Preset: prototype_medium  target=128 bits
Samples: GSW rows=263169 dim=512 eta=9.53674e-07; CLPN diff rows=268697088 dim=256 eta_eff=1.90735e-06
Minimum finite screen bits: 0.00
Passes screening target: False
Attack screens:
  - clean-subset linear solving [GSW/sparse-LPN expansion-key screen]: bits=0.00 status=critical
    263169 row-level objects, dimension 512, eta=9.53674e-07; low eta makes random clean systems likely.
  - Prange information-set decoding [GSW/sparse-LPN expansion-key screen]: bits=0.00 status=critical
    First-order random-code decoding estimate using expansion-key row count.
  - BKW-style parity/noisy-linear learning [GSW/sparse-LPN expansion-key screen]: bits=324.70 status=above-target
    Coarse q-ary BKW screen; use a specialized estimator before claiming security.
  - clean-subset linear solving [CLPN compaction-key row-difference screen]: bits=0.00 status=critical
    268697088 difference samples, dimension 256, effective eta=1.90735e-06.
  - Prange information-set decoding [CLPN compaction-key row-difference screen]: bits=0.00 status=critical
    First-order random-code decoding estimate on row-difference CLPN samples.
  - BKW-style parity/noisy-linear learning [CLPN compaction-key row-difference screen]: bits=180.59 status=above-target
    Coarse q-ary BKW screen for the compaction secret.
  - sparse-row collision entropy [row-distribution sanity screen]: bits=72.41 status=informational
    row entropy approximately 72.41 bits; birthday excess log2(samples)-H/2 = -18.20.
Blockers:
  - GSW/sparse-LPN expansion-key screen: clean-subset linear solving at 0.00 bits (critical)
  - GSW/sparse-LPN expansion-key screen: Prange information-set decoding at 0.00 bits (critical)
  - CLPN compaction-key row-difference screen: clean-subset linear solving at 0.00 bits (critical)
  - CLPN compaction-key row-difference screen: Prange information-set decoding at 0.00 bits (critical)
Screening estimate only.  This is not a certified sparse-LPN/q-ary-LPN security estimate; it is meant to identify obviously unsafe parameter regimes and guide deeper cryptanalysis.
