<p><InlineEquation ID="IEq4"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq1.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="21" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}^n\)</EquationSource> <EquationSource Format="MATHML"><math> <msup> <mrow> <mi mathvariant="double-struck">Z</mi> </mrow> <mi>n</mi> </msup> </math></EquationSource> </InlineEquation> is one of the simplest types of lattices, but the computational problems on its rotations, such as <InlineEquation ID="IEq5"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq5.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="13" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}\)</EquationSource> <EquationSource Format="MATHML"><math> <mi mathvariant="double-struck">Z</mi> </math></EquationSource> </InlineEquation>SVP and <InlineEquation ID="IEq6"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq5.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="13" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}\)</EquationSource> <EquationSource Format="MATHML"><math> <mi mathvariant="double-struck">Z</mi> </math></EquationSource> </InlineEquation>LIP, have been of great interest in cryptography. Recent advances have been made in building cryptographic primitives based on these problems, as well as in developing new algorithms for solving them. However, the theoretical complexity of <InlineEquation ID="IEq7"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq5.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="13" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}\)</EquationSource> <EquationSource Format="MATHML"><math> <mi mathvariant="double-struck">Z</mi> </math></EquationSource> </InlineEquation>SVP and <InlineEquation ID="IEq8"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq5.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="13" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}\)</EquationSource> <EquationSource Format="MATHML"><math> <mi mathvariant="double-struck">Z</mi> </math></EquationSource> </InlineEquation>LIP is still not well understood. In this work, we study the problems on rotations of <InlineEquation ID="IEq9"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq1.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="21" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}^n\)</EquationSource> <EquationSource Format="MATHML"><math> <msup> <mrow> <mi mathvariant="double-struck">Z</mi> </mrow> <mi>n</mi> </msup> </math></EquationSource> </InlineEquation> by exploiting the symmetry property. We introduce a randomization framework that can be roughly viewed as ‘applying random automorphisms’ to the output of an oracle, without accessing the automorphism group. Using this framework, we obtain new reduction results for rotations of <InlineEquation ID="IEq10"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq1.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="21" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}^n\)</EquationSource> <EquationSource Format="MATHML"><math> <msup> <mrow> <mi mathvariant="double-struck">Z</mi> </mrow> <mi>n</mi> </msup> </math></EquationSource> </InlineEquation>. First, we present a reduction from <InlineEquation ID="IEq11"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq5.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="13" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}\)</EquationSource> <EquationSource Format="MATHML"><math> <mi mathvariant="double-struck">Z</mi> </math></EquationSource> </InlineEquation>LIP to <InlineEquation ID="IEq12"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq5.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="13" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}\)</EquationSource> <EquationSource Format="MATHML"><math> <mi mathvariant="double-struck">Z</mi> </math></EquationSource> </InlineEquation>SCVP. Here <InlineEquation ID="IEq13"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq5.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="13" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}\)</EquationSource> <EquationSource Format="MATHML"><math> <mi mathvariant="double-struck">Z</mi> </math></EquationSource> </InlineEquation>SCVP is the problem of finding the shortest characteristic vectors, which is a special case of CVP where the target vector is a deep hole of the lattice. Moreover, we prove a reduction from <InlineEquation ID="IEq14"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq5.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="13" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}\)</EquationSource> <EquationSource Format="MATHML"><math> <mi mathvariant="double-struck">Z</mi> </math></EquationSource> </InlineEquation>SVP to <InlineEquation ID="IEq15"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq15.gif" Format="GIF" Height="12" Rendition="HTML" Resolution="72" Type="Linedraw" Width="13" /> </InlineMediaObject> <EquationSource Format="TEX">\(\gamma \)</EquationSource> <EquationSource Format="MATHML"><math> <mi>γ</mi> </math></EquationSource> </InlineEquation>-<InlineEquation ID="IEq16"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq5.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="13" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}\)</EquationSource> <EquationSource Format="MATHML"><math> <mi mathvariant="double-struck">Z</mi> </math></EquationSource> </InlineEquation>SVP for any constant <InlineEquation ID="IEq17"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq17.gif" Format="GIF" Height="19" Rendition="HTML" Resolution="72" Type="Linedraw" Width="68" /> </InlineMediaObject> <EquationSource Format="TEX">\(\gamma = O(1)\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mi>γ</mi> <mo>=</mo> <mi>O</mi> <mo stretchy="false">(</mo> <mn>1</mn> <mo stretchy="false">)</mo> </mrow> </math></EquationSource> </InlineEquation> in the same dimension, which implies that <InlineEquation ID="IEq18"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq5.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="13" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}\)</EquationSource> <EquationSource Format="MATHML"><math> <mi mathvariant="double-struck">Z</mi> </math></EquationSource> </InlineEquation>SVP is as hard as its approximate version for any constant approximation factor. Second, we investigate the problem of finding a nontrivial automorphism for a given lattice, which is called LAP. Specifically, we use the randomization framework to show that <InlineEquation ID="IEq19"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq5.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="13" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}\)</EquationSource> <EquationSource Format="MATHML"><math> <mi mathvariant="double-struck">Z</mi> </math></EquationSource> </InlineEquation>LAP is as hard as <InlineEquation ID="IEq20"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq5.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="13" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}\)</EquationSource> <EquationSource Format="MATHML"><math> <mi mathvariant="double-struck">Z</mi> </math></EquationSource> </InlineEquation>LIP. Additionally, we demonstrate that the randomization framework is also applicable to other lattices exhibiting high-degree symmetry, and prove that the isomorphism and automorphism problems related to <InlineEquation ID="IEq21"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq21.gif" Format="GIF" Height="16" Rendition="HTML" Resolution="72" Type="Linedraw" Width="24" /> </InlineMediaObject> <EquationSource Format="TEX">\(D_n\)</EquationSource> <EquationSource Format="MATHML"><math> <msub> <mi>D</mi> <mi>n</mi> </msub> </math></EquationSource> </InlineEquation> are as hard as <InlineEquation ID="IEq22"> <InlineMediaObject> <ImageObject Color="BlackWhite" FileRef="145_2025_9546_Article_IEq5.gif" Format="GIF" Height="14" Rendition="HTML" Resolution="72" Type="Linedraw" Width="13" /> </InlineMediaObject> <EquationSource Format="TEX">\(\mathbb {Z}\)</EquationSource> <EquationSource Format="MATHML"><math> <mi mathvariant="double-struck">Z</mi> </math></EquationSource> </InlineEquation>LIP.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Exploiting the Symmetry of \(\mathbb {Z}^n\): Randomization and the Automorphism Problem

