Practical Lattice Basis Sampling Reduction

We propose a practical sampling reduction algorithm for lattice bases based on work by Schnorr [1] as well as two even more effective generalizations. We report the empirical behaviour of these algorithms. We describe how Sampling Reduction allows to stage lattice attacks against the NTRU cryptosystem with smaller BKZ parameters than before and conclude that therefore the recommeded NTRU security parameters offer 74 Bit security.

• Type: Conference
• Year: 2006
• Where: ANTS
• Authors: Johannes Buchmann, Christoph Ludwig
• Keywords: Algorithms, ANTS 2006, NTRU Security Parameters, Sampling Reduction, Sampling Reduction Algorithm