On the (Classical and Quantum) Fine-Grained Complexity of Approximate CVP and Max-Cut
Abstract
We show a linear-size reduction from gap Max-2-Lin(2) (a generalization of the approximate Maximum Cut, or gap -, problem) to for and finite , as well as a no-go theorem against poly-sized non-adaptive quantum reductions from - to . This implies three headline results:
(i) Faster algorithms for are also faster algorithms for Max-2-Lin(2) and Max-Cut. Depending on the approximation regime, even a -time or -time algorithm would improve upon state-of-the-art algorithms such as Williams’ 2004 algorithm [TCS 2005] or Arora, Barak, and Steurer’s 2010 algorithm [JACM 2015]. This provides evidence that for requires exponential time, improving upon the previous exponential lower-bound for with by Bennett, Golovnev, and Stephens-Davidowitz [FOCS 2017].
(ii) A new almost -time classical algorithm and a new almost -time quantum algorithm for -gap Max-Cut. This algorithm is faster than the algorithm of Arora, Barak and Steurer [JACM 2015], as well as the algorithm of Williams [TCS 2005], and the algorithm of Manurangsi and Trevisan [APPROX 2018] when for constants .
(iii) If the Quantum Strong Exponential Time Hypothesis (QSETH) can be used to show a -time lower-bound for -, Max-2-Lin(2), or for any constant , it must be via an adaptive quantum reduction unless . This illuminates some difficulties in characterizing the hardness of approximate constraint satisfaction problems and shows that the post-quantum security of lattice-based cryptography likely cannot be supported by QSETH. This result complements the no-go results of Aggarwal and Kumar [FOCS 2023], who showed that the classical security of lattice-based cryptography likely cannot be supported by the classical Strong Exponential Time Hypothesis (SETH).
Keywords and phrases:
fine-grained complexity, instance compression, quantum algorithms, approximation algorithms, CVP, Max-Cut, Min-UnCut, Max-2-Lin, approximation-preserving reductionsCategory:
Track A: Algorithms, Complexity and GamesFunding:
Jeremy Ahrens Huang: National Science Foundation grant CCF-2238766 (CAREER).Copyright and License:
2012 ACM Subject Classification:
Theory of computation Problems, reductions and completeness ; Theory of computation Approximation algorithms analysis ; Theory of computation Computational complexity and cryptography ; Theory of computation Quantum complexity theoryAcknowledgements:
We thank Sean Hallgren for valuable discussions and feedback.Editors:
Sayan Bhattacharya, Danupon Nanongkai, Michael Benedikt, and Gabriele PuppisSeries and Publisher:
Leibniz International Proceedings in Informatics, Schloss Dagstuhl – Leibniz-Zentrum für Informatik
1 Introduction
The Approximate Closest Vector Problem () is a hard approximate problem whose asymptotic time complexity is not well understood for approximation parameters . The Approximate Minimum Un-Cut Problem ( -), also known as the Approximate Maximum Cut Problem, is another hard approximate problem whose asymptotic time complexity is not well understood for approximation parameters . We show a reduction from - to with a remarkable combination of properties: the reduction precisely preserves both the size and the approximation factor of any instance given to it. By possessing both properties at once, our reduction establishes a tight relationship between the time complexity of and of - in the approximation regimes of interest. As we will explain in Section 1.6, finding a reduction possessing both properties at once was a longstanding technical hurdle in the way of establishing such a relationship.
Specifically, our main theorem (Theorem 1.1) states that there is a reduction from - of size to - of size (where is a constant parameter from CVP). This implies that
| whenever the following (simplified) inequality between the approximation parameters is satisfied: | ||||
We use Theorem 1.1 to make three major advancements in the time complexity of CVP and -:
First, Theorem 1.1 directly gives new exponential-time conditional lower bounds (CLBs) on for in both the classical and quantum settings. These CLBs are a win-win-win situation: either there are very strong lower bounds on , or there are extremely exciting new algorithms for -, or there are both strong lower bounds on and exciting new algorithms for -. This win-win-win situation is the defining property of fine-grained reductions (see Section 1.7 and the full version for more on fine-grained complexity). Previous exponential-time CLBs were only for CVP with or in the classical setting from the fine-grained reductions of [11, 3].
Second, in combination with a new quantum algorithm presented in this paper and a classical algorithm from [25] for special instances of , Theorem 1.1 implies two new algorithms for -, one classical and one quantum, which we present in the full version. Our classical algorithm is faster than both the fastest exact algorithm [33] and the previous fastest approximation algorithm [26]111Note that a - algorithm is listed as an open question in the published version of this article and is present in the arXiv version which was submitted later. for all instances where for some constants . Our quantum algorithm is the first to beat Grover search for -!
Third, in combination with a new no-go theorem against quantum reductions from to CVP presented in this paper and the no-go theorems against classical reductions in [5], we show that time-complexity lower bounds conditioned on for -, including exact weighted -, are unlikely in both the quantum and classical settings, assuming no complexity-theoretic disasters occur, for reasons we will explain in Section 1.4. This result could help explain why some desired results in the complexity of approximate problems, such as a proof of the Unique Games Conjecture, have been difficult to obtain.
