New Conjectures in the Geometry of Numbers

Size: px
Start display at page:

Download "New Conjectures in the Geometry of Numbers"

Transcription

1 New Conjectures in the Geometry of Numbers Daniel Dadush Centrum Wiskunde & Informatica (CWI) Oded Regev New York University

2 Talk Outline 1. A Reverse Minkowski Inequality & its conjectured Strengthening. 2. Strong Reverse Minkowski implies the Kannan & Lovász conjecture for l From Decomposing Integer Programs to the general Kannan & Lovász conjecture.

3 Lattices The standard integer lattice Z n. e 2 e 1 Z n

4 Lattices A lattice L R n is BZ n for a basis B = b 1,, b n. L(B) denotes the lattice generated by B. Note: a lattice has many equivalent bases. b 1 b 1 b 2 b 2 b 2 L

5 Lattices A lattice L R n is BZ n for a basis B = b 1,, b n. L(B) denotes the lattice generated by B. The determinant of L is det B. b 1 b 2 L

6 Lattices A lattice L R n is BZ n for a basis B = b 1,, b n. L(B) denotes the lattice generated by B. The determinant of L is det B. Equal to volume of any tiling set. b 1 b 2 L

7 Lattices A lattice L R n is BZ n for a basis B = b 1,, b n. The dual lattice is L = {y span L : y T x Z x L} L is generated by B T. The identity det L = Τ 1 det(l) holds. L

8 Lattices A lattice L R n is BZ n for a basis B = b 1,, b n. The dual lattice is L = {y span L : y T x Z x L} L is generated by B T. y L L y T x = 0 y T x = 1 y T x = 2 y T x = 3 y T x = 4

9 Reversing Minkowski s Convex Body Theorem

10 Minkowski s Convex Body Theorem Theorem [Minkowski]: For an n-dimensional symmetric convex body K and lattice L, we have that K L 2 n vol n K Τdet L K 0 L

11 Minkowski s Convex Body Theorem Theorem [Minkowski]: For an n-dimensional symmetric convex body K and lattice L, we have that K L 2 n vol n K Τdet L Question: Is the above lower bound also close to being an upper bound?

12 Minkowski s Convex Body Theorem Theorem [Minkowski]: For an n-dimensional symmetric convex body K and lattice L, we have that K L 2 n vol n K Τdet L 0 K L Clearly NO!

13 Minkowski s Convex Body Theorem Theorem [Minkowski]: For an n-dimensional symmetric convex body K and lattice L, we have that K L 2 n vol n K Τdet L Points all lie in a lattice subspace. 0 K Can we strengthen the lower bound? L

14 Reverse Minkowski Inequality For a symmetric convex body K and lattice L, let MB K, L = max 2 d vol d(k W) d 0 det(l W) max W lat. sub. dim W =d W 0 K L W is a lattice subspace of L if dim W L = dim(w).

15 Reverse Minkowski Inequality For a symmetric convex body K and lattice L, let MB K, L = max 2 d vol d(k W) d 0 det(l W) max W lat. sub. dim W =d W 0 K L Is this bound any better?

16 Weak Reverse Minkowski For a symmetric convex body K and lattice L, let MB K, L = max 2 d vol d(k W) d 0 det(l W) max W lat. sub. dim W =d Let B 2 n denote the unit Euclidean ball. Theorem [D.,Regev `16]: For an n-dimensional lattice L B 2 n L MB(6 nb 2 n, L). Furthermore, for any symmetric convex body K K L MB(6nK, L).

17 Strong Reverse Minkowski For a symmetric convex body K and lattice L, let MB K, L = max 2 d vol d(k W) d 0 det(l W) max W lat. sub. dim W =d Let B 2 n denote the unit Euclidean ball. Conjecture [D.,Regev `16]: For an n-dimensional lattice L B 2 n L MB(O( log n)b 2 n, L). Furthermore, for any symmetric convex body K K L MB(O(log n)k, L). Tight example: K = B 1 n and L = Z n.

18 Successive Minima Symmetric convex body K and lattice L in R n. λ i K, L = inf s 0: dim L sk i, i ε[n] y 2 -y 1 λ 1 K 0 y 1 λ2k -y 2

19 Minkowski s Second Theorem Symmetric convex body K and lattice L in R n. Π n det L i=1 λ i K, L 2n vol n K n! Π i=1 n λ i (K, L) y 2 -y 1 λ 1 K 0 y 1 λ2k -y 2

20 Lattice points bounds via Minima Theorem [Henk `02]: K L 2 n 1 ς n i= λ i K,L K 0 L

21 Proof of Weak Minkowski Must show K L max d 0 max W lat. sub. dim W =d 2 d vol d(6nk W) det(l W) If max i [n] λ i K, L > 1, then K L is lower dimensional and we can induct. If max i [n] λ i K, L 1, then we have that K L 2 n 1 ςn i= λ i K,L (by Henk) 2 n 1 ςn 3 i=1 λ i K,L 6n ςn 1 i=1 λ i K,L n! 3 n vol n (K) Τdet L (by Minkowski) vol n 3nK Τdet L MB(6nK, L)

22 The Kannan & Lovász conjecture for l 2

23 l 2 covering radius Let μ B n 2, L = max min t y t Rn 2, i.e. the y L farthest distance from the lattice. μ Main question: How to get good lower bounds on the covering radius? L

24 Lower bounds for covering radius Lemma: μ B 2 n, L 1 2λ 1 (B 2 n,l ) t y L L y T x = 1 y T x = 2 y T x = 3 y T x = 4

25 Lower bounds for covering radius Lemma: μ B 2 n, L det L 1 n vol n B 2 n 1 n = Ω( n) det L 1/n V μ L Since V μb 2 n, vol n V = det(l) vol n μb 2 n = μ n vol n B 2 n

26 Lower bounds for covering radius Lemma: Let π W denote the orthogonal projection onto a d-dimensional subspace W (*). Then μ B 2 n, L det π W L = vol d B 2 d det L W 1 d 1 d 1 1 dvol d B 2 d 1 d = Ω 1 d det L W Pf: For the first inequality, since orthogonal projections shrink distances we get μ B 2 n, L μ π W B 2 n, π W L. The second equality follows from the identity π W L = L W. 1. d

27 Kannan & Lovász for l 2 Theorem [Kannan-Lovasz `88]: Ω(1) μ B 2 n, L min lat.subspace W 1 dim W =d n det L W d 1 d O( n)

28 Kannan & Lovász for l 2 Conjecture [Kannan-Lovász `88]: Ω 1 μ B 2 n, L min lat.subspace W 1 dim W =d n det L W 1/d d = O( log n) Remark: implies that there are very good NP-certificates for showing that the covering radius is large.

29 Reverse Minkowski vs Kannan & Lovász MB B 2 n, L = max d 0 Theorem [D. Regev `16]: If for any n-dimensional lattice L B 2 n L MB(f n B 2 n, L) for a non-decreasing function f(n), then the Kannan & Lovász conjecture for l 2 holds with bound O log n f n. max 2 d vol d(b n 2 W) W lat. sub. det(l W) dim W =d

30 Main Approach 1. Use convex programming relaxation for μ B 2 n, L 2 : μ B 2 n, L 2 O 1 min trace A s.t. σ y L {0} e yt Ay 1, A psd. 2. Use Reverse Minkowski to formulate an approximate dual to the above program. 3. Round / massage optimal dual solution to get the subspace W.

