7 ms·
> people assume SVP is much easier to solve, closer to 2^{.29n + o(n)}. Since when? Can you cite the relevant paper(s)?
by glitchc 1mo ago
> people assume SVP is much easier to solve, closer to 2^{.29n + o(n)}.
Since when? Can you cite the relevant paper(s)?
- mswphd 1mo agothat's the running time of the BDGL16 sieve. see the intro of e.g. https://eprint.iacr.org/2022/922.pdf https://eprint.iacr.org/2022/922.pdf for some history