Next we will define and -, state our main theorem, and then we will explain each advancement and its related work in more detail.
1.1 , -, and our main theorem
First we will define . Given a lattice , a target vector , and a distance , is the problem of deciding if is close to . If is not close to , then it is promised to be more than far from . A lattice is a set of all the linear combinations of linearly independent basis vectors with integer coefficients,
Here is known as the rank of the lattice and is known as the ambient dimension of the lattice ; they are main parameters governing the input size of . The usual way we specify a lattice in the input to is by a choice of basis vectors for , which we represent as a matrix that relates every lattice point to its coordinates by . The distance from a lattice to a target is given by the distance of the closest point in to in the -norm. From now on we will call the problem and the distance function to emphasize that different -norms give us different problems. is known to be NP-complete for (where is a constant) [14], to NOT be NP-complete (unless P=NP) for all [7], and to be in P for [30].
Next we will define -. Given a weighted list of pairs between binary variables and two constants , - is the problem of deciding if there is an assignment to the variables such that at most a -fraction (by weight) of the variable pairs have equal values. If there is no such assignment, then it is promised that for every possible variable assignment at least a -fraction of pairs have equal values. This makes - a weighted 2-CSP (constraint satisfaction problem) where either at most an -fraction of the constraints are unsatisfiable or at least a -fraction of the constraints are unsatisfiable. - is a long-studied problem – the exact case was on Karp’s original list of 21 NP-complete problems [22]. - is known to be NP-hard for constant and under a widely accepted conjecture about the hardness of approximation [24], but in P when or when (for some constant ) [12, 13]. Note that CSPs are sometimes framed in terms of maximizing satisfied constraints instead of minimizing unsatisfied constraints, in which case the gap is given as the fraction of satisfied constraints. For example, - is an alternate name which refers to the same problem as -.
Our main theorem actually works with a slight generalization of - known as Max-2-Lin(2), which allows each constraint to specify whether the variables should be equal or unequal. Now we are ready to state our main theorem:
Theorem 1.1 (Main theorem).
There is a linear-time classical reduction and a linear-time quantum reduction from Max-2-Lin(2) to - with that uses at most one basis vector per variable.
This reduction has the remarkable property that, for any fixed instance size, the approximation factor of the output instance increases without limit as the gap of the input instance increases. This means our reduction can produce instances of any size with any approximation factor! Previous reductions to had some inherent upper limit on the of the instances they can produce with basis vectors for each . See Section 1.6 for a summary of the difficulties involved in overcoming this longstanding limitation. Note also that our reduction maps Max-2-Lin(2) instances with variables to - instances with exactly basis vectors; this fact is critical for the tightness of our conditional time bounds on , which we will describe next. After that, we will describe our two other major advancements and their related works.
1.2 Our conditional lower bound for and related works
1.2.1 Previous work
The way that we show a conditional lower bound (CLB) for the time-complexity of is via a reduction that links the time-complexity of to the time complexity of a well-studied problem. This gives us a win-win situation: the lower bound on conditioned on an assumption about the well-studied problem holds unless there is a breakthrough on the well-studied problem. The assumption is necessary since without it we’d be proving that . Reductions from well-studied problems to have a long history: [32] showed a reduction to exact and a sequence of works including [9, 15, 14, 20]222Note that while some of these reductions as written are to a slightly different problem -SVP, by [18] they are also reductions to and the same principles and difficulties apply. gave reductions to for greater , with the greatest approximation factor ( for some constant ) first achieved by [14]. These reductions showed that is NP-hard for .
However, these reductions only provide a very weak link from the time complexity of their well-studied problems to the time complexity of , because they produce instances of with too many basis vectors. A strong link would require a reduction that uses basis vectors or less – even using basis vectors would meaningfully weaken the link (see Section 1.7 for why). These works use many basis vectors for some (often large and unspecified) constants , and the reductions in [9]333If reading [9], be aware that the problem they call “Label Cover” is very different from (and much easier than) the problem that Label Cover usually refers to today ([27]). for with super-constant even use super-polynomially many basis vectors! So at best, these results can establish a -time conditional lower bound on . For practical values of these bounds can be even weaker than they appear: at just , the inequality holds true for (that’s the number of atoms in the visible universe).
The fine-grained complexity of has recently gained the interest of cryptographers because breaking the lattice-based post-quantum cryptosystems [29, 28, 18] currently in widespread use [31] can be done by solving instances of . A small change in its quantum time complexity (e.g. from to ) can make cracking a secret meaningfully faster, and the previously discussed reductions can give very little evidence for or against such a change. This motivated [11] to show the first result in the fine-grained complexity of : a reduction from or - on variables to on basis vectors for where
| (1) |
is a 2-CSP like -, but with constraints that are satisfied when at least one variable is 1 instead of when exactly one of the two variables is 1. [11] also showed another reduction which was improved by [3] to go from on variables to almost exact () on basis vectors, but only for non-even . From now on we will refer to the former reduction as the [11] reduction and the latter reduction as the [3] reduction for the convenience of the reader. [11] also gave a reduction from exact - on variables to exact on basis vectors.
