English

Hardness of Bounded Distance Decoding on Lattices in $\ell_p$ Norms

Computational Complexity 2020-03-19 v1 Data Structures and Algorithms

Abstract

\newcommand{\Z}{\mathbb{Z}} \newcommand{\eps}{\varepsilon} \newcommand{\cc}[1]{\mathsf{#1}} \newcommand{\NP}{\cc{NP}} \newcommand{\problem}[1]{\mathrm{#1}} \newcommand{\BDD}{\problem{BDD}} Bounded Distance Decoding \BDDp,α\BDD_{p,\alpha} is the problem of decoding a lattice when the target point is promised to be within an α\alpha factor of the minimum distance of the lattice, in the p\ell_{p} norm. We prove that \BDDp,α\BDD_{p, \alpha} is \NP\NP-hard under randomized reductions where α1/2\alpha \to 1/2 as pp \to \infty (and for α=1/2\alpha=1/2 when p=p=\infty), thereby showing the hardness of decoding for distances approaching the unique-decoding radius for large pp. We also show fine-grained hardness for \BDDp,α\BDD_{p,\alpha}. For example, we prove that for all p[1,)2Zp \in [1,\infty) \setminus 2\Z and constants C>1,\eps>0C > 1, \eps > 0, there is no 2(1\eps)n/C2^{(1-\eps)n/C}-time algorithm for \BDDp,α\BDD_{p,\alpha} for some constant α\alpha (which approaches 1/21/2 as pp \to \infty), assuming the randomized Strong Exponential Time Hypothesis (SETH). Moreover, essentially all of our results also hold (under analogous non-uniform assumptions) for \BDD\BDD with preprocessing, in which unbounded precomputation can be applied to the lattice before the target is available. Compared to prior work on the hardness of \BDDp,α\BDD_{p,\alpha} by Liu, Lyubashevsky, and Micciancio (APPROX-RANDOM 2008), our results improve the values of α\alpha for which the problem is known to be \NP\NP-hard for all p>p14.2773p > p_1 \approx 4.2773, and give the very first fine-grained hardness for \BDD\BDD (in any norm). Our reductions rely on a special family of "locally dense" lattices in p\ell_{p} norms, which we construct by modifying the integer-lattice sparsification technique of Aggarwal and Stephens-Davidowitz (STOC 2018).

Keywords

Cite

@article{arxiv.2003.07903,
  title  = {Hardness of Bounded Distance Decoding on Lattices in $\ell_p$ Norms},
  author = {Huck Bennett and Chris Peikert},
  journal= {arXiv preprint arXiv:2003.07903},
  year   = {2020}
}