ANNEALING-BASED ALGORITHM FOR SOLVING CVP AND SVP
نویسندگان
چکیده
Inspired by quantum annealing, digital annealing computers specified for computations have been realized on a large scale, such as the Digital Annealer (DA) developed Fujitsu and CMOS Annealing Machine Hitachi. With progress achieved using these computers, it has become necessary to estimate computational hardness of cryptographic problems. This paper focuses lattice problems, closest vector problem (CVP) shortest (SVP), which are class optimization These problems form basis security lattice-based cryptography, is prime candidate NIST post-quantum cryptography standardization. For we propose methods generating an Ising model solving with bit representation input, represents encodings map each integer variable in SVP into binary variables. We two SVPs, basic method variant incorporating approximately concept classical enumeration. In our experimental results obtained second-generation DA, succeeded finding nonzero 40- 45-dimensional lattices Darmstadt Challenge. The hybrid was fastest among representation, expected running time estimated 664 13,750 seconds lattices, respectively. provide benchmark computers.
منابع مشابه
Lecture 6 Algorithms for Svp, Cvp
Above we have used the fact that dist(t,L) = minv∈L‖t − v‖ = minx∈t+L‖x‖, because L = −L. The two versions of CVP are equivalent by associating each v ∈ L with t − v ∈ t + L, and vice versa. Although the former version of the problem is the more “obvious” formulation, the latter version is often more convenient in algorithmic settings, so we will use it throughout these notes. We first show tha...
متن کاملAn Accelerated Algorithm for Solving SVP Based on Statistical Analysis
In this paper, we propose an accelerated algorithm for solving the shortest vector problem (SVP). We construct our algorithm by using two novel ideas, i.e., the choice of appropriate distributions of the natural number representation and the reduction of the sum of the squared lengths of the Gram-Schmidt orthogonalized vectors. These two ideas essentially depend on statistical analysis. The fir...
متن کاملSVP is no harder than CVP
We write A ≤T B to denote that A is Turing-reducible to B; A is Turing-reducible to a problem B if given an oracle for B, one can compute answers to A. In this case we will show taht if we can compute correct answers for CV Pγ , we can use this to compute the γ-shortest vector of some fixed lattice. Note that the decision formulation of CV P is NP-hard while (the natural decision version of) SV...
متن کاملJust Take the Average! An Embarrassingly Simple 2^n-Time Algorithm for SVP (and CVP)
We show a 2-time (and space) algorithm for the Shortest Vector Problem on lattices (SVP) that works by repeatedly running an embarrassingly simple “pair and average” sievinglike procedure on a list of lattice vectors. This matches the running time (and space) of the current fastest known algorithm, due to Aggarwal, Dadush, Regev, and Stephens-Davidowitz (ADRS, in STOC, 2015), with a far simpler...
متن کاملDiscrete Gaussian Sampling Reduces to CVP and SVP
The discrete Gaussian DL−t,s is the distribution that assigns to each vector x in a shifted lattice L − t probability proportional to e−π‖x‖ 2/s2 . It has long been an important tool in the study of lattices. More recently, algorithms for discrete Gaussian sampling (DGS) have found many applications in computer science. In particular, polynomial-time algorithms for DGS with very high parameters...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
ژورنال
عنوان ژورنال: Journal of The Operations Research Society of Japan
سال: 2022
ISSN: ['0453-4514', '1878-6871', '2188-8299']
DOI: https://doi.org/10.15807/jorsj.65.121