Some Sieving Algorithms for Lattice Problems
نویسندگان
چکیده
We study the algorithmic complexity of lattice problems based on the sieving technique due to Ajtai, Kumar, and Sivakumar [AKS01]. Given a k-dimensional subspace M ⊆ Rn and a full rank integer lattice L ⊆ Qn, the subspace avoiding problem SAP, defined by Blömer and Naewe [BN07], is to find a shortest vector in L \ M. We first give a 2O(n+k log k) time algorithm to solve the subspace avoiding problem. Applying this algorithm we obtain the following results. 1. We give a 2O(n) time algorithm to compute ith successive minima of a full rank lattice L ⊂ Qn if i is O( n log n ). 2. We give a 2O(n) time algorithm to solve a restricted closest vector problem CVPwhere the inputs fulfil a promise about the distance of the input vector from the lattice. 3. We also show that unrestricted CVP has a 2O(n) exact algorithm if there is a 2O(n) time exact algorithm for solving CVP with additional input vi ∈ L, 1 ≤ i ≤ n, where ‖vi‖p is the ith successive minima of L for each i. We also give a new approximation algorithm for SAP and the Convex Body Avoiding problem which is a generalization of SAP. Several of our algorithms work for gauge functions as metric, where the gauge function has a natural restriction and is accessed by an oracle.
منابع مشابه
Faster tuple lattice sieving using spherical locality-sensitive filters
To overcome the large memory requirement of classical lattice sieving algorithms for solving hard lattice problems, Bai–Laarhoven–Stehlé [ANTS 2016] studied tuple lattice sieving, where tuples instead of pairs of lattice vectors are combined to form shorter vectors. Herold–Kirshanova [PKC 2017] recently improved upon their results for arbitrary tuple sizes, for example showing that a triple sie...
متن کاملTuning GaussSieve for Speed
The area of lattice-based cryptography is growing ever-more prominent as a paradigm for quantum-resistant cryptography. One of the most important hard problem underpinning the security of latticebased cryptosystems is the shortest vector problem (SVP). At present, two approaches dominate methods for solving instances of this problem in practice: enumeration and sieving. In 2010, Micciancio and ...
متن کاملSieving for Closest Lattice Vectors (with Preprocessing)
Lattice-based cryptography has recently emerged as a prime candidate for efficient and secure post-quantum cryptography. The two main hard problems underlying its security are the shortest vector problem (SVP) and the closest vector problem (CVP). Various algorithms have been studied for solving these problems, and for SVP, lattice sieving currently dominates in terms of the asymptotic time com...
متن کاملTuple lattice sieving
Lattice sieving is asymptotically the fastest approach for solving the shortest vector problem (SVP) on Euclidean lattices. All known sieving algorithms for solving the SVP require space which (heuristically) grows as 2, where n is the lattice dimension. In high dimensions, the memory requirement becomes a limiting factor for running these algorithms, making them uncompetitive with enumeration ...
متن کاملFinding closest lattice vectors using approximate Voronoi cells
The two classical hard problems underlying the security of lattice-based cryptography are the shortest vector problem (SVP) and the closest vector problem (CVP). For SVP, lattice sieving currently has the best (heuristic) asymptotic time complexity: in high dimensions d, sieving can solve SVP in time 2, using 2 memory [Becker– Ducas–Gama–Laarhoven, SODA’16]. The best heuristic time complexity t...
متن کاملTREE AUTOMATA BASED ON COMPLETE RESIDUATED LATTICE-VALUED LOGIC: REDUCTION ALGORITHM AND DECISION PROBLEMS
In this paper, at first we define the concepts of response function and accessible states of a complete residuated lattice-valued (for simplicity we write $mathcal{L}$-valued) tree automaton with a threshold $c.$ Then, related to these concepts, we prove some lemmas and theorems that are applied in considering some decision problems such as finiteness-value and emptiness-value of recognizable t...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
عنوان ژورنال:
دوره شماره
صفحات -
تاریخ انتشار 2008