Generalized Compact Knapsacks, Cyclic Lattices, and Efficient One-Way Functions from Worst-Case Complexity Assumptions

  • Authors:
  • Daniele Micciancio

  • Affiliations:
  • -

  • Venue:
  • FOCS '02 Proceedings of the 43rd Symposium on Foundations of Computer Science
  • Year:
  • 2002

Quantified Score

Hi-index 0.00

Visualization

Abstract

We study a generalization of the compact knapsack problem for arbitrary rings: given m = O(log n) ring elements a_1 , \ldots ,a_m \varepsilon R and a target value b\varepsilon R, find coefficients x_1 , \ldots ,x_m \varepsilon X (where X is a subset of R of size 2^n) such thatsum {a_i } x_i= b. The computational complexity of this problem depends on the choice of the ring R and set of coefficients X. This problem is known to be solvable in quasi polynomial time when R is the ring of the integers and X is the set of small integers { 0, \ldots ,2^n- 1}. We show that if R is an appropriately chosen ring of modular polynomials and X is the subset of polynomials with small coefficients, then the compact knapsack problem is as hard to solve on the average as the worst case instance of approximating the covering radius (or the length of the shortest vector, or various other well known lattice problems) of any cyclic lattice within a polynomial factor. Our proof adapts, to the cyclic lattice setting, techniques initially developed by Ajtai for the case of general lattices.