Error reconciliation is an important technique for learning with error (LWE) and ring-LWE (RLWE)-based constructions. In this paper, we present a comparison analysis on two error reconciliation-based RLWE key exchange protocols: Ding et al. in 2012 (DING12) and Bos et al. in 2015 (BCNS15). We take them as examples to explain the core idea of error reconciliation, building key exchange over RLWE problem, implementation and real-world performance, and compare them comprehensively. We also analyse a LWE key exchange 'Frodo' that uses an improved error reconciliation mechanism in BCNS15. To the best of our knowledge, our work is the first to present at least 128-bit classic (80-bit quantum) and 256-bit classic (> 200-bit quantum) secure parameter choices for DING12 with efficient portable C/C++ implementations. Benchmark shows that our efficient implementation is 11× faster than BCNS15 and one key exchange execution only costs 0.07 ms on a four-year-old middle range CPU. Error reconciliation is 1.57× faster than BCNS15.

No abstract uploaded!

We shall be concerned with the indicator$p$of an analytic functional μ on a complex manifold$U$: $$p(\varphi ) = \overline {\mathop {\lim }\limits_{t \to + \infty } } \frac{l}{t}\log \left| {\mu (e^{t\varphi } )} \right|,$$ where ϕ is an arbitrary analytic function on$U$. More specifically, we shall consider the smallest upper semicontinuous majorant$p$^{$J$}of the restriction of$p$to a subspace £ of the analytic functions. An obvious problem is then to characterize the set of functions$p$^{$J$}which can occur as regularizations of indicators. In the case when$U$=$C$^{$n$}and £ is the space of all linear functions on$C$^{$n$}, this set can be described more easily as the set of functions(0.1) $$\mathop {\lim }\limits_{\theta \to \zeta } \overline {\mathop {\lim }\limits_{t \to + \infty } } \frac{l}{t}\log \left| {u(t\theta )} \right|$$ of$n$complex variables ζ∈$C$^{$n$}where$u$is an entire function of exponential type in$C$^{$n$}. We hall prove that a function in$C$^{$n$}is of the form (0.1) for some entire function$u$of exponential type if and only if it is plurisubharmonic and positively homogeneous of order one (Theorem 3.4). The proof is based on the characterization given by Fujita and Takeuchi of those open subsets of complex projective$n$-space which are Stein manifolds.

No abstract uploaded!

No abstract uploaded!