var bibbase_data = {"data":"<img src=\"//bibbase.org/img/ajax-loader.gif\" id=\"spinner\"\n  style=\"display: none;\" alt=\"Loading..\" />\n\n<div id=\"bibbase\">\n\n  <script type=\"text/javascript\">\n    var bibbase = {\n      params: {\"bib\":\"https://dl.dropbox.com/s/26018h26wgh5c2o/bibbase.bib\",\"jsonp\":\"1\",\"theme\":\"side\",\"fullnames\":\"1\",\"host\":\"bibbase.org\"},\n      data: [{\"bibtype\":\"unpublished\",\"type\":\"unpublished\",\"title\":\"The more the merrier! On the complexity of finding multicollisions, with connections to codes and lattices\",\"author\":[{\"firstnames\":[\"Huck\"],\"propositions\":[],\"lastnames\":[\"Bennett\"],\"suffixes\":[]},{\"firstnames\":[\"Surendra\"],\"propositions\":[],\"lastnames\":[\"Ghentiyala\"],\"suffixes\":[]},{\"firstnames\":[\"Noah\"],\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"suffixes\":[]}],\"year\":\"2024\",\"url\":\"https://eccc.weizmann.ac.il/report/2024/018\",\"bibtex\":\"@unpublished{BGS24,\\n  title = {The more the merrier! On the complexity of finding multicollisions, with connections to codes and lattices},\\n  author = {Huck Bennett and Surendra Ghentiyala and Noah {Stephens-Davidowitz}},\\n  year = {2024},\\n  url = {https://eccc.weizmann.ac.il/report/2024/018},\\n}\\n\\n\\n\",\"author_short\":[\"Bennett, H.\",\"Ghentiyala, S.\",\"Stephens-Davidowitz, N.\"],\"key\":\"BGS24\",\"id\":\"BGS24\",\"bibbaseid\":\"bennett-ghentiyala-stephensdavidowitz-themorethemerrieronthecomplexityoffindingmulticollisionswithconnectionstocodesandlattices-2024\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://eccc.weizmann.ac.il/report/2024/018\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":16,\"html\":\"\"},{\"bibtype\":\"unpublished\",\"type\":\"unpublished\",\"title\":\"On the randomized complexity of range avoidance, with applications to cryptography and metacomplexity\",\"author\":[{\"firstnames\":[\"Eldon\"],\"propositions\":[],\"lastnames\":[\"Chung\"],\"suffixes\":[]},{\"firstnames\":[\"Alexander\"],\"propositions\":[],\"lastnames\":[\"Golovnev\"],\"suffixes\":[]},{\"firstnames\":[\"Zeyong\"],\"propositions\":[],\"lastnames\":[\"Li\"],\"suffixes\":[]},{\"firstnames\":[\"Maciej\"],\"propositions\":[],\"lastnames\":[\"Obremski\"],\"suffixes\":[]},{\"firstnames\":[\"Sidhant\"],\"propositions\":[],\"lastnames\":[\"Saraogi\"],\"suffixes\":[]},{\"firstnames\":[\"Noah\"],\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"suffixes\":[]}],\"year\":\"2023\",\"url\":\"https://eccc.weizmann.ac.il/report/2023/193\",\"bibtex\":\"@unpublished{CGLOSS23,\\n  title = {On the randomized complexity of range avoidance, with applications to cryptography and metacomplexity},\\n  author = {Eldon Chung and Alexander Golovnev and Zeyong Li and Maciej Obremski and Sidhant Saraogi and Noah {Stephens-Davidowitz}},\\n  year = {2023},\\n  url = {https://eccc.weizmann.ac.il/report/2023/193},\\n}\\n\\n\",\"author_short\":[\"Chung, E.\",\"Golovnev, A.\",\"Li, Z.\",\"Obremski, M.\",\"Saraogi, S.\",\"Stephens-Davidowitz, N.\"],\"key\":\"CGLOSS23\",\"id\":\"CGLOSS23\",\"bibbaseid\":\"chung-golovnev-li-obremski-saraogi-stephensdavidowitz-ontherandomizedcomplexityofrangeavoidancewithapplicationstocryptographyandmetacomplexity-2023\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://eccc.weizmann.ac.il/report/2023/193\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":3,\"html\":\"\"},{\"bibtype\":\"unpublished\",\"type\":\"unpublished\",\"title\":\"Recursive lattice reduction—A framework for finding short lattice vectors \",\"author\":[{\"propositions\":[],\"lastnames\":[\"Aggarwal\"],\"firstnames\":[\"Divesh\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Espitau\"],\"firstnames\":[\"Thomas\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Peters\"],\"firstnames\":[\"Spencer\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2023\",\"url\":\"https://arxiv.org/abs/2311.15064\",\"bibtex\":\"@unpublished{AEPD23Recursive,\\n  title = {Recursive lattice reduction---A framework for finding short lattice vectors\\n},\\n  author = {Aggarwal, Divesh and Espitau, Thomas and Peters, Spencer and {Stephens-Davidowitz}, Noah},\\n  year = {2023},\\n  url = {https://arxiv.org/abs/2311.15064},\\n}\\n\\n\",\"author_short\":[\"Aggarwal, D.\",\"Espitau, T.\",\"Peters, S.\",\"Stephens-Davidowitz, N.\"],\"key\":\"AEPD23Recursive\",\"id\":\"AEPD23Recursive\",\"bibbaseid\":\"aggarwal-espitau-peters-stephensdavidowitz-recursivelatticereductionaframeworkforfindingshortlatticevectors-2023\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://arxiv.org/abs/2311.15064\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":6,\"html\":\"\"},{\"bibtype\":\"article\",\"type\":\"article\",\"title\":\"A reverse Minkowski theorem\",\"abstract\":\"$ \\\\newcommand{\\\\R}{ℝ} \\\\newcommand{łat}{\\\\mathcal{L}} $We prove a conjecture due to Dadush, showing that if $łat ⊂ \\\\R^n$ is a lattice such that $\\\\det(łat') \\\\ge 1$ for all sublattices $łat' ⊆ łat$, then \\\\[∑ \\\\exp(-π t^2 \\\\| y\\\\|^2) łe 3/2   , \\\\] where $t := 10(łog n + 2)$ and the sum is over all $y ∈ L$. From this we also derive bounds on the number of short lattice vectors and on the covering radius.\",\"url\":\"http://arxiv.org/abs/1611.05979\",\"journal\":\"Annals of Mathematics\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Regev\"],\"firstnames\":[\"Oded\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2024\",\"url_tcs+_talk\":\"http://www.youtube.com/watch?v=mgDNeg3U5TQ\",\"url_ias_talk\":\"http://www.youtube.com/watch?v=9mvPxAKj5BU\",\"url_bourbaki_seminar\":\"http://www.youtube.com/watch?v=j7YvtVvv3qs\",\"note\":\"A preliminary version appeared in STOC 2017.\",\"bibtex\":\"@article{RSReverseMinkowski17,\\n  title = {A reverse {Minkowski} theorem},\\n  abstract = {$ \\\\newcommand{\\\\R}{\\\\mathbb{R}} \\\\newcommand{\\\\lat}{\\\\mathcal{L}} $We prove a conjecture due to Dadush, showing that if $\\\\lat \\\\subset \\\\R^n$ is a lattice such that $\\\\det(\\\\lat') \\\\ge 1$ for all sublattices $\\\\lat' \\\\subseteq \\\\lat$, then \\\\[\\\\sum \\\\exp(-\\\\pi t^2 \\\\| y\\\\|^2) \\\\le 3/2 \\\\; , \\\\] where $t := 10(\\\\log n + 2)$ and the sum is over all $y \\\\in L$. From this we also derive bounds on the number of short lattice vectors and on the covering radius.},\\n  url = {http://arxiv.org/abs/1611.05979},\\n  journal = {Annals of Mathematics},\\n  author = {Regev, Oded and {Stephens-Davidowitz}, Noah},\\n  year = {2024},\\n  url_TCS+_talk = {http://www.youtube.com/watch?v=mgDNeg3U5TQ},\\n  url_IAS_talk = {http://www.youtube.com/watch?v=9mvPxAKj5BU},\\n  url_Bourbaki_seminar = {http://www.youtube.com/watch?v=j7YvtVvv3qs},\\n  note = {A preliminary version appeared in STOC 2017.}\\n}\\n\\n\\n\\n\",\"author_short\":[\"Regev, O.\",\"Stephens-Davidowitz, N.\"],\"key\":\"RSReverseMinkowski17\",\"id\":\"RSReverseMinkowski17\",\"bibbaseid\":\"regev-stephensdavidowitz-areverseminkowskitheorem-2024\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1611.05979\",\" tcs+ talk\":\"http://www.youtube.com/watch?v=mgDNeg3U5TQ\",\" ias talk\":\"http://www.youtube.com/watch?v=9mvPxAKj5BU\",\" bourbaki seminar\":\"http://www.youtube.com/watch?v=j7YvtVvv3qs\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":18,\"html\":\"\"},{\"bibtype\":\"unpublished\",\"type\":\"unpublished\",\"title\":\"A simple proof of a reverse Minkowski theorem for integral lattices\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Regev\"],\"firstnames\":[\"Oded\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2023\",\"url\":\"http://arxiv.org/abs/2306.03697\",\"bibtex\":\"@unpublished{RSSimpleProofReverse2023,\\n  title = {A simple proof of a reverse {{Minkowski}} theorem for integral lattices},\\n  author = {Regev, Oded and {Stephens-Davidowitz}, Noah},\\n  year = {2023},\\n  url = {http://arxiv.org/abs/2306.03697},\\n}\\n\\n\\n\",\"author_short\":[\"Regev, O.\",\"Stephens-Davidowitz, N.\"],\"key\":\"RSSimpleProofReverse2023\",\"id\":\"RSSimpleProofReverse2023\",\"bibbaseid\":\"regev-stephensdavidowitz-asimpleproofofareverseminkowskitheoremforintegrallattices-2023\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/2306.03697\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":6,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Lattice problems beyond polynomial time\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Aggarwal\"],\"firstnames\":[\"Divesh\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Bennett\"],\"firstnames\":[\"Huck\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Brakerski\"],\"firstnames\":[\"Zvika\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Golovnev\"],\"firstnames\":[\"Alexander\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Kumar\"],\"firstnames\":[\"Rajendra\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Li\"],\"firstnames\":[\"Zeyong\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Peters\"],\"firstnames\":[\"Spencer\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Vaikuntanathan\"],\"firstnames\":[\"Vinod\"],\"suffixes\":[]}],\"year\":\"2023\",\"booktitle\":\"STOC\",\"url\":\"http://arxiv.org/abs/2211.11693\",\"bibtex\":\"@inproceedings{ABB+LatticeProblemsPolynomial2022,\\n  title = {Lattice problems beyond polynomial time},\\n  author = {Aggarwal, Divesh and Bennett, Huck and Brakerski, Zvika and Golovnev, Alexander and Kumar, Rajendra and Li, Zeyong and Peters, Spencer and {Stephens-Davidowitz}, Noah and Vaikuntanathan, Vinod},\\n  year = {2023},\\n  booktitle = {STOC},\\n  url = {http://arxiv.org/abs/2211.11693},\\n}\\n\\n\",\"author_short\":[\"Aggarwal, D.