Exploiting the Symmetry of Z<i><SUP>n</SUP></i>: Randomization and the Automorphism Problem
Kaijie Jiang,Anyu Wang,Hengyi Luo,Guoxiao Liu,Yang Yu,Xiaoyun Wang
DOI: https://doi.org/10.1007/978-981-99-8730-6_6
2023-01-01
Abstract:Z(n) is one of the simplest types of lattices, but the computational problems on its rotations, such as ZSVP and ZLIP, have been of great interest in cryptography. Recent advances have been made in building cryptographic primitives based on these problems, as well as in developing new algorithms for solving them. However, the theoretical complexity of ZSVP and ZLIP are still not well understood. In this work, we study the problems on rotations of Z(n) by exploiting the symmetry property. We introduce a randomization framework that can be roughly viewed as 'applying random automorphisms' to the output of an oracle, without accessing the automorphism group. Using this framework, we obtain new reduction results for rotations of Z(n). First, we present a reduction from ZLIP to ZSCVP. Here ZSCVP is the problem of finding the shortest characteristic vectors, which is a special case of CVP where the target vector is a deep hole of the lattice. Moreover, we prove a reduction from ZSVP to gamma-ZSVP for any constant gamma = O(1) in the same dimension, which implies that ZSVP is as hard as its approximate version for any constant approximation factor. Second, we investigate the problem of finding a nontrivial automorphism for a given lattice, which is called LAP. Specifically, we use the randomization framework to show that ZLAP is as hard as ZLIP. We note that our result can be viewed as a Z(n)-analogue of Lenstra and Silverberg's result in [JoC2017], but with a different assumption: they assume the G-lattice structure, while we assume the access to an oracle that outputs a nontrivial automorphism.