31 A Sufficient Conjecture μ B 2 n, L 2 O 1 min trace A s.t. σ y L {0} e yt Ay 1, A psd. To formulate the required dual for the above program, we can rely on the following weaker conjecture: Conjecture [D. Regev `16]: log rb n 2 L Ω 1 max r>0 r O log n min lat.sub. W 1 dim W =d det L W 1 d

32 The Relaxed Program mintrace A s.t. σ y L {0} e yt Ay 1, A psd. We relax the above using the following weaker constraints det W A 1 det L W 2 lat. subspace W where det W (A) det(o W T AO W ), where O W is any orthonormal basis of W. This relaxation makes the value of the program drop by at most an f n 2 factor (the Reverse Minkowski bound).

33 The Dual Program min trace A s.t. det W A 1 det L W 2 lat. subspace W, A psd. The strong dual for the above program is max σ k k 0 i=1 s.t. σ i=1 det Wi X i d i det L W i k X i I n Τ 1 d i Τ 2 d i Here we range over all finite k, where for i [k], W i is a lattice subspace of L, dim W i = d i and X i is a PSD matrix with image W i.

34 The Dual Program max σ k k 0 i=1 s.t. σ i=1 det Wi X i d i det L W i k X i I n Τ 1 d i Τ 2 d i Theorem [D., Regev `16]: above value is at most O log 2 n max lat.subspace W 1 dim W =d n d det L W i Τ 2 d Corresponds to setting k = 1 and X 1 = projection on W 1. Main idea: disentangle the subspaces via uncrossing.

35 The Dual Program max σ k k 0 i=1 s.t. σ i=1 det Wi X i d i det L W i k X i I n Τ 1 d i Τ 2 d i Theorem [D., Regev `16]: above value is at most O log 2 n max lat.subspace W 1 dim W =d n d det L W i Τ 2 d Implies l 2 Kannan & Lovász bound of O log n f n. (note above programs approximate μ B 2 n, L 2 )

36 Integer Programming and the general Kannan & Lovász conjecture

37 Anatomy of an IP Algorithm K Z n Problem: Find point in K Z n or decide that K is integer free.

38 Anatomy of an IP Algorithm y K Z n Problem: Find point in K Z n or decide that K is integer free.

39 Anatomy of an IP Algorithm y c K Z n Main dichotomy: 1. Either K contains a deep integer point: find y by rounding from center c of K.

40 Anatomy of an IP Algorithm x 2 =2 subproblems x 2 =1 K Z n Main dichotomy: 1. Either K contains a deep integer point: find y by rounding from center c of K. 2. K is flat : decompose feasible region into lower dimensional subproblems and recurse.

41 IP Algorithms Time Space Authors 2 O(n3 ) poly(n) Lenstra 83 2 O(n) n 2.5n poly(n) Kannan 87 2 O(n) n 2n 2 n Hildebrand Köppe 10 2 O(n) n n 2 n D. Peikert Vempala 11, D. 12 n O(n) barrier: don t know how to create less than n O(1) subproblems per dimension

42 IP Algorithms Time Space Authors 2 O(n3 ) poly(n) Lenstra 83 2 O(n) n 2.5n poly(n) Kannan 87 2 O(n) n 2n 2 n Hildebrand Köppe 10 2 O(n) n n 2 n D. Peikert Vempala 11, D. 12 Conjecture Kannan & Lovász `88: O(log n) subproblems per dimension should be possible!

43 General Covering Radius & Deep Points The covering radius of K with respect to Z n is μ K, Z n = min {s 0: t R n, (sk + t) Z n } or, smallest scaling s such that every shift sk + t contains an integer point. K Z 2

44 General Covering Radius & Deep Points The covering radius of K with respect to Z n is μ K, Z n = min {s 0: t R n, (sk + t) Z n } or, smallest scaling s such that every shift sk + t contains an integer point. μ K, Z 2 > 1 K+ t Z 2

45 General Covering Radius & Deep Points The covering radius of K with respect to Z n is μ K, Z n = min {s 0: t R n, (sk + t) Z n } μ K, Z 2 = 2 2K Z 2

46 General Covering Radius & Deep Points Integral shifts of 2K cover R 2, i.e. 2K + Z 2 = R 2. 2K Z 2

47 General Covering Radius & Deep Points If covering radius μ K, Z n 1/2, then any shift of K contains a deep integer point. K + t 1 c Z 2

48 General Covering Radius & Deep Points If covering radius μ K, Z n 1/2, then any shift of K contains a deep integer point. K + t 1 c Z 2

49 General Covering Radius & Deep Points If covering radius μ K, Z n 1/2, then any shift of K contains a deep integer point. c K + t 2 Z 2

50 General Covering Radius & Deep Points If covering radius μ K, Z n 1/2, then any shift of K contains a deep integer point. K + t 3 c Z 2

51 General Covering Radius & Deep Points Thus, if μ K, Z n 1/2 finding an integer point in K is easy. K c Z 2

52 General Covering Radius & Deep Points Thus, if μ K, Z n 1/2 finding an integer point in K is easy. If not, we should decompose K into lower dimensional pieces K Z 2

53 Lower Bounds on the Covering Radius Lemma: 1 min y Z n 0 width K y μ K, Z n.8 y T x =.9 y T x =.1 K y To cover space, K must have width at least 1.

54 Khinchine s Flatness Theorem Theorem: For K R n convex, either 1. covering radius μ K, Z n 1/2, or 2. y Z n such that K has width O(n Τ 4 3 ) w.r.t. y: K K K Z 2

55 Khinchine s Flatness Theorem Theorem: For K R n convex, either 1. covering radius μ K, Z n 1/2, or 2. y Z n {0} such that K has width O(n Τ 4 3 ) w.r.t. y: K K Z 2

56 Khinchine s Flatness Theorem Theorem: For K R n convex, either 1. covering radius μ K, Z n 1/2, or 2. y Z n 0 such that K has width O(n Τ 4 3 ) w.r.t. y: y T x = y T x =.8 K Z 2 y

57 Khinchine s Flatness Theorem Theorem: For K R n convex, either 1. covering radius μ K, Z n 1/2, or 2. y Z n 0 such that K has width O(n Τ 4 3 ) w.r.t. y. y T x = 3 y T x = 2 y T x = 1 y T x = 0 K Z 2 y

58 Khinchine s Flatness Theorem Theorem: 1 min y Z n K y 0 μ K, Z n O(n ) To cover space, suffices to scale K to have width somewhere between 1 and O(n 4Τ3 ).

