Tag
rejection-sampling
- Sep 17, 2026 Unbiased Random Integers from a Finite Random Source How taking a remainder from a random word introduces measurable bias, and how rejection sampling and multiply-and-reject produce exact uniformity at a bounded cost. algorithms
- Jul 10, 2026 Rejection Sampling and the Price of the Envelope The acceptance rate of a rejection sampler is exactly the reciprocal of its envelope constant, which is why a proposal that looks cheap can make the loop run thousands of trials per variate. scientific computing
- Jan 12, 2026 The Fiat-Shamir with Aborts Loop in ML-DSA How rejection sampling hides the signing nonce, why a signature leaks nothing but a transcript, and what the rejection rate costs in signing throughput. cryptography
- Oct 10, 2023 Constant-Time Arithmetic for Lattice Schemes Which operations in ML-KEM and ML-DSA leak through timing or cache behaviour, and how the standard techniques for secret-dependent branches and indexing apply to polynomial arithmetic. cryptography