mirror of
https://github.com/luxfi/lattice.git
synced 2026-09-24 00:25:44 +00:00
zeekay
f303ffce3c
When bitOff >= 3, 6 bits can span 3 bytes. Previously only read 2 bytes, which would silently lose high bits and produce incorrect coefficients.
References
- Faster arithmetic for number-theoretic transforms (https://arxiv.org/abs/1205.2926)
- Speeding up the Number Theoretic Transform for Faster Ideal Lattice-Based Cryptography (https://eprint.iacr.org/2016/504)
- Gaussian sampling in lattice-based cryptography (https://tel.archives-ouvertes.fr/tel-01245066v2)
- Post-quantum key exchange - a new hope (https://eprint.iacr.org/2015/1092)