Skip to content

Commit

Permalink
Update project/template.tex
Browse files Browse the repository at this point in the history
  • Loading branch information
Mactherobot authored Dec 29, 2024
1 parent b6cc106 commit bf6f77a
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion project/template.tex
Original file line number Diff line number Diff line change
Expand Up @@ -2135,7 +2135,7 @@ \subsubsection{$d$-split Syndrome Decoding Problem}
c_j & = \sum_{i=1}^d a_{i,j} \cdot b_{i,j}, \quad j \in [\tau].
\end{align*}

While the $d$-split variant introduces a slight reduction in security compared to the standard SD problem, this is mitigated by a small increase in the security parameters $m$, and $w$. The primary advantage of this variant lies in its flexibility. We have a bound on the size of the $|\mathbb{F}_q| \geq m/d$. Therefore, the main benefit to introduce the $d$-split version is let the protocol work on polynomials of smaller degree and/or on specific fields which provides better performance trade-offs~\cite{aguilarsyndrome11}. The increase in parameters are given by
While the $d$-split variant introduces a slight reduction in security compared to the standard SD problem, this is mitigated by a small increase in the security parameters $m$, and $w$. The primary advantage of this variant lies in its flexibility. We have a bound on the size of the $|\mathbb{F}_q| \geq m/d$. Therefore, the main benefit of introducing the $d$-split version is to let the protocol work on polynomials of smaller degree and/or on specific fields which provides better performance trade-offs~\cite{aguilarsyndrome11}. The increase in parameters are given by
\begin{align}
\epsilon_1 \geq \frac{\binom{m/d}{w/d}}{\binom{m}{w}} \cdot \epsilon_d\label{eq:d_split_epsilon}
\end{align}
Expand Down

0 comments on commit bf6f77a

Please sign in to comment.