Skip to main content
Ctrl+K

Lattice Estimator 0.1 documentation

Documentation

  • Introduction
  • LWE Primal Attacks
  • LWE Dual Attacks
  • Coded-BKW for LWE
  • Arora-GB
  • NTRU Primal Attacks
  • Contributing

Parameters from the Literature

  • NIST PQC Round 3 Finalists
  • Homomorphic Encryption Standard

API Reference

  • estimator.cost
    • estimator.cost.Cost
      • estimator.cost.Cost.__init__
      • estimator.cost.Cost.clear
      • estimator.cost.Cost.combine
      • estimator.cost.Cost.copy
      • estimator.cost.Cost.filter
      • estimator.cost.Cost.fromkeys
      • estimator.cost.Cost.get
      • estimator.cost.Cost.items
      • estimator.cost.Cost.keys
      • estimator.cost.Cost.pop
      • estimator.cost.Cost.popitem
      • estimator.cost.Cost.register_impermanent
      • estimator.cost.Cost.reorder
      • estimator.cost.Cost.repeat
      • estimator.cost.Cost.sanity_check
      • estimator.cost.Cost.setdefault
      • estimator.cost.Cost.str
      • estimator.cost.Cost.update
      • estimator.cost.Cost.values
      • estimator.cost.Cost.impermanents
      • estimator.cost.Cost.key_map
      • estimator.cost.Cost.val_map
  • estimator.errors
  • estimator.gb
    • estimator.gb.AroraGB
      • estimator.gb.AroraGB.__init__
      • estimator.gb.AroraGB.cost_Gaussian_like
      • estimator.gb.AroraGB.cost_bounded
      • estimator.gb.AroraGB.equations_for_secret
      • estimator.gb.AroraGB.ps_single
    • estimator.gb.gb_cost
  • estimator.io
    • estimator.io.Logging
      • estimator.io.Logging.__init__
      • estimator.io.Logging.log
      • estimator.io.Logging.set_level
      • estimator.io.Logging.CRITICAL
      • estimator.io.Logging.DEBUG
      • estimator.io.Logging.ERROR
      • estimator.io.Logging.INFO
      • estimator.io.Logging.LEVEL0
      • estimator.io.Logging.LEVEL1
      • estimator.io.Logging.LEVEL2
      • estimator.io.Logging.LEVEL3
      • estimator.io.Logging.LEVEL4
      • estimator.io.Logging.LEVEL5
      • estimator.io.Logging.NOTSET
      • estimator.io.Logging.WARNING
      • estimator.io.Logging.detail_logger
      • estimator.io.Logging.logger
      • estimator.io.Logging.loggers
      • estimator.io.Logging.plain_logger
  • estimator.lwe
    • estimator.lwe.Estimate
      • estimator.lwe.Estimate.__init__
      • estimator.lwe.Estimate.rough
  • estimator.lwe_bkw
    • estimator.lwe_bkw.CodedBKW
      • estimator.lwe_bkw.CodedBKW.N
      • estimator.lwe_bkw.CodedBKW.__init__
      • estimator.lwe_bkw.CodedBKW.b
      • estimator.lwe_bkw.CodedBKW.cost
      • estimator.lwe_bkw.CodedBKW.t1
      • estimator.lwe_bkw.CodedBKW.ntest
  • estimator.lwe_dual
    • estimator.lwe_dual.DualHybrid
      • estimator.lwe_dual.DualHybrid.__init__
      • estimator.lwe_dual.DualHybrid.fft_solver
      • estimator.lwe_dual.DualHybrid.optimize_blocksize
      • estimator.lwe_dual.DualHybrid.cost
      • estimator.lwe_dual.DualHybrid.dual_reduce
    • estimator.lwe_dual.dual
    • estimator.lwe_dual.dual_hybrid
  • estimator.lwe_guess
    • estimator.lwe_guess.Distinguisher
      • estimator.lwe_guess.Distinguisher.__init__
    • estimator.lwe_guess.ExhaustiveSearch
      • estimator.lwe_guess.ExhaustiveSearch.__init__
    • estimator.lwe_guess.MITM
      • estimator.lwe_guess.MITM.X_range
      • estimator.lwe_guess.MITM.__init__
      • estimator.lwe_guess.MITM.cost
      • estimator.lwe_guess.MITM.local_range
      • estimator.lwe_guess.MITM.mitm_analytical
      • estimator.lwe_guess.MITM.locality
    • estimator.lwe_guess.guess_composition
      • estimator.lwe_guess.guess_composition.__init__
      • estimator.lwe_guess.guess_composition.dense_solve
      • estimator.lwe_guess.guess_composition.gammaf
      • estimator.lwe_guess.guess_composition.sparse_solve
  • estimator.lwe_parameters
