Abstract:The most important computational problem on lattices is the Shortest Vector Problem (SVP). In this paper, we present new algorithms that improve the state-of-the-art for provable classical/quantum algorithms for SVP. We present the following results. $\bullet$ A new algorithm for SVP that provides a smooth tradeoff between time complexity and memory requirement. For any positive integer $4\leq q\leq \sqrt{n}$, our algorithm takes $q^{13n+o(n)}$ time and requires $poly(n)\cdot q^{16n/q^2}$ memory. This tradeoff which ranges from enumeration ($q=\sqrt{n}$) to sieving ($q$ constant), is a consequence of a new time-memory tradeoff for Discrete Gaussian sampling above the smoothing parameter. $\bullet$ A quantum algorithm for SVP that runs in time $2^{0.950n+o(n)}$ and requires $2^{0.5n+o(n)}$ classical memory and poly(n) qubits. In Quantum Random Access Memory (QRAM) model this algorithm takes only $2^{0.835n+o(n)}$ time and requires a QRAM of size $2^{0.293n+o(n)}$, poly(n) qubits and $2^{0.5n}$ classical space. This improves over the previously fastest classical (which is also the fastest quantum) algorithm due to [ADRS15] that has a time and space complexity $2^{n+o(n)}$. $\bullet$ A classical algorithm for SVP that runs in time $2^{1.669n+o(n)}$ time and $2^{0.5n+o(n)}$ space. This improves over an algorithm of [CCL18] that has the same space complexity. The time complexity of our classical and quantum algorithms are obtained using a known upper bound on a quantity related to the lattice kissing number which is $2^{0.402n}$. We conjecture that for most lattices this quantity is a $2^{o(n)}$. Assuming that this is the case, our classical algorithm runs in time $2^{1.292n+o(n)}$, our quantum algorithm runs in time $2^{0.750n+o(n)}$ and our quantum algorithm in QRAM model runs in time $2^{0.667n+o(n)}$.

Improved Algorithm and Lower Bound for Variable Time Quantum Search

Quantum Partial Search Algorithm with Smaller Oracles for Multiple Target Items.

Time and Query Optimal Quantum Algorithms Based on Decision Trees

On the quantum time complexity of divide and conquer

New quantum algorithms and quantum lower bounds

Constant search time algorithm via topological quantum walks

Quantum linear system algorithm with optimal queries to initial state preparation

Constant-Time Quantum Search with a Many-Body Quantum System

Improved Quantum Query Complexity on Easier Inputs

Tighter Lower Bounds on Quantum Annealing Times

Tight Quantum Depth Lower Bound for Solving Systems of Linear Equations

Quantum Lower Bounds by Sample-to-Query Lifting

Improved Classical and Quantum Algorithms for the Shortest Vector Problem via Bounded Distance Decoding

Quantum Algorithms and Lower Bounds for Convex Optimization

Quantum Time-Space Tradeoffs for Matrix Problems

Efficient Implementation of a Quantum Search Algorithm for Arbitrary N

Quantum Non-Identical Mean Estimation: Efficient Algorithms and Fundamental Limits

Depth scaling of unstructured search via quantum approximate optimization

Randomized Algorithms and Lower Bounds for Quantum Simulation

Variational Quantum Search with Shallow Depth for Unstructured Database Search