Recursive lattice reduction---A simple framework for finding short lattice vectors

Friday, March 7, 2025 - 10:30am to 12:00pm
Location: 
32-G882, Hewlett Room
Speaker: 
Noah Stephens-Davidowitz(Cornell University)
Seminar group: 

We'll present a new framework called recursive lattice reduction for finding short non-zero vectors in a lattice. This gives new algorithms for solving the computational problem whose hardness underlies the security of lattice-based cryptography. These new algorithms are much simpler than prior work, and they provably match the state of the art. The analysis of the algorithms is also quite simple, and in particular, the analysis provides a much clearer explanation of why the algorithms perform as they do (i.e., the amount of time needed for these algorithms to find vectors of a given length, which is the key quantity that governs the security of lattice-based cryptography in practice).

 
The framework is based entirely on the following idea: in order to find a short non-zero vector in an n-dimensional lattice, one should first find a dense \ell-dimensional sublattice for some \ell < n and then recursively solve the \ell-dimensional problem of finding short non-zero vectors in this sublattice. After doing this repeatedly, we are eventually left with the problem of finding short non-zero vectors in a k-dimensional sublattice for k small enough that we can simply find an optimal solution. One obtains a family of algorithms depending on how k and \ell are chosen.
 
Based on joint work with Divesh Aggarwal, Thomas Espitau, and Spencer Peters, which appeared in SOSA 2025. https://arxiv.org/abs/2311.15064