estimator.lwe_dual.DualHybrid.fft_solver#
- static DualHybrid.fft_solver(params, success_probability, t=0)[source]#
Estimate cost of solving LWE via the FFT distinguisher from [AC:GuoJoh21].
- Parameters:
params – LWE parameters
success_probability – the targeted success probability
t – the number of secret coordinates to guess mod 2. For t=0 this is similar to lwe_guess.ExhaustiveSearch.
- Returns:
A cost dictionary
The returned cost dictionary has the following entries:
rop
: Total number of word operations (≈ CPU cycles).mem
: memory requirement in integers mod q.m
: Required number of samples to distinguish the correct solution with high probability.
Note
The parameter t only makes sense in the context of the dual attack, which is why this function is here and not in the lwe_guess module.