59 Khinchine s Flatness Theorem Bounds improvements for general bodies: Khinchine `48: (n + 1)! Babai `86: 2 O(n) Lenstra-Lagarias-Schnorr `87: n 5/2 Kannan-Lovasz `88: n 2 Banaszczyk et al `99: n 3/2 Rudelson `00: n 4/3 log c n [Khinchine `48, Babai `86, Hastad `86, Lenstra-Lagarias- Schnorr `87, Kannan-Lovasz `88, Banaszczyk `93-96, Banaszczyk-Litvak-Pajor-Szarek `99, Rudelson `00]

60 Best known bounds: Ellipsoids: Θ(n) [Banaszczyk `93] Centrally Symmetric: O(n log n) [Banaszczyk `96] General: Khinchine s Flatness Theorem O(n Τ 4 3 ) [Banaszczyk `96, Rudelson `00] Bound conjectured to be O(n) (best possible). K Z n K = {x: σ i x i n, x 0}

61 How can we improve decompositions? Recursion only uses integrality of one variable at a time. Why? y T x = 3 y T x = 2 y T x = 1 y T x = 0 K Z y.8 Reason: It s very efficient to enumerate integer points in an interval.

62 How can we improve decompositions? When else is it efficient to enumerate integer points? Theorem [D. Peikert Vempala `11, D. `12]: For K R d convex, can enumerate K Z d in time 2 O(d) max K + t. t Rd K

63 How can we improve decompositions? When else is it efficient to enumerate integer points? Theorem [D. Peikert Vempala `11, D. `12]: For K R d convex, can enumerate K Z d in time 2 O(d) max K + t. t Rd K+t

64 How can we improve decompositions? Generalized Decomposition Strategy for K: Choose d 1, P Z d n rank d such that max P K + t 1/d is small t R d P(K)

65 How can we improve decompositions? Generalized Decomposition Strategy for K: Choose d 1, P Z d n rank d such that max P K + t 1/d is small t R d Enumerate P K Z d and recurse on subproblems. P(K) subproblems

66 How can we improve decompositions? How should we choose d 1, P Z d n? Hardest bodies to decompose satisfy μ K, Z n = 1/2, i.e. as fat as possible without containing deep points. K

67 How can we improve decompositions? How should we choose d 1, P Z d n? If μ K, Z n = 1/2 then also μ P K, Z d 1/2, so integer projections of K are only fatter. K P(K)

68 How can we improve decompositions? How should we choose d 1, P Z d n? If μ P K, Z d 1/2, then max P K + t 1/d = O 1 vol d P K 1/d. t R d Good choice of d 1, P Z d n should approximately minimize min d 1 min P Z d n rank d vol d P K 1/d.

69 Volumetric bounds on the Covering Radius Lemma: If K + Z n = R n, then vol n K 1. K Z 2

70 Volumetric bounds on the Covering Radius Lemma: If K + Z n = R n, then vol n K 1. Pf: Let C = 0,1 n be the cube. vol n K = σ y Z n vol n K C + y = σ y Z n vol n ( K y C) vol n K + Z n C = vol C = 1. C K Z 2

71 Volumetric bounds on the Covering Radius Lemma: If K + Z n = R n, then vol n K 1. Lemma: Let P Z k n have rank k. If K + Z n = R n, then vol k PK 1. Pf: R k = P K + Z n = P K + P Z n P K + Z k.

72 Volumetric bounds on the Covering Radius Lemma: Let P Z d n have rank d. If K + Z n = R n, then vol d PK 1. Lemma: For a convex body K R n μ K, Z n max d [n] max P Z d n rank d 1 vol d PK 1/d Pf: Must scale K to have volume at least 1 in each integer projection.

73 Kannan Lovász Conjecture Theorem [Kannan-Lovász `88]: For K R n convex, either 1. Covering radius μ K, Z n 1/2, or 2. d 1, P Z d n rank d such that vol d PK 2n d. In particular, 1 μ K, Z n min d n min P Z d n rank d vol d PK 1 d 2n Proof is constructive. Enables a 2 O(n) n n time IP algorithm [D. `12].

74 Kannan Lovász Conjecture Theorem [Kannan-Lovász `88]: For K R n convex, either 1. Covering radius μ K, Z n 1/2, or 2. d 1, P Z d n rank d such that vol d PK 2n d. ex: d = 2, P = K Z 2

75 Kannan Lovász Conjecture Theorem [Kannan-Lovász `88]: For K R n convex, either 1. Covering radius μ K, Z n 1/2, or 2. d 1, P Z d n rank d such that vol d PK 2n d. ex: d = 2, P = subproblems K Z 2

76 Kannan Lovász Conjecture Theorem [Kannan-Lovász `88]: For K R n convex, either 1. Covering radius μ K, Z n 1/2, or 2. d 1, P Z d n rank d such that vol d PK 2n d. ex: d = 1, P = 0 1 subproblems Same as standard flatness. K Z 2

77 Kannan Lovász Conjecture Conjecture [Kannan-Lovász `88]: For K R n convex, either 1. Covering radius μ K, Z n 1/2, or 2. d 1, P Z d n rank d such that vol d PK O log n d. In particular, 1 μ K, Z n min d n min P Z d n rank d vol d PK 1 d O(log n) An efficient enough construction would imply a 2O n log n O(n) time IP algorithm!

78 Conclusions 1. New natural conjectured converse for Minkowski s convex body theorem. 2. Showed that it implies an important special case of a conjecture of Kannan & Lovász. Open Problems 1. Prove or disprove any of the conjectures! 2. Find new applications.

79 THANK YOU!

On Approximating the Covering Radius and Finding Dense Lattice Subspaces

On Approximating the Covering Radius and Finding Dense Lattice Subspaces On Approximating the Covering Radius and Finding Dense Lattice Subspaces Daniel Dadush Centrum Wiskunde & Informatica (CWI) ICERM April 2018 Outline 1. Integer Programming and the Kannan-Lovász (KL) Conjecture.

More information

On the Rational Polytopes with Chvátal Rank 1

On the Rational Polytopes with Chvátal Rank 1 On the Rational Polytopes with Chvátal Rank 1 Gérard Cornuéjols Dabeen Lee Yanjun Li December 2016, revised May 2018 Abstract We study the following problem: given a rational polytope with Chvátal rank

More information

Fundamental Domains, Lattice Density, and Minkowski Theorems

Fundamental Domains, Lattice Density, and Minkowski Theorems New York University, Fall 2013 Lattices, Convexity & Algorithms Lecture 3 Fundamental Domains, Lattice Density, and Minkowski Theorems Lecturers: D. Dadush, O. Regev Scribe: D. Dadush 1 Fundamental Parallelepiped

More information

COS 598D - Lattices. scribe: Srdjan Krstic

COS 598D - Lattices. scribe: Srdjan Krstic COS 598D - Lattices scribe: Srdjan Krstic Introduction In the first part we will give a brief introduction to lattices and their relevance in some topics in computer science. Then we show some specific

More information

satisfying ( i ; j ) = ij Here ij = if i = j and 0 otherwise The idea to use lattices is the following Suppose we are given a lattice L and a point ~x

satisfying ( i ; j ) = ij Here ij = if i = j and 0 otherwise The idea to use lattices is the following Suppose we are given a lattice L and a point ~x Dual Vectors and Lower Bounds for the Nearest Lattice Point Problem Johan Hastad* MIT Abstract: We prove that given a point ~z outside a given lattice L then there is a dual vector which gives a fairly

