Speeding-up lattice sieving without increasing the memory, using sub-quadratic nearest neighbor search.
Anja Becker, Nicolas Gama, Antoine Joux · IACR Cryptology ePrint Archive · 2015
We give a simple heuristic sieving algorithm for the m-dimensional exact shortest vector problem (SVP) which runs in time 2. Unlike previous time-memory trade-offs, we do not increase the memory, which stays at its bare minimum 2. To achieve this complexity, we borrow a recent tool from coding theory, known as nearest neighbor search for binary code words. We simplify its analysis, and show that it can be adapted to solve this variant of the fixed-radius nearest neighbor search problem: Given a list of exponentially many unit vectors of R, and an angle γπ, find all pairs of vectors whose angle ≤ γπ. The complexity is sub-quadratic which leads to the improvement for lattice sieves.