\",\"Bennett, H.\",\"Brakerski, Z.\",\"Golovnev, A.\",\"Kumar, R.\",\"Li, Z.\",\"Peters, S.\",\"Stephens-Davidowitz, N.\",\"Vaikuntanathan, V.\"],\"key\":\"ABB+LatticeProblemsPolynomial2022\",\"id\":\"ABB+LatticeProblemsPolynomial2022\",\"bibbaseid\":\"aggarwal-bennett-brakerski-golovnev-kumar-li-peters-stephensdavidowitz-etal-latticeproblemsbeyondpolynomialtime-2023\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/2211.11693\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":44,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Revisiting time-space tradeoffs for function inversion\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Golovnev\"],\"firstnames\":[\"Alexander\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Guo\"],\"firstnames\":[\"Siyao\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Peters\"],\"firstnames\":[\"Spencer\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2023\",\"url\":\"https://eccc.weizmann.ac.il/report/2022/145/\",\"booktitle\":\"CRYPTO\",\"bibtex\":\"@inproceedings{GGPSRevisitingTimespaceTradeoffs2022,\\n  title = {Revisiting time-space tradeoffs for function inversion},\\n  author = {Golovnev, Alexander and Guo, Siyao and Peters, Spencer and {Stephens-Davidowitz}, Noah},\\n  year = {2023},\\n  url = {https://eccc.weizmann.ac.il/report/2022/145/},\\n  booktitle = {CRYPTO},\\n}\\n\\n\",\"author_short\":[\"Golovnev, A.\",\"Guo, S.\",\"Peters, S.\",\"Stephens-Davidowitz, N.\"],\"key\":\"GGPSRevisitingTimespaceTradeoffs2022\",\"id\":\"GGPSRevisitingTimespaceTradeoffs2022\",\"bibbaseid\":\"golovnev-guo-peters-stephensdavidowitz-revisitingtimespacetradeoffsforfunctioninversion-2023\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://eccc.weizmann.ac.il/report/2022/145/\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":1,\"html\":\"\"},{\"bibtype\":\"article\",\"type\":\"article\",\"title\":\"A tight reverse Minkowski inequality for the Epstein zeta function\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Eisenberg\"],\"firstnames\":[\"Yael\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Regev\"],\"firstnames\":[\"Oded\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2022\",\"journal\":\"Proceedings of the AMS\",\"url\":\"http://arxiv.org/abs/2201.05201\",\"bibtex\":\"@article{ERSTightReverseMinkowski2022,\\n  title = {A tight reverse {{Minkowski}} inequality for the {{Epstein}} zeta function},\\n  author = {Eisenberg, Yael and Regev, Oded and {Stephens-Davidowitz}, Noah},\\n  year = {2022},\\n  journal = {Proceedings of the AMS},\\n  url = {http://arxiv.org/abs/2201.05201},\\n}\\n\\n\",\"author_short\":[\"Eisenberg, Y.\",\"Regev, O.\",\"Stephens-Davidowitz, N.\"],\"key\":\"ERSTightReverseMinkowski2022\",\"id\":\"ERSTightReverseMinkowski2022\",\"bibbaseid\":\"eisenberg-regev-stephensdavidowitz-atightreverseminkowskiinequalityfortheepsteinzetafunction-2022\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/2201.05201\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":1,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Just how hard are rotations of $ℤ^n$? Algorithms and cryptography with the simplest lattice\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Bennett\"],\"firstnames\":[\"Huck\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Ganju\"],\"firstnames\":[\"Atul\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Peetathawatchai\"],\"firstnames\":[\"Pura\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2023\",\"url\":\"https://eprint.iacr.org/2021/1548\",\"booktitle\":\"Eurocrypt\",\"bibtex\":\"@inproceedings{BGPSJustHowHard2021,\\n  title = {Just how hard are rotations of $\\\\mathbb{Z}^n$? Algorithms and cryptography with the simplest lattice},\\n  author = {Bennett, Huck and Ganju, Atul and Peetathawatchai, Pura and {Stephens-Davidowitz}, Noah},\\n  year = {2023},\\n\\turl = {https://eprint.iacr.org/2021/1548},\\n\\tbooktitle = {Eurocrypt},\\n}\\n\\n\",\"author_short\":[\"Bennett, H.\",\"Ganju, A.\",\"Peetathawatchai, P.\",\"Stephens-Davidowitz, N.\"],\"key\":\"BGPSJustHowHard2021\",\"id\":\"BGPSJustHowHard2021\",\"bibbaseid\":\"bennett-ganju-peetathawatchai-stephensdavidowitz-justhowhardarerotationsofnalgorithmsandcryptographywiththesimplestlattice-2023\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://eprint.iacr.org/2021/1548\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":1,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"On the (im)possibility of branch-and-bound search-to-decision reductions for approximate optimization\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Golovnev\"],\"firstnames\":[\"Alexander\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Guo\"],\"firstnames\":[\"Siyao\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Peters\"],\"firstnames\":[\"Spencer\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2023\",\"booktitle\":\"APPROX\",\"url\":\"https://eccc.weizmann.ac.il/report/2021/141/\",\"bibtex\":\"@inproceedings{GGPSImPossibilityBranchandbound2021,\\n  title = {On the (im)possibility of branch-and-bound search-to-decision reductions for approximate optimization},\\n  author = {Golovnev, Alexander and Guo, Siyao and Peters, Spencer and {Stephens-Davidowitz}, Noah},\\n  year = {2023},\\n  booktitle = {APPROX},\\n  url = {https://eccc.weizmann.ac.il/report/2021/141/},\\n}\\n\\n\",\"author_short\":[\"Golovnev, A.\",\"Guo, S.\",\"Peters, S.\",\"Stephens-Davidowitz, N.\"],\"key\":\"GGPSImPossibilityBranchandbound2021\",\"id\":\"GGPSImPossibilityBranchandbound2021\",\"bibbaseid\":\"golovnev-guo-peters-stephensdavidowitz-ontheimpossibilityofbranchandboundsearchtodecisionreductionsforapproximateoptimization-2023\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://eccc.weizmann.ac.il/report/2021/141/\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"No time to hash: On super efficient entropy accumulation\",\"url\":\"https://eprint.iacr.org/2021/523\",\"year\":\"2021\",\"booktitle\":\"CRYPTO\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Dodis\"],\"firstnames\":[\"Yevgeniy\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Guo\"],\"firstnames\":[\"Siyao\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Xie\"],\"firstnames\":[\"Zhiye\"],\"suffixes\":[]}],\"bibtex\":\"@inproceedings{DGSX21a,\\n\\ttitle = {No time to hash: {On} super efficient entropy accumulation},\\n\\turl = {https://eprint.iacr.org/2021/523},\\n\\tyear = {2021},\\n\\tbooktitle = {CRYPTO},\\n\\tauthor = {Dodis, Yevgeniy and Guo, Siyao and {Stephens-Davidowitz}, Noah and Xie, Zhiye},\\n}\\n\\n\",\"author_short\":[\"Dodis, Y.\",\"Guo, S.\",\"Stephens-Davidowitz, N.\",\"Xie, Z.\"],\"key\":\"DGSX21a\",\"id\":\"DGSX21a\",\"bibbaseid\":\"dodis-guo-stephensdavidowitz-xie-notimetohashonsuperefficiententropyaccumulation-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://eprint.iacr.org/2021/523\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":2,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Online linear extractors for independent sources\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Dodis\"],\"firstnames\":[\"Yevgeniy\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Guo\"],\"firstnames\":[\"Siyao\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Xie\"],\"firstnames\":[\"Zhiye\"],\"suffixes\":[]}],\"booktitle\":\"ITC\",\"year\":\"2021\",\"url\":\"https://eprint.iacr.org/2021/1002\",\"bibtex\":\"@inproceedings{DGSX21b,\\n\\ttitle = {Online linear extractors for independent sources},\\n\\tauthor = {Dodis, Yevgeniy and Guo, Siyao and {Stephens-Davidowitz}, Noah and Xie, Zhiye},\\n\\tbooktitle = {ITC},\\n\\tyear = {2021},\\n\\turl = {https://eprint.iacr.org/2021/1002},\\n}\\n\\n\",\"author_short\":[\"Dodis, Y.\",\"Guo, S.\",\"Stephens-Davidowitz, N.\",\"Xie, Z.\"],\"key\":\"DGSX21b\",\"id\":\"DGSX21b\",\"bibbaseid\":\"dodis-guo-stephensdavidowitz-xie-onlinelinearextractorsforindependentsources-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://eprint.iacr.org/2021/1002\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"On the hardness of average-case $k$-SUM\",\"url\":\"https://arxiv.org/abs/2010.08821\",\"year\":\"2021\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Brakerski\"],\"firstnames\":[\"Zvika\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Vaikuntanathan\"],\"firstnames\":[\"Vinod\"],\"suffixes\":[]}],\"booktitle\":\"RANDOM\",\"bibtex\":\"@inproceedings{BSV21,\\n\\ttitle = {On the hardness of average-case {$k$-SUM}},\\n\\turl = {https://arxiv.org/abs/2010.08821},\\n\\tyear = {2021},\\n\\tauthor = {Brakerski, Zvika and {Stephens-Davidowitz}, Noah and Vaikuntanathan, Vinod},\\n\\tbooktitle = {RANDOM},\\n}\\n\\n\",\"author_short\":[\"Brakerski, Z.