    • estimator.lwe_parameters.LWEParameters
      • estimator.lwe_parameters.LWEParameters.__init__
      • estimator.lwe_parameters.LWEParameters.amplify_m
      • estimator.lwe_parameters.LWEParameters.normalize
      • estimator.lwe_parameters.LWEParameters.switch_modulus
      • estimator.lwe_parameters.LWEParameters.updated
      • estimator.lwe_parameters.LWEParameters.m
      • estimator.lwe_parameters.LWEParameters.tag
      • estimator.lwe_parameters.LWEParameters.n
      • estimator.lwe_parameters.LWEParameters.q
      • estimator.lwe_parameters.LWEParameters.Xs
      • estimator.lwe_parameters.LWEParameters.Xe
  • estimator.lwe_primal
    • estimator.lwe_primal.PrimalHybrid
      • estimator.lwe_primal.PrimalHybrid.__init__
      • estimator.lwe_primal.PrimalHybrid.babai_cost
      • estimator.lwe_primal.PrimalHybrid.cost_zeta
      • estimator.lwe_primal.PrimalHybrid.svp_dimension
      • estimator.lwe_primal.PrimalHybrid.cost
    • estimator.lwe_primal.PrimalUSVP
      • estimator.lwe_primal.PrimalUSVP.__init__
      • estimator.lwe_primal.PrimalUSVP.cost_gsa
      • estimator.lwe_primal.PrimalUSVP.cost_simulator
    • estimator.lwe_primal.primal_bdd
  • estimator.nd
    • estimator.nd.NoiseDistribution
      • estimator.nd.NoiseDistribution.CenteredBinomial
      • estimator.nd.NoiseDistribution.DiscreteGaussian
      • estimator.nd.NoiseDistribution.DiscreteGaussianAlpha
      • estimator.nd.NoiseDistribution.SparseTernary
      • estimator.nd.NoiseDistribution.Uniform
      • estimator.nd.NoiseDistribution.UniformMod
      • estimator.nd.NoiseDistribution.__init__
      • estimator.nd.NoiseDistribution.get_hamming_weight
      • estimator.nd.NoiseDistribution.support_size
      • estimator.nd.NoiseDistribution.bounds
      • estimator.nd.NoiseDistribution.density
      • estimator.nd.NoiseDistribution.gaussian_tail_bound
      • estimator.nd.NoiseDistribution.gaussian_tail_prob
      • estimator.nd.NoiseDistribution.is_Gaussian_like
      • estimator.nd.NoiseDistribution.is_bounded
      • estimator.nd.NoiseDistribution.is_sparse
      • estimator.nd.NoiseDistribution.mean
      • estimator.nd.NoiseDistribution.n
      • estimator.nd.NoiseDistribution.tag
      • estimator.nd.NoiseDistribution.stddev
    • estimator.nd.sigmaf
    • estimator.nd.stddevf
  • estimator.ntru
    • estimator.ntru.Estimate
      • estimator.ntru.Estimate.__init__
      • estimator.ntru.Estimate.rough
  • estimator.ntru_parameters
    • estimator.ntru_parameters.NTRUParameters
      • estimator.ntru_parameters.NTRUParameters.__init__
      • estimator.ntru_parameters.NTRUParameters.amplify_m
      • estimator.ntru_parameters.NTRUParameters.normalize
      • estimator.ntru_parameters.NTRUParameters.switch_modulus
      • estimator.ntru_parameters.NTRUParameters.updated
      • estimator.ntru_parameters.NTRUParameters.m
      • estimator.ntru_parameters.NTRUParameters.ntru_type
      • estimator.ntru_parameters.NTRUParameters.possibly_overstretched
      • estimator.ntru_parameters.NTRUParameters.tag
      • estimator.ntru_parameters.NTRUParameters.n
      • estimator.ntru_parameters.NTRUParameters.q
      • estimator.ntru_parameters.NTRUParameters.Xs
      • estimator.ntru_parameters.NTRUParameters.Xe
  • estimator.ntru_primal
    • estimator.ntru_primal.NTRUPrimalHybrid
      • estimator.ntru_primal.NTRUPrimalHybrid.__init__
      • estimator.ntru_primal.NTRUPrimalHybrid.babai_cost
      • estimator.ntru_primal.NTRUPrimalHybrid.cost_zeta
      • estimator.ntru_primal.NTRUPrimalHybrid.svp_dimension
      • estimator.ntru_primal.NTRUPrimalHybrid.cost
    • estimator.ntru_primal.NTRUPrimalUSVP
      • estimator.ntru_primal.NTRUPrimalUSVP.__init__
      • estimator.ntru_primal.NTRUPrimalUSVP.cost_gsa
      • estimator.ntru_primal.NTRUPrimalUSVP.cost_simulator