More information

Hard Instances of Lattice Problems

Hard Instances of Lattice Problems Hard Instances of Lattice Problems Average Case - Worst Case Connections Christos Litsas 28 June 2012 Outline Abstract Lattices The Random Class Worst-Case - Average-Case Connection Abstract Christos Litsas

More information

Dimension-Preserving Reductions Between Lattice Problems

Dimension-Preserving Reductions Between Lattice Problems Dimension-Preserving Reductions Between Lattice Problems Noah Stephens-Davidowitz Courant Institute of Mathematical Sciences, New York University. noahsd@cs.nyu.edu Last updated September 6, 2016. Abstract

More information

CSC 2414 Lattices in Computer Science September 27, Lecture 4. An Efficient Algorithm for Integer Programming in constant dimensions

CSC 2414 Lattices in Computer Science September 27, Lecture 4. An Efficient Algorithm for Integer Programming in constant dimensions CSC 2414 Lattices in Computer Science September 27, 2011 Lecture 4 Lecturer: Vinod Vaikuntanathan Scribe: Wesley George Topics covered this lecture: SV P CV P Approximating CVP: Babai s Nearest Plane Algorithm

More information

Lattice-Based Cryptography: Mathematical and Computational Background. Chris Peikert Georgia Institute of Technology.

Lattice-Based Cryptography: Mathematical and Computational Background. Chris Peikert Georgia Institute of Technology. Lattice-Based Cryptography: Mathematical and Computational Background Chris Peikert Georgia Institute of Technology crypt@b-it 2013 1 / 18 Lattice-Based Cryptography y = g x mod p m e mod N e(g a, g b

More information

Faster Deterministic Volume Estimation in the Oracle Model via Thin Lattice Coverings

Faster Deterministic Volume Estimation in the Oracle Model via Thin Lattice Coverings Faster Deterministic Volume Estimation in the Oracle Model via Thin Lattice Coverings Daniel Dadush Centrum Wiskunde & Informatica, The Netherlands dadush@cwi.nl Abstract We give a 2 O(n) (1+1/ε) n time

More information

LATTICE POINT COVERINGS

LATTICE POINT COVERINGS LATTICE POINT COVERINGS MARTIN HENK AND GEORGE A. TSINTSIFAS Abstract. We give a simple proof of a necessary and sufficient condition under which any congruent copy of a given ellipsoid contains an integral

More information

Centrum Wiskunde & Informatica, Amsterdam, The Netherlands

Centrum Wiskunde & Informatica, Amsterdam, The Netherlands Logarithmic Lattices Léo Ducas Centrum Wiskunde & Informatica, Amsterdam, The Netherlands Workshop: Computational Challenges in the Theory of Lattices ICERM, Brown University, Providence, RI, USA, April

More information

The Euclidean Distortion of Flat Tori

The Euclidean Distortion of Flat Tori The Euclidean Distortion of Flat Tori Ishay Haviv Oded Regev June 0, 010 Abstract We show that for every n-dimensional lattice L the torus R n /L can be embedded with distortion O(n log n) into a Hilbert

More information

CSE 206A: Lattice Algorithms and Applications Spring Basis Reduction. Instructor: Daniele Micciancio

CSE 206A: Lattice Algorithms and Applications Spring Basis Reduction. Instructor: Daniele Micciancio CSE 206A: Lattice Algorithms and Applications Spring 2014 Basis Reduction Instructor: Daniele Micciancio UCSD CSE No efficient algorithm is known to find the shortest vector in a lattice (in arbitrary

More information

SUCCESSIVE-MINIMA-TYPE INEQUALITIES. U. Betke, M. Henk and J.M. Wills

SUCCESSIVE-MINIMA-TYPE INEQUALITIES. U. Betke, M. Henk and J.M. Wills SUCCESSIVE-MINIMA-TYPE INEQUALITIES U. Betke, M. Henk and J.M. Wills Abstract. We show analogues of Minkowski s theorem on successive minima, where the volume is replaced by the lattice point enumerator.

More information

Integer knapsacks and the Frobenius problem. Lenny Fukshansky Claremont McKenna College

Integer knapsacks and the Frobenius problem. Lenny Fukshansky Claremont McKenna College Integer knapsacks and the Frobenius problem Lenny Fukshansky Claremont McKenna College Claremont Statistics, Operations Research, and Math Finance Seminar April 21, 2011 1 Integer knapsack problem Given

More information

Lattice Basis Reduction Part 1: Concepts

Lattice Basis Reduction Part 1: Concepts Lattice Basis Reduction Part 1: Concepts Sanzheng Qiao Department of Computing and Software McMaster University, Canada qiao@mcmaster.ca www.cas.mcmaster.ca/ qiao October 25, 2011, revised February 2012

More information

1 Shortest Vector Problem

1 Shortest Vector Problem Lattices in Cryptography University of Michigan, Fall 25 Lecture 2 SVP, Gram-Schmidt, LLL Instructor: Chris Peikert Scribe: Hank Carter Shortest Vector Problem Last time we defined the minimum distance

More information

CSE 206A: Lattice Algorithms and Applications Winter The dual lattice. Instructor: Daniele Micciancio

CSE 206A: Lattice Algorithms and Applications Winter The dual lattice. Instructor: Daniele Micciancio CSE 206A: Lattice Algorithms and Applications Winter 2016 The dual lattice Instructor: Daniele Micciancio UCSD CSE 1 Dual Lattice and Dual Basis Definition 1 The dual of a lattice Λ is the set ˆΛ of all

More information

MSRI Summer Graduate Workshop: Algebraic, Geometric, and Combinatorial Methods for Optimization. Part IV

MSRI Summer Graduate Workshop: Algebraic, Geometric, and Combinatorial Methods for Optimization. Part IV MSRI Summer Graduate Workshop: Algebraic, Geometric, and Combinatorial Methods for Optimization Part IV Geometry of Numbers and Rational Generating Function Techniques for Integer Programming Matthias

More information

47-831: Advanced Integer Programming Lecturer: Amitabh Basu Lecture 2 Date: 03/18/2010

47-831: Advanced Integer Programming Lecturer: Amitabh Basu Lecture 2 Date: 03/18/2010 47-831: Advanced Integer Programming Lecturer: Amitabh Basu Lecture Date: 03/18/010 We saw in the previous lecture that a lattice Λ can have many bases. In fact, if Λ is a lattice of a subspace L with

More information

Orthogonal complement

Orthogonal complement Orthogonal complement Aim lecture: Inner products give a special way of constructing vector space complements. As usual, in this lecture F = R or C. We also let V be an F-space equipped with an inner product

More information

Background: Lattices and the Learning-with-Errors problem

Background: Lattices and the Learning-with-Errors problem Background: Lattices and the Learning-with-Errors problem China Summer School on Lattices and Cryptography, June 2014 Starting Point: Linear Equations Easy to solve a linear system of equations A s = b

More information

The Shortest Vector Problem (Lattice Reduction Algorithms)

The Shortest Vector Problem (Lattice Reduction Algorithms) The Shortest Vector Problem (Lattice Reduction Algorithms) Approximation Algorithms by V. Vazirani, Chapter 27 - Problem statement, general discussion - Lattices: brief introduction - The Gauss algorithm

