Shortest Vector Problem
Find a shortest nonzero lattice vector.
Classical · heuristic
Euclidean SVP under sieve heuristics
Results
| # | PUBLICATION / AUTHORS | DATE | TIME BOUND | SPACE BOUND | EVIDENCE |
|---|---|---|---|---|---|
| 1 | New directions in nearest neighbor searching with applications to lattice sievingSODA 2016SourceBibTeX / details | 23 Nov 2015 | (3/2)n/2 + o(n) | 20.20751874963942188 n + o(n) | PublishedSource checked |
| 1 | Shortest Vector from Lattice Sieving: a Few Dimensions for FreeEurocrypt 2018SourceBibTeX / detailsheuristic dimensions for free subexponential improvement | 11 Oct 2017 | (3/2)n/2 + o(n) | — | PublishedSource checked |
| 3 | Faster sieving for shortest lattice vectors using spherical locality-sensitive hashingLatincrypt 2015SourceBibTeX / details | 6 Mar 2015 | 20.2972 n + o(n) | — | PublishedSource checked |
| 3 | Efficient (ideal) lattice sieving using cross-polytope LSHAfricacrypt 2016SourceBibTeX / details | 24 Aug 2015 | 20.2972 n + o(n) | — | PublishedSource checked |
| 5 | Speeding-up lattice sieving without increasing the memory, using sub-quadratic nearest neighbor searchePrint 2015/522SourceBibTeX / details | 31 May 2015 | 20.3112 n + o(n) | 20.2075 n + o(n) | PreprintSource checked |
| 6 | Sieving for shortest vectors in lattices using angular locality-sensitive hashingCrypto 2015SourceBibTeX / details | 26 Sept 2014 | 20.3366 n + o(n) | 20.2075 n + o(n) | PublishedSource checked |
| 7 | Classical and quantum 3 and 4-sieves to solve SVP with low memoryPQCrypto 2023SourceBibTeX / detailsheuristic triple sieving tailored LSF memory tradeoff | 2 Aug 2023 | 20.3383 n + o(n) | 20.1887 n + o(n) | PublishedSource checked |
| 8 | Speed-ups and time-memory trade-offs for tuple lattice sievingPKC 2018SourceBibTeX / detailsheuristic triple sieving memory tradeoff | 22 Dec 2017 | 20.3588 n + o(n) | 20.1887 n + o(n) | PublishedSource checked |
| 9 | Improved Algorithms for the Approximate k-List Problem in Euclidean NormPKC 2017SourceBibTeX / detailsheuristic triple sieving memory tradeoff | 26 Jan 2017 | 20.3717 n + o(n) | 20.1887 n + o(n) | PublishedSource checked |
| 10 | Solving shortest and closest vector problems: The decomposition approachANTS 2014SourceBibTeX / details | 24 Oct 2013 | 20.3774 n + o(n) | 20.2925 n + o(n) | PublishedSource checked |
| 11 | A Three-Level Sieve Algorithm for the Shortest Vector ProblemSAC 2013SourceBibTeX / details | 22 Oct 2014 | 20.3778 n + o(n) | 20.2833 n + o(n) | PublishedSource checked |
| 12 | Improved Nguyen-Vidick Heuristic Sieve Algorithm for Shortest Vector ProblemAsiaCCS 2011SourceBibTeX / details | 21 Dec 2010 | 20.3836 n + o(n) | 20.2557 n + o(n) | PublishedSource checked |
| 13 | Sieve Algorithms for the Shortest Vector Problem are PracticalJournal of Mathematical Cryptology 2008SourceBibTeX / details | 11 Sept 2008 | (4/3)n + o(n) | 20.20751874963942188 n + o(n) | PublishedSource checked |
| 14 | Tuple lattice sievingLMS Journal of Computation and Mathematics 2016SourceBibTeX / detailsheuristic triple sieving memory tradeoff | 21 Jul 2016 | 20.4812 n + o(n) | 20.1887 n + o(n) | PublishedSource checked |
Comparison definition & assumptions
- Regime
- Euclidean SVP under sieve heuristics
- Computation
- Classical
- Rigor
- Heuristic
- Instances
- Heuristic random lists
- Cost scale
- 2^{c n + o(n)}
- Parameter
- n
- Description
- Sieving bounds whose analysis relies on heuristic list-distribution assumptions.
- Comparison rules
- State the sieve heuristic and memory model. A heuristic exponent cannot be entered as a worst-case provable result. No practical timing or concrete-security claim follows from the leading exponent alone.
- Tags