Discrete gaussian sampling for BKZ-reduced basis - Irisa
Communication Dans Un Congrès Année : 2025

Discrete gaussian sampling for BKZ-reduced basis

Amaury Pouly
  • Fonction : Auteur
  • PersonId : 1474825
Yixin Shen
  • Fonction : Auteur
  • PersonId : 1430915

Résumé

Discrete Gaussian sampling on lattices is a fundamental problem in lattice-based cryptography. In this paper, we revisit the Markov chain Monte Carlo (MCMC)-based Metropolis-Hastings-Klein (MHK) algorithm proposed by Wang and Ling and study its complexity under the Geometric Series Assuption (GSA) when the given basis is BKZreduced. We give experimental evidence that the GSA is accurate in this context, and we give a very simple approximate formula for the complexity of the sampler that is accurate over a large range of parameters and easily computable. We apply our results to the dual attack on LWE of [19] and significantly improve the complexity estimates of the attack. Finally, we provide some results of independent interest on the Gaussian mass of a random q-ary lattices.

Fichier principal
Vignette du fichier
bkz_gaussian_pqcrypto.pdf (680.94 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04823293 , version 1 (06-12-2024)

Licence

Identifiants

  • HAL Id : hal-04823293 , version 1

Citer

Amaury Pouly, Yixin Shen. Discrete gaussian sampling for BKZ-reduced basis. ArcticCrypt 2025, Jul 2025, Longyearbyen, Svalbard, Norway. ⟨hal-04823293⟩
0 Consultations
0 Téléchargements

Partager

More