More information

and the polynomial-time Turing p reduction from approximate CVP to SVP given in [10], the present authors obtained a n=2-approximation algorithm that

and the polynomial-time Turing p reduction from approximate CVP to SVP given in [10], the present authors obtained a n=2-approximation algorithm that Sampling short lattice vectors and the closest lattice vector problem Miklos Ajtai Ravi Kumar D. Sivakumar IBM Almaden Research Center 650 Harry Road, San Jose, CA 95120. fajtai, ravi, sivag@almaden.ibm.com

More information

Some Sieving Algorithms for Lattice Problems

Some Sieving Algorithms for Lattice Problems Foundations of Software Technology and Theoretical Computer Science (Bangalore) 2008. Editors: R. Hariharan, M. Mukund, V. Vinay; pp - Some Sieving Algorithms for Lattice Problems V. Arvind and Pushkar

More information

CSE 206A: Lattice Algorithms and Applications Spring Minkowski s theorem. Instructor: Daniele Micciancio

CSE 206A: Lattice Algorithms and Applications Spring Minkowski s theorem. Instructor: Daniele Micciancio CSE 206A: Lattice Algorithms and Applications Spring 2014 Minkowski s theorem Instructor: Daniele Micciancio UCSD CSE There are many important quantities associated to a lattice. Some of them, like the

More information

The Dual Lattice, Integer Linear Systems and Hermite Normal Form

The Dual Lattice, Integer Linear Systems and Hermite Normal Form New York University, Fall 2013 Lattices, Convexity & Algorithms Lecture 2 The Dual Lattice, Integer Linear Systems and Hermite Normal Form Lecturers: D. Dadush, O. Regev Scribe: D. Dadush 1 Dual Lattice

More information

arxiv: v1 [cs.ds] 2 Nov 2013

arxiv: v1 [cs.ds] 2 Nov 2013 On the Lattice Isomorphism Problem Ishay Haviv Oded Regev arxiv:1311.0366v1 [cs.ds] 2 Nov 2013 Abstract We study the Lattice Isomorphism Problem (LIP), in which given two lattices L 1 and L 2 the goal

More information

A Randomized Sieving Algorithm for Approximate Integer Programming

A Randomized Sieving Algorithm for Approximate Integer Programming Noname manuscript No. (will be inserted by the editor) A Randomized Sieving Algorithm for Approximate Integer Programming Daniel Dadush the date of receipt and acceptance should be inserted later Abstract

More information

Another Low-Technology Estimate in Convex Geometry

Another Low-Technology Estimate in Convex Geometry Convex Geometric Analysis MSRI Publications Volume 34, 1998 Another Low-Technology Estimate in Convex Geometry GREG KUPERBERG Abstract. We give a short argument that for some C > 0, every n- dimensional

More information

Houston Journal of Mathematics. c 2002 University of Houston Volume 28, No. 3, 2002

Houston Journal of Mathematics. c 2002 University of Houston Volume 28, No. 3, 2002 Houston Journal of Mathematics c 00 University of Houston Volume 8, No. 3, 00 QUOTIENTS OF FINITE-DIMENSIONAL QUASI-NORMED SPACES N.J. KALTON AND A.E. LITVAK Communicated by Gilles Pisier Abstract. We

More information

Finding the closest lattice vector when it's unusually close

Finding the closest lattice vector when it's unusually close 937 Finding the closest lattice vector when it's unusually close Philip Klein* Brown University Abstract We show how randomized rounding can be applied to finding the closest lattice vector. Given the

More information

Convex Geometry. Otto-von-Guericke Universität Magdeburg. Applications of the Brascamp-Lieb and Barthe inequalities. Exercise 12.

Convex Geometry. Otto-von-Guericke Universität Magdeburg. Applications of the Brascamp-Lieb and Barthe inequalities. Exercise 12. Applications of the Brascamp-Lieb and Barthe inequalities Exercise 12.1 Show that if m Ker M i {0} then both BL-I) and B-I) hold trivially. Exercise 12.2 Let λ 0, 1) and let f, g, h : R 0 R 0 be measurable

More information

Practical Analysis of Key Recovery Attack against Search-LWE Problem

Practical Analysis of Key Recovery Attack against Search-LWE Problem Practical Analysis of Key Recovery Attack against Search-LWE Problem The 11 th International Workshop on Security, Sep. 13 th 2016 Momonari Kudo, Junpei Yamaguchi, Yang Guo and Masaya Yasuda 1 Graduate

More information

Note on shortest and nearest lattice vectors

Note on shortest and nearest lattice vectors Note on shortest and nearest lattice vectors Martin Henk Fachbereich Mathematik, Sekr. 6-1 Technische Universität Berlin Straße des 17. Juni 136 D-10623 Berlin Germany henk@math.tu-berlin.de We show that

More information

Lattice Sparsification and the Approximate Closest Vector Problem

Lattice Sparsification and the Approximate Closest Vector Problem Lattice Sparsification and the Approximate Closest Vector Problem Daniel Dadush Gábor Kun December 30, 2012 Abstract We give a deterministic algorithm for solving the (1 + ε) approximate Closest Vector

More information

Topics in Basis Reduction and Integer Programming

Topics in Basis Reduction and Integer Programming Topics in Basis Reduction and Integer Programming Mustafa Kemal Tural A dissertation submitted to the faculty of the University of North Carolina at Chapel Hill in partial fulfillment of the requirements

More information

A strongly polynomial algorithm for linear systems having a binary solution

A strongly polynomial algorithm for linear systems having a binary solution A strongly polynomial algorithm for linear systems having a binary solution Sergei Chubanov Institute of Information Systems at the University of Siegen, Germany e-mail: sergei.chubanov@uni-siegen.de 7th

More information

Dwork 97/07, Regev Lyubashvsky-Micciancio. Micciancio 09. PKE from worst-case. usvp. Relations between worst-case usvp,, BDD, GapSVP

Dwork 97/07, Regev Lyubashvsky-Micciancio. Micciancio 09. PKE from worst-case. usvp. Relations between worst-case usvp,, BDD, GapSVP The unique-svp World 1. Ajtai-Dwork Dwork 97/07, Regev 03 PKE from worst-case usvp 2. Lyubashvsky-Micciancio Micciancio 09 Shai Halevi, IBM, July 2009 Relations between worst-case usvp,, BDD, GapSVP Many

More information

Lecture 7 Limits on inapproximability

Lecture 7 Limits on inapproximability Tel Aviv University, Fall 004 Lattices in Computer Science Lecture 7 Limits on inapproximability Lecturer: Oded Regev Scribe: Michael Khanevsky Let us recall the promise problem GapCVP γ. DEFINITION 1

More information

Lecture 5: CVP and Babai s Algorithm

Lecture 5: CVP and Babai s Algorithm NYU, Fall 2016 Lattices Mini Course Lecture 5: CVP and Babai s Algorithm Lecturer: Noah Stephens-Davidowitz 51 The Closest Vector Problem 511 Inhomogeneous linear equations Recall that, in our first lecture,

More information

Topics in Theoretical Computer Science: An Algorithmist's Toolkit Fall 2007

Topics in Theoretical Computer Science: An Algorithmist's Toolkit Fall 2007 MIT OpenCourseWare http://ocw.mit.edu 18.409 Topics in Theoretical Computer Science: An Algorithmist's Toolkit Fall 2007 For information about citing these materials or our Terms of Use, visit: http://ocw.mit.edu/terms.

