yspolyakov

Lattice estimator is very slow for larger lattice dimensions (2^14 or higher)

12

@sararv22 When we run the lattice estimator for larger lattice dimensions without hybrid attacks (note that it does not currently work for hybrid attacks at lattice dimension 2^15 or so,...

@sararv22 When we try to run the lattice estimator with all attack techniques, we get various errors. Some example inputs and outputs are provided below. These were run on a...

For the expansion factor, we can use $N$ instead of $2 \sqrt{N}$ for the cases where worst-case estimates are desired.

See https://openfhe.discourse.group/t/evalsumcols-with-small-batching-size/1238 for more details

See the initial discussion at #737

@kimandrik Decrease the probability of decryption failure for default FHEW/TFHE parameter sets (using https://github.com/openfheorg/openfhe-lattice-estimator) in view of the recent attacks devised in https://eprint.iacr.org/2024/116 and https://eprint.iacr.org/2024/127

See https://openfhe.discourse.group/t/parameter-choices/509 for more details

Check if anything should be changed in the multiparty logic for EvalAutomorphismKeyGen (to avoid duplicate generation of keys)

1

Check whether any changes are needed due to #545 and #546

The following two optimizations can be applied 1. Currently we do extra multiplications by [-Q] mod t. We should be able to do it only for a single NativePoly rather...