Ring learning with errors key exchange: Difference between revisions

Revision as of 20:28, 10 September 2017

Revision as of 12:15, 25 September 2017

Line 71:

== Parameter choices ==

The RWLE-KEX exchange presented above worked in the Ring of Polynomials of degree n-1 or less mod a polynomial <nowiki><math>\Phi(x)</math></nowiki>. The presentation assumed that n was a power of 2 and that q was a prime which was congruent to 1 (mod 2n). Following the guidance given in Peikert's paper, Singh suggested two sets of parameters for the RLWE-KEX.

For 128 bits of security, n = 512, q = 25601, and <math>\Phi(x)</math> = x⁵¹² + 1