  • Kaijie Jiang,
  • Anyu Wang,
  • Hengyi Luo,
  • Guoxiao Liu,
  • Yang Yu,
  • Xiaoyun Wang

摘要

\(\mathbb {Z}^n\) Z n is one of the simplest types of lattices, but the computational problems on its rotations, such as \(\mathbb {Z}\) Z SVP and \(\mathbb {Z}\) Z LIP, have been of great interest in cryptography. Recent advances have been made in building cryptographic primitives based on these problems, as well as in developing new algorithms for solving them. However, the theoretical complexity of \(\mathbb {Z}\) Z SVP and \(\mathbb {Z}\) Z LIP is still not well understood. In this work, we study the problems on rotations of \(\mathbb {Z}^n\) Z n by exploiting the symmetry property. We introduce a randomization framework that can be roughly viewed as ‘applying random automorphisms’ to the output of an oracle, without accessing the automorphism group. Using this framework, we obtain new reduction results for rotations of \(\mathbb {Z}^n\) Z n . First, we present a reduction from \(\mathbb {Z}\) Z LIP to \(\mathbb {Z}\) Z SCVP. Here \(\mathbb {Z}\) Z SCVP is the problem of finding the shortest characteristic vectors, which is a special case of CVP where the target vector is a deep hole of the lattice. Moreover, we prove a reduction from \(\mathbb {Z}\) Z SVP to \(\gamma \) γ - \(\mathbb {Z}\) Z SVP for any constant \(\gamma = O(1)\) γ = O ( 1 ) in the same dimension, which implies that \(\mathbb {Z}\) Z SVP is as hard as its approximate version for any constant approximation factor. Second, we investigate the problem of finding a nontrivial automorphism for a given lattice, which is called LAP. Specifically, we use the randomization framework to show that \(\mathbb {Z}\) Z LAP is as hard as \(\mathbb {Z}\) Z LIP. Additionally, we demonstrate that the randomization framework is also applicable to other lattices exhibiting high-degree symmetry, and prove that the isomorphism and automorphism problems related to \(D_n\) D n are as hard as \(\mathbb {Z}\) Z LIP.