More information

Combinatorial Optimization Spring Term 2015 Rico Zenklusen. 2 a = ( 3 2 ) 1 E(a, A) = E(( 3 2 ), ( 4 0

Combinatorial Optimization Spring Term 2015 Rico Zenklusen. 2 a = ( 3 2 ) 1 E(a, A) = E(( 3 2 ), ( 4 0 3 2 a = ( 3 2 ) 1 E(a, A) = E(( 3 2 ), ( 4 0 0 1 )) 0 0 1 2 3 4 5 Figure 9: An example of an axis parallel ellipsoid E(a, A) in two dimensions. Notice that the eigenvectors of A correspond to the axes

More information

Probabilistic construction of t-designs over finite fields

Probabilistic construction of t-designs over finite fields Probabilistic construction of t-designs over finite fields Shachar Lovett (UCSD) Based on joint works with Arman Fazeli (UCSD), Greg Kuperberg (UC Davis), Ron Peled (Tel Aviv) and Alex Vardy (UCSD) Gent

More information

M4. Lecture 3. THE LLL ALGORITHM AND COPPERSMITH S METHOD

M4. Lecture 3. THE LLL ALGORITHM AND COPPERSMITH S METHOD M4. Lecture 3. THE LLL ALGORITHM AND COPPERSMITH S METHOD Ha Tran, Dung H. Duong, Khuong A. Nguyen. SEAMS summer school 2015 HCM University of Science 1 / 31 1 The LLL algorithm History Applications of

More information

ON FREE PLANES IN LATTICE BALL PACKINGS ABSTRACT. 1. Introduction

ON FREE PLANES IN LATTICE BALL PACKINGS ABSTRACT. 1. Introduction ON FREE PLANES IN LATTICE BALL PACKINGS MARTIN HENK, GÜNTER M ZIEGLER, AND CHUANMING ZONG ABSTRACT This note, by studying relations between the length of the shortest lattice vectors and the covering minima

More information

Solving the Closest Vector Problem in 2 n Time The Discrete Gaussian Strikes Again!

Solving the Closest Vector Problem in 2 n Time The Discrete Gaussian Strikes Again! Solving the Closest Vector Problem in n Time The Discrete Gaussian Strikes Again! Divesh Aggarwal Divesh.Aggarwal@epfl.ch Daniel Dadush dadush@cwi.nl Noah Stephens-Davidowitz noahsd@cs.nyu.edu Abstract

More information

Parametric Integer Programming in Fixed Dimension

Parametric Integer Programming in Fixed Dimension arxiv:0801.4336v1 [math.oc] 28 Jan 2008 Parametric Integer Programming in Fixed Dimension Friedrich Eisenbrand and Gennady Shmonin Institut für Mathematik, Universität Paderborn, D-33095 Paderborn, Germany

More information

BMO Round 2 Problem 3 Generalisation and Bounds

BMO Round 2 Problem 3 Generalisation and Bounds BMO 2007 2008 Round 2 Problem 3 Generalisation and Bounds Joseph Myers February 2008 1 Introduction Problem 3 (by Paul Jefferys) is: 3. Adrian has drawn a circle in the xy-plane whose radius is a positive

More information

Cutting Planes for Mixed-Integer Programming: Theory and Practice

Cutting Planes for Mixed-Integer Programming: Theory and Practice Cutting Planes for Mixed-Integer Programming: Theory and Practice Oktay Günlük Math Sciences, IBM Research April 2018 ORF523, Princeton Mathematical optimization 1 A generic mathematical optimization problem:

More information

Sections of Convex Bodies via the Combinatorial Dimension

Sections of Convex Bodies via the Combinatorial Dimension Sections of Convex Bodies via the Combinatorial Dimension (Rough notes - no proofs) These notes are centered at one abstract result in combinatorial geometry, which gives a coordinate approach to several

More information

INTEGER PROGRAMMING, LATTICE ALGORITHMS, AND DETERMINISTIC VOLUME ESTIMATION

INTEGER PROGRAMMING, LATTICE ALGORITHMS, AND DETERMINISTIC VOLUME ESTIMATION INTEGER PROGRAMMING, LATTICE ALGORITHMS, AND DETERMINISTIC VOLUME ESTIMATION A Dissertation Presented to The Academic Faculty by Daniel Nicolas Dadush In Partial Fulfillment of the Requirements for the

More information

Random matrices: Distribution of the least singular value (via Property Testing)

Random matrices: Distribution of the least singular value (via Property Testing) Random matrices: Distribution of the least singular value (via Property Testing) Van H. Vu Department of Mathematics Rutgers vanvu@math.rutgers.edu (joint work with T. Tao, UCLA) 1 Let ξ be a real or complex-valued

More information

The Covering Index of Convex Bodies

The Covering Index of Convex Bodies The Covering Index of Convex Bodies Centre for Computational and Discrete Geometry Department of Mathematics & Statistics, University of Calgary uary 12, 2015 Covering by homothets and illumination Let

More information

Ma/CS 6b Class 23: Eigenvalues in Regular Graphs

Ma/CS 6b Class 23: Eigenvalues in Regular Graphs Ma/CS 6b Class 3: Eigenvalues in Regular Graphs By Adam Sheffer Recall: The Spectrum of a Graph Consider a graph G = V, E and let A be the adjacency matrix of G. The eigenvalues of G are the eigenvalues

More information

Recovering Short Generators of Principal Ideals in Cyclotomic Rings

Recovering Short Generators of Principal Ideals in Cyclotomic Rings Recovering Short Generators of Principal Ideals in Cyclotomic Rings Ronald Cramer Chris Peikert Léo Ducas Oded Regev University of Leiden, The Netherlands CWI, Amsterdam, The Netherlands University of

More information

Optimization of a Convex Program with a Polynomial Perturbation

Optimization of a Convex Program with a Polynomial Perturbation Optimization of a Convex Program with a Polynomial Perturbation Ravi Kannan Microsoft Research Bangalore Luis Rademacher College of Computing Georgia Institute of Technology Abstract We consider the problem

More information

Improved Analysis of Kannan s Shortest Lattice Vector Algorithm

Improved Analysis of Kannan s Shortest Lattice Vector Algorithm mproved Analysis of Kannan s Shortest Lattice Vector Algorithm Abstract The security of lattice-based cryptosystems such as NTRU GGH and Ajtai-Dwork essentially relies upon the intractability of computing

More information

Deterministic Approximation Algorithms for the Nearest Codeword Problem

Deterministic Approximation Algorithms for the Nearest Codeword Problem Deterministic Approximation Algorithms for the Nearest Codeword Problem Noga Alon 1,, Rina Panigrahy 2, and Sergey Yekhanin 3 1 Tel Aviv University, Institute for Advanced Study, Microsoft Israel nogaa@tau.ac.il

