Error reconciliation is an important technique for learning with error (LWE) and ring-LWE (RLWE)-based constructions. In this paper, we present a comparison analysis on two error reconciliation-based RLWE key exchange protocols: Ding et al. in 2012 (DING12) and Bos et al. in 2015 (BCNS15). We take them as examples to explain the core idea of error reconciliation, building key exchange over RLWE problem, implementation and real-world performance, and compare them comprehensively. We also analyse a LWE key exchange 'Frodo' that uses an improved error reconciliation mechanism in BCNS15. To the best of our knowledge, our work is the first to present at least 128-bit classic (80-bit quantum) and 256-bit classic (> 200-bit quantum) secure parameter choices for DING12 with efficient portable C/C++ implementations. Benchmark shows that our efficient implementation is 11× faster than BCNS15 and one key exchange execution only costs 0.07 ms on a four-year-old middle range CPU. Error reconciliation is 1.57× faster than BCNS15.

No abstract uploaded!

Let$u$_{$n$}be the$n$th term of a Lucas sequence or a Lehmer sequence. In this article we shall establish an estimate from below for the greatest prime factor of$u$_{$n$}which is of the form$n$exp(log$n$/104 log log$n$). In doing so, we are able to resolve a question of Schinzel from 1962 and a conjecture of Erdős from 1965. In addition we are able to give the first general improvement on results of Bang from 1886 and Carmichael from 1912.

In this paper, combining the $p$-capacity for $p\in (1, n)$ with the Orlicz addition of convex domains, we develop the $p$-capacitary Orlicz-Brunn-Minkowski theory. In particular, the Orlicz $L_{\phi}$ mixed $p$-capacity of two convex domains is introduced and its geometric interpretation is obtained by the $p$-capacitary Orlicz-Hadamard variational formula. The $p$-capacitary Orlicz-Brunn-Minkowski and Orlicz-Minkowski inequalities are established, and the equivalence of these two inequalities are discussed as well. The $p$-capacitary Orlicz-Minkowski problem is proposed and solved under some mild conditions on the involving functions and measures. In particular, we provide the solutions for the normalized $p$-capacitary $L_q$ Minkowski problems with $q>1$ for both discrete and general measures.

Building on [BB1] we prove a general criterion for convergence of (possibly singular) Bergman measures towards pluripotential-theoretic equilibrium measures on complex manifolds. The criterion may be formulated in terms of the growth properties of the unit-balls of certain norms on holomorphic sections, or equivalently as an asymptotic minimization property for generalized Donaldson$L$-functionals. Our result settles in particular a well-known conjecture in pluripotential theory concerning the equidistribution of Fekete points and it gives the convergence of Bergman measures towards the equilibrium measure for Bernstein-Markov measures. Applications to interpolation of holomorphic sections are also discussed.