Skip to content

Conversation

gong-cr
Copy link
Contributor

@gong-cr gong-cr commented Sep 12, 2024

Add BKZ total time estimation for ChaLoy21 as ChaLoy21_BKZ.
Two cost models:
ChaLoy21: time estimation for quantum sieving algorithm (single SVP call within BKZ) based on the work [AC:ChaLoy21].
ChaLoy21_BKZ: total time estimation for BKZ including multiple calls to SVP oracle using sieving algorithm from [AC:ChaLoy21].

@malb
Copy link
Owner

malb commented Sep 13, 2024

Where does this formula come from? I'd be surprised if (0.2570 * beta + 16.4 + log(self.svp_repeat(beta, d), 2)) was correct.

@gong-cr
Copy link
Contributor Author

gong-cr commented Sep 13, 2024

The BKZ cost cost follows the same structure as in BDGL16 (classical) and LaaMosPol14 (quantum), but the coefficient is adjusted to align with the time complexity of the ChaLoy21 quantum sieving algorithm. I agree that the factor 16.4 may not be very solid, and other terms might also be questionable under the quantum regime. I’m not sure if there are any better alternatives at this point.

@malb
Copy link
Owner

malb commented Sep 13, 2024

Mhhh, now that I think about it, I don't think we should cost Quantum BKZ, i.e. change LaaMosPol14.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants