Hardness of the (Approximate) Shortest Vector Problem: A Simple Proof via Reed-Solomon Codes

Authors Huck Bennett, Chris Peikert



PDF
Thumbnail PDF

File

LIPIcs.APPROX-RANDOM.2023.37.pdf
  • Filesize: 0.79 MB
  • 20 pages

Document Identifiers

Author Details

Huck Bennett
  • Oregon State University, Corvallis, OR, USA
Chris Peikert
  • University of Michigan, Ann Arbor, MI, USA
  • Algorand, Inc., Boston, MA, USA

Acknowledgements

We thank Swastik Kopparty [Swastik Kopparty, 2020] for very helpful answers to several of our questions.

Cite AsGet BibTex

Huck Bennett and Chris Peikert. Hardness of the (Approximate) Shortest Vector Problem: A Simple Proof via Reed-Solomon Codes. In Approximation, Randomization, and Combinatorial Optimization. Algorithms and Techniques (APPROX/RANDOM 2023). Leibniz International Proceedings in Informatics (LIPIcs), Volume 275, pp. 37:1-37:20, Schloss Dagstuhl – Leibniz-Zentrum für Informatik (2023)
https://doi.org/10.4230/LIPIcs.APPROX/RANDOM.2023.37

Abstract

We give a simple proof that the (approximate, decisional) Shortest Vector Problem is NP-hard under a randomized reduction. Specifically, we show that for any p ≥ 1 and any constant γ < 2^{1/p}, the γ-approximate problem in the 𝓁_p norm (γ-GapSVP_p) is not in RP unless NP ⊆ RP. Our proof follows an approach pioneered by Ajtai (STOC 1998), and strengthened by Micciancio (FOCS 1998 and SICOMP 2000), for showing hardness of γ-GapSVP_p using locally dense lattices. We construct such lattices simply by applying "Construction A" to Reed-Solomon codes with suitable parameters, and prove their local density via an elementary argument originally used in the context of Craig lattices. As in all known NP-hardness results for GapSVP_p with p < ∞, our reduction uses randomness. Indeed, it is a notorious open problem to prove NP-hardness via a deterministic reduction. To this end, we additionally discuss potential directions and associated challenges for derandomizing our reduction. In particular, we show that a close deterministic analogue of our local density construction would improve on the state-of-the-art explicit Reed-Solomon list-decoding lower bounds of Guruswami and Rudra (STOC 2005 and IEEE Transactions on Information Theory 2006). As a related contribution of independent interest, we also give a polynomial-time algorithm for decoding n-dimensional "Construction A Reed-Solomon lattices" (with different parameters than those used in our hardness proof) to a distance within an O(√log n) factor of Minkowski’s bound. This asymptotically matches the best known distance for decoding near Minkowski’s bound, due to Mook and Peikert (IEEE Transactions on Information Theory 2022), whose work we build on with a somewhat simpler construction and analysis.

Subject Classification

ACM Subject Classification
  • Theory of computation → Problems, reductions and completeness
  • Theory of computation → Error-correcting codes
  • Theory of computation → Pseudorandomness and derandomization
Keywords
  • Lattices
  • Shortest Vector Problem
  • Reed-Solomon codes
  • NP-hardness
  • derandomization

Metrics

  • Access Statistics
  • Total Accesses (updated on a weekly basis)
    0
    PDF Downloads

