Slicing Bits and Cutting Costs in CDT Sampling: High-Order Masking of FrodoKEM's Gaussian Sampler, Revisited eprint.iacr.org
Masked Gaussian sampling gets expensive fast; this paper trims FrodoKEM CDT costs with bitslicing for arbitrary orders.
0 comments