A Refined Hardness Estimation of LWE in Two-step Mode

ePrint Report: A Refined Hardness Estimation of LWE in Two-step Mode

Wenwen Xia, Leizhang Wang, Geng Wang, Dawu Gu, Baocang Wang

Recently, researchers have proposed many LWE estimators, such as lattice-estimator (Albrecht et al, Asiacrypt 2017) and leaky-LWE-Estimator (Dachman-Soled et al, Crypto 2020), while the latter has already been used in estimating the security level of Kyber and Dilithium using only BKZ. However, we prove in this paper that solving LWE by combining a lattice reduction step (by LLL or …

asiacrypt crypto eprint report mode report researchers wang