References

  1. Divesh Aggarwal and Noah Stephens-Davidowitz. (Gap/S)ETH hardness of SVP. In STOC, 2018. Google Scholar
  2. Dorit Aharonov and Oded Regev. Lattice problems in NP cap coNP. J. ACM, 52(5):749-765, 2005. Preliminary version in FOCS 2004. Google Scholar
  3. Miklós Ajtai. The shortest vector problem in L₂ is NP-hard for randomized reductions (extended abstract). In STOC, pages 10-19, 1998. Google Scholar
  4. Sanjeev Arora, László Babai, Jacques Stern, and Z. Sweedyk. The hardness of approximate optima in lattices, codes, and systems of linear equations. J. Comput. Syst. Sci., 54(2):317-331, 1997. Preliminary version in FOCS 1993. Google Scholar
  5. Huck Bennett, Mahdi Cheraghchi, Venkatesan Guruswami, and João Ribeiro. Parameterized inapproximability of the Minimum Distance Problem over all fields and the Shortest Vector Problem in all 𝓁_p norms. In STOC, 2023. Google Scholar
  6. Huck Bennett and Chris Peikert. Hardness of the (approximate) shortest vector problem: A simple proof via reed-solomon codes, 2023. URL: https://arxiv.org/abs/2202.07736.
  7. Huck Bennett, Chris Peikert, and Yi Tang. Improved hardness of BDD and SVP under Gap-(S)ETH. In ITCS, 2022. Google Scholar
  8. Elwyn Berlekamp. Negacyclic Codes for the Lee Metric, chapter 9, pages 207-217. World Scientific, 2015. Preliminary version in Symposium on Combinatorial Mathematics and its Applications, 1967. URL: https://www.worldscientific.com/doi/abs/10.1142/9789814635905_0009.
  9. Arnab Bhattacharyya, Édouard Bonnet, László Egri, Suprovat Ghoshal, Karthik C.S., Bingkai Lin, Pasin Manurangsi, and Dániel Marx. Parameterized intractability of even set and shortest vector problem. J. ACM, 68(3), 2021. URL: https://doi.org/10.1145/3444942.
  10. Jin-yi Cai and Ajay Nerurkar. Approximating the SVP to within a factor (1+1/dim^ε) is NP-hard under randomized reductions. In CCC, 1998. Google Scholar
  11. Qi Cheng and Daqing Wan. On the list and bounded distance decodibility of the Reed-Solomon codes (extended abstract). In FOCS, 2004. Google Scholar
  12. Qi Cheng and Daqing Wan. A deterministic reduction for the gap minimum distance problem. IEEE Trans. Inf. Theory, 58(11):6935-6941, 2012. Preliminary version in STOC 2009. Google Scholar
  13. John Conway and Neil J. A. Sloane. Sphere packings, lattices, and groups. Springer, 1999. Google Scholar
  14. Maurice Craig. Automorphisms of prime cyclotomic lattices. Preprint. Google Scholar
  15. Léo Ducas and Cécile Pierrot. Polynomial time bounded distance decoding near Minkowski’s bound in discrete logarithm lattices. Des. Codes Cryptogr., 87(8):1737-1748, 2019. Google Scholar
  16. Léo Ducas and Wessel P. J. van Woerden. On the lattice isomorphism problem, quadratic forms, remarkable lattices, and cryptography. In EUROCRYPT, 2022. Google Scholar
  17. Andreas Emil Feldmann, Karthik C. S., Euiwoong Lee, and Pasin Manurangsi. A survey on approximation in parameterized complexity: Hardness and algorithms. Algorithms, 13(6), 2020. URL: https://doi.org/10.3390/a13060146.
  18. Oded Goldreich and Shafi Goldwasser. On the limits of nonapproximability of lattice problems. J. Comput. Syst. Sci., 60(3):540-563, 2000. Preliminary version in STOC 1998. Google Scholar
  19. Elena Grigorescu and Chris Peikert. List-decoding Barnes-Wall lattices. Comput. Complex., 26(2):365-392, 2017. Preliminary version in CCC 2012. Google Scholar
  20. Venkatesan Guruswami and Atri Rudra. Limits to list decoding Reed-Solomon codes. IEEE Trans. Inf. Theory, 52(8):3642-3649, 2006. Preliminary version in STOC 2005. Google Scholar
  21. Venkatesan Guruswami and Madhu Sudan. Improved decoding of Reed-Solomon and algebraic-geometry codes. IEEE Trans. Inf. Theory, 45(6):1757-1767, 1999. Preliminary version in FOCS 1998. Google Scholar
  22. Jonathan I. Hall. Notes on coding theory. Available at URL: https://users.math.msu.edu/users/halljo/classes/CODENOTES/CODING-NOTES.HTML.
  23. Ishay Haviv and Oded Regev. Tensor-based hardness of the shortest vector problem to within almost polynomial factors. Theory Comput., 8(1):513-531, 2012. Preliminary version in STOC 2007. Google Scholar
  24. K. Immink and G. Beenker. Binary transmission codes with higher order spectral zeros at zero frequency (corresp.). IEEE Transactions on Information Theory, 33(3):452-454, 1987. Google Scholar
  25. R. Karabed and P.H. Siegel. Matched spectral-null codes for partial-response channels. IEEE Transactions on Information Theory, 37(3):818-855, 1991. Google Scholar
  26. Subhash Khot. Hardness of approximating the shortest vector problem in lattices. J. ACM, 52(5):789-808, 2005. Preliminary version in FOCS 2004. Google Scholar
  27. Subhash Khot. Hardness of approximating the shortest vector problem in high 𝓁_p norms. J. Comput. Syst. Sci., 72(2):206-219, 2006. Preliminary version in FOCS 2003. Google Scholar
  28. Ralf Koetter and Alexander Vardy. Algebraic soft-decision decoding of Reed-Solomon codes. IEEE Trans. Inf. Theory, 49(11):2809-2825, 2003. Google Scholar
  29. Swastik Kopparty. Personal communication, 2020. Google Scholar
  30. D. G. Mead. Newton’s identities. The American Mathematical Monthly, 99(8):749, October 1992. URL: https://doi.org/10.2307/2324242.
  31. Daniele Micciancio. The shortest vector in a lattice is hard to approximate to within some constant. SIAM J. Comput., 30(6):2008-2035, 2000. Preliminary version in FOCS 1998. Google Scholar
  32. Daniele Micciancio. Inapproximability of the shortest vector problem: Toward a deterministic reduction. Theory Comput., 8(1):487-512, 2012. Google Scholar
  33. Daniele Micciancio and Antonio Nicolosi. Efficient bounded distance decoders for Barnes-Wall lattices. In ISIT, pages 2484-2488. IEEE, 2008. Google Scholar
  34. Ethan Mook and Chris Peikert. Lattice (list) decoding near Minkowski’s inequality. IEEE Trans. Inf. Theory, 68(2):863-870, 2022. Google Scholar
  35. Chris Peikert. Limits on the hardness of lattice problems in 𝓁_p norms. Computational Complexity, 17(2):300-351, May 2008. Preliminary version in CCC 2007. Google Scholar
  36. Chris Peikert. A decade of lattice cryptography. Found. Trends Theor. Comput. Sci., 10(4):283-424, 2016. Google Scholar
  37. Ron M. Roth and Paul H. Siegel. Lee-metric BCH codes and their application to constrained and partial-response channels. IEEE Trans. Inf. Theory, 40(4):1083-1096, 1994. URL: https://doi.org/10.1109/18.335966.
  38. Peter van Emde Boas. Another NP-complete partition problem and the complexity of computing short vectors in a lattice. Technical Report, 1981. Available at URL: https://staff.fnwi.uva.nl/p.vanemdeboas/vectors/mi8104c.html.
Questions / Remarks / Feedback
X

Feedback for Dagstuhl Publishing


Thanks for your feedback!

Feedback submitted

Could not send message

Please try again later or send an E-mail