While there have been no better reductions to with even or larger since [11] and [3], there is a good reason why. [3] and [5] found that, unless the polynomial hierarchy collapses, any classical reduction to with even or larger will likely need to both be from a problem dissimilar to and use different techniques from the [11] and [3] reductions. We also find similar restrictions against such quantum reductions in Section 1.4. This is why our reduction is from Max-2-Lin(2) and uses different geometric gadgets to implement the Max-2-Lin(2) constraints.
We summarize the CLBs on in Figure 1.
1.2.2 Our contribution
We show a reduction from Max-2-Lin(2) on variables to with basis vectors for with in both the quantum and classical settings. It allows us to give the general CLB on in Corollary 1.2 which follows directly from Theorem 1.1. It implies that if one believes a -time lower bound for some specific constant for Max-2-Lin(2) or -, then one must also believe a -time lower bound for -.
Corollary 1.2.
Any -time classical algorithm for -, where is lower-bounded by the dimension of the lattice and , is an -time algorithm for Max-2-Lin(2). The same holds for quantum algorithms.
Our reduction makes several improvements over the previous state-of-the-art fine-grained reduction to by [11]: it considers the quantum setting in addition to the classical setting, it works for both weighted and unweighted input instances, and there is no hard limit on how large is. Using our reduction, we can give interesting CLBs on for approximation factors up to .
The increase in the range of approximation factors our reduction works for is very significant. Not only does this tell us something new about the time complexity of many problems that we did not previously have good CLBs for (since [11] only works for ), but it also applies a much broader scope of existing and future research on lattice problems to the gap CSPs - and Max-2-Lin(2). For example, while our reduction gives us new faster classical and quantum algorithms for - and Max-2-Lin(2) in Section 1.3 using algorithms for general -, these improvements cannot be applied to because the [11] reduction does not work for general -.
In Table 1 we compare our lower bounds to those given by [11] under a stronger version of the above conditions and the conditions used in [11]. The conditions are stronger because we use - instead of Max-2-Lin(2) since [11] wouldn’t work with Max-2-Lin(2). In Table 2 we show the maximum possible with interesting time bounds for some other CLBs.
| Condition | Our CLB | [11]’s CLB | |||||
|---|---|---|---|---|---|---|---|
| Name | Time | Time | Time | ||||
| - | |||||||
| [33] Optimal | O(1) | ||||||
| Gap-ETH 444Gap-ETH can be applied to and - via the first two reductions in [17]. However, these reductions restrict the size of the gap of their output instances. Since the resulting is so small, we decided that, as in [11], the effort required to calculate it exactly is not worthwhile. | 0 | ||||||
-
These are the conditions used in [11] and assume a classical setting.
-
[33] is only optimal when for some constant ; thereafter the algorithm presented in Section 1.3 is faster. The time complexity of [33] depends on the matrix multiplication constant .
| Result | Condition | Lower Bound | Maximum | p |
|---|---|---|---|---|
| Our Result | gap Max-2-Lin(2) exponential | finite | ||
| [11] | gap Max-2-SAT exponential | finite | ||
| [3] | gap-SETH555a gap variant of SETH | non-even | ||
| [14]666 | ETH | finite |
The main reason our CLB applies to with large approximation factors while also giving tight time bounds is that our reduction uses a novel geometric gadget to represent Max-2-Lin(2) constraints that only uses two basis vectors, while allowing the ratio between the “cost” when a constraint is unsatisfied and the cost when a constraint is satisfied to be fully parameterized. We label this parameter as , and our gadget forces the instance to “pay” a cost of when a constraint is unsatisfied instead of a cost of when it is satisfied. In the previous state-of-the-art reduction due to [11] this ratio is 3, and it cannot be increased as the family of geometric gadgets they use is inherently limited to a small constant dependent on the choice of norm and the number of variables in a constraint.
The value given by the unweighted version of our reduction, shown in Equation 2, helps illustrate the significance of the ratio .
| (2) |
Comparing it to the value of for [11] given in Equation 1 clearly shows that fixing the ratio at 3 constrains the contribution of the to the approximation ratio while allowing the ratio to be an arbitrarily large parameter which can depend on and allows us to maximize the contribution of the gap to . But it can go further: when the ratio is constant, that places a constant upper bound on the possible values of , even when we make the input problem trivial by setting . But when the ratio is a parameter we can get any arbitrary we want by varying and setting (or even ) and keeping , which gives us a non-trivial, polynomial-time conditional lower bound for for all . This showcases our reduction’s unlimited approximation-ratio preserving property, which as far as we can tell is unprecedented in the literature.
1.2.3 Subsequent work
Recently [1] showed an algorithm (related to [33]) for exact which can solve the instances created by our and [11]’s reductions in the same amount of time as [33] solves their input Max-2-CSP instances. This means that the [33]-based CLBs for exact shown by us and by [11] are perfectly tight – any reduction to on fewer basis vectors would result in a faster algorithm for an exact Max-2-CSP than [33].
