<?xml version="1.0" encoding="iso-8859-1"?>
<?xml-stylesheet href="paper.xsl" type="text/xsl"?>

<paper xmlns="http://www.cse.ucsd.edu/daniele/XML">

  <filename>Gaussian</filename>

  <title>Worst-case to Average-case Reductions based on Gaussian Measure
  </title>

  <author>Daniele Micciancio</author>
  <author>Oded Regev</author>
  
  <reference>
    <link>http://epubs.siam.org/sam-bin/dbq/toclist/SICOMP</link>
    <journal>SIAM J. on Computing</journal>
    <volume>37</volume>
    <number>1</number>
    <pages>267-302</pages>
    <year>2007</year>
    <note>Invited paper</note>
    <note>Preliminary version in FOCS 2004</note>
    <doi>10.1137/S0097539705447360</doi>
  </reference>

  <abstract> 
    <p xmlns="http://www.w3.org/1999/xhtml">
      We show that finding small solutions to random modular linear equation 
      is at least as hard as approximating several lattice problems in the 
      worst case within a factor almost linear in the dimension of the 
      lattice. The lattice problems we consider are the shortest vector 
      problem, the shortest independent vectors problem, the covering radius 
      problem, and the guaranteed distance decoding problem (a variant of 
      the well known closest vector problem). The approximation factor we 
      obtain is 
      <em>n log<sup>O(1)</sup>(n)</em> 
      for all three problems. This greatly improves on all previous work on 
      the subject starting from Ajtai's seminal paper 
      <cite>[Quad. Mat., 13 (2004), pp. 1-32]</cite>, 
      up to the strongest previously known results by Micciancio 
      <cite>[SIAM J. Comput., 34 (2004), pp. 118-169]</cite>. 
      Our results also bring us closer to the limit where the problems are 
      no longer known to be in NP intersected coNP.
    
      Our main tools are Gaussian measures on lattices and the 
      high-dimensional Fourier transform. We start by defining a new lattice 
      parameter which determines the amount of Gaussian noise that one has 
      to add to a lattice in order to get close to a uniform distribution. 
      In addition to yielding quantitatively much stronger results, the use 
      of this parameter allows us to simplify many of the complications in 
      previous work.
    
      Our technical contributions are two-fold. First, we show tight 
      connections between this new parameter and existing lattice parameters. 
      One such important connection is between this parameter and the length 
      of the shortest set of linearly independent vectors. Second, we prove 
      that the distribution that one obtains after adding Gaussian noise to 
      the lattice has the following interesting property: the distribution 
      of the noise vector when conditioning on the final value behaves in 
      many respects like the original Gaussian noise vector. In particular, 
      its moments remain essentially unchanged.
    </p>
  </abstract>
  
  <note>Preliminary version: 
  <link doi="10.1109/FOCS.2004.72">FOCS 2004</link>
  </note>
  
</paper>
