Time-Memory Trade-Off for Lattice Enumeration in a Ball
Paul Kirchner and Pierre-Alain Fouque
Abstract
Enumeration algorithms in lattices are a well-known technique for solving the Short Vector Problem (SVP) and improving
blockwise lattice reduction algorithms.
Here, we propose a new algorithm for enumerating lattice point in a ball of radius
in time , where is the length of the shortest vector in the lattice . Then, we show how
this method can be used for solving SVP and the Closest Vector Problem (CVP)
with approximation factor in a -dimensional lattice in time .
Previous algorithms for enumerating take super-exponential running time with polynomial memory. For instance,
Kannan algorithm takes time , however ours also requires exponential memory and we propose different time/memory tradeoffs.
Recently, Aggarwal, Dadush, Regev and Stephens-Davidowitz describe a randomized algorithm with running
time at STOC' 15 for solving SVP and approximation version of SVP and CVP at FOCS'15.
However, it is not possible to use a
time/memory tradeoff for their algorithms. Their main result presents an algorithm that samples an exponential
number of random vectors in a Discrete Gaussian distribution with width below the smoothing parameter of the lattice.
Our algorithm is related to the hill climbing of Liu, Lyubashevsky and Micciancio from
RANDOM' 06 to solve the bounding decoding problem with preprocessing. It has been later improved by Dadush,
Regev, Stephens-Davidowitz for solving the CVP with preprocessing problem at CCC'14. However the latter algorithm only looks for
one lattice vector while we show that we can enumerate all lattice vectors in a ball. Finally, in these papers, they use a
preprocessing to obtain a succinct representation of some lattice function. We show in a first step that we
can obtain the same information using an exponential-time algorithm based on a collision search algorithm similar
to the reduction of Micciancio and Peikert for the SIS problem with small modulus at CRYPTO' 13.
@misc{cryptoeprint:2016/222,
author = {Paul Kirchner and Pierre-Alain Fouque},
title = {Time-Memory Trade-Off for Lattice Enumeration in a Ball},
howpublished = {Cryptology {ePrint} Archive, Paper 2016/222},
year = {2016},
url = {https://eprint.iacr.org/2016/222}
}
Note: In order to protect the privacy of readers, eprint.iacr.org
does not use cookies or embedded third party content.