\",\"Stephens-Davidowitz, N.\",\"Vaikuntanathan, V.\"],\"key\":\"BSV21\",\"id\":\"BSV21\",\"bibbaseid\":\"brakerski-stephensdavidowitz-vaikuntanathan-onthehardnessofaveragecaseksum-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://arxiv.org/abs/2010.08821\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Fine-grained hardness of CVP(P)— Everything that we can prove (and nothing else)\",\"url\":\"http://arxiv.org/abs/1911.02440\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Aggarwal\"],\"firstnames\":[\"Divesh\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Bennett\"],\"firstnames\":[\"Huck\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Golovnev\"],\"firstnames\":[\"Alexander\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2021\",\"booktitle\":\"SODA\",\"url_simons_blog_post\":\"https://blog.simons.berkeley.edu/2020/05/fine-grained-hardness-of-lattice-problems-open-questions/\",\"bibtex\":\"@inproceedings{ABGSFinegrainedHardness19,\\n\\ttitle = {Fine-grained hardness of {{CVP}}({{P}})--- {{Everything}} that we can prove (and nothing else)},\\n\\turl = {http://arxiv.org/abs/1911.02440},\\n\\tauthor = {Aggarwal, Divesh and Bennett, Huck and Golovnev, Alexander and {Stephens-Davidowitz}, Noah},\\n\\tyear = {2021},\\n\\tbooktitle = {SODA},\\n\\turl_Simons_blog_post = {https://blog.simons.berkeley.edu/2020/05/fine-grained-hardness-of-lattice-problems-open-questions/},\\n}\\n\\n\",\"author_short\":[\"Aggarwal, D.\",\"Bennett, H.\",\"Golovnev, A.\",\"Stephens-Davidowitz, N.\"],\"key\":\"ABGSFinegrainedHardness19\",\"id\":\"ABGSFinegrainedHardness19\",\"bibbaseid\":\"aggarwal-bennett-golovnev-stephensdavidowitz-finegrainedhardnessofcvppeverythingthatwecanproveandnothingelse-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1911.02440\",\" simons blog post\":\"https://blog.simons.berkeley.edu/2020/05/fine-grained-hardness-of-lattice-problems-open-questions/\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":4,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Dimension-preserving reductions between SVP and CVP in different $p$-norms\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Aggarwal\"],\"firstnames\":[\"Divesh\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Chen\"],\"firstnames\":[\"Yanlin\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Kumar\"],\"firstnames\":[\"Rajendra\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Li\"],\"firstnames\":[\"Zeyong\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"booktitle\":\"SODA\",\"year\":\"2021\",\"url\":\"http://arxiv.org/abs/2104.06576\",\"bibtex\":\"@inproceedings{ACKLS21,\\n\\ttitle = {Dimension-preserving reductions between {{{SVP}}} and {{{CVP}}} in\\tdifferent $p$-norms},\\n\\tauthor = {Aggarwal, Divesh and Chen, Yanlin and Kumar, Rajendra and Li, Zeyong and {Stephens-Davidowitz}, Noah},\\n\\tbooktitle = {SODA},\\n\\tyear = {2021},\\n\\turl = {http://arxiv.org/abs/2104.06576},\\n}\\n\\n\",\"author_short\":[\"Aggarwal, D.\",\"Chen, Y.\",\"Kumar, R.\",\"Li, Z.\",\"Stephens-Davidowitz, N.\"],\"key\":\"ACKLS21\",\"id\":\"ACKLS21\",\"bibbaseid\":\"aggarwal-chen-kumar-li-stephensdavidowitz-dimensionpreservingreductionsbetweensvpandcvpindifferentpnorms-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/2104.06576\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":1,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Lattice reduction for modules, or how to reduce ModuleSVP to ModuleSVP\",\"url\":\"http://eprint.iacr.org/2019/1142\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Mukherjee\"],\"firstnames\":[\"Tamalika\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2020\",\"booktitle\":\"CRYPTO\",\"bibtex\":\"@inproceedings{MSLatticeReduction19,\\n\\ttitle = {Lattice reduction for modules, or how to reduce {ModuleSVP} to {ModuleSVP}},\\n\\turl = {http://eprint.iacr.org/2019/1142},\\n\\tauthor = {Mukherjee, Tamalika and {Stephens-Davidowitz}, Noah},\\n\\tyear = {2020},\\n\\tbooktitle = {CRYPTO},\\n}\\n\\n\",\"author_short\":[\"Mukherjee, T.\",\"Stephens-Davidowitz, N.\"],\"key\":\"MSLatticeReduction19\",\"id\":\"MSLatticeReduction19\",\"bibbaseid\":\"mukherjee-stephensdavidowitz-latticereductionformodulesorhowtoreducemodulesvptomodulesvp-2020\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://eprint.iacr.org/2019/1142\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":3,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Extractor lower bounds, revisited\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Aggarwal\"],\"firstnames\":[\"Divesh\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Guo\"],\"firstnames\":[\"Siyao\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Obremski\"],\"firstnames\":[\"Maciej\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Ribeiro\"],\"firstnames\":[\"João\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"url\":\"https://eccc.weizmann.ac.il/report/2019/173/\",\"year\":\"2020\",\"booktitle\":\"RANDOM\",\"bibtex\":\"@inproceedings{AGO+ExtractorLower19,\\n\\ttitle = {Extractor lower bounds, revisited},\\n\\tauthor = {Aggarwal, Divesh and Guo, Siyao and Obremski, Maciej and Ribeiro, Jo\\\\~ao and {Stephens-Davidowitz}, Noah},\\n\\turl ={https://eccc.weizmann.ac.il/report/2019/173/},\\n\\tyear = {2020},\\n\\tbooktitle = {RANDOM},\\n}\\n\\n\",\"author_short\":[\"Aggarwal, D.\",\"Guo, S.\",\"Obremski, M.\",\"Ribeiro, J.\",\"Stephens-Davidowitz, N.\"],\"key\":\"AGO+ExtractorLower19\",\"id\":\"AGO+ExtractorLower19\",\"bibbaseid\":\"aggarwal-guo-obremski-ribeiro-stephensdavidowitz-extractorlowerboundsrevisited-2020\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://eccc.weizmann.ac.il/report/2019/173/\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Slide reduction, revisited—Filling the gaps in SVP approximation\",\"url\":\"http://arxiv.org/abs/1908.03724\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Aggarwal\"],\"firstnames\":[\"Divesh\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Li\"],\"firstnames\":[\"Jianwei\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Nguyen\"],\"firstnames\":[\"Phong\",\"Q.\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2020\",\"abstract\":\"We show how to generalize Gama and Nguyen's slide reduction algorithm [STOC '08] for solving the approximate Shortest Vector Problem over lattices (SVP). As a result, we show the fastest provably correct algorithm for $δ$-approximate SVP for all approximation factors $n^{1/2+ε} ≤ δ ≤ n^{O(1)}$. This is the range of approximation factors most relevant for cryptography.\",\"booktitle\":\"CRYPTO\",\"bibtex\":\"@inproceedings{ALNSSlideReduction19,\\n\\ttitle = {Slide reduction, revisited---{F}illing the gaps in {SVP} approximation},\\n\\turl = {http://arxiv.org/abs/1908.03724},\\n\\tauthor = {Aggarwal, Divesh and Li, Jianwei and Nguyen, Phong Q. and {Stephens-Davidowitz}, Noah},\\n\\tyear = {2020},\\n\\tabstract = {We show how to generalize Gama and Nguyen's slide reduction algorithm [STOC '08] for solving the approximate Shortest Vector Problem over lattices (SVP). As a result, we show the fastest provably correct algorithm for $\\\\delta$-approximate SVP for all approximation factors $n^{1/2+\\\\epsilon} \\\\leq \\\\delta \\\\leq n^{O(1)}$. This is the range of approximation factors most relevant for cryptography.},\\n\\tbooktitle={CRYPTO},\\n}\\n\\n\",\"author_short\":[\"Aggarwal, D.\",\"Li, J.\",\"Nguyen, P. Q.\",\"Stephens-Davidowitz, N.\"],\"key\":\"ALNSSlideReduction19\",\"id\":\"ALNSSlideReduction19\",\"bibbaseid\":\"aggarwal-li-nguyen-stephensdavidowitz-slidereductionrevisitedfillingthegapsinsvpapproximation-2020\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1908.03724\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":1,\"html\":\"\"},{\"bibtype\":\"unpublished\",\"type\":\"unpublished\",\"title\":\"An improved constant in Banaszczyk's transference theorem\",\"url\":\"http://arxiv.org/abs/1907.09020\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Aggarwal\"],\"firstnames\":[\"Divesh\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2019\",\"abstract\":\"$ \\\\newcommand{\\\\R}{\\\\ensuremath{ℝ}} \\\\newcommand{łat}{\\\\mathcal{L}} \\\\newcommand{\\\\ensuremath}[1]{#1} $We show that \\\\[ μ(łat) λ_1(łat^*) < \\\\big( 0.1275 + o(1) \\\\big) · n   , \\\\] where $μ(łat)$ is the covering radius of an $n$-dimensional lattice $łat ⊂ \\\\R^n$ and $λ_1(łat^*)$ is the length of the shortest non-zero vector in the dual lattice $łat^*$. This improves on Banaszczyk's celebrated transference theorem (Math. Annal., 1993) by about 20%. Our proof follows Banaszczyk exactly, except in one step, where we replace a Fourier-analytic bound on the discrete Gaussian mass with a slightly stronger bound based on packing. The packing-based bound that we use was already proven by Aggarwal, Dadush, Regev, and Stephens-Davidowitz (STOC, 2015) in a very different context. Our contribution is therefore simply the observation that this implies a better transference theorem.