lux/lattice
2
0
Fork 0
mirror of https://github.com/luxfi/lattice.git synced 2026-09-24 00:25:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #545 from tuneinsight/6.1.1-integration

Browse Source 
6.1.1 integration
This commit is contained in:
lehugueni
2025-04-16 08:32:05 +02:00
committed by GitHub
parent cbf51cb61c 73f420cbb9
commit aa3cb63133
3 changed files with 20 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG.md
+4 -1
View File
@@ -1,12 +1,15 @@
# Changelog
All notable changes to this library are documented in this file.
## [6.x.x] - 16.12.2024
## [Unreleased]
- Refactoring of the InnerSum methods:
- `rlwe.Evaluator.InnerSum` has been replaced by `rlwe.Evaluator.PartialTracesSum`, which applies the automorphisms that correspond to rotations at the scheme level (and sum the results).
- Introduction of the `bgv.Evaluator.InnerSum` and `ckks.Evaluator.InnerSum` methods, which have the same behaviour as the old `InnerSum` method for parameters `n` and `batchSize` s.t. `0 < n*batchSize <= ctIn.Slots()` divides the number of slots. Parameters not satisfying these conditions are rejected.
- Introduction of the `bgv.Evaluator.RotateAndAdd` and `ckks.Evaluator.RotateAndAdd` methods, which have the same behaviour as the old `InnerSum` method for all parameters.
## [6.1.1] - 17.03.2025
- Security fix: the evaluation key for switching from dense to sparse key must be generated at the lowest level.
## [6.1.0] - 04.10.2024
- Update of `PrecisionStats` in `ckks/precision.go`:
- The precision is now computed as the min/max/average/... of the log of the error (instead of the log of the min/max/average/... of the error).
README.md
+3
View File
@@ -153,6 +153,9 @@ External pull requests only proposing small or trivial changes will be converted
External contributions will require the signature of a Contributor License Agreement (CLA).
You can contact us using the following email to request a copy of the CLA: [[email protected]](mailto:[email protected]).
## Vulnerability Reports
See [Report a Vulnerability](SECURITY.md#report-a-vulnerability).
## Bug Reports
Lattigo welcomes bug/regression reports of any kind that conform to the preset template, which is
SECURITY.md
+13
View File
@@ -1,5 +1,18 @@
# Report a Vulnerability
To report a vulnerability please contact us directly using the following email: lattigo@tuneinsight.com.
Please include as much detail as possible in your report, including:
- Affected version.
- Steps to reproduce.
- Potential impact of the vulnerability.
# Past Vulnerabilities
### Wrong level for DenseToSparse Evaluation Key (04.2025)
- **Severity:** Low
- **Impact:** A security of 128-bit is not guaranteed if the `EvkDenseToSparse` evaluation key, which is part of the CKKS bootstrapping keys, is used. With the bootstrapping parameters proposed in Lattigo, the security falls to $\approx$ 106 bits of security. This means the vulnerability should not lead to any practical attack. However, anyone using CKKS bootstrapping should update their version of Lattigo and rotate their secret key to go back to 128-bit security.
- **Versions impacted:** `v5.0.0-v6.1.0`
- **Fixed in:** `v6.1.1`
- **Fix:** `EvkDenseToSparse` is generated at the correct level.
- **Reported by:** Noam Kleinburd **@NoamK-CR**
# Code Review
Lattigo 2.0.0 was code-reviewed by ELCA in November 2020 and, within the allocated time for the code review, no critical or high-risk issues were found.