<?xml version="1.0" encoding="iso-8859-1"?>
<?xml-stylesheet href="paper.xsl" type="text/xsl"?>

<paper xmlns="http://www.cse.ucsd.edu/daniele/XML">

  <filename>GMSS</filename>

  <title>Approximating shortest lattice vectors is not harder than
  approximating closest lattice vectors</title>

  <author>Oded Goldreich</author>
  <author>Daniele Micciancio</author>
  <author>Shmuel Safra</author>
  <author>Jean-Pierre Seifert</author>
  
  <reference>
    <link>http://www.elsevier.com/inca/publications/store/5/0/5/6/1/2/index.htt</link>
    <journal>Information Processing Letters</journal>
    <volume>71</volume>
    <number>2</number>
    <pages>55-61</pages>
    <year>1999</year>
    <doi>10.1016/S0020-0190(99)00083-6</doi>
  </reference>

  <abstract> 
    <p xmlns="http://www.w3.org/1999/xhtml">
      We show that given oracle access to a subroutine which returns
      approximate closest vectors in a lattice, one may find in
      polynomial time approximate shortest vectors in a lattice. The
      level of approximation is maintained; that is, for any function
      <em>f,</em> the following holds: Suppose that the subroutine, on
      input a lattice <em>L</em> and a target vector
      <strong>w</strong> (not necessarily in the lattice), outputs
      <strong>v</strong> in <em>L</em> such that
      ||<strong>v</strong>-<strong>w</strong>|| &lt;= <em>f(n)</em>
      ||<strong>u</strong>-<strong>w</strong>|| for any
      <strong>u</strong> in <em>L</em>. Then, our algorithm, on input
      a lattice <em>L,</em> outputs a non-zero vector
      <strong>v</strong> in <em>L</em> such that
      ||<strong>v</strong>|| &lt;= <em>f(n)</em>||<strong>u</strong>||
      for any non-zero vector <strong>u</strong> in <em>L.</em> The
      result holds for any norm, and preserves the dimension of the
      lattice, i.e. the closest vector oracle is called on lattices of
      exactly the same dimension as the original shortest vector
      problem. This result establishes the widely believed conjecture
      by which the shortest vector problem is not harder than the
      closest vector problem. The proof can be easily adapted to
      establish an analogous result for the corresponding
      computational problems for linear codes.</p>
  </abstract>

  <note>
    Preliminary version <eccc year="1999" number="TR99-022"/>
  </note>
</paper>