\",\"bibtex\":\"@unpublished{ASImprovedConstant19,\\n\\ttitle = {An improved constant in {{Banaszczyk}}'s transference theorem},\\n\\turl = {http://arxiv.org/abs/1907.09020},\\n\\tauthor = {Aggarwal, Divesh and {Stephens-Davidowitz}, Noah},\\n\\tyear = {2019},\\n\\tabstract = {$ \\\\newcommand{\\\\R}{\\\\ensuremath{\\\\mathbb{R}}} \\\\newcommand{\\\\lat}{\\\\mathcal{L}} \\\\newcommand{\\\\ensuremath}[1]{#1} $We show that \\\\[ \\\\mu(\\\\lat) \\\\lambda_1(\\\\lat^*) < \\\\big( 0.1275 + o(1) \\\\big) \\\\cdot n \\\\; , \\\\] where $\\\\mu(\\\\lat)$ is the covering radius of an $n$-dimensional lattice $\\\\lat \\\\subset \\\\R^n$ and $\\\\lambda_1(\\\\lat^*)$ is the length of the shortest non-zero vector in the dual lattice $\\\\lat^*$. This improves on Banaszczyk's celebrated transference theorem (Math. Annal., 1993) by about 20%. Our proof follows Banaszczyk exactly, except in one step, where we replace a Fourier-analytic bound on the discrete Gaussian mass with a slightly stronger bound based on packing. The packing-based bound that we use was already proven by Aggarwal, Dadush, Regev, and Stephens-Davidowitz (STOC, 2015) in a very different context. Our contribution is therefore simply the observation that this implies a better transference theorem.},\\n}\\n\\n\",\"author_short\":[\"Aggarwal, D.\",\"Stephens-Davidowitz, N.\"],\"key\":\"ASImprovedConstant19\",\"id\":\"ASImprovedConstant19\",\"bibbaseid\":\"aggarwal-stephensdavidowitz-animprovedconstantinbanaszczykstransferencetheorem-2019\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1907.09020\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":41,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"A $2^{n/2}$-time algorithm for $\\\\sqrt{n}$-SVP and $\\\\sqrt{n}$-Hermite SVP, and an improved time-approximation tradeoff for (H)SVP\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Aggarwal\"],\"firstnames\":[\"Divesh\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Li\"],\"firstnames\":[\"Zeyong\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"booktitle\":\"Eurocrypt\",\"year\":\"2021\",\"url\":\"http://arxiv.org/abs/2007.09556\",\"bibtex\":\"@inproceedings{ALSTimeAlgorithm20,\\n\\ttitle = {A $2^{n/2}$-time algorithm for $\\\\sqrt{n}$-{{SVP}} and $\\\\sqrt{n}$-{{Hermite SVP}}, and an improved time-approximation tradeoff for ({{H}}){{SVP}}},\\n\\tauthor = {Aggarwal, Divesh and Li, Zeyong and {Stephens-Davidowitz}, Noah},\\n\\tbooktitle = {Eurocrypt},\\n\\tyear = {2021},\\n\\turl = {http://arxiv.org/abs/2007.09556}\\n}\\n\\n\",\"author_short\":[\"Aggarwal, D.\",\"Li, Z.\",\"Stephens-Davidowitz, N.\"],\"key\":\"ALSTimeAlgorithm20\",\"id\":\"ALSTimeAlgorithm20\",\"bibbaseid\":\"aggarwal-li-stephensdavidowitz-a2n2timealgorithmforsqrtnsvpandsqrtnhermitesvpandanimprovedtimeapproximationtradeoffforhsvp-2021\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/2007.09556\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":3,\"html\":\"\"},{\"bibtype\":\"article\",\"type\":\"article\",\"title\":\"An inequality for Gaussians on lattices\",\"abstract\":\"$ \\\\newcommand{\\\\R}{\\\\ensuremath{ℝ}} \\\\newcommand{łat}{\\\\mathcal{L}} \\\\newcommand{\\\\ensuremath}[1]{#1} $We show that for any lattice $łat ⊆ \\\\R^n$ and vectors $x,y ∈ \\\\R^n$, \\\\[ f(łat + x)^2 f(łat + y)^2 ≤ f(łat)^2 f(łat + x + y) f(łat + x - y)   , \\\\] where $f$ is the Gaussian measure $f(A) := ∑_{w ∈ A} \\\\exp(-π \\\\| w \\\\|^2)$. We show a number of applications, including bounds on the moments of the discrete Gaussian distribution, various monotonicity properties of the heat kernel on flat tori, and a positive correlation inequality for Gaussian measures on lattices.\",\"urldate\":\"2018-05-28\",\"url\":\"http://arxiv.org/abs/1502.04796\",\"journal\":\"SIDMA\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Regev\"],\"firstnames\":[\"Oded\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2017\",\"volume\":\"31\",\"number\":\"2\",\"bibtex\":\"@article{RSInequalityGaussians17,\\n\\ttitle = {An inequality for {Gaussians} on lattices},\\n\\tabstract = {$ \\\\newcommand{\\\\R}{\\\\ensuremath{\\\\mathbb{R}}} \\\\newcommand{\\\\lat}{\\\\mathcal{L}} \\\\newcommand{\\\\ensuremath}[1]{#1} $We show that for any lattice $\\\\lat \\\\subseteq \\\\R^n$ and vectors $x,y \\\\in \\\\R^n$, \\\\[ f(\\\\lat + x)^2 f(\\\\lat + y)^2 \\\\leq f(\\\\lat)^2 f(\\\\lat + x + y) f(\\\\lat + x - y) \\\\; , \\\\] where $f$ is the Gaussian measure $f(A) := \\\\sum_{w \\\\in A} \\\\exp(-\\\\pi \\\\| w \\\\|^2)$. We show a number of applications, including bounds on the moments of the discrete Gaussian distribution, various monotonicity properties of the heat kernel on flat tori, and a positive correlation inequality for Gaussian measures on lattices.},\\n\\turldate = {2018-05-28},\\n\\turl = {http://arxiv.org/abs/1502.04796},\\n\\tjournal = {SIDMA},\\n\\tauthor = {Regev, Oded and {Stephens-Davidowitz}, Noah},\\n\\tyear = {2017},\\n\\t\\tvolume = {31},\\n\\tnumber = {2},\\n}\\n\\n\",\"author_short\":[\"Regev, O.\",\"Stephens-Davidowitz, N.\"],\"key\":\"RSInequalityGaussians17\",\"id\":\"RSInequalityGaussians17\",\"bibbaseid\":\"regev-stephensdavidowitz-aninequalityforgaussiansonlattices-2017\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1502.04796\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":44,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"On the Closest Vector Problem with a distance guarantee\",\"url\":\"http://arxiv.org/abs/1409.8063\",\"booktitle\":\"CCC\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Dadush\"],\"firstnames\":[\"Daniel\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Regev\"],\"firstnames\":[\"Oded\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2014\",\"bibtex\":\"@inproceedings{DRSClosestVector14,\\n  title = {On the {Closest Vector Problem} with a distance guarantee},\\n  url = {http://arxiv.org/abs/1409.8063},\\n  booktitle = {CCC},\\n  author = {Dadush, Daniel and Regev, Oded and {Stephens-Davidowitz}, Noah},\\n  year = {2014}\\n}\\n\\n\",\"author_short\":[\"Dadush, D.\",\"Regev, O.\",\"Stephens-Davidowitz, N.\"],\"key\":\"DRSClosestVector14\",\"id\":\"DRSClosestVector14\",\"bibbaseid\":\"dadush-regev-stephensdavidowitz-ontheclosestvectorproblemwithadistanceguarantee-2014\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1409.8063\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":56,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Search-to-decision reductions for lattice problems with approximation factors (slightly) greater than one\",\"abstract\":\"We show the first dimension-preserving search-to-decision reductions for approximate SVP and CVP. In particular, for any $γ ≤ 1 + O(łog n/n)$, we obtain an efficient dimension-preserving reduction from $γ^{O(n/łog n)}$-SVP to $γ$-GapSVP and an efficient dimension-preserving reduction from $γ^{O(n)}$-CVP to $γ$-GapCVP. These results generalize the known equivalences of the search and decision versions of these problems in the exact case when $γ = 1$. For SVP, we actually obtain something slightly stronger than a search-to-decision reduction–we reduce $γ^{O(n/łog n)}$-SVP to $γ$-unique SVP, a potentially easier problem than $γ$-GapSVP.\",\"url\":\"http://arxiv.org/abs/1512.04138\",\"booktitle\":\"APPROX\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2016\",\"bibtex\":\"@inproceedings{SteSearchtodecisionReductions16,\\n  title = {Search-to-decision reductions for lattice problems with approximation factors (slightly) greater than one},\\n  abstract = {We show the first dimension-preserving search-to-decision reductions for approximate SVP and CVP. In particular, for any $\\\\gamma \\\\leq 1 + O(\\\\log n/n)$, we obtain an efficient dimension-preserving reduction from $\\\\gamma^{O(n/\\\\log n)}$-SVP to $\\\\gamma$-GapSVP and an efficient dimension-preserving reduction from $\\\\gamma^{O(n)}$-CVP to $\\\\gamma$-GapCVP. These results generalize the known equivalences of the search and decision versions of these problems in the exact case when $\\\\gamma = 1$. For SVP, we actually obtain something slightly stronger than a search-to-decision reduction--we reduce $\\\\gamma^{O(n/\\\\log n)}$-SVP to $\\\\gamma$-unique SVP, a potentially easier problem than $\\\\gamma$-GapSVP.},\\n  url = {http://arxiv.org/abs/1512.04138},\\n  booktitle = {APPROX},\\n  author = {{Stephens-Davidowitz}, Noah},\\n  year = {2016}\\n}\\n\\n\",\"author_short\":[\"Stephens-Davidowitz, N.