    • estimator.ntru_primal.PrimalDSD
      • estimator.ntru_primal.PrimalDSD.DSLI_vols
      • estimator.ntru_primal.PrimalDSD.DSL_logvol_circulant
      • estimator.ntru_primal.PrimalDSD.DSL_logvol_circulant_fixed
      • estimator.ntru_primal.PrimalDSD.DSL_logvol_matrix
      • estimator.ntru_primal.PrimalDSD.__init__
      • estimator.ntru_primal.PrimalDSD.log_gh
      • estimator.ntru_primal.PrimalDSD.DSL_logvol
      • estimator.ntru_primal.PrimalDSD.ball_log_vol
      • estimator.ntru_primal.PrimalDSD.prob_dsd
      • estimator.ntru_primal.PrimalDSD.proj_logloss
    • estimator.ntru_primal.primal_bdd
  • estimator.prob
    • estimator.prob.amplify
    • estimator.prob.amplify_sigma
    • estimator.prob.babai
    • estimator.prob.conditional_chi_squared
    • estimator.prob.drop
    • estimator.prob.mitm_babai_probability
  • estimator.reduction
    • estimator.reduction.ABFKSW20
      • estimator.reduction.ABFKSW20.LLL
      • estimator.reduction.ABFKSW20.__init__
      • estimator.reduction.ABFKSW20.beta
      • estimator.reduction.ABFKSW20.delta
      • estimator.reduction.ABFKSW20.short_vectors
      • estimator.reduction.ABFKSW20.short_vectors_simple
      • estimator.reduction.ABFKSW20.svp_repeat
    • estimator.reduction.ABLR21
      • estimator.reduction.ABLR21.LLL
      • estimator.reduction.ABLR21.__init__
      • estimator.reduction.ABLR21.beta
      • estimator.reduction.ABLR21.delta
      • estimator.reduction.ABLR21.short_vectors
      • estimator.reduction.ABLR21.short_vectors_simple
      • estimator.reduction.ABLR21.svp_repeat
    • estimator.reduction.ADPS16
      • estimator.reduction.ADPS16.LLL
      • estimator.reduction.ADPS16.__init__
      • estimator.reduction.ADPS16.beta
      • estimator.reduction.ADPS16.delta
      • estimator.reduction.ADPS16.short_vectors
      • estimator.reduction.ADPS16.short_vectors_simple
      • estimator.reduction.ADPS16.svp_repeat
    • estimator.reduction.BDGL16
      • estimator.reduction.BDGL16.LLL
      • estimator.reduction.BDGL16.__init__
      • estimator.reduction.BDGL16.beta
      • estimator.reduction.BDGL16.delta
      • estimator.reduction.BDGL16.short_vectors
      • estimator.reduction.BDGL16.short_vectors_simple
      • estimator.reduction.BDGL16.svp_repeat
    • estimator.reduction.CheNgu12
      • estimator.reduction.CheNgu12.LLL
      • estimator.reduction.CheNgu12.__init__
      • estimator.reduction.CheNgu12.beta
      • estimator.reduction.CheNgu12.delta
      • estimator.reduction.CheNgu12.short_vectors
      • estimator.reduction.CheNgu12.short_vectors_simple
      • estimator.reduction.CheNgu12.svp_repeat
    • estimator.reduction.GJ21
      • estimator.reduction.GJ21.LLL
      • estimator.reduction.GJ21.__init__
      • estimator.reduction.GJ21.beta
      • estimator.reduction.GJ21.d4f
      • estimator.reduction.GJ21.delta
      • estimator.reduction.GJ21.short_vectors
      • estimator.reduction.GJ21.short_vectors_simple
      • estimator.reduction.GJ21.svp_repeat
      • estimator.reduction.GJ21.NN_AGPS
    • estimator.reduction.Kyber
      • estimator.reduction.Kyber.LLL
      • estimator.reduction.Kyber.__init__
      • estimator.reduction.Kyber.beta
      • estimator.reduction.Kyber.d4f
      • estimator.reduction.Kyber.delta
      • estimator.reduction.Kyber.short_vectors
      • estimator.reduction.Kyber.short_vectors_simple
      • estimator.reduction.Kyber.svp_repeat
      • estimator.reduction.Kyber.NN_AGPS
    • estimator.reduction.LaaMosPol14
      • estimator.reduction.LaaMosPol14.LLL
      • estimator.reduction.LaaMosPol14.__init__
      • estimator.reduction.LaaMosPol14.beta
      • estimator.reduction.LaaMosPol14.delta
      • estimator.reduction.LaaMosPol14.short_vectors
      • estimator.reduction.LaaMosPol14.short_vectors_simple
