Security parameter

[matlink]

Does 4 is enough for lambda ? It makes only lambda¹⁰ bits of security, according to the paper. Am I wrong ?

[rinon]

Sorry, I didn't see your message.

4 is most certainly not large enough to be secure in a practical setting. Since this implementation is really just for demonstration and learning purposes, I chose a small lambda to make computation tractable. In practice, homomorphic encryption over integers is not tractable for lambda large enough to be secure. The ciphertexts quickly become completely unmanageable.