lattice-estimator icon indicating copy to clipboard operation
lattice-estimator copied to clipboard

Estimation fail caused by β > d for small LWE

Open nindanaoto opened this issue 1 year ago • 2 comments

Dear the maintainer,

I'm now trying to estimate the security for small LWE ciphertexts like the following:

param = estimator.lwe_parameters.LWEParameters(
    n=384,
    q=2 ** 7,
    Xs=estimator.nd.NoiseDistribution.UniformMod(2),
    Xe=estimator.nd.NoiseDistribution.CenteredBinomial(8),
    m = 384
)
r = estimator.LWE.estimate(param,red_cost_model = estimator.RC.BDGL16)

This code gives an exception caused by β > d for primal_uvsp and η > d. I know that they are checked by sanity_check in the cost.py. However, I think setting β and η to be β = d and η = d is better than raising the exception. Is there any reason for avoiding such a fix?

This code also raises exceptions for Incorrect bounds for primal_bdd but I'm not sure how to fix this.

nindanaoto avatar Oct 17 '23 16:10 nindanaoto

I had a similar issue (see #93) that was fixed by downgrading Sage to v9.5.

ryanleh avatar Dec 14 '23 20:12 ryanleh

Really? I will try it. Thanks!

nindanaoto avatar Dec 31 '23 03:12 nindanaoto