arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2002.07955cs.DScs.CR
收藏

通过有界距离解码改进最短向量问题的经典与量子算法

Improved Classical and Quantum Algorithms for the Shortest Vector Problem via Bounded Distance Decoding

Divesh Aggarwal, Yanlin Chen, Rajendra Kumar, Yixin Shen

AI总结:

本文通过有界距离解码改进最短向量问题算法,提出经典与量子新算法,在时间、内存和QRAM模型下显著降低复杂度,并基于接吻数猜想给出更优的理论运行时间。

摘要:

格上最重要的计算问题是最短向量问题(SVP)。在本文中,我们提出了新算法,改进了可证明的经典/量子 SVP 算法的最先进水平。我们给出以下结果。• 一种新的 SVP 算法,在时间复杂度和内存需求之间提供平滑的权衡。对于任意正整数 4 ≤ q ≤ √n,我们的算法需要 q^{13n+o(n)} 时间,并需要 poly(n)·q^{16n/q^2} 内存。这种从枚举(q = √n)到筛法(q 为常数)的权衡,是在平滑参数之上进行离散高斯采样的新时间-内存权衡的结果。• 一种 SVP 量子算法,运行时间为 2^{0.950n+o(n)},需要 2^{0.5n+o(n)} 经典内存和 poly(n) 量子比特。在量子随机存取存储器(QRAM)模型中,该算法仅需 2^{0.835n+o(n)} 时间,并需要大小为 2^{0.293n+o(n)} 的 QRAM、poly(n) 量子比特和 2^{0.5n} 经典空间。这改进了此前由 [ADRS15] 提出的最快经典(同时也是最快量子)算法,其时间和空间复杂度为 2^{n+o(n)}。• 一种 SVP 经典算法,运行时间为 2^{1.669n+o(n)},空间为 2^{0.5n+o(n)}。这改进了具有相同空间复杂度的 [CCL18] 算法。我们的经典和量子算法的时间复杂度是利用与格接吻数相关的一个量的已知上界 2^{0.402n} 得到的。我们猜想对于大多数格,这个量是 2^{o(n)}。假设这一猜想成立,我们的经典算法运行时间为 2^{1.292n+o(n)},我们的量子算法运行时间为 2^{0.750n+o(n)},而我们的 QRAM 模型量子算法运行时间为 2^{0.667n+o(n)}。

英文摘要:

The most important computational problem on lattices is the Shortest Vector Problem (SVP). In this paper, we present new algorithms that improve the state-of-the-art for provable classical/quantum algorithms for SVP. We present the following results. $\bullet$ A new algorithm for SVP that provides a smooth tradeoff between time complexity and memory requirement. For any positive integer $4\leq q\leq \sqrt{n}$, our algorithm takes $q^{13n+o(n)}$ time and requires $poly(n)\cdot q^{16n/q^2}$ memory. This tradeoff which ranges from enumeration ($q=\sqrt{n}$) to sieving ($q$ constant), is a consequence of a new time-memory tradeoff for Discrete Gaussian sampling above the smoothing parameter. $\bullet$ A quantum algorithm for SVP that runs in time $2^{0.950n+o(n)}$ and requires $2^{0.5n+o(n)}$ classical memory and poly(n) qubits. In Quantum Random Access Memory (QRAM) model this algorithm takes only $2^{0.835n+o(n)}$ time and requires a QRAM of size $2^{0.293n+o(n)}$, poly(n) qubits and $2^{0.5n}$ classical space. This improves over the previously fastest classical (which is also the fastest quantum) algorithm due to [ADRS15] that has a time and space complexity $2^{n+o(n)}$. $\bullet$ A classical algorithm for SVP that runs in time $2^{1.669n+o(n)}$ time and $2^{0.5n+o(n)}$ space. This improves over an algorithm of [CCL18] that has the same space complexity. The time complexity of our classical and quantum algorithms are obtained using a known upper bound on a quantity related to the lattice kissing number which is $2^{0.402n}$. We conjecture that for most lattices this quantity is a $2^{o(n)}$. Assuming that this is the case, our classical algorithm runs in time $2^{1.292n+o(n)}$, our quantum algorithm runs in time $2^{0.750n+o(n)}$ and our quantum algorithm in QRAM model runs in time $2^{0.667n+o(n)}$.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