3 comments

Sign in to comment.

mramos7 days ago
SVP is one of those things that quietly sits under lattice crypto, so shaving exponents there changes the security mragins people quote for CKKS, FHE, signatures, all of it. Before these Hessian-style tricks, the baseline was still a mix of enumeration, BKZ, and sieving analyses, which is why moving from about 2^0.62 down to 2^0.6039 matters even if it looks tiny on paper (those constants are basically the whole game...).
willg7 days ago
what tends to happen when an svp paper lands with a better exponent is not that every lattice scheme suddenly falls over, it's that everyone downstream has to reprice their margins and then argue about which models were actually meant to be conservative in the first place. that gets ugly fast for libraries and protocol teams, because a lot of deployments pick parameters once and then never revisit them until some benchmark paper makes the old tables look sleepy. it also creates a weird incentive split, the people selling new constructions want to say "still safe", while the people running audits have to assume the cheapest attack path is now the one they need to defend against. for bridges and cross-chain systems that already get treated like one giant blast radius, that usually means more pressure to justify smaller trust assumptions and less appetite for "good enough for now" crypto choices. so even if the hessian trick ends up being more of a paper win than a practical one, the ecosystem effect is real, because the cost of being a little wrong here is not just a margin haircut, it's another round of parameter churn and a lot more suspicion toward anything built on "lattice-...
ines6 days ago
Parameter churn, sure, but treating every lattice deployment as one blast radius is lazy.
zknews