English

(Gap/S)ETH Hardness of SVP

Computational Complexity 2019-01-23 v1

Abstract

\newcommand{\problem}[1]{\ensuremath{\mathrm{#1}} } \newcommand{\SVP}{\problem{SVP}} \newcommand{\ensuremath}[1]{#1} We prove the following quantitative hardness results for the Shortest Vector Problem in the p\ell_p norm (\SVPp\SVP_p), where nn is the rank of the input lattice. \bullet For "almost all" p>p02.1397p > p_0 \approx 2.1397, there no 2n/Cp2^{n/C_p}-time algorithm for \SVPp\SVP_p for some explicit constant Cp>0C_p > 0 unless the (randomized) Strong Exponential Time Hypothesis (SETH) is false. \bullet For any p>2p > 2, there is no 2o(n)2^{o(n)}-time algorithm for \SVPp\SVP_p unless the (randomized) Gap-Exponential Time Hypothesis (Gap-ETH) is false. Furthermore, for each p>2p > 2, there exists a constant γp>1\gamma_p > 1 such that the same result holds even for γp\gamma_p-approximate \SVPp\SVP_p. \bullet There is no 2o(n)2^{o(n)}-time algorithm for \SVPp\SVP_p for any 1p21 \leq p \leq 2 unless either (1) (non-uniform) Gap-ETH is false; or (2) there is no family of lattices with exponential kissing number in the 2\ell_2 norm. Furthermore, for each 1p21 \leq p \leq 2, there exists a constant γp>1\gamma_p > 1 such that the same result holds even for γp\gamma_p-approximate \SVPp\SVP_p.

Keywords

Cite

@article{arxiv.1712.00942,
  title  = {(Gap/S)ETH Hardness of SVP},
  author = {Divesh Aggarwal and Noah Stephens-Davidowitz},
  journal= {arXiv preprint arXiv:1712.00942},
  year   = {2019}
}