Research Article

Rejection Sampling Revisit: How to Choose Parameters in Lattice-Based Signature

Table 2

Parameters of distinguish problem in CRYSTALS-Dilithium.

ParametersDilithium-II-RDilithium-II-CDilithium-III-RDilithium-III-C

325325275275
523776−1261888523776−1261888
The convolution of 60 independent uniform distributions