Lecture 6 Algorithms for Svp, Cvp
نویسندگان
چکیده
Above we have used the fact that dist(t,L) = minv∈L‖t − v‖ = minx∈t+L‖x‖, because L = −L. The two versions of CVP are equivalent by associating each v ∈ L with t − v ∈ t + L, and vice versa. Although the former version of the problem is the more “obvious” formulation, the latter version is often more convenient in algorithmic settings, so we will use it throughout these notes. We first show that SVPγ is no harder than CVPγ ; more specifically, given an oracle for CVPγ we can solve SVPγ efficiently.
منابع مشابه
Discrete Gaussian Sampling Reduces to CVP and SVP
The discrete Gaussian DL−t,s is the distribution that assigns to each vector x in a shifted lattice L − t probability proportional to e−π‖x‖ 2/s2 . It has long been an important tool in the study of lattices. More recently, algorithms for discrete Gaussian sampling (DGS) have found many applications in computer science. In particular, polynomial-time algorithms for DGS with very high parameters...
متن کاملFinding closest lattice vectors using approximate Voronoi cells
The two classical hard problems underlying the security of lattice-based cryptography are the shortest vector problem (SVP) and the closest vector problem (CVP). For SVP, lattice sieving currently has the best (heuristic) asymptotic time complexity: in high dimensions d, sieving can solve SVP in time 2, using 2 memory [Becker– Ducas–Gama–Laarhoven, SODA’16]. The best heuristic time complexity t...
متن کاملSieving for Closest Lattice Vectors (with Preprocessing)
Lattice-based cryptography has recently emerged as a prime candidate for efficient and secure post-quantum cryptography. The two main hard problems underlying its security are the shortest vector problem (SVP) and the closest vector problem (CVP). Various algorithms have been studied for solving these problems, and for SVP, lattice sieving currently dominates in terms of the asymptotic time com...
متن کاملApproximate Algorithms on Lattices with Small Determinant
In this paper, we propose approximate lattice algorithms for solving the shortest vector problem (SVP) and the closest vector problem (CVP) on an n-dimensional Euclidean integral lattice L. Our algorithms run in polynomial time of the dimension and determinant of lattices and improve on the LLL algorithm when the determinant of a lattice is less than 2 2/4. More precisely, our approximate SVP a...
متن کاملApproximating-CVP to Within Almost-Polynomial Factors is NP-Hard
This paper shows the closest vector in a lattice to be NPhard to approximate to within any factor up to 2(logn)1 where = (log logn) c for any constant c < 12 . Introduction A lattice L = L(v1; ::; vn), for vectors v1; ::; vn 2 Rn is the set of all integer linear combinations of v1; ::; vn, that is, L = fP aivi j ai 2 Zg. Given a lattice L and an arbitrary vector y, the Closest Vector Problem (C...
متن کامل