More information

Application of the LLL Algorithm in Sphere Decoding

Application of the LLL Algorithm in Sphere Decoding Application of the LLL Algorithm in Sphere Decoding Sanzheng Qiao Department of Computing and Software McMaster University August 20, 2008 Outline 1 Introduction Application Integer Least Squares 2 Sphere

More information

Minimizing Cubic and Homogeneous Polynomials over Integers in the Plane

Minimizing Cubic and Homogeneous Polynomials over Integers in the Plane Minimizing Cubic and Homogeneous Polynomials over Integers in the Plane Alberto Del Pia Department of Industrial and Systems Engineering & Wisconsin Institutes for Discovery, University of Wisconsin-Madison

More information

2.4 Hilbert Spaces. Outline

2.4 Hilbert Spaces. Outline 2.4 Hilbert Spaces Tom Lewis Spring Semester 2017 Outline Hilbert spaces L 2 ([a, b]) Orthogonality Approximations Definition A Hilbert space is an inner product space which is complete in the norm defined

More information

Lattice closures of polyhedra

Lattice closures of polyhedra Lattice closures of polyhedra Sanjeeb Dash IBM Research sanjeebd@us.ibm.com Oktay Günlük IBM Research gunluk@us.ibm.com April 10, 2017 Diego A. Morán R. Universidad Adolfo Ibañez diego.moran@uai.cl Abstract

More information

On The Hardness of Approximate and Exact (Bichromatic) Maximum Inner Product. Lijie Chen (Massachusetts Institute of Technology)

On The Hardness of Approximate and Exact (Bichromatic) Maximum Inner Product. Lijie Chen (Massachusetts Institute of Technology) On The Hardness of Approximate and Exact (Bichromatic) Maximum Inner Product Max a,b A B a b Lijie Chen (Massachusetts Institute of Technology) Max-IP and Z-Max-IP (Boolean) Max-IP: Given sets A and B

More information

The University of Texas at Austin Department of Electrical and Computer Engineering. EE381V: Large Scale Learning Spring 2013.

The University of Texas at Austin Department of Electrical and Computer Engineering. EE381V: Large Scale Learning Spring 2013. The University of Texas at Austin Department of Electrical and Computer Engineering EE381V: Large Scale Learning Spring 2013 Assignment Two Caramanis/Sanghavi Due: Tuesday, Feb. 19, 2013. Computational

More information

An Algorithmist s Toolkit Lecture 18

An Algorithmist s Toolkit Lecture 18 18.409 An Algorithmist s Toolkit 2009-11-12 Lecture 18 Lecturer: Jonathan Kelner Scribe: Colin Jia Zheng 1 Lattice Definition. (Lattice) Given n linearly independent vectors b 1,, b n R m, the lattice

More information

Maximal vectors in Hilbert space and quantum entanglement

Maximal vectors in Hilbert space and quantum entanglement Maximal vectors in Hilbert space and quantum entanglement William Arveson arveson@math.berkeley.edu UC Berkeley Summer 2008 arxiv:0712.4163 arxiv:0801.2531 arxiv:0804.1140 Overview Quantum Information

More information

Basis Reduction, and the Complexity of Branch-and-Bound

Basis Reduction, and the Complexity of Branch-and-Bound Basis Reduction, and the Complexity of Branch-and-Bound Gábor Pataki and Mustafa Tural Department of Statistics and Operations Research, UNC Chapel Hill Abstract The classical branch-and-bound algorithm

More information

The Lovasz-Vempala algorithm for computing the volume of a convex body in O*(n^4) - Theory and Implementation

The Lovasz-Vempala algorithm for computing the volume of a convex body in O*(n^4) - Theory and Implementation The Lovasz-Vempala algorithm for computing the volume of a convex body in O*(n^4) - Theory and Implementation Mittagsseminar, 20. Dec. 2011 Christian L. Müller, MOSAIC group, Institute of Theoretical Computer

More information

Introduction to Semidefinite Programming I: Basic properties a

Introduction to Semidefinite Programming I: Basic properties a Introduction to Semidefinite Programming I: Basic properties and variations on the Goemans-Williamson approximation algorithm for max-cut MFO seminar on Semidefinite Programming May 30, 2010 Semidefinite

More information

Lattice closures of polyhedra

Lattice closures of polyhedra Lattice closures of polyhedra Sanjeeb Dash IBM Research sanjeebd@us.ibm.com Oktay Günlük IBM Research gunluk@us.ibm.com October 27, 2016 Diego A. Morán R. Universidad Adolfo Ibañez diego.moran@uai.cl Abstract

More information

IBM Research Report. Lattice-Free Sets, Branching Disjunctions, and Mixed-Integer Programming

IBM Research Report. Lattice-Free Sets, Branching Disjunctions, and Mixed-Integer Programming RC25212 (W1109-107) September 21, 2011 Mathematics IBM Research Report Lattice-Free Sets, Branching Disjunctions, and Mixed-Integer Programming Sanjeeb Dash, Neil B. Dobbs, Oktay Günlük, Tomasz J. Nowicki,

More information

Lecture notes on the ellipsoid algorithm

Lecture notes on the ellipsoid algorithm Massachusetts Institute of Technology Handout 1 18.433: Combinatorial Optimization May 14th, 007 Michel X. Goemans Lecture notes on the ellipsoid algorithm The simplex algorithm was the first algorithm

More information

Small Ball Probability, Arithmetic Structure and Random Matrices

Small Ball Probability, Arithmetic Structure and Random Matrices Small Ball Probability, Arithmetic Structure and Random Matrices Roman Vershynin University of California, Davis April 23, 2008 Distance Problems How far is a random vector X from a given subspace H in

More information

The Ellipsoid Algorithm

The Ellipsoid Algorithm The Ellipsoid Algorithm John E. Mitchell Department of Mathematical Sciences RPI, Troy, NY 12180 USA 9 February 2018 Mitchell The Ellipsoid Algorithm 1 / 28 Introduction Outline 1 Introduction 2 Assumptions

More information

ON THE ISOTROPY CONSTANT OF PROJECTIONS OF POLYTOPES

ON THE ISOTROPY CONSTANT OF PROJECTIONS OF POLYTOPES ON THE ISOTROPY CONSTANT OF PROJECTIONS OF POLYTOPES DAVID ALONSO-GUTIÉRREZ, JESÚS BASTERO, JULIO BERNUÉS, AND PAWE L WOLFF Abstract. The isotropy constant of any d-dimensional polytope with n vertices

More information

Non-standard approaches to integer programming

Non-standard approaches to integer programming Discrete Applied Mathematics 123 (2002) 5 74 Non-standard approaches to integer programming Karen Aardal a;b;1, Robert Weismantel a;c;2, Laurence A. Wolsey a; a CORE and INMA, Universite Catholique de

More information

1: Introduction to Lattices

1: Introduction to Lattices CSE 206A: Lattice Algorithms and Applications Winter 2012 Instructor: Daniele Micciancio 1: Introduction to Lattices UCSD CSE Lattices are regular arrangements of points in Euclidean space. The simplest

More information

U.C. Berkeley CS294: Spectral Methods and Expanders Handout 11 Luca Trevisan February 29, 2016

