The cr.yp.to microblog: 2019.06.23 09:46:09

2019.06.23 09:46:09 (1142700355484041216) from Daniel J. Bernstein:

Have you heard (repeatedly) about the worst-case-to-average-case reduction for LWE? Sarkar and Singha (https://eprint.iacr.org/2019/728) say that a step in Regev's proof requires the lattice dimension to be at least 187150. New research question: Can an optimized proof get down to 10000?