Setting security parameters according to 128 bit security (very small CKKS scaling factor)

Adding to what @Caesar wrote. The main parameters are FirstModSize and ScalingModSize. FirstModSize should typically be larger than ScalModSize (to support messages larger in norm than unity). For NATIVE_SIZE=64 (default), FirstModSize cannot be larger than 60. ScaleModSize cannot be larger than 59 (because of the alternating logic of choosing the moduli above and below 2^{ScaleModSize}).

1 Like