English

Why we couldn't prove SETH hardness of the Closest Vector Problem for even norms!

Computational Complexity 2023-11-28 v2 Cryptography and Security Data Structures and Algorithms

Abstract

Recent work [BGS17,ABGS19] has shown SETH hardness of CVP in the p\ell_p norm for any pp that is not an even integer. This result was shown by giving a Karp reduction from kk-SAT on nn variables to CVP on a lattice of rank nn. In this work, we show a barrier towards proving a similar result for CVP in the p\ell_p norm where pp is an even integer. We show that for any c>0c>0, if for every k>0k > 0, there exists an efficient reduction that maps a kk-SAT instance on nn variables to a CVP instance for a lattice of rank at most ncn^{c} in the Euclidean norm, then coNPNP/Poly\mathsf{coNP} \subset \mathsf{NP/Poly}. We prove a similar result for CVP for all even norms under a mild additional promise that the ratio of the distance of the target from the lattice and the shortest non-zero vector in the lattice is bounded by exp(nO(1))exp(n^{O(1)}). Furthermore, we show that for any c>0c> 0, and any even integer pp, if for every k>0k > 0, there exists an efficient reduction that maps a kk-SAT instance on nn variables to a SVPpSVP_p instance for a lattice of rank at most ncn^{c}, then coNPNP/Poly\mathsf{coNP} \subset \mathsf{NP/Poly}. The result for SVP does not require any additional promise. While prior results have indicated that lattice problems in the 2\ell_2 norm (Euclidean norm) are easier than lattice problems in other norms, this is the first result that shows a separation between these problems. We achieve this by using a result by Dell and van Melkebeek [JACM, 2014] on the impossibility of the existence of a reduction that compresses an arbitrary kk-SAT instance into a string of length O(nkϵ)\mathcal{O}(n^{k-\epsilon}) for any ϵ>0\epsilon>0. In addition to CVP, we also show that the same result holds for the Subset-Sum problem using similar techniques.

Keywords

Cite

@article{arxiv.2211.04385,
  title  = {Why we couldn't prove SETH hardness of the Closest Vector Problem for even norms!},
  author = {Divesh Aggarwal and Rajendra Kumar},
  journal= {arXiv preprint arXiv:2211.04385},
  year   = {2023}
}

Comments

Added: Instance compression of exact-CVP