In paper (https://arxiv.org/pdf/2202.07994) there is table with max size of q for differens security level and ring dimesion. How do they calculate such coeff modulus
The referenced paper does not cite any resource on how the table was generated!
Anyway, most likely, they used the LWE hardness estimator, which is the most commonly used tool for assessing LWE/RLWE hardness.
1 Like
Homomorphic Encryption Standard offers tables to decide the max size of q for different security level and ring dimension.
In this document, Table1, (-1, 1) distribution on page 27 has the max q values under different combination of security level and ring dimension.
Thank you for sharing this reference.
For completeness, it might also be relevant to consider more recent publications such as this work.