\"],\"key\":\"SteSearchtodecisionReductions16\",\"id\":\"SteSearchtodecisionReductions16\",\"bibbaseid\":\"stephensdavidowitz-searchtodecisionreductionsforlatticeproblemswithapproximationfactorsslightlygreaterthanone-2016\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1512.04138\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":43,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"On the quantitative hardness of CVP\",\"abstract\":\"$ \\\\newcommand{\\\\eps}{ε} \\\\newcommand{\\\\problem}[1]{\\\\ensuremath{\\\\mathrm{#1}} } \\\\newcommand{\\\\CVP}{\\\\problem{CVP}} \\\\newcommand{§VP}{\\\\problem{SVP}} \\\\newcommand{\\\\CVPP}{\\\\problem{CVPP}} \\\\newcommand{\\\\ensuremath}[1]{#1} $For odd integers $p ≥ 1$ (and $p = ∞$), we show that the Closest Vector Problem in the $\\\\ell_p$ norm ($\\\\CVP_p$) over rank $n$ lattices cannot be solved in $2^{(1-\\\\eps) n}$ time for any constant $\\\\eps > 0$ unless the Strong Exponential Time Hypothesis (SETH) fails. We then extend this result to \\\"almost all\\\" values of $p ≥ 1$, not including the even integers. This comes tantalizingly close to settling the quantitative time complexity of the important special case of $\\\\CVP_2$ (i.e., $\\\\CVP$ in the Euclidean norm), for which a $2^{n +o(n)}$-time algorithm is known. In particular, our result applies for any $p = p(n) \\\\neq 2$ that approaches $2$ as $n \\\\to ∞$. We also show a similar SETH-hardness result for $§VP_∞$; hardness of approximating $\\\\CVP_p$ to within some constant factor under the so-called Gap-ETH assumption; and other quantitative hardness results for $\\\\CVP_p$ and $\\\\CVPP_p$ for any $1 ≤ p < ∞$ under different assumptions.\",\"url\":\"http://arxiv.org/abs/1704.03928\",\"booktitle\":\"FOCS\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Bennett\"],\"firstnames\":[\"Huck\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Golovnev\"],\"firstnames\":[\"Alexander\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2017\",\"url_princeton_talk\":\"http://www.youtube.com/watch?v=sd-SMjAl0ks\",\"bibtex\":\"@inproceedings{BGSQuantitativeHardness17,\\n  title = {On the quantitative hardness of {CVP}},\\n  abstract = {$ \\\\newcommand{\\\\eps}{\\\\epsilon} \\\\newcommand{\\\\problem}[1]{\\\\ensuremath{\\\\mathrm{#1}} } \\\\newcommand{\\\\CVP}{\\\\problem{CVP}} \\\\newcommand{\\\\SVP}{\\\\problem{SVP}} \\\\newcommand{\\\\CVPP}{\\\\problem{CVPP}} \\\\newcommand{\\\\ensuremath}[1]{#1} $For odd integers $p \\\\geq 1$ (and $p = \\\\infty$), we show that the Closest Vector Problem in the $\\\\ell_p$ norm ($\\\\CVP_p$) over rank $n$ lattices cannot be solved in $2^{(1-\\\\eps) n}$ time for any constant $\\\\eps > 0$ unless the Strong Exponential Time Hypothesis (SETH) fails. We then extend this result to \\\"almost all\\\" values of $p \\\\geq 1$, not including the even integers. This comes tantalizingly close to settling the quantitative time complexity of the important special case of $\\\\CVP_2$ (i.e., $\\\\CVP$ in the Euclidean norm), for which a $2^{n +o(n)}$-time algorithm is known. In particular, our result applies for any $p = p(n) \\\\neq 2$ that approaches $2$ as $n \\\\to \\\\infty$. We also show a similar SETH-hardness result for $\\\\SVP_\\\\infty$; hardness of approximating $\\\\CVP_p$ to within some constant factor under the so-called Gap-ETH assumption; and other quantitative hardness results for $\\\\CVP_p$ and $\\\\CVPP_p$ for any $1 \\\\leq p < \\\\infty$ under different assumptions.},\\n  url = {http://arxiv.org/abs/1704.03928},\\n  booktitle = {FOCS},\\n  author = {Bennett, Huck and Golovnev, Alexander and {Stephens-Davidowitz}, Noah},\\n  year = {2017},\\n  url_Princeton_Talk = {http://www.youtube.com/watch?v=sd-SMjAl0ks}\\n}\\n\\n\",\"author_short\":[\"Bennett, H.\",\"Golovnev, A.\",\"Stephens-Davidowitz, N.\"],\"key\":\"BGSQuantitativeHardness17\",\"id\":\"BGSQuantitativeHardness17\",\"bibbaseid\":\"bennett-golovnev-stephensdavidowitz-onthequantitativehardnessofcvp-2017\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1704.03928\",\" princeton talk\":\"http://www.youtube.com/watch?v=sd-SMjAl0ks\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":66,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"On the Lattice Distortion Problem\",\"abstract\":\"We introduce and study the \\\\emphLattice Distortion Problem (LDP). LDP asks how \\\"similar\\\" two lattices are. I.e., what is the minimal distortion of a linear bijection between the two lattices? LDP generalizes the Lattice Isomorphism Problem (the lattice analogue of Graph Isomorphism), which simply asks whether the minimal distortion is one. As our first contribution, we show that the distortion between any two lattices is approximated up to a $n^{O(łog n)}$ factor by a simple function of their successive minima. Our methods are constructive, allowing us to compute low-distortion mappings that are within a $2^{O(n łog łog n/łog n)}$ factor of optimal in polynomial time and within a $n^{O(łog n)}$ factor of optimal in singly exponential time. Our algorithms rely on a notion of basis reduction introduced by Seysen (Combinatorica 1993), which we show is intimately related to lattice distortion. Lastly, we show that LDP is NP-hard to approximate to within any constant factor (under randomized reductions), by a reduction from the Shortest Vector Problem.\",\"url\":\"http://arxiv.org/abs/1605.03613\",\"booktitle\":\"ESA\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Bennett\"],\"firstnames\":[\"Huck\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Dadush\"],\"firstnames\":[\"Daniel\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2016\",\"bibtex\":\"@inproceedings{BDSLatticeDistortion16,\\n  title = {On the {Lattice Distortion Problem}},\\n  abstract = {We introduce and study the \\\\emph{Lattice Distortion Problem} (LDP). LDP asks how \\\"similar\\\" two lattices are. I.e., what is the minimal distortion of a linear bijection between the two lattices? LDP generalizes the Lattice Isomorphism Problem (the lattice analogue of Graph Isomorphism), which simply asks whether the minimal distortion is one. As our first contribution, we show that the distortion between any two lattices is approximated up to a $n^{O(\\\\log n)}$ factor by a simple function of their successive minima. Our methods are constructive, allowing us to compute low-distortion mappings that are within a $2^{O(n \\\\log \\\\log n/\\\\log n)}$ factor of optimal in polynomial time and within a $n^{O(\\\\log n)}$ factor of optimal in singly exponential time. Our algorithms rely on a notion of basis reduction introduced by Seysen (Combinatorica 1993), which we show is intimately related to lattice distortion. Lastly, we show that LDP is NP-hard to approximate to within any constant factor (under randomized reductions), by a reduction from the Shortest Vector Problem.},\\n  url = {http://arxiv.org/abs/1605.03613},\\n  booktitle = {ESA},\\n  author = {Bennett, Huck and Dadush, Daniel and {Stephens-Davidowitz}, Noah},\\n  year = {2016}\\n}\\n\\n\",\"author_short\":[\"Bennett, H.\",\"Dadush, D.\",\"Stephens-Davidowitz, N.\"],\"key\":\"BDSLatticeDistortion16\",\"id\":\"BDSLatticeDistortion16\",\"bibbaseid\":\"bennett-dadush-stephensdavidowitz-onthelatticedistortionproblem-2016\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1605.03613\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":14,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Pseudorandomness of Ring-LWE for any ring and modulus\",\"abstract\":\"We give a polynomial-time quantum reduction from worst-case (ideal) lattice problems directly to the decision version of (Ring-)LWE. This extends to decision all the worst-case hardness results that were previously known for the search version, for the same or even better parameters and with no algebraic restrictions on the modulus or number field. Indeed, our reduction is the first that works for decision Ring-LWE with any number field and any modulus.\",\"url\":\"https://eprint.iacr.org/2017/258\",\"booktitle\":\"STOC\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Peikert\"],\"firstnames\":[\"Chris\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Regev\"],\"firstnames\":[\"Oded\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2017\",\"bibtex\":\"@inproceedings{PRSPseudorandomnessRingLWE17,\\n  title = {Pseudorandomness of {Ring-LWE} for any ring and modulus},\\n  abstract = {We give a polynomial-time quantum reduction from worst-case (ideal) lattice problems directly to the decision version of (Ring-)LWE. This extends to decision all the worst-case hardness results that were previously known for the search version, for the same or even better parameters and with no algebraic restrictions on the modulus or number field. Indeed, our reduction is the first that works for decision Ring-LWE with any number field and any modulus.