Lecture 6 Algorithms for Svp, Cvp

نویسندگان

  • Chris Peikert
  • Sam Kim
چکیده

Above we have used the fact that dist(t,L) = minv∈L‖t − v‖ = minx∈t+L‖x‖, because L = −L. The two versions of CVP are equivalent by associating each v ∈ L with t − v ∈ t + L, and vice versa. Although the former version of the problem is the more “obvious” formulation, the latter version is often more convenient in algorithmic settings, so we will use it throughout these notes. We first show that SVPγ is no harder than CVPγ ; more specifically, given an oracle for CVPγ we can solve SVPγ efficiently.

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Discrete Gaussian Sampling Reduces to CVP and SVP

The discrete Gaussian DL−t,s is the distribution that assigns to each vector x in a shifted lattice L − t probability proportional to e−π‖x‖ 2/s2 . It has long been an important tool in the study of lattices. More recently, algorithms for discrete Gaussian sampling (DGS) have found many applications in computer science. In particular, polynomial-time algorithms for DGS with very high parameters...

متن کامل

Finding closest lattice vectors using approximate Voronoi cells

The two classical hard problems underlying the security of lattice-based cryptography are the shortest vector problem (SVP) and the closest vector problem (CVP). For SVP, lattice sieving currently has the best (heuristic) asymptotic time complexity: in high dimensions d, sieving can solve SVP in time 2, using 2 memory [Becker– Ducas–Gama–Laarhoven, SODA’16]. The best heuristic time complexity t...

متن کامل

Sieving for Closest Lattice Vectors (with Preprocessing)

Lattice-based cryptography has recently emerged as a prime candidate for efficient and secure post-quantum cryptography. The two main hard problems underlying its security are the shortest vector problem (SVP) and the closest vector problem (CVP). Various algorithms have been studied for solving these problems, and for SVP, lattice sieving currently dominates in terms of the asymptotic time com...

متن کامل

Approximate Algorithms on Lattices with Small Determinant

In this paper, we propose approximate lattice algorithms for solving the shortest vector problem (SVP) and the closest vector problem (CVP) on an n-dimensional Euclidean integral lattice L. Our algorithms run in polynomial time of the dimension and determinant of lattices and improve on the LLL algorithm when the determinant of a lattice is less than 2 2/4. More precisely, our approximate SVP a...

متن کامل

Approximating-CVP to Within Almost-Polynomial Factors is NP-Hard

This paper shows the closest vector in a lattice to be NPhard to approximate to within any factor up to 2(logn)1 where = (log logn) c for any constant c < 12 . Introduction A lattice L = L(v1; ::; vn), for vectors v1; ::; vn 2 Rn is the set of all integer linear combinations of v1; ::; vn, that is, L = fP aivi j ai 2 Zg. Given a lattice L and an arbitrary vector y, the Closest Vector Problem (C...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

عنوان ژورنال:

دوره   شماره 

صفحات  -

تاریخ انتشار 2015