameter
n
Description
Constant Bernoulli noise; memory ≤ 2^{(2/3+o(1)) n/log₂ n}
Comparison rules
Compare the leading time coefficient at the stated subexponential memory cap. The c-sum methods use the Independence Heuristic; tailored rows additionally require the Tailoring Heuristic. Every fixed positive exponent slack is allowed. Quantum rows assume coherent indexed access to the stored list.
Tags
constant noise, time-memory tradeoff, independence heuristic, coherent reads