The 43rd Annual IEEE Symposium on Foundations of Computer Science (FOCS'02)
Generalized Compact Knapsacks, Cyclic Lattices, and Efficient One-Way Functions from Worst-Case Complexity Assumptions
Vancouver, BC, Canada
November 16-November 19
ISBN: 0-7695-1822-2
We study a generalization of the compact knapsack problem for arbitrary rings: given m = O(log n) ring elements a_1 , \ldots ,a_m \varepsilon R and a target value b\varepsilon R, find coefficients x_1 , \ldots ,x_m \varepsilon X (where X is a subset of R of size 2^n) such that sum {a_i } x_i = b. The computational complexity of this problem depends on the choice of the ring R and set of coefficients X. This problem is known to be solvable in quasi polynomial time when R is the ring of the integers and X is the set of small integers { 0, \ldots ,2^n - 1}. We show that if R is an appropriately chosen ring of modular polynomials and X is the subset of polynomials with small coefficients, then the compact knapsack problem is as hard to solve on the average as the worst case instance of approximating the covering radius (or the length of the shortest vector, or various other well known lattice problems) of any cyclic lattice within a polynomial factor. Our proof adapts, to the cyclic lattice setting, techniques initially developed by Ajtai for the case of general lattices.
Index Terms:
Keywords: Knapsack problem, cyclic lattices, worst-case average-case connection, one-way functions
Citation:
Daniele Micciancio, "Generalized Compact Knapsacks, Cyclic Lattices, and Efficient One-Way Functions from Worst-Case Complexity Assumptions," focs, pp.356, The 43rd Annual IEEE Symposium on Foundations of Computer Science (FOCS'02), 2002