Estimator for the bit security of LPN

Exact noise Regular noise

Dual LPN (a.k.a., SD)

Over 𝔽₂ Over 𝔽_q Over ℤ_2^λ

Bit size of Field (log q )

Bit Size of Ring ( λ )

Number of Samples ( N )

Corresponding to COT/VOLE Correlations ( n = N / c for some compression parameter c, just for dual LPN )

invalid

Dimension ( k, i.e., length of secret )

invalid

Hamming Weight of Noise ( t )

Calculating... Please wait.

LPN Estimator