CryptoRecords.info
SVP

Shortest Vector Problem

Find a shortest nonzero lattice vector.

Classical · heuristic

Euclidean SVP under sieve heuristics

14 results · 14 papers
ClassicalHeuristicHeuristic random lists2c n + o(n)
#PUBLICATION / AUTHORSDATETIME BOUNDSPACE BOUNDEVIDENCE
1New directions in nearest neighbor searching with applications to lattice sievingAnja Becker · Léo Ducas · Nicolas Gama · Thijs LaarhovenSODA 2016SourceBibTeX / details23 Nov 2015(3/2)n/2 + o(n)20.20751874963942188 n + o(n)PublishedSource checked
1Shortest Vector from Lattice Sieving: a Few Dimensions for FreeLéo DucasEurocrypt 2018SourceBibTeX / detailsheuristic dimensions for free subexponential improvement11 Oct 2017(3/2)n/2 + o(n)—PublishedSource checked
3Faster sieving for shortest lattice vectors using spherical locality-sensitive hashingThijs Laarhoven · Benne de WegerLatincrypt 2015SourceBibTeX / details6 Mar 201520.2972 n + o(n)—PublishedSource checked
3Efficient (ideal) lattice sieving using cross-polytope LSHAnja Becker · Thijs LaarhovenAfricacrypt 2016SourceBibTeX / details24 Aug 201520.2972 n + o(n)—PublishedSource checked
5Speeding-up lattice sieving without increasing the memory, using sub-quadratic nearest neighbor searchAnja Becker · Nicolas Gama · Antoine JouxePrint 2015/522SourceBibTeX / details31 May 201520.3112 n + o(n)20.2075 n + o(n)PreprintSource checked
6Sieving for shortest vectors in lattices using angular locality-sensitive hashingThijs LaarhovenCrypto 2015SourceBibTeX / details26 Sept 201420.3366 n + o(n)20.2075 n + o(n)PublishedSource checked
7Classical and quantum 3 and 4-sieves to solve SVP with low memoryAndré Chailloux · Johanna LoyerPQCrypto 2023SourceBibTeX / detailsheuristic triple sieving tailored LSF memory tradeoff2 Aug 202320.3383 n + o(n)20.1887 n + o(n)PublishedSource checked
8Speed-ups and time-memory trade-offs for tuple lattice sievingGottfried Herold · Elena Kirshanova · Thijs LaarhovenPKC 2018SourceBibTeX / detailsheuristic triple sieving memory tradeoff22 Dec 201720.3588 n + o(n)20.1887 n + o(n)PublishedSource checked
9Improved Algorithms for the Approximate k-List Problem in Euclidean NormGottfried Herold · Elena KirshanovaPKC 2017SourceBibTeX / detailsheuristic triple sieving memory tradeoff26 Jan 201720.3717 n + o(n)20.1887 n + o(n)PublishedSource checked
10Solving shortest and closest vector problems: The decomposition approachAnja Becker · Nicolas Gama · Antoine JouxANTS 2014SourceBibTeX / details24 Oct 201320.3774 n + o(n)20.2925 n + o(n)PublishedSource checked
11A Three-Level Sieve Algorithm for the Shortest Vector ProblemFeng Zhang · Yanbin Pan · Gengran HuSAC 2013SourceBibTeX / details22 Oct 201420.3778 n + o(n)20.2833 n + o(n)PublishedSource checked
12Improved Nguyen-Vidick Heuristic Sieve Algorithm for Shortest Vector ProblemXiaoyun Wang · Mingjie Liu · Chengliang Tian · Jingguo BiAsiaCCS 2011SourceBibTeX / details21 Dec 201020.3836 n + o(n)20.2557 n + o(n)PublishedSource checked
13Sieve Algorithms for the Shortest Vector Problem are PracticalPhong Q. Nguyen · Thomas VidickJournal of Mathematical Cryptology 2008SourceBibTeX / details11 Sept 2008(4/3)n + o(n)20.20751874963942188 n + o(n)PublishedSource checked
14Tuple lattice sievingShi Bai · Thijs Laarhoven · Damien StehléLMS Journal of Computation and Mathematics 2016SourceBibTeX / detailsheuristic triple sieving memory tradeoff21 Jul 201620.4812 n + o(n)20.1887 n + o(n)PublishedSource checked
Comparison definition & assumptions
Regime
Euclidean SVP under sieve heuristics
Computation
Classical
Rigor
Heuristic
Instances
Heuristic random lists
Cost scale
2^{c n + o(n)}
Parameter
n
Description
Sieving bounds whose analysis relies on heuristic list-distribution assumptions.
Comparison rules
State the sieve heuristic and memory model. A heuristic exponent cannot be entered as a worst-case provable result. No practical timing or concrete-security claim follows from the leading exponent alone.
Tags