Rejection Sampling Revisit: How to Choose Parameters in Lattice-Based Signature

Table 1

Forgery attack for parameters of CRYSTALS-Dilithium 3rd version.

Parameters	Dilithium: 1− −	Dilithium: 1−	Dilithium: 2	Dilithium: 3	Dilithium: 4	Dilithium: 5+	Dilithium: 5++
Weight of	24	30	39	49	60	60	60
Entropy of	135	160	192	225	257	257	257
Classical forgery attack	135	160	192	225	257	257	257
Quantum forgery attack	67	80	96	112	128	128	128
Security claim	55	89	112	165	229	298	343