SVP is no harder than CVP

نویسنده

  • Vinod Vaikuntanathan
چکیده

We write A ≤T B to denote that A is Turing-reducible to B; A is Turing-reducible to a problem B if given an oracle for B, one can compute answers to A. In this case we will show taht if we can compute correct answers for CV Pγ , we can use this to compute the γ-shortest vector of some fixed lattice. Note that the decision formulation of CV P is NP-hard while (the natural decision version of) SV P is in NP; thus we have a generic reduction of SV P to CV P (through, say, 3-SAT). However this reduction is inefficient in that it requires solutions to large instances of CV P in order to compute the corresponding SV P instance. In particular, this reduction gives no sense of the relationship between approximating CV P and approximating SV P . When we prove Threorem 3, we give a reduction that is dimension-preserving, approximation-preserving and deterministic. The known converse to Theorem 3 has none of these three (desirable) properties. First we give a sense of the reduction: The shortest vector of a lattice B is the closest non-zero vector to the origin. As CV P (B, 0) = 0, the trivial reduction won’t work. Instead, we will generate sublattices of B by “knocking out” certain vectors and ask for the closest vector in this sublattice to the “hole” in the lattice we’ve created. Let B be a lattice basis; consider sublattices spanned by bases B, . . . , B where the ith basis B is {b1, . . . , bi−1, 2bi, bi+1, . . . , bn}. Claim 4. bi 6∈ L(B)

برای دانلود رایگان متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Lecture 6 Algorithms for Svp, Cvp

Above we have used the fact that dist(t,L) = minv∈L‖t − v‖ = minx∈t+L‖x‖, because L = −L. The two versions of CVP are equivalent by associating each v ∈ L with t − v ∈ t + L, and vice versa. Although the former version of the problem is the more “obvious” formulation, the latter version is often more convenient in algorithmic settings, so we will use it throughout these notes. We first show tha...

متن کامل

Closest Vector Problem

The Closest Vector Problem (CVP) is a computational problem on lattices closely related to SVP. (See Shortest Vector Problem.) Given a lattice L and a target point ~x, CVP asks to find the lattice point closest to the target. As for SVP, CVP can be defined with respect to any norm, but the Euclidean norm is the most common (see the entry lattice for a definition). A more relaxed version of the ...

متن کامل

Search-to-Decision Reductions for Lattice Problems with Approximation Factors (Slightly) Greater Than One

We show the first dimension-preserving search-to-decision reductions for approximate SVP and CVP. In particular, for any γ ≤ 1+O(logn/n), we obtain an efficient dimension-preserving reduction from γO(n/ log n)-SVP to γ-GapSVP and an efficient dimension-preserving reduction from γO(n)-CVP to γ-GapCVP. These results generalize the known equivalences of the search and decision versions of these pr...

متن کامل

A New Reduction from Search SVP to Optimization SVP

It is well known that search SVP is equivalent to optimization SVP. However, the former reduction from search SVP to optimization SVP by Kannan needs polynomial times calls to the oracle that solves the optimization SVP. In this paper, a new rank-preserving reduction is presented with only one call to the optimization SVP oracle. It is obvious that the new reduction needs the least calls, and i...

متن کامل

Sampling Short Lattice Vectors and the Closest Lattice Vector Problem

We present a 2 O(n) time Turing reduction from the closest lattice vector problem to the shortest lattice vector problem. Our reduction assumes access to a subroutine that solves SVP exactly and a subroutine to sample short vectors from a lattice, and computes a (1+)-approximation to CVP. As a consequence, using the SVP algorithm from 1], we obtain a randomized 2 O(1+ ?1)n algorithm to obtain a...

متن کامل

Discrete Gaussian Sampling Reduces to CVP and SVP

The discrete Gaussian DL−t,s is the distribution that assigns to each vector x in a shifted lattice L − t probability proportional to e−π‖x‖ 2/s2 . It has long been an important tool in the study of lattices. More recently, algorithms for discrete Gaussian sampling (DGS) have found many applications in computer science. In particular, polynomial-time algorithms for DGS with very high parameters...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

عنوان ژورنال:

دوره   شماره 

صفحات  -

تاریخ انتشار 2011