estimator.lwe_guess#

Description

Generic multiplicative composition of guessing some components of the LWE secret and some LWE solving algorithm.

By “multiplicative” we mean that costs multiply rather than add. It is often possible to achieve some form of additive composition, i.e. this strategy is rarely the most efficient.

Classes

Distinguisher()

ExhaustiveSearch()

MITM()

guess_composition(f)

Create a generic composition of guessing and f.

Functions

log2(x)