We have updated our pre-print titled “On the Complexity of the BKW Algorithm on LWE” on ePrint. There are two main changes and the reasons why I am mentioning this update here. We included a more thorough comparison with other approaches, in particular, with lattice reduction (reducing LWE to SIS). To our surprise, BKW is […]![]()
