Cryptology ePrint Archive: Report 2017/259

Gaussian Sampling over the Integers: Efficient, Generic, Constant-Time

Daniele Micciancio and Michael Walter

Abstract: Sampling integers with Gaussian distribution is a fundamental problem that arises in almost every application of lattice cryptography, and it can be both time consuming and challenging to implement. Most previous work has focused on the optimization and implementation of integer Gaussian sampling in the context of specific applications, with fixed sets of parameters. We present new algorithms for discrete Gaussian sampling that are both generic (application independent), efficient, and more easily implemented in constant time without incurring a substantial slow-down, making them more resilient to side-channel (e.g., timing) attacks. As an additional contribution, we present new analytical techniques that can be used to simplify the precision/security evaluation of floating point cryptographic algorithms, and an experimental comparison of our algorithms with previous algorithms from the literature.

Category / Keywords: implementation / Lattice-Based Cryptography, Discrete Gaussian Sampling

Original Publication (with minor differences): IACR-CRYPTO-2017

Date: received 21 Mar 2017, last revised 21 Jul 2017

Contact author: miwalter at eng ucsd edu

Available format(s): PDF | BibTeX Citation

Version: 20170721:183754 (All versions of this report)

Short URL:

Discussion forum: Show discussion | Start new discussion

[ Cryptology ePrint archive ]