},\\n  url = {https://eprint.iacr.org/2017/258},\\n  booktitle = {STOC},\\n  author = {Peikert, Chris and Regev, Oded and {Stephens-Davidowitz}, Noah},\\n  year = {2017}\\n}\\n\\n\",\"author_short\":[\"Peikert, C.\",\"Regev, O.\",\"Stephens-Davidowitz, N.\"],\"key\":\"PRSPseudorandomnessRingLWE17\",\"id\":\"PRSPseudorandomnessRingLWE17\",\"bibbaseid\":\"peikert-regev-stephensdavidowitz-pseudorandomnessofringlweforanyringandmodulus-2017\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://eprint.iacr.org/2017/258\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":67,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"On seedless PRNGs and premature next\",\"booktitle\":\"ITC\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Coretti\"],\"firstnames\":[\"Sandro\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Dodis\"],\"firstnames\":[\"Yevgeniy\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Karthikeyan\"],\"firstnames\":[\"Harish\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Tessaro\"],\"firstnames\":[\"Stefano\"],\"suffixes\":[]}],\"year\":\"2022\",\"url\":\"https://eprint.iacr.org/2022/558\",\"bibtex\":\"@inproceedings{CDK+SeedlessPRNGsPremature2022,\\n  title = {On seedless {{PRNGs}} and premature next},\\n  booktitle = {{{ITC}}},\\n  author = {Coretti, Sandro and Dodis, Yevgeniy and Karthikeyan, Harish and {Stephens-Davidowitz}, Noah and Tessaro, Stefano},\\n  year = {2022},\\n  url = {https://eprint.iacr.org/2022/558},\\n}\\n\\n\",\"author_short\":[\"Coretti, S.\",\"Dodis, Y.\",\"Karthikeyan, H.\",\"Stephens-Davidowitz, N.\",\"Tessaro, S.\"],\"key\":\"CDK+SeedlessPRNGsPremature2022\",\"id\":\"CDK+SeedlessPRNGsPremature2022\",\"bibbaseid\":\"coretti-dodis-karthikeyan-stephensdavidowitz-tessaro-onseedlessprngsandprematurenext-2022\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://eprint.iacr.org/2022/558\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":1,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Solving the Closest Vector Problem in $2^n$ time–The discrete Gaussian strikes again!\",\"abstract\":\"We give a $2^{n+o(n)}$-time and space randomized algorithm for solving the exact Closest Vector Problem (CVP) on $n$-dimensional Euclidean lattices. This improves on the previous fastest algorithm, the deterministic $\\\\widetilde{O}(4^{n})$-time and $\\\\widetilde{O}(2^{n})$-space algorithm of Micciancio and Voulgaris. We achieve our main result in three steps. First, we show how to modify the sampling algorithm from [ADRS15] to solve the problem of discrete Gaussian sampling over lattice shifts, $L- t$, with very low parameters. While the actual algorithm is a natural generalization of [ADRS15], the analysis uses substantial new ideas. This yields a $2^{n+o(n)}$-time algorithm for approximate CVP for any approximation factor $γ = 1+2^{-o(n/łog n)}$. Second, we show that the approximate closest vectors to a target vector $t$ can be grouped into \\\"lower-dimensional clusters,\\\" and we use this to obtain a recursive reduction from exact CVP to a variant of approximate CVP that \\\"behaves well with these clusters.\\\" Third, we show that our discrete Gaussian sampling algorithm can be used to solve this variant of approximate CVP. The analysis depends crucially on some new properties of the discrete Gaussian distribution and approximate closest vectors, which might be of independent interest.\",\"url\":\"http://arxiv.org/abs/1504.01995\",\"booktitle\":\"FOCS\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Aggarwal\"],\"firstnames\":[\"Divesh\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Dadush\"],\"firstnames\":[\"Daniel\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2015\",\"bibtex\":\"@inproceedings{ADSSolvingClosest15,\\n  title = {Solving the {Closest Vector Problem} in $2^n$ time--The discrete {Gaussian} strikes again!},\\n  abstract = {We give a $2^{n+o(n)}$-time and space randomized algorithm for solving the exact Closest Vector Problem (CVP) on $n$-dimensional Euclidean lattices. This improves on the previous fastest algorithm, the deterministic $\\\\widetilde{O}(4^{n})$-time and $\\\\widetilde{O}(2^{n})$-space algorithm of Micciancio and Voulgaris. We achieve our main result in three steps. First, we show how to modify the sampling algorithm from [ADRS15] to solve the problem of discrete Gaussian sampling over lattice shifts, $L- t$, with very low parameters. While the actual algorithm is a natural generalization of [ADRS15], the analysis uses substantial new ideas. This yields a $2^{n+o(n)}$-time algorithm for approximate CVP for any approximation factor $\\\\gamma = 1+2^{-o(n/\\\\log n)}$. Second, we show that the approximate closest vectors to a target vector $t$ can be grouped into \\\"lower-dimensional clusters,\\\" and we use this to obtain a recursive reduction from exact CVP to a variant of approximate CVP that \\\"behaves well with these clusters.\\\" Third, we show that our discrete Gaussian sampling algorithm can be used to solve this variant of approximate CVP. The analysis depends crucially on some new properties of the discrete Gaussian distribution and approximate closest vectors, which might be of independent interest.},\\n  url = {http://arxiv.org/abs/1504.01995},\\n  booktitle = {FOCS},\\n  author = {Aggarwal, Divesh and Dadush, Daniel and {Stephens-Davidowitz}, Noah},\\n  year = {2015}\\n}\\n\\n\",\"author_short\":[\"Aggarwal, D.\",\"Dadush, D.\",\"Stephens-Davidowitz, N.\"],\"key\":\"ADSSolvingClosest15\",\"id\":\"ADSSolvingClosest15\",\"bibbaseid\":\"aggarwal-dadush-stephensdavidowitz-solvingtheclosestvectorproblemin2ntimethediscretegaussianstrikesagain-2015\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1504.01995\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":18,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Discrete Gaussian sampling reduces to CVP and SVP\",\"abstract\":\"The discrete Gaussian $D_{L- t, s}$ is the distribution that assigns to each vector $x$ in a shifted lattice $L - t$ probability proportional to $e^{-π \\\\|x\\\\|^2/s^2}$. It has long been an important tool in the study of lattices. More recently, algorithms for discrete Gaussian sampling (DGS) have found many applications in computer science. In particular, polynomial-time algorithms for DGS with very high parameters $s$ have found many uses in cryptography and in reductions between lattice problems. And, in the past year, Aggarwal, Dadush, Regev, and Stephens-Davidowitz showed $2^{n+o(n)}$-time algorithms for DGS with a much wider range of parameters and used them to obtain the current fastest known algorithms for the two most important lattice problems, the Shortest Vector Problem (SVP) and the Closest Vector Problem (CVP). Motivated by its increasing importance, we investigate the complexity of DGS itself and its relationship to CVP and SVP. Our first result is a polynomial-time dimension-preserving reduction from DGS to CVP. There is a simple reduction from CVP to DGS, so this shows that DGS is equivalent to CVP. Our second result, which we find to be more surprising, is a polynomial-time dimension-preserving reduction from centered DGS (the important special case when $ t = 0$) to SVP. In the other direction, there is a simple reduction from $γ$-approximate SVP for any $γ = Ω(\\\\sqrt{n/łog n})$, and we present some (relatively weak) evidence to suggest that this might be the best achievable approximation factor. We also show that our CVP result extends to a much wider class of distributions and even to other norms.\",\"url\":\"http://arxiv.org/abs/1506.07490\",\"booktitle\":\"SODA\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2016\",\"bibtex\":\"@inproceedings{SteDiscreteGaussian16,\\n  title = {Discrete {Gaussian} sampling reduces to {CVP} and {SVP}},\\n  abstract = {The discrete Gaussian $D_{L- t, s}$ is the distribution that assigns to each vector $x$ in a shifted lattice $L - t$ probability proportional to $e^{-\\\\pi \\\\|x\\\\|^2/s^2}$. It has long been an important tool in the study of lattices. More recently, algorithms for discrete Gaussian sampling (DGS) have found many applications in computer science. In particular, polynomial-time algorithms for DGS with very high parameters $s$ have found many uses in cryptography and in reductions between lattice problems. And, in the past year, Aggarwal, Dadush, Regev, and Stephens-Davidowitz showed $2^{n+o(n)}$-time algorithms for DGS with a much wider range of parameters and used them to obtain the current fastest known algorithms for the two most important lattice problems, the Shortest Vector Problem (SVP) and the Closest Vector Problem (CVP). Motivated by its increasing importance, we investigate the complexity of DGS itself and its relationship to CVP and SVP. Our first result is a polynomial-time dimension-preserving reduction from DGS to CVP. There is a simple reduction from CVP to DGS, so this shows that DGS is equivalent to CVP. Our second result, which we find to be more surprising, is a polynomial-time dimension-preserving reduction from centered DGS (the important special case when $ t = 0$) to SVP. In the other direction, there is a simple reduction from $\\\\gamma$-approximate SVP for any $\\\\gamma = \\\\Omega(\\\\sqrt{n/\\\\log n})$, and we present some (relatively weak) evidence to suggest that this might be the best achievable approximation factor. We also show that our CVP result extends to a much wider class of distributions and even to other norms.