Preimage Selective Trapdoor Function: How to Repair an Easy Problem

Table 3

Suggested security parameters.

	Security level
	Moderate	Higher	Highest
𝑛	60	90	120
Public key size	21282	47025	82796
Information rate	0.49	0.50	0.51
Costs for BFA I	2^240	2^360	2^480
Costs for BFA II	2^125.9	2^186.5	2^246.9
𝑃𝑑1	2^86.9	2^146.1	2^205.7
𝑃𝑑2	2^587.8	2^899.4	2^1211.6
𝑃𝑑3	2^111.4	2^183	2^255.1