Smooth Sailing through Spherical Shells: Provable Random-Lattice Sieving in Time 2 0.292n
cs.CR, cs.DS, math.MG
Submitted: 2026-09-26
Updated: 2026-09-26
Comments: 46 pages
License: http://creativecommons.org/licenses/by-sa/4.0/
The gist: In an attempt to close the gap between the best provable and heuristic algorithms for hard lattice problems, such as the shortest (SVP) and closest vector problem (CVP), we analyze lattice sieving on
Terminology
Abstract
In an attempt to close the gap between the best provable and heuristic algorithms for hard lattice problems, such as the shortest (SVP) and closest vector problem (CVP), we analyze lattice sieving on Haar-random unimodular lattices. With well-chosen modifications to heuristic sieving, we show that the heuristic assumptions are no longer necessary, and we can provably achieve the same complexities as heuristic sieving on Haar-random lattices for various lattice problems. Concretely, with probability 1 - o(1) over the randomness of the Haar-random lattice and the algorithmic randomness, we show how to: 1. Solve SVP in time 2 0.2924 n + o(n) and space 2 0.2075 n + o(n); 2. Solve CVP for random targets with the same complexities; 3. Produce 2 0.2075 n + o(n) discrete Gaussian samples at any width with these complexities, up to a 2-Ω(n) error in the joint distribution. This improves on the SVP complexities for Haar-random lattices of Pouly-Shen [Eurocrypt, 2026] running in time 2 0.633n + o(n) and space 2 0.5n + o(n), as well as the recent worst-case SVP (and average-case CVP) improvements of Gao-Feng-Hu and Hhan [Cryptology ePrint Archive, 2026], both running in time and space 2 0.5n + o(n) or higher. Similar to standard sieving methods, our approach proceeds through a series of thin spherical shells, starting from a large radius and iteratively combining vectors to obtain vectors from shells with smaller radius. Our main technical contribution is making a series of adjustments to guarantee that for each sieve list generated at each spherical shell, each list vector is independent and uniformly random over all lattice points within this shell. Once this invariant is satisfied, it is a matter of smooth sailing through the spherical shells until we find a solution.
Sources
- On the Lattice Distortion Problem
- Wagner's Algorithm Provably Runs in Subexponential Time for SIS$^\infty$
- Solving the Shortest Vector Problem in 2 0.6039n Time via Mid-point Hessian
- One Discrete Gaussian Sample in $2^{n/2+o(n)}$ Time
- Sieving for closest lattice vectors (with preprocessing)
- Discrete Gaussian Sampling Reduces to CVP and SVP
Related papers
- SoK: AI-Augmented Binary Reversing
- Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
- Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
- Efficient Fuzzy PSI under One-Sided Assumptions
- Sealing the Audit-Runtime Gap for LLM Skills
- Token Composition: A Graph Based on EVM Logs