},\\n  url = {http://arxiv.org/abs/1506.07490},\\n  booktitle = {SODA},\\n  author = {{Stephens-Davidowitz}, Noah},\\n  year = {2016}\\n}\\n\\n\",\"author_short\":[\"Stephens-Davidowitz, N.\"],\"key\":\"SteDiscreteGaussian16\",\"id\":\"SteDiscreteGaussian16\",\"bibbaseid\":\"stephensdavidowitz-discretegaussiansamplingreducestocvpandsvp-2016\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1506.07490\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":106,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Solving the Shortest Vector Problem in $2^n$ time via discrete Gaussian sampling\",\"abstract\":\"We give a randomized $2^{n+o(n)}$-time and space algorithm for solving the Shortest Vector Problem (SVP) on n-dimensional Euclidean lattices. This improves on the previous fastest algorithm: the deterministic $\\\\widetilde{O}(4^n)$-time and $\\\\widetilde{O}(2^n)$-space algorithm of Micciancio and Voulgaris (STOC 2010, SIAM J. Comp. 2013). In fact, we give a conceptually simple algorithm that solves the (in our opinion, even more interesting) problem of discrete Gaussian sampling (DGS). More specifically, we show how to sample $2^{n/2}$ vectors from the discrete Gaussian distribution at any parameter in $2^{n+o(n)}$ time and space. (Prior work only solved DGS for very large parameters.) Our SVP result then follows from a natural reduction from SVP to DGS. We also show that our DGS algorithm implies a $2^{n + o(n)}$-time algorithm that approximates the Closest Vector Problem to within a factor of $1.97$. In addition, we give a more refined algorithm for DGS above the so-called smoothing parameter of the lattice, which can generate $2^{n/2}$ discrete Gaussian samples in just $2^{n/2+o(n)}$ time and space. Among other things, this implies a $2^{n/2+o(n)}$-time and space algorithm for $1.93$-approximate decision SVP.\",\"url\":\"http://arxiv.org/abs/1412.7994\",\"booktitle\":\"STOC\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Aggarwal\"],\"firstnames\":[\"Divesh\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Dadush\"],\"firstnames\":[\"Daniel\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Regev\"],\"firstnames\":[\"Oded\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2015\",\"url_simons_talk\":\"http://www.youtube.com/watch?v=PWy0ZBRAUxA\",\"bibtex\":\"@inproceedings{ADRSSolvingShortest15,\\n  title = {Solving the {Shortest Vector Problem} in $2^n$ time via discrete {Gaussian} sampling},\\n  abstract = {We give a randomized $2^{n+o(n)}$-time and space algorithm for solving the Shortest Vector Problem (SVP) on n-dimensional Euclidean lattices. This improves on the previous fastest algorithm: the deterministic $\\\\widetilde{O}(4^n)$-time and $\\\\widetilde{O}(2^n)$-space algorithm of Micciancio and Voulgaris (STOC 2010, SIAM J. Comp. 2013). In fact, we give a conceptually simple algorithm that solves the (in our opinion, even more interesting) problem of discrete Gaussian sampling (DGS). More specifically, we show how to sample $2^{n/2}$ vectors from the discrete Gaussian distribution at any parameter in $2^{n+o(n)}$ time and space. (Prior work only solved DGS for very large parameters.) Our SVP result then follows from a natural reduction from SVP to DGS. We also show that our DGS algorithm implies a $2^{n + o(n)}$-time algorithm that approximates the Closest Vector Problem to within a factor of $1.97$. In addition, we give a more refined algorithm for DGS above the so-called smoothing parameter of the lattice, which can generate $2^{n/2}$ discrete Gaussian samples in just $2^{n/2+o(n)}$ time and space. Among other things, this implies a $2^{n/2+o(n)}$-time and space algorithm for $1.93$-approximate decision SVP.},\\n  url = {http://arxiv.org/abs/1412.7994},\\n  booktitle = {STOC},\\n  author = {Aggarwal, Divesh and Dadush, Daniel and Regev, Oded and {Stephens-Davidowitz}, Noah},\\n  year = {2015},\\n  url_Simons_talk = {http://www.youtube.com/watch?v=PWy0ZBRAUxA}\\n}\\n\\n\",\"author_short\":[\"Aggarwal, D.\",\"Dadush, D.\",\"Regev, O.\",\"Stephens-Davidowitz, N.\"],\"key\":\"ADRSSolvingShortest15\",\"id\":\"ADRSSolvingShortest15\",\"bibbaseid\":\"aggarwal-dadush-regev-stephensdavidowitz-solvingtheshortestvectorproblemin2ntimeviadiscretegaussiansampling-2015\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1412.7994\",\" simons talk\":\"http://www.youtube.com/watch?v=PWy0ZBRAUxA\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":48,\"html\":\"\"},{\"bibtype\":\"unpublished\",\"type\":\"unpublished\",\"title\":\"Dimension-preserving reductions between lattice problems\",\"abstract\":\"Computational problems on lattices have found a remarkable number of applications in computer science. In particular, over the past twenty years, many strong cryptographic primitives have been constructed with their security based on the (worst-case) hardness of various lattice problems. Due to their importance, there has been much work towards understanding the relationship between these problems. For the parameters that typically interest us, the fastest known algorithms for lattice problems run in time that is exponential in the dimension of the lattice. Therefore, we are typically interested in reductions that preserve this dimension. (We actually relax this notion slightly and consider a reduction to be ``dimension-preserving'' if it increases the dimension by at most an additive constant.) We summarize many of the known results in this area.\",\"url\":\"http://noahsd.com/latticeproblems.pdf\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2015\",\"bibtex\":\"@unpublished{SteDimensionpreservingReductions15,\\n  title = {Dimension-preserving reductions between lattice problems},\\n  abstract = {Computational problems on lattices have found a remarkable number of applications in computer science. In particular, over the past twenty years, many strong cryptographic primitives have been constructed with their security based on the (worst-case) hardness of various lattice problems. \\n\\nDue to their importance, there has been much work towards understanding the relationship between these problems. For the parameters that typically interest us, the fastest known algorithms for lattice problems run in time that is exponential in the dimension of the lattice. Therefore, we are typically interested in reductions that preserve this dimension. (We actually relax this notion slightly and consider a reduction to be ``dimension-preserving'' if it increases the dimension by at most an additive constant.) \\n\\nWe summarize many of the known results in this area.},\\n  url = {http://noahsd.com/latticeproblems.pdf},\\n  author = {{Stephens-Davidowitz}, Noah},\\n  year = {2015}\\n}\\n\\n\\n\\n\",\"author_short\":[\"Stephens-Davidowitz, N.\"],\"key\":\"SteDimensionpreservingReductions15\",\"id\":\"SteDimensionpreservingReductions15\",\"bibbaseid\":\"stephensdavidowitz-dimensionpreservingreductionsbetweenlatticeproblems-2015\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://noahsd.com/latticeproblems.pdf\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":97,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"(Gap/S)ETH Hardness of SVP\",\"abstract\":\"$ \\\\newcommand{\\\\problem}[1]{\\\\ensuremath{\\\\mathrm{#1}} } \\\\newcommand{§VP}{\\\\problem{SVP}} \\\\newcommand{\\\\ensuremath}[1]{#1} $We prove the following quantitative hardness results for the Shortest Vector Problem in the $\\\\ell_p$ norm ($§VP_p$), where $n$ is the rank of the input lattice. $•$ For \\\"almost all\\\" $p > p_0 ≈ 2.1397$, there no $2^{n/C_p}$-time algorithm for $§VP_p$ for some explicit constant $C_p > 0$ unless the (randomized) Strong Exponential Time Hypothesis (SETH) is false. $•$ For any $p > 2$, there is no $2^{o(n)}$-time algorithm for $§VP_p$ unless the (randomized) Gap-Exponential Time Hypothesis (Gap-ETH) is false. Furthermore, for each $p > 2$, there exists a constant $γ_p > 1$ such that the same result holds even for $γ_p$-approximate $§VP_p$. $•$ There is no $2^{o(n)}$-time algorithm for $§VP_p$ for any $1 ≤ p ≤ 2$ unless either (1) (non-uniform) Gap-ETH is false; or (2) there is no family of lattices with exponential kissing number in the $\\\\ell_2$ norm. Furthermore, for each $1 ≤ p ≤ 2$, there exists a constant $γ_p > 1$ such that the same result holds even for $γ_p$-approximate $§VP_p$.