U.C. Berkeley CS294: Spectral Methods and Expanders Handout 11 Luca Trevisan February 29, 2016 U.C. Berkeley CS294: Spectral Methods and Expanders Handout Luca Trevisan February 29, 206 Lecture : ARV In which we introduce semi-definite programming and a semi-definite programming relaxation of sparsest

More information

The Triangle Closure is a Polyhedron

The Triangle Closure is a Polyhedron The Triangle Closure is a Polyhedron Amitabh Basu Robert Hildebrand Matthias Köppe November 7, 21 Abstract Recently, cutting planes derived from maximal lattice-free convex sets have been studied intensively

More information

Hereditary discrepancy and factorization norms

Hereditary discrepancy and factorization norms Hereditary discrepancy and factorization norms organized by Aleksandar Nikolov and Kunal Talwar Workshop Summary Background and Goals This workshop was devoted to the application of methods from functional

More information

How to Factor N 1 and N 2 When p 1 = p 2 mod 2 t

How to Factor N 1 and N 2 When p 1 = p 2 mod 2 t How to Factor N 1 and N 2 When p 1 = p 2 mod 2 t Kaoru Kurosawa and Takuma Ueda Ibaraki University, Japan Abstract. Let N 1 = p 1q 1 and N 2 = p 2q 2 be two different RSA moduli. Suppose that p 1 = p 2

More information

Optimal compression of approximate Euclidean distances

Optimal compression of approximate Euclidean distances Optimal compression of approximate Euclidean distances Noga Alon 1 Bo az Klartag 2 Abstract Let X be a set of n points of norm at most 1 in the Euclidean space R k, and suppose ε > 0. An ε-distance sketch

More information

Solving All Lattice Problems in Deterministic Single Exponential Time

Solving All Lattice Problems in Deterministic Single Exponential Time Solving All Lattice Problems in Deterministic Single Exponential Time (Joint work with P. Voulgaris, STOC 2010) UCSD March 22, 2011 Lattices Traditional area of mathematics Bridge between number theory

More information

10 Years BADGeometry: Progress and Open Problems in Ehrhart Theory

10 Years BADGeometry: Progress and Open Problems in Ehrhart Theory 10 Years BADGeometry: Progress and Open Problems in Ehrhart Theory Matthias Beck (San Francisco State University) math.sfsu.edu/beck Thanks To... 10 Years BADGeometry: Progress and Open Problems in Ehrhart

More information

A glimpse into convex geometry. A glimpse into convex geometry

A glimpse into convex geometry. A glimpse into convex geometry A glimpse into convex geometry 5 \ þ ÏŒÆ Two basis reference: 1. Keith Ball, An elementary introduction to modern convex geometry 2. Chuanming Zong, What is known about unit cubes Convex geometry lies

More information

CSC 2414 Lattices in Computer Science October 11, Lecture 5

CSC 2414 Lattices in Computer Science October 11, Lecture 5 CSC 244 Lattices in Computer Science October, 2 Lecture 5 Lecturer: Vinod Vaikuntanathan Scribe: Joel Oren In the last class, we studied methods for (approximately) solving the following two problems:

More information

W if p = 0; ; W ) if p 1. p times

W if p = 0; ; W ) if p 1. p times Alternating and symmetric multilinear functions. Suppose and W are normed vector spaces. For each integer p we set {0} if p < 0; W if p = 0; ( ; W = L( }... {{... } ; W if p 1. p times We say µ p ( ; W

More information

Integer Quadratic Programming is in NP

Integer Quadratic Programming is in NP Alberto Del Pia 1 Santanu S. Dey 2 Marco Molinaro 2 1 IBM T. J. Watson Research Center, Yorktown Heights. 2 School of Industrial and Systems Engineering, Atlanta Outline 1 4 Program: Definition Definition

More information

Least singular value of random matrices. Lewis Memorial Lecture / DIMACS minicourse March 18, Terence Tao (UCLA)

Least singular value of random matrices. Lewis Memorial Lecture / DIMACS minicourse March 18, Terence Tao (UCLA) Least singular value of random matrices Lewis Memorial Lecture / DIMACS minicourse March 18, 2008 Terence Tao (UCLA) 1 Extreme singular values Let M = (a ij ) 1 i n;1 j m be a square or rectangular matrix

More information

On the Closest Vector Problem with a Distance Guarantee

On the Closest Vector Problem with a Distance Guarantee On the Closest Vector Problem with a Distance Guarantee Daniel Dadush dadush@cwi.nl Oded Regev Noah Stephens-Davidowitz noahsd@cs.nyu.edu Abstract We present a substantially more efficient variant, both

More information

Best simultaneous Diophantine approximations and multidimensional continued fraction expansions

Best simultaneous Diophantine approximations and multidimensional continued fraction expansions Best simultaneous Diophantine approximations and multidimensional continued fraction expansions Nicolas Chevallier January 203 Abstract The rst goal of this paper is to review the properties of the one

More information

High-dimensional distributions with convexity properties

High-dimensional distributions with convexity properties High-dimensional distributions with convexity properties Bo az Klartag Tel-Aviv University A conference in honor of Charles Fefferman, Princeton, May 2009 High-Dimensional Distributions We are concerned

More information

Grothendieck s Inequality

Grothendieck s Inequality Grothendieck s Inequality Leqi Zhu 1 Introduction Let A = (A ij ) R m n be an m n matrix. Then A defines a linear operator between normed spaces (R m, p ) and (R n, q ), for 1 p, q. The (p q)-norm of A

More information

Classical hardness of the Learning with Errors problem

Classical hardness of the Learning with Errors problem Classical hardness of the Learning with Errors problem Adeline Langlois Aric Team, LIP, ENS Lyon Joint work with Z. Brakerski, C. Peikert, O. Regev and D. Stehlé August 12, 2013 Adeline Langlois Hardness

More information

DISCRETE SUBGROUPS, LATTICES, AND UNITS.

DISCRETE SUBGROUPS, LATTICES, AND UNITS. DISCRETE SUBGROUPS, LATTICES, AND UNITS. IAN KIMING 1. Discrete subgroups of real vector spaces and lattices. Definitions: A lattice in a real vector space V of dimension d is a subgroup of form: Zv 1

More information

Sphere Packings. Ji Hoon Chun. Thursday, July 25, 2013

Sphere Packings. Ji Hoon Chun. Thursday, July 25, 2013 Sphere Packings Ji Hoon Chun Thursday, July 5, 03 Abstract The density of a (point) lattice sphere packing in n dimensions is the volume of a sphere in R n divided by the volume of a fundamental region

More information

7. Lecture notes on the ellipsoid algorithm

7. Lecture notes on the ellipsoid algorithm Massachusetts Institute of Technology Michel X. Goemans 18.433: Combinatorial Optimization 7. Lecture notes on the ellipsoid algorithm The simplex algorithm was the first algorithm proposed for linear

More information

Assignment 1 Math 5341 Linear Algebra Review. Give complete answers to each of the following questions. Show all of your work.

Assignment 1 Math 5341 Linear Algebra Review. Give complete answers to each of the following questions. Show all of your work. Assignment 1 Math 5341 Linear Algebra Review Give complete answers to each of the following questions Show all of your work Note: You might struggle with some of these questions, either because it has

More information