Discrete Ziggurat: A Time-Memory Trade-Off for Sampling from a Gaussian Distribution over the Integers

DOI10.1007/978-3-662-43414-7_20zbMath1362.94024OpenAlexW2159044902MaRDI QIDQ2949542

Florian Göpfert, Patrick Weiden, Andreas Hülsing, Daniel Cabarcas, Johannes A. Buchmann

Publication date: 1 October 2015

Published in: Selected Areas in Cryptography -- SAC 2013 (Search for Journal in Brave)

Full work available at URL: https://doi.org/10.1007/978-3-662-43414-7_20

zbMATH Keywords

implementationlattice-based cryptographyGaussian samplingpracticality

Mathematics Subject Classification ID

Cryptography (94A60)

Related Items (7)

Fast Discretized Gaussian Sampling and Post-quantum TLS Ciphersuite ⋮ Analyzing the Shuffling Side-Channel Countermeasure for Lattice-Based Signatures ⋮ Sampling from Arbitrary Centered Discrete Gaussians for Lattice-Based Cryptography ⋮ How to sample a discrete Gaussian (and more) from a random oracle ⋮ Enhancing Goldreich, Goldwasser and Halevi's scheme with intersecting lattices ⋮ Sampling from discrete Gaussians for lattice-based cryptography on a constrained device ⋮ Parallel Implementation of BDD Enumeration for LWE

This page was built for publication: Discrete Ziggurat: A Time-Memory Trade-Off for Sampling from a Gaussian Distribution over the Integers