pulsar/estimator/README.md

Lattice estimator

Concrete classical and post-quantum security-strength tables for each Pulsar parameter set, generated by Albrecht et al.'s lattice-estimator (https://github.com/malb/lattice-estimator).

Workflow

1. Pin the estimator commit hash in params.sage.
2. Run via SageMath:

   sage estimator/params.sage > estimator/results.md
   

3. Commit params.sage, results.md, and the estimator commit hash together so reviewers can reproduce.

Targets

NIST MPTC §4.5 minimum:

• Required: classical ≥ 128 bits, NIST PQ Cat ≥ 1, statistical ≥ 40 bits.
• Suggested: classical ≥ 192 bits, NIST PQ Cat ≥ 3, statistical ≥ 64 bits.

Pulsar parameter sets:

• Pulsar-44 → required tier
• Pulsar-65 → suggested tier (default for Hanzo / Lux)
• Pulsar-87 → highest NIST PQ Cat 5

Each parameter set's M-LWE instance is restated from FIPS 204 §4 with the same (q, k, ℓ, η) so estimator output is comparable to ML-DSA.

Status

• params.sage skeleton with FIPS 204 parameters
• First estimator run on Pulsar-65
• Full table for all three parameter sets
• Sanity comparison with FIPS 204 published security levels