      • estimator.reduction.LaaMosPol14.svp_repeat
    • estimator.reduction.MATZOV
      • estimator.reduction.MATZOV.LLL
      • estimator.reduction.MATZOV.__init__
      • estimator.reduction.MATZOV.beta
      • estimator.reduction.MATZOV.d4f
      • estimator.reduction.MATZOV.delta
      • estimator.reduction.MATZOV.short_vectors
      • estimator.reduction.MATZOV.short_vectors_simple
      • estimator.reduction.MATZOV.svp_repeat
      • estimator.reduction.MATZOV.NN_AGPS
    • estimator.reduction.RC
      • estimator.reduction.RC.LLL
      • estimator.reduction.RC.__init__
      • estimator.reduction.RC.beta
      • estimator.reduction.RC.delta
      • estimator.reduction.RC.ABFKSW20
      • estimator.reduction.RC.ABLR21
      • estimator.reduction.RC.ADPS16
      • estimator.reduction.RC.BDGL16
      • estimator.reduction.RC.CheNgu12
      • estimator.reduction.RC.GJ21
      • estimator.reduction.RC.Kyber
      • estimator.reduction.RC.LaaMosPol14
      • estimator.reduction.RC.MATZOV
    • estimator.reduction.ReductionCost
      • estimator.reduction.ReductionCost.LLL
      • estimator.reduction.ReductionCost.__init__
      • estimator.reduction.ReductionCost.beta
      • estimator.reduction.ReductionCost.delta
      • estimator.reduction.ReductionCost.short_vectors
      • estimator.reduction.ReductionCost.short_vectors_simple
      • estimator.reduction.ReductionCost.svp_repeat
    • estimator.reduction.beta
    • estimator.reduction.cost
    • estimator.reduction.delta
  • estimator.simulator
    • estimator.simulator.CN11
    • estimator.simulator.GSA
    • estimator.simulator.ZGSA
    • estimator.simulator.normalize
    • estimator.simulator.plot_gso
    • estimator.simulator.qary_simulator
  • estimator.util
    • estimator.util.Bounds
      • estimator.util.Bounds.__init__
      • estimator.util.Bounds.count
      • estimator.util.Bounds.index
      • estimator.util.Bounds.high
      • estimator.util.Bounds.low
    • estimator.util.LazyEvaluation
      • estimator.util.LazyEvaluation.__init__
      • estimator.util.LazyEvaluation.f
      • estimator.util.LazyEvaluation.max_n_cache
      • estimator.util.LazyEvaluation.eval
    • estimator.util.Task
      • estimator.util.Task.__init__
      • estimator.util.Task.count
      • estimator.util.Task.index
      • estimator.util.Task.catch_exceptions
      • estimator.util.Task.f
      • estimator.util.Task.f_name
      • estimator.util.Task.log_level
      • estimator.util.Task.x
    • estimator.util.TaskResults
      • estimator.util.TaskResults.__init__
    • estimator.util.early_abort_range
      • estimator.util.early_abort_range.__init__
      • estimator.util.early_abort_range.update
      • estimator.util.early_abort_range.x
      • estimator.util.early_abort_range.y
    • estimator.util.local_minimum
      • estimator.util.local_minimum.__init__
      • estimator.util.local_minimum.update
      • estimator.util.local_minimum.neighborhood
      • estimator.util.local_minimum.x
      • estimator.util.local_minimum.y
    • estimator.util.local_minimum_base
      • estimator.util.local_minimum_base.__init__
      • estimator.util.local_minimum_base.update
      • estimator.util.local_minimum_base.x
      • estimator.util.local_minimum_base.y
    • estimator.util.batch_estimate
    • estimator.util.binary_search
    • estimator.util.f_name
    • estimator.util.log2

Appendix

  • Index
  • References
  • .rst

estimator.lwe_guess.MITM.cost

Contents

  • MITM.cost()

estimator.lwe_guess.MITM.cost#

MITM.cost(params: LWEParameters, k: int, success_probability=0.99)[source]#

previous

estimator.lwe_guess.MITM.__init__

next

estimator.lwe_guess.MITM.local_range
Contents
  • MITM.cost()

By Martin R Albrecht

© Copyright 2021, Martin R Albrecht.