That concludes our overview of CLBs for . Next we will discuss our new algorithms for Max-2-Lin(2).
1.3 Our - algorithms
Exact - was one of Karp’s first 21 NP-complete problems [22]. The current best classical algorithm for it is due to [33], who gave an exponential-sized reduction from - and to a graph problem in P and a way to solve that problem using matrix multiplication. This means that the time complexity of [33]’s algorithm is given in terms of the matrix multiplication exponent . The complexity of [33]’s algorithm is which is approximately using the current best exponent due to [8]. The current best algorithm for - with constant approximation factors in the conjectured NP-hard regime is -time [26]777Note that a - algorithm is listed as an open question in the published version of this article and is present in the arXiv version which was submitted later.. [10] give a sub-exponential algorithm for gap Max-2-Lin(2) in the region where for some constant which gets slower as , reaching time when . The current best quantum algorithm for exact - and Max-2-Lin(2) is naive search over the variable assignments using Grover’s algorithm [19], which takes time. For more about -, Max-2-Lin(2), or the Unique Games Conjecture, see Section 2.4 of the full version of this paper or the survey [23].
We give a new -time quantum algorithm for a special case of and then use our reduction from Theorem 1.1 to give an almost -time algorithm for Max-2-Lin(2). This is the first quantum algorithm to improve upon naive search for Max-2-Lin(2). We also get an almost -time classical algorithm for Max-2-Lin(2) by starting with a -time classical algorithm from [25].
Our classical algorithm is faster than [10] when and it is faster than [33] when for some constant which depends on the sub-constant factors in the exponent and on . Due to large implicit constants in [26], our algorithm is faster when for some large constant . That makes it the best known classical algorithm for Max-2-Lin(2) or - when . Our quantum algorithm is faster than our classical algorithm, and is faster than naive search when for some constant dependent on the sub-constant factors in the exponent, so it is the best known algorithm for .
When , our quantum and classical algorithms have complexities and respectively. So our algorithms are also faster than all other known algorithms when for and .
Next we will give an overview of our last major advancement: the no-go results against quantum reductions from to or -.
1.4 Our no-go theorems
After [11], attempts were made to circumvent the barriers against extending those reductions so that they are able to produce instances with greater approximation factors or with even . Although those attempts failed, they also found good reasons why the barriers are likely insurmountable and created a new area of fine-grained complexity in the process. The focus was first on extending the reduction from to ; [3] found that the geometric gadget used in the reduction (-isolating parallelepipeds) to represent clauses does not exist for even -norms when , then [5] found that (most) reductions from on variables to on basis vectors would collapse the polynomial hierarchy! This also helped explain the difficulty in extending the reduction to work for larger : [5] found that since for every there is a constant such that - can be reduced to (a result due to [16]), any reduction which produces instances with could still be subject to no-go theorems for .
Although isn’t , these no-go results can also help explain the limitations of the [11] reduction from to . If can’t be reduced to with larger , then the geometric gadgets which could be used to represent must fail for larger just like how [3] found that they fail for even . Since the [11] reduction from is reliant on the same geometric gadgets (isolating parallelepipeds) used in their reduction from , it makes sense that it would face limitations similar to what it would face if it were a reduction from .
[5] realized that since tight conditional lower bounds (CLBs) hinge on reductions with a specific numerical relationship between instance size of the input problem and the instance size of the output problem (also known as fine-grained reductions, which we explain in more detail in Section 1.2), their no-go theorems mean that conditions about the time complexity of like the Strong Exponential Time Hypothesis (SETH) probably can’t be applied to .
We show that there are no polynomial-sized, non-adaptive, quantum polynomial-time reductions from to with two-sided error unless there are quantum statistical zero-knowledge proofs for all languages in . This result shows a substantial barrier against proving the fine-grained complexity of using the Quantum Strong Exponential Time Hypothesis and fills a gap in [5], which only showed no-go results for classical reductions. Somewhat counter-intuitively, because we were able to avoid these limitations with our fine-grained reduction from Max-2-Lin(2) to , we can show that these limitations must apply to quantum fine-grained reductions from to Max-2-Lin(2) no matter how complex the weights are. Note that since there is a trivial reduction from Max-2-Lin(2), exact -, and - to Max-2-Lin(2), the no-go theorem applies to them as well.
Our reduction also allows us to directly rule out classical reductions from to - based on the results of [5]. In particular, we rule out all fine-grained reductions with one-sided error and all non-adaptive fine-grained reductions with two-sided error. Surprisingly, these barriers seem to close off the most tempting approaches toward understanding the fine-grained complexity of Max-Cut. However, they might help explain the lack of results in this area. These results could also be derived indirectly from a corollary in [11] and [5], although this seems to have been unnoticed despite its significance for such a well-studied problem.
