Abstract:Providing closed form estimates of the decoding failure rate of iterative decoder for low- and moderate-density parity check codes has attracted significant interest in the research community over the years. This interest has raised recently due to the use of iterative decoders in post-quantum cryptosystems, where the desired decoding failure rates are impossible to estimate via Monte Carlo simulations. In this work, we propose a new technique to provide accurate estimates of the DFR of a two-iterations (parallel) bit flipping decoder, which is also employable for cryptographic purposes. In doing so, we successfully tackle the estimation of the bit flipping probabilities at the second decoder iteration, and provide a fitting estimate for the syndrome weight distribution at the first iteration. We numerically validate our results, providing comparisons of the modeled and simulated weight of the syndrome, incorrectly-guessed error bit distribution at the end of the first iteration, and two-iteration Decoding Failure Rates (DFR), both in the floor and waterfall regime for simulatable codes. Finally, we apply our method to estimate the DFR of LEDAcrypt parameters, showing improvements by factors larger than $2^{70}$ (for NIST category $1$) with respect to the previous estimation techniques. This allows for a $\approx 20$% shortening in public key and ciphertext sizes, at no security loss, making the smallest ciphertext for NIST category $1$ only $6$% larger than the one of BIKE. We note that the analyzed two-iterations decoder is applicable in BIKE, where swapping it with the current black-gray decoder (and adjusting the parameters) would provide strong IND-CCA$2$ guarantees.

Majority Logic Decoding under Data-Dependent Logic Gate Failures

Reduced-complexity decoding of low-density parity check codes based on adaptive convergence

A Code-specific Conservative Model for the Failure Rate of Bit-flipping Decoding of LDPC Codes with Cryptographic Applications

Majority-logic Decoding with Subspace Designs

Performance of LDPC Decoders with Missing Connections

On the Dynamics of the Error Floor Behavior in (Regular) LDPC Codes

Two Efficient Algorithms Based on Majority-Logic and Min-Sum Algorithms for Ldpc Codes

Error Floor Analysis of LDPC Column Layered Decoders

Design and Analysis of Adaptive Message Coding on LDPC Decoder with Faulty Storage

Bit-flipping Decoder Failure Rate Estimation for (v,w)-regular Codes

LDPC Decoders Prefer More Reliable Parity Bits: Unequal Data Protection Over BSC

On the Total-Power Capacity of Regular-LDPC Codes with Iterative Message-Passing Decoders

Low density majority codes and the problem of graceful degradation

Pseudoredundancy for the Bit-Flipping Algorithm

Majority-based Reversible Logic Gates

Low complexity bit-flipping based decoding for low-density parity-check codes

Design of LDPC decoders for improved low error rate performance: quantization and algorithm choices

Design of LDPC Codes Robust to Noisy Message-Passing Decoding

On Low Density Majority Codes

Error Floor Properties of Low-Density Parity-Check Codes Using Iterative Decoding Algorithms

The capacity of low-density parity-check codes under message-passing decoding