Hardness of Bounded Distance Decoding on Lattices in $\ell_p$ Norms
Abstract
\newcommand{\Z}{\mathbb{Z}} \newcommand{\eps}{\varepsilon} \newcommand{\cc}[1]{\mathsf{#1}} \newcommand{\NP}{\cc{NP}} \newcommand{\problem}[1]{\mathrm{#1}} \newcommand{\BDD}{\problem{BDD}} Bounded Distance Decoding is the problem of decoding a lattice when the target point is promised to be within an factor of the minimum distance of the lattice, in the norm. We prove that is -hard under randomized reductions where as (and for when ), thereby showing the hardness of decoding for distances approaching the unique-decoding radius for large . We also show fine-grained hardness for . For example, we prove that for all and constants , there is no -time algorithm for for some constant (which approaches as ), assuming the randomized Strong Exponential Time Hypothesis (SETH). Moreover, essentially all of our results also hold (under analogous non-uniform assumptions) for with preprocessing, in which unbounded precomputation can be applied to the lattice before the target is available. Compared to prior work on the hardness of by Liu, Lyubashevsky, and Micciancio (APPROX-RANDOM 2008), our results improve the values of for which the problem is known to be -hard for all , and give the very first fine-grained hardness for (in any norm). Our reductions rely on a special family of "locally dense" lattices in norms, which we construct by modifying the integer-lattice sparsification technique of Aggarwal and Stephens-Davidowitz (STOC 2018).
Keywords
Cite
@article{arxiv.2003.07903,
title = {Hardness of Bounded Distance Decoding on Lattices in $\ell_p$ Norms},
author = {Huck Bennett and Chris Peikert},
journal= {arXiv preprint arXiv:2003.07903},
year = {2020}
}