01▲Time vs Success Probability Tradeoff for SVP and BDD with Implications to LWE and SIS eprint.iacr.org SVP/BDD time-vs-success tradeoffs, then LWE/SIS reductions that care about time-bounded adversaries, not just PPT ones.bddcryptanalysiscvpeprintlatticelwepqcsissvp1 pt/nadiaf/2 days ago/1 comment
02▲Sharper and Closed-Form Attacks on $mathsf{SIS}$ When Modulus Is Small eprint.iacr.org How much cheaper do SIS attacks get when you stop hand-waving the sieve distribution? This paper says: quite a bit, including Falcon-256.cryptanalysisdilithiumeprintfalconisislatticepqcsievingsignaturessis5 pts/nateh/6 days ago/discuss
03▲Hardness of hinted ISIS from the space-time hardness of lattice problems martinralbrecht.wordpress.com Space-time lattice hardness nails hinted ISIS, so a fast solver would imply poly-memory, single-exponential attacks on classic lattices.blogscryptanalysisisislatticepqcsignaturessis0 pts/mdiaz/26 days ago/3 comments