Dimension-Preserving Reductions Between SVP and CVP in Different -Norms
arXiv:2104.06576
Abstract
We show a number of reductions between the Shortest Vector Problem and the Closest Vector Problem over lattices in different norms ($\SVP_p$ and $\CVP_p$ respectively). Specifically, we present the following $2^{\eps m}$-time reductions for , which all increase the rank and dimension of the input lattice by at most one: a reduction from $\widetilde{O}(1/\eps^{1/p})γ$-approximate $\SVP_q$ to -approximate $\SVP_p$; a reduction from $\widetilde{O}(1/\eps^{1/p}) γ$-approximate $\CVP_p$ to -approximate $\CVP_q$; and a reduction from $\widetilde{O}(1/\eps^{1+1/p})$-$\CVP_q$ to $(1+\eps)$-unique $\SVP_p$ (which in turn trivially reduces to $(1+\eps)$-approximate $\SVP_p$). The last reduction is interesting even in the case . In particular, this special case subsumes much prior work adapting -time $\SVP_p$ algorithms to solve -approximate $\CVP_p$. In the (important) special case when , , and the $\SVP_p$ oracle is exact, we show a stronger reduction, from $O(1/\eps^{1/p})\text{-}\CVP_p$ to (exact) $\SVP_p$ in $2^{\eps m}$ time. For example, taking $\eps = \log m/m$ and gives a slight improvement over Kannan's celebrated polynomial-time reduction from $\sqrt{m}\text{-}\CVP_2$ to $\SVP_2$. We also note that the last two reductions can be combined to give a reduction from approximate-$\CVP_p$ to $\SVP_q$ for any and , regardless of whether or . Our techniques combine those from the recent breakthrough work of Eisenbrand and Venzin (which showed how to adapt the current fastest known algorithm for these problems in the norm to all norms) together with sparsification-based techniques.