These results mean that there is now a group of problems with fine-grained reductions to in addition to the existing group of problems with fine-grained reductions from , and that there (probably) cannot be fine-grained reductions from the latter group to the former group. This suggests that the two groups can be considered as two distinct fine-grained complexity classes. Note that these fine-grained complexity classes are independent of regular complexity classes since, as demonstrated by [33]’s algorithm described in Section 1.3, problems in P and problems that are NP-complete can reside in the same fine-grained complexity class.
We also show that all “natural” reductions from -variable 3-SAT to - must use vertices for a definition of “natural” given by [3].
Now we have completed an overview of all of our advancements. Next we will give a brief overview of our reduction.
1.5 Our Reduction
We first show an abridged reduction from unweighted Max-Cut to for and how the approximation factor for the output instances follows from the gap of the input Max-Cut instances, without needing to handle the complexity of the full proof for Max-2-Lin(2). For the full reduction, see the full version of this paper [21].
Given a Max-Cut instance as an ordered set of unordered pairs representing inequality constraints on variables , we produce a basis with vectors on dimensions and a target . We represent as a matrix in with the basis vectors as its columns. We construct and as a series of vertically stacked blocks, where each block is 2 rows tall:
Each pair of blocks (one in and one in ) makes up one gadget, and each gadget encodes one constraint from ; specifically, we construct the gadget to implement the constraint of as follows:
where only the and columns of are shown with , , and the remaining columns are filled with 0s. We show the columns in order with column first. is a parameter we use to ensure that the distance to the target is greater when the constraint is unsatisfied than when the constraint is satisfied. We use two rows per constraint to ensure that the basis vectors for our lattice are linearly independent – otherwise our reduction wouldn’t produce valid instances. We visualize the block in Figure 2 by plotting the and rows of the vectors and . represents the column of , which is also the basis vector.
As you can see from Figure 2, and are equidistant from the target , and are also equidistant from , and and are closer to . If we interpret the coefficient of as the assigned value of , we find that the gadget matches the preferences of the constraint exactly: it prefers over and it has no preference between and and no preference between and .
Theorem 1.3 (Informal).
The above reduction reduces - to -.
Proof sketch.
We first show that the reduction produces a lattice and target with distance at most when given a set of constraints that is -satisfied by some variable assignment (this is the completeness condition for our reduction). Consider the lattice point . Then
by the construction of the gadget (where we use to denote element-wise absolute value), so by summing up the blocks corresponding to satisfied constraints and the blocks corresponding to unsatisfied constraints we get
as claimed (note the power of on the left hand side).
Next we show that the reduction produces a lattice and target with distance greater than when given a set of constraints that is less than -satisfied by any variable assignment (this is the soundness condition for our reduction). Assume that there is always a lattice point with 0-1 coefficients that is at least as close to the target as every other lattice point (we omit proof of this fact in this sketch). We can construct a variable assignment from any lattice point with 0-1 coefficients by choosing to be the coefficient of . Then by the argument given above for completeness the distance from to is given by the number of constraints satisfied by as
Since every variable assignment satisfies fewer than constraints,
for any lattice point with 0-1 coefficients. Applying our assumption applies this bound to all lattice points as claimed.
By choosing and we get that
as required, when is sufficiently large.
Next we will give some context on the longstanding technical difficulty our reduction overcame.
1.6 Difficulty of fine-grained reductions to with large
Our reduction overcomes a longstanding technical difficulty for past reductions to lattice problems: producing an instance that has a large approximation factor while maintaining a small number of basis vectors. As you may have noticed in Section 1.2, all past reductions to have either produced many basis vectors to get large or produced few basis vectors with small . We will try to give some intuition as to why this double-bind occurred.
One way to think about how reductions to with large such as [9, 14, 20]888Again, while some of these reductions as written are to a slightly different problem -SVP, by [18] they are also reductions to and the principles described here are the same. work is that they increase the number of dimensions polynomially while also increasing the number of basis vectors polynomially. In general, increasing the number of basis vectors produced by a reduction from a CSP to decreases the distance to the target, while increasing the number of dimensions produced by a reduction increases the distance to the target. These reductions construct their additional basis vectors in a systematic manner which reduces the distance much more if the input instance is good than if it is bad. When combined with the fact that the bad instances have a long distance to reduce from this provides a large approximation factor (remember that the approximation factor is the long distance divided by the short distance). However, we know from Section 1.7 that this strategy doesn’t produce fine-grained reductions because it uses too many basis vectors.
Ideally, we would like to produce a reduction from a problem on variables to with exactly basis vectors. Such reductions to exact were known at least as far back as [9], but extending them to work for larger is difficult.
To describe these difficulties in constructing problems to , it is helpful to have a generalization for the problems we are reducing from. We will use Constraint Satisfaction Problems (CSPs), which neatly generalize all the well-studied problems mentioned in this paper. CSPs are about deciding if there is a combination of variable assignments that is good enough at satisfying a set of constraints (restrictions on variable assignments). An assignment is considered good enough if it satisfies a fraction of the constraints; if no assignment is good enough, then it is promised that all assignments can only satisfy at most a fraction of constraints. The input size is given by the number of variables and the number of constraints .
