On Bounded Distance Decoding and the Closest Vector Problem with Preprocessing
نویسندگان
چکیده
We present a new efficient algorithm for the search version of the approximate Closest Vector Problem with Preprocessing (CVPP). This is the problem of finding a lattice vector whose distance from the target point is within some factor γ of the closest lattice vector, where the algorithm is allowed to take polynomial-length advice about the lattice from an unbounded preprocessing algorithm. Our algorithm achieves an approximation factor of O(n/ √ log n), improving on the previous best of O(n1.5) due to Lagarias, Lenstra, and Schnorr [LLS90]. We also show, somewhat surprisingly, that only O(n) vectors of preprocessing advice are sufficient to solve the problem (with the slightly worse factor of O(n)). We remark that this still leaves a large gap with respect to the decisional version of CVPP, where the best known approximation factor is O( √ n/ log n) due to Aharonov and Regev [AR05]. To achieve these results, we show a reduction to the same problem restricted to target points that are very close to the lattice and a more efficient reduction to a harder problem, Bounded Distance Decoding with preprocessing (BDDP). BDDP is the problem of finding the unique closest lattice point for target vectors that are very close to the lattice (with polynomial-length advice from preprocessing on the lattice). Combining either reduction with the previous bestknown algorithm for BDDP by Liu, Lyubashevsky, and Micciancio [LLM06] gives our main result. We also present a substantially more efficient variant of the LLM algorithm (both in terms of run-time and amount of preprocessing advice), and via an improved analysis, show that it can decode up to a distance proportional to the reciprocal of the smoothing parameter of the dual lattice [MR07]. We show that this is never smaller than the LLM decoding radius, and that it can be up to an Ω̃( √ n) factor larger. ∗Courant Institute of Mathematical Sciences, New York University. †Supported by the National Science Foundation (NSF) under Grant No. CCF-1320188. Any opinions, findings, and conclusions or recommendations expressed in this material are those of the authors and do not necessarily reflect the views of the NSF.
منابع مشابه
On Bounded Distance Decoding for General Lattices
A central problem in the algorithmic study of lattices is the closest vector problem: given a lattice L represented by some basis, and a target point y, nd the lattice point closest to y. Bounded Distance Decoding is a variant of this problem in which the target is guaranteed to be close to the lattice, relative to the minimum distance 1(L) of the lattice. Speci cally, in the -Bounded Distance ...
متن کاملSieving for Closest Lattice Vectors (with Preprocessing)
Lattice-based cryptography has recently emerged as a prime candidate for efficient and secure post-quantum cryptography. The two main hard problems underlying its security are the shortest vector problem (SVP) and the closest vector problem (CVP). Various algorithms have been studied for solving these problems, and for SVP, lattice sieving currently dominates in terms of the asymptotic time com...
متن کاملLearning with Errors Decoding
The security of most public-key encryption schemes relies on the hardness of the learning with errors (LWE) problem – an average-case hard lattice problem introduced by Regev ([Reg05]). While LWE has been proved to be as hard as quantumly approximating the so-called Short Independent Vectors Problem, the parameters used in the proof are not suitable for practical reasons. It makes difficult to ...
متن کاملLattice Gaussian Sampling by Markov Chain Monte Carlo: Convergence Rate and Decoding Complexity
Sampling from the lattice Gaussian distribution is an efficient way for solving the closest vector problem (CVP) in lattice decoding. In this paper, decoding by MCMC-based lattice Gaussian sampling is investigated in full details. First of all, the spectral gap of the transition matrix of the Markov chain induced by the independent Metropolis-Hastings-Klein (MHK) algorithm is derived, dictating...
متن کاملImproved Reduction from the Bounded Distance Decoding Problem to the Unique Shortest Vector Problem in Lattices
We present a probabilistic polynomial-time reduction from the lattice Bounded Distance Decoding (BDD) problem with parameter 1/( √ 2 · γ) to the unique Shortest Vector Problem (uSVP) with parameter γ for any γ > 1 that is polynomial in the lattice dimension n. It improves the BDD to uSVP reductions of [Lyubashevsky and Micciancio, CRYPTO, 2009] and [Liu, Wang, Xu and Zheng, Inf. Process. Lett.,...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 2013