Revised Estimations for Cost and Success Probability of GNR-Enumeration

سال انتشار: 1402
نوع سند: مقاله ژورنالی
زبان: انگلیسی
مشاهده: 89

فایل این مقاله در 22 صفحه با فرمت PDF قابل دریافت می باشد

استخراج به نرم افزارهای پژوهشی:

لینک ثابت به این مقاله:

شناسه ملی سند علمی:

JR_JECEI-11-2_020

تاریخ نمایه سازی: 4 تیر 1402

چکیده مقاله:

kground and Objectives: Since exact manner of BKZ algorithm for higher block sizes cannot be studied by practical running, therefore simulation of BKZ is used to predict the total cost of BKZ and quality of output basis. This paper revises some main components of BKZ-simulation for better predictions.Methods: At first, by definition of full-enumeration success probability, the optimal enumeration radius is formally defined. Next, this paper defines three more pruning types, besides the well-known pruning by bounding function in GNR-enumerations, and consequently uses these four pruning types collectively in revision of success probability estimation. Also, by using these four pruning types and the process of updating-radius, this paper revises the estimation of enumeration cost. Finally, this paper introduces a simple technique to generate partially better bounding functions. Results: For block sizes of ۵۰≤β≤۲۴۰, better domains of radius parameters in GNR enumeration are formally introduced. Also, our revised estimation of success probability (for GNR bounding function) in our test results shows non-negligible gap from former estimations in some main former studies. Moreover, our results show that the cost results by our proposed estimator of GNR-enumeration cost are closer to the cost results determined in experimental running of enumeration, than the cost results by Chen-Nguyen estimator.Conclusion: This paper revises the estimators of cost and success probability for GNR-Enumeration, and justifies the value of these revised estimators by sufficient test results (in actual running and simulation of BKZ). Also our novel definition of optimal enumeration radius can be used effectively in actual running and simulation of BKZ.

نویسندگان

A. Payandeh

Department of ICT, Malek-Ashtar University of Technology, Tehran, Iran.

G. R. Moghissi

Department of ICT, Malek-Ashtar University of Technology, Tehran, Iran.

مراجع و منابع این مقاله:

لیست زیر مراجع و منابع استفاده شده در این مقاله را نمایش می دهد. این مراجع به صورت کاملا ماشینی و بر اساس هوش مصنوعی استخراج شده اند و لذا ممکن است دارای اشکالاتی باشند که به مرور زمان دقت استخراج این محتوا افزایش می یابد. مراجعی که مقالات مربوط به آنها در سیویلیکا نمایه شده و پیدا شده اند، به خود مقاله لینک شده اند :
  • Y. Chen, P. Q. Nguyen, “BKZ ۲.۰: Better lattice security ...
  • S. Bai, D. Stehlé, W. Wen, “Measuring, Simulating and Exploiting ...
  • Y. Aono, Y. Wang, T. Hayashi, T. Takagi, “Improved progressive ...
  • J. Hoffstein, J. Pipher, J. M. Schanck, J. H. Silverman, ...
  • M. R. Albrecht, B. R. Curtis, A. Deo, A. Davidson, ...
  • M. R. Albrecht, et al., “Estimate all the {LWE, NTRU} ...
  • “Post-Quantum Cryptography Standardization Project”, [Online]. Available at: https://csrc.nist.gov/Projects/post-quantum-cryptography ...
  • J. Sharafi, H. Daghigh, “A Ring-LWE-based digital signature inspired by ...
  • N. Samardzic, A. Feldmann, A. Krastev et al., “CraterLake: a ...
  • K. Cong, D. Cozzo, V. Maram, N. P. Smart, “Gladius: ...
  • T. Espitau, A. Joux, N. Kharchenko, “On a dual/hybrid approach ...
  • G. Moghissi, A. Payandeh, “Better sampling method of enumeration solution ...
  • G. R. Moghissi, A. Payandeh, “Rejecting claimed speedup of in ...
  • Y. Chen, “Reduction de reseau et securite concrete du chiffrement ...
  • “SVP Challenge,” [Online]. Available at: https://www.latticechallenge.org/svp-challenge/index.php ...
  • D. Goldstein, A. Mayer, “On the equidistribution of Hecke points,” ...
  • GitHub hosting service, “fplll library project,” [Online]. Available at: https://github.com/fplll/ ...
  • V. Shoup, “NTL: a library for doing number theory”. [Online]. ...
  • G. R. Moghissi, A. Payandeh, "Using progressive success probabilities for ...
  • L. Ducas, “Shortest vector from lattice sieving: A few dimensions ...
  • Z. Zheng, X. Wang, Y. Yu, “Orthogonalized lattice enumeration for ...
  • G. R. Moghissi, A. Payandeh, "Optimal bounding function for GNR-enumeration," ...
  • G. R. Moghissi, A. Payandeh, "Design of optimal progressive BKZ ...
  • D. J. Bernstein et al., NTRU Prime. Technical report, National ...
  • J. Bos et al., "CRYSTALS - kyber: A CCA-secure module-lattice-based ...
  • J. P. D’Anvers et al., SABER. Technical report, National Institute ...
  • G. R. Moghissi, A. Payandeh, "Revised method for sampling coefficient ...
  • نمایش کامل مراجع