One difficulty is as follows: these reductions (including our own) always represent the CSP variables as basis vectors so that they can correspond the integer coefficients of the lattice points to the values of variables in the CSP999This is in contrast to, for example, [14] where there were enough basis vectors to have them represent every possible combination of constraint and variable assignment.. There are infinitely many integer coefficients, but only a finite number of possible values for each variable, so to prove that the reduction faithfully implements the CSP we must show that the valid integer coefficients that correspond to possible CSP variable values are always further away than the invalid coefficients. This is usually done by adding a “leashing gadget”: one or more dimensions where the value of basis vectors and target forces lattice points to be far away when a basis vector is assigned an invalid integer coefficient. For example, to force a basis vector to only have valid coefficients 0 and 1 we might set the target to in the leashing gadget’s dimension and the basis vector to for some very large . Since the basis vectors must be allowed at least two valid integer coefficients but the target can only have one value, the leashing gadgets must add some distance to every instance, which we can again call . To prove that the leashing gadget always works, must exceed the gap between close and far instances of for all the other dimensions combined which caps the approximation factor at 2.
This specific difficulty was first overcome by [11] which showed a gadget (2-dimensional isolating parallelepipeds) that they proved will faithfully implement a CSP constraint (2-ary binary conjunction) even when “unleashed”, breaking the barrier. However, the double-bind remained, due to another difficulty: the factor of the distances of far and close lattice points on an isolating parallelepiped is inherently limited by a small explicit constant. Even with the most favorable parameters, unsatisfied constraints are limited to 3 times the distance of satisfied constraints, limiting the overall approximation factor to .
1.7 Why fine-grained reductions must be small
Reductions from some Problem A to some Problem B are commonly used in both “coarse-grained” complexity, to establish that B is in the same complexity class as A, and “fine-grained” complexity, to establish a specific numerical relationship between the complexities of A and B. In general, a reduction from A to B is a procedure which solves an instance of A using the solutions to instances of B. A reduction R from Problem A to Problem B which solves any size- instance of A using the solution(s) to many size- instance(s) of in time naturally gives the following upper-bound on time complexity of A in terms of the time complexity of B :
What makes reductions so useful in complexity theory is that this inequality is also a lower-bound on in terms of . We can make this clearer by rearranging the inequality and introducing a change of variables :
Note that , commonly known as the size of the reduction R, is present in every term.
A common practice is to give a polynomial-size, polynomial-time, many-to-one reduction and assume that problem A requires super-polynomial time; plugging these parameters into our inequality gives which is a super-polynomial lower-bound on (since it does not contribute to the asymptotic complexity of ). Thus polynomial-size reductions are an effective way to place Problem B in the same complexity class as Problem A.
While such reductions can answer some coarse-grained complexity questions, they are too large to convert a good algorithm for B into a good algorithm for A or a good lower-bound for A into a good lower-bound for B. This is because the large reduction size converts large changes on one side of the inequality to small changes on the other side.
Let us demonstrate by a lower-bound example: assume that Problem A requires -time and let C be a many-to-one reduction from A to B with size for some in polynomial time, and let R also be a reduction from A to B in polynomial time with size . To emphasize the point, let R also use many instances of B instead of just one. Then by our inequality, reduction C establishes a lower-bound on B while reduction R establishes a lower-bound. Since , it’s clear that R gives a much, much better asymptotic lower-bound than C does. Now imagine that a celebrated result shows large improvement in the lower-bound for A, from -time to . How does that change our lower-bound results for B? The bound given by C improves by only a factor of (to ) while the bound given by R improves by a factor of (to )!
Next we will demonstrate the importance of the exact constant factor of our linear-sized reduction. Let reduction R stay as before, and consider another reduction F which is exactly like R except that it has size instead of and takes time instead of . Then reduction F gives a lower bound of
on B instead of the bound given by R! The above comparisons demonstrate that a reduction which can give good fine-grained complexity results (a fine-grained reduction) for potentially exponential-time problems must be a linear-sized reduction, that the constant factor in the reduction size is more important than the complexity of other aspects of the reduction, and that the constant factor is ideally 1 or less.
1.8 Open questions
We leave the following questions to future research.
-
1.
Can the fine-grained hardness of be further extended to show that there are no -time algorithms with for with approximation factors further into the regime and even beyond it towards regime used by modern cryptography?
-
2.
Now that we have identified that fine-grained approximation-ratio preserving reductions are achievable, can we create other fine-grained approximation-ratio preserving reductions that help answer questions in the hardness of approximation?
-
3.
Can the fine-grained hardness results shown in this work also be applied to the approximate Shortest Vector Problem?
-
4.
Do fine-grained reductions to which utilize the “full power” of by using lattice coordinates with many different coefficients instead of just two lead to stronger lower bounds? Or maybe is fully characterized by existing reductions, since for any line formed by a basis vector can only be closest to the target at two points in the -norm101010[3] give a good technical argument for this possibility.? If the former is true, then hopefully we can prove much higher fine-grained lower bounds on . If the latter is true, then we can use existing algorithms to match our current lower bounds. See Section 2.3 of the full version of this paper [21] for how problems with different lattice coefficients relate to each other.
