Fig. 3From: Hybrid dual attack on LWE with arbitrary secretsExample: \(T_{\mathrm{BKZ}}\) and \(T_{\mathrm{guess}}\) as a function of r for Kyber1024 under different cost models and assumptionsBack to article page