Ronald Cramer, Victor Shoup
ACM TISSEC
We show that there is a set of points p1, p2, . . . , pn such that any arithmetic circuit of depth d for polynomial evaluation (or interpolation) at these points has size Ω (n log n/log(2 + d/log n)). Moreover, for circuits of sub-logarithmic depth d, we obtain a lower bound of Ω(dn1+1/d) on its size.
Ronald Cramer, Victor Shoup
ACM TISSEC
Victor Shoup
Journal of Cryptology
Masayuki Abe, Rosario Gennaro, et al.
Eurocrypt 2005
Yvo Desmedt, Rosario Gennaro, et al.
Journal of Cryptology