-
5.
The “no-go” results and reductions discussed in this paper suggest that - and belong together in a certain fine-grained complexity class, and that this class is separate from the much better understood fine-grained complexity class to which belongs. What is the true fine-grained complexity lower bound for this class? How should we formulate a fine-grained lower bound conjecture for this class, and which problem should the conjecture be formulated for? One candidate is that there is no -time Max-Cut algorithm for ; another candidate in use by some cryptographers is that there is no -time algorithm for .
1.9 Full version of the paper
Our theorems and their proofs are presented in the full version of this paper [21]. What follows will be the structure of the full paper for the reader’s convenience.
In Section 2 of [21] we introduce the notation used in this paper. We also present the necessary definitions and known results for fine-grained complexity, lattice problems, Max-Cut, and approximate nearest neighbor. In Section 3 of [21] we prove our main theorem Theorem 1.1. In Section 4 of [21] we use this theorem to apply classical and quantum fine-grained lower bounds on the hardness of . In Section 5 of [21] we use our reduction to show barriers against quantum and classical fine-grained hardness results for , Max-2-Lin(2), and - based on (Q)SETH. In Section 6 of [21] we show faster classical and quantum algorithms for Max-2-Lin(2) including -.
References
- [1] Amir Abboud and Rajendra Kumar. On Beating $2^n$ for the Closest Vector Problem. doi:10.48550/arXiv.2501.03688.
- [2] Divesh Aggarwal, Huck Bennett, Zvika Brakerski, Alexander Golovnev, Rajendra Kumar, Zeyong Li, Spencer Peters, Noah Stephens-Davidowitz, and Vinod Vaikuntanathan. Lattice Problems beyond Polynomial Time. In Proceedings of the 55th Annual ACM Symposium on Theory of Computing, pages 1516–1526, Orlando FL USA, June 2023. ACM. doi:10.1145/3564246.3585227.
- [3] Divesh Aggarwal, Huck Bennett, Alexander Golovnev, and Noah Stephens-Davidowitz. Fine-grained hardness of CVP(P): Everything that we can prove (and nothing else). In Proceedings of the Thirty-Second Annual ACM-SIAM Symposium on Discrete Algorithms, SODA ’21, pages 1816–1835, USA, 2021. Society for Industrial and Applied Mathematics.
- [4] Divesh Aggarwal, Daniel Dadush, and Noah Stephens-Davidowitz. Solving the Closest Vector Problem in 2^n Time – The Discrete Gaussian Strikes Again! In 2015 IEEE 56th Annual Symposium on Foundations of Computer Science, pages 563–582, 2015. doi:10.1109/FOCS.2015.41.
- [5] Divesh Aggarwal and Rajendra Kumar. Why we couldn’t prove SETH hardness of the Closest Vector Problem for even norms! In 2023 IEEE 64th Annual Symposium on Foundations of Computer Science (FOCS), pages 2213–2230, Santa Cruz, CA, USA, November 2023. IEEE. doi:10.1109/FOCS57990.2023.00138.
- [6] Divesh Aggarwal and Noah Stephens-Davidowitz. Just Take the Average! An Embarrassingly Simple 2^n-Time Algorithm for SVP (and CVP). OASIcs, Volume 61, SOSA 2018, 61:12:1–12:19, 2018. doi:10.4230/OASIcs.SOSA.2018.12.
- [7] Dorit Aharonov and Oded Regev. Lattice problems in NP intersect coNP. Journal of the ACM, 52(5):749–765, 2005. doi:10.1145/1089023.1089025.
- [8] Josh Alman, Ran Duan, Virginia Vassilevska Williams, Yinzhan Xu, Zixuan Xu, and Renfei Zhou. More Asymmetry Yields Faster Matrix Multiplication. doi:10.48550/arXiv.2404.16349.
- [9] Sanjeev Arora, László Babai, Jacques Stern, and Z Sweedyk. The Hardness of Approximate Optima in Lattices, Codes, and Systems of Linear Equations. Journal of Computer and System Sciences, 54(2):317–331, 1997. doi:10.1006/jcss.1997.1472.
- [10] Sanjeev Arora, Boaz Barak, and David Steurer. Subexponential Algorithms for Unique Games and Related Problems. Journal of the ACM, 62(5):1–25, 2015. doi:10.1145/2775105.
- [11] Huck Bennett, Alexander Golovnev, and Noah Stephens-Davidowitz. On the Quantitative Hardness of CVP. In 2017 IEEE 58th Annual Symposium on Foundations of Computer Science (FOCS), pages 13–24, 2017. doi:10.1109/FOCS.2017.11.
- [12] Moses Charikar, Konstantin Makarychev, and Yury Makarychev. Near-optimal algorithms for unique games. In Proceedings of the Thirty-Eighth Annual ACM Symposium on Theory of Computing, STOC ’06, pages 205–214, New York, NY, USA, 2006. Association for Computing Machinery. doi:10.1145/1132516.1132547.
