Cryptography Reference
In-Depth Information
Table5.1. Optimized parameters (n;k;s;t) for wild Goppa codes overF
q
achieving
128-bit security when introducingw=b(s+qt)=2cerrors.
qkey size n kstw p
3 186 kB 2136 1492
0 46 69 100%
4 210 kB 2252 1766
0 27 54 100%
5 191 kB 1878 1398
0 24 60 100%
7 170 kB 1602 1186
8 16 60
92%
8 187 kB 1628 1204
8 14 60
92%
9 205 kB 1668 1244 10 12 59
91%
11 129 kB 1272
951 17
9 58
84%
13 142 kB 1336 1033 17
7 54
83%
16 157 kB 1328 1010 16
6 56
85%
17 162 kB 1404 1113 17
5 51
82%
19 169 kB 1336 1015 17
5 56
84%
23 183 kB 1370 1058 16
4 54
85%
25 189 kB 1314
972 18
4 59
84%
27 200 kB 1500 1218 42
2 48
55%
29 199 kB 1390 1081 19
3 53
82%
31
88 kB
856
626 25
3 59
78%
32
89 kB
852
618 24
3 60
79%
Fig.5.1. Security levels attained for wild McEliece keys with different wildness
percentages forq= 13.
