lattice-estimator
lattice-estimator copied to clipboard
Estimation fail caused by β > d for small LWE
Dear the maintainer,
I'm now trying to estimate the security for small LWE ciphertexts like the following:
param = estimator.lwe_parameters.LWEParameters(
n=384,
q=2 ** 7,
Xs=estimator.nd.NoiseDistribution.UniformMod(2),
Xe=estimator.nd.NoiseDistribution.CenteredBinomial(8),
m = 384
)
r = estimator.LWE.estimate(param,red_cost_model = estimator.RC.BDGL16)
This code gives an exception caused by β > d for primal_uvsp and η > d. I know that they are checked by sanity_check in the cost.py. However, I think setting β and η to be β = d and η = d is better than raising the exception. Is there any reason for avoiding such a fix?
This code also raises exceptions for Incorrect bounds for primal_bdd but I'm not sure how to fix this.
I had a similar issue (see #93) that was fixed by downgrading Sage to v9.5.
Really? I will try it. Thanks!