- [13] Eden Chlamtac, Konstantin Makarychev, and Yury Makarychev. How to Play Unique Games Using Embeddings. In Proceedings of the 47th Annual IEEE Symposium on Foundations of Computer Science, FOCS ’06, pages 687–696, USA, 2006. IEEE Computer Society. doi:10.1109/FOCS.2006.36.
- [14] I. Dinur, G. Kindler, R. Raz, and S. Safra. Approximating CVP to Within Almost-Polynomial Factors is NP-Hard. Combinatorica, 23(2):205–243, April 2003. doi:10.1007/s00493-003-0019-y.
- [15] Irit Dinur. Approximating SVP-infinity to within almost-polynomial factors is NP-hard. Theoretical Computer Science, 285(1):55–71, 2002. doi:10.1016/S0304-3975(01)00290-0.
- [16] Friedrich Eisenbrand and Moritz Venzin. Approximate CVPp in time 20.802n. Journal of Computer and System Sciences, 124:129–139, 2022. doi:10.1016/j.jcss.2021.09.006.
- [17] M. R. Garey, D. S. Johnson, and L. Stockmeyer. Some simplified NP-complete graph problems. Theoretical Computer Science, 1(3):237–267, 1976. doi:10.1016/0304-3975(76)90059-1.
- [18] O. Goldreich, D. Micciancio, S. Safra, and J. P. Seifert. Approximating shortest lattice vectors is not harder than approximating closest lattice vectors. Information Processing Letters, 71(2):55–61, 1999. doi:10.1016/S0020-0190(99)00083-6.
- [19] Lov K Grover. A fast quantum mechanical algorithm for database search. In Proceedings of the 28th ACM Symposium on Theory of Computing (STOC 1996). ACM Press, 1996. doi:10.1145/237814.237866.
- [20] Ishay Haviv and Oded Regev. Tensor-based hardness of the shortest vector problem to within almost polynomial factors. In Proceedings of the 39th Annual ACM Symposium on Theory of Computing (STOC), STOC ’07, pages 469–477, New York, NY, USA, 2007. doi:10.1145/1250790.1250859.
- [21] Jeremy Ahrens Huang, Young Kun Ko, and Chunhao Wang. On the (Classical and Quantum) Fine-Grained Complexity of Log-Approximate CVP and Max-Cut. doi:10.48550/arXiv.2411.04124.
- [22] Richard M. Karp. Reducibility among Combinatorial Problems. In Raymond E. Miller, James W. Thatcher, and Jean D. Bohlinger, editors, Complexity of Computer Computations: Proceedings of a Symposium on the Complexity of Computer Computations, Held March 20–22, 1972, at the IBM Thomas J. Watson Research Center, Yorktown Heights, New York, and Sponsored by the Office of Naval Research, Mathematics Program, IBM World Trade Corporation, and the IBM Research Mathematical Sciences Department, pages 85–103. Springer US, Boston, MA, 1972. doi:10.1007/978-1-4684-2001-2_9.
- [23] Subhash Khot. On the Unique Games Conjecture (Invited Survey). In 2010 IEEE 25th Annual Conference on Computational Complexity, pages 99–121, 2010. doi:10.1109/CCC.2010.19.
- [24] Subhash Khot, Guy Kindler, Elchanan Mossel, and Ryan O’Donnell. Optimal Inapproximability Results for MAX-CUT and Other 2-Variable CSPs? SIAM Journal on Computing, 37(1):319–357, January 2007. doi:10.1137/S0097539705447372.
- [25] Young Kun Ko and Min Jae Song. Hardness of Approximate Nearest Neighbor Search under L-infinity. doi:10.48550/arXiv.2011.06135.
- [26] Pasin Manurangsi and Luca Trevisan. Mildly Exponential Time Approximation Algorithms for Vertex Cover, Uniform Sparsest Cut and Related Problems. doi:10.48550/arXiv.1807.09898.
- [27] Dana Moshkovitz and Ran Raz. Two-query PCP with subconstant error. J. ACM, 57(5):29:1–29:29, 2008. doi:10.1145/1754399.1754402.
- [28] Chris Peikert. A Decade of Lattice Cryptography. now, 2016. doi:10.1561/0400000074.
- [29] Oded Regev. On lattices, learning with errors, random linear codes, and cryptography. Journal of the ACM, 56(6):34:1–34:40, 2009. doi:10.1145/1568318.1568324.
- [30] C. P. Schnorr. A hierarchy of polynomial time lattice basis reduction algorithms. Theoretical Computer Science, 53(2):201–224, 1987. doi:10.1016/0304-3975(87)90064-8.
- [31] Douglas Stebila. Security analysis of the iMessage PQ3 protocol.
- [32] P. van Emde-Boas. Another NP-complete partition problem and the complexity of computing short vectors in a lattice. Department, Univ., 1981.
- [33] Ryan Williams. A new algorithm for optimal 2-constraint satisfaction and its implications. Theoretical Computer Science, 348(2):357–365, 2004. doi:10.1016/j.tcs.2005.09.023.
