LWE / BKW · Regev · unlimited samples

Coded-BKW with Sieving

Qian Guo · Thomas Johansson · Erik Mårtensson · Paul Stankovski

Asiacrypt 2017

PublishedSource checked

Time bound: 2^{0.8951 n + o(n)}
Space bound: —

Source / version date: 3 Dec 2017
Comparison variant: BKW · Regev · unlimited samples
Cost scale: 2^{c n + o(n)}
Input samples: 2^{Θ(n)} fresh classical equations
Distribution model: Assumptions of the cited BKW/list analysis
Reduction schedule: Exact prefix; common factor γ = 1
Memory access: Classical tables

Assumptions and source notes

ASIACRYPT 2017. The four-digit coefficient is reproduced in Mårtensson 2019 Table I. Date uses the conference opening day; an earlier first-disclosure date has not been established.

Primary source ↗

BibTeXDownload .bib

@inproceedings{paper-46a7c73ed460,
  author = {Qian Guo and Thomas Johansson and Erik Mårtensson and Paul Stankovski},
  title = {{Coded-BKW with Sieving}},
  booktitle = {Advances in Cryptology -- ASIACRYPT 2017},
  year = {2017},
  volume = {10624},
  pages = {323--346},
  publisher = {Springer},
  doi = {10.1007/978-3-319-70694-8_12},
  url = {https://www.iacr.org/archive/asiacrypt2017/106240219/106240219.pdf},
  cr_date = {2017-12-03},
  cr_status = {published},
  cr_venue = {Advances in Cryptology -- ASIACRYPT 2017},
  cr_author_ids = {qian-guo; thomas-johansson; erik-martensson; paul-stankovski},
  series = {Lecture Notes in Computer Science}
}