\",\"url\":\"http://arxiv.org/abs/1712.00942\",\"booktitle\":\"STOC\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Aggarwal\"],\"firstnames\":[\"Divesh\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2018\",\"bibtex\":\"@inproceedings{ASGapETH18,\\n  title = {{(Gap/S)ETH} Hardness of {SVP}},\\n  abstract = {$ \\\\newcommand{\\\\problem}[1]{\\\\ensuremath{\\\\mathrm{#1}} } \\\\newcommand{\\\\SVP}{\\\\problem{SVP}} \\\\newcommand{\\\\ensuremath}[1]{#1} $We prove the following quantitative hardness results for the Shortest Vector Problem in the $\\\\ell_p$ norm ($\\\\SVP_p$), where $n$ is the rank of the input lattice. $\\\\bullet$ For \\\"almost all\\\" $p > p_0 \\\\approx 2.1397$, there no $2^{n/C_p}$-time algorithm for $\\\\SVP_p$ for some explicit constant $C_p > 0$ unless the (randomized) Strong Exponential Time Hypothesis (SETH) is false. $\\\\bullet$ For any $p > 2$, there is no $2^{o(n)}$-time algorithm for $\\\\SVP_p$ unless the (randomized) Gap-Exponential Time Hypothesis (Gap-ETH) is false. Furthermore, for each $p > 2$, there exists a constant $\\\\gamma_p > 1$ such that the same result holds even for $\\\\gamma_p$-approximate $\\\\SVP_p$. $\\\\bullet$ There is no $2^{o(n)}$-time algorithm for $\\\\SVP_p$ for any $1 \\\\leq p \\\\leq 2$ unless either (1) (non-uniform) Gap-ETH is false; or (2) there is no family of lattices with exponential kissing number in the $\\\\ell_2$ norm. Furthermore, for each $1 \\\\leq p \\\\leq 2$, there exists a constant $\\\\gamma_p > 1$ such that the same result holds even for $\\\\gamma_p$-approximate $\\\\SVP_p$.},\\n  url = {http://arxiv.org/abs/1712.00942},\\n  booktitle = {STOC},\\n  author = {Aggarwal, Divesh and {Stephens-Davidowitz}, Noah},\\n  year = {2018}\\n}\\n\\n\",\"author_short\":[\"Aggarwal, D.\",\"Stephens-Davidowitz, N.\"],\"key\":\"ASGapETH18\",\"id\":\"ASGapETH18\",\"bibbaseid\":\"aggarwal-stephensdavidowitz-gapsethhardnessofsvp-2018\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1712.00942\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":81,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Just take the average! An embarrassingly simple $2^n$-time algorithm for SVP (and CVP)\",\"abstract\":\"We show a $2^{n+o(n)}$-time (and space) algorithm for the Shortest Vector Problem on lattices (SVP) that works by repeatedly running an embarrassingly simple \\\"pair and average\\\" sieving-like procedure on a list of lattice vectors. This matches the running time (and space) of the current fastest known algorithm, due to Aggarwal, Dadush, Regev, and Stephens-Davidowitz (ADRS, in STOC, 2015), with a far simpler algorithm. Our algorithm is in fact a modification of the ADRS algorithm, with a certain careful rejection sampling step removed. The correctness of our algorithm follows from a more general \\\"meta-theorem,\\\" showing that such rejection sampling steps are unnecessary for a certain class of algorithms and use cases. In particular, this also applies to the related $2^{n + o(n)}$-time algorithm for the Closest Vector Problem (CVP), due to Aggarwal, Dadush, and Stephens-Davidowitz (ADS, in FOCS, 2015), yielding a similar embarrassingly simple algorithm for $γ$-approximate CVP for any $γ = 1+2^{-o(n/łog n)}$. (We can also remove the rejection sampling procedure from the $2^{n+o(n)}$-time ADS algorithm for exact CVP, but the resulting algorithm is still quite complicated.)\",\"url\":\"http://arxiv.org/abs/1709.01535\",\"booktitle\":\"SOSA\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Aggarwal\"],\"firstnames\":[\"Divesh\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2018\",\"bibtex\":\"@inproceedings{ASJustTake18,\\n  title = {Just take the average! An embarrassingly simple $2^n$-time algorithm for {SVP} (and {CVP})},\\n  abstract = {We show a $2^{n+o(n)}$-time (and space) algorithm for the Shortest Vector Problem on lattices (SVP) that works by repeatedly running an embarrassingly simple \\\"pair and average\\\" sieving-like procedure on a list of lattice vectors. This matches the running time (and space) of the current fastest known algorithm, due to Aggarwal, Dadush, Regev, and Stephens-Davidowitz (ADRS, in STOC, 2015), with a far simpler algorithm. Our algorithm is in fact a modification of the ADRS algorithm, with a certain careful rejection sampling step removed. The correctness of our algorithm follows from a more general \\\"meta-theorem,\\\" showing that such rejection sampling steps are unnecessary for a certain class of algorithms and use cases. In particular, this also applies to the related $2^{n + o(n)}$-time algorithm for the Closest Vector Problem (CVP), due to Aggarwal, Dadush, and Stephens-Davidowitz (ADS, in FOCS, 2015), yielding a similar embarrassingly simple algorithm for $\\\\gamma$-approximate CVP for any $\\\\gamma = 1+2^{-o(n/\\\\log n)}$. (We can also remove the rejection sampling procedure from the $2^{n+o(n)}$-time ADS algorithm for exact CVP, but the resulting algorithm is still quite complicated.)},\\n  url = {http://arxiv.org/abs/1709.01535},\\n  booktitle = {SOSA},\\n  author = {Aggarwal, Divesh and {Stephens-Davidowitz}, Noah},\\n  year = {2018}\\n}\\n\\n\",\"author_short\":[\"Aggarwal, D.\",\"Stephens-Davidowitz, N.\"],\"key\":\"ASJustTake18\",\"id\":\"ASJustTake18\",\"bibbaseid\":\"aggarwal-stephensdavidowitz-justtaketheaverageanembarrassinglysimple2ntimealgorithmforsvpandcvp-2018\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1709.01535\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":58,\"html\":\"\"},{\"bibtype\":\"phdthesis\",\"type\":\"PhD Thesis\",\"title\":\"On the Gaussian measure over lattices\",\"school\":\"New York University\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2017\",\"bibtex\":\"@phdthesis{NSDthesis,\\n  type = {PhD Thesis},\\n  title = {On the {Gaussian} measure over lattices},\\n  school = {New York University},\\n  author = {{Stephens-Davidowitz}, Noah},\\n  year = {2017}\\n}\\n\\n\",\"author_short\":[\"Stephens-Davidowitz, N.\"],\"key\":\"NSDthesis\",\"id\":\"NSDthesis\",\"bibbaseid\":\"stephensdavidowitz-onthegaussianmeasureoverlattices-2017\",\"role\":\"author\",\"urls\":{},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":0,\"html\":\"\"},{\"bibtype\":\"article\",\"type\":\"article\",\"title\":\"Kissing numbers and transference theorems from generalized tail bounds\",\"abstract\":\"We generalize Banaszczyk's seminal tail bound for the Gaussian mass of a lattice to a wide class of test functions. We therefore obtain quite general transference bounds, as well as bounds on the number of lattice points contained in certain bodies. As example applications, we bound the lattice kissing number in $\\\\ell_p$ norms by $e^{(n+ o(n))/p}$ for $0 < p ≤ 2$, and also give a proof of a new transference bound in the $\\\\ell_1$ norm.\",\"url\":\"http://arxiv.org/abs/1802.05708\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Miller\"],\"firstnames\":[\"Stephen\",\"D.\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"journal\":\"SIDMA\",\"year\":\"2019\",\"volume\":\"33\",\"number\":\"3\",\"bibtex\":\"@article{MSKissing18,\\n  title = {Kissing numbers and transference theorems from generalized tail bounds},\\n  abstract = {We generalize Banaszczyk's seminal tail bound for the Gaussian mass of a lattice to a wide class of test functions. We therefore obtain quite general transference bounds, as well as bounds on the number of lattice points contained in certain bodies. As example applications, we bound the lattice kissing number in $\\\\ell_p$ norms by $e^{(n+ o(n))/p}$ for $0 < p \\\\leq 2$, and also give a proof of a new transference bound in the $\\\\ell_1$ norm.},\\n  url = {http://arxiv.org/abs/1802.05708},\\n  author = {Miller, Stephen D. and {Stephens-Davidowitz}, Noah},\\n  journal = {SIDMA},\\n  year = {2019},\\n  volume = {33},\\n  number = {3},\\n}\\n\\n\",\"author_short\":[\"Miller, S. D.\",\"Stephens-Davidowitz, N.\"],\"key\":\"MSKissing18\",\"id\":\"MSKissing18\",\"bibbaseid\":\"miller-stephensdavidowitz-kissingnumbersandtransferencetheoremsfromgeneralizedtailbounds-2019\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1802.05708\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":53,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"New (and old) proof systems for lattice problems\",\"abstract\":\"$ \\\\newcommand{Øtil}{\\\\ensuremath{\\\\widetilde{O}}} \\\\newcommand{\\\\problem}[1]{\\\\ensuremath{\\\\mathsf{#1}}} \\\\newcommand{\\\\gapspp}{\\\\problem{GapSPP}} \\\\newcommand{øNP}{\\\\mathsf{coNP}} \\\\newcommand{\\\\eps}{ε} \\\\newcommand{\\\\ensuremath}[1]{#1} $We continue the study of statistical zero-knowledge (SZK) proofs, both interactive and noninteractive, for computational problems on point lattices. We are particularly interested in the problem $\\\\gapspp$ of approximating the $ε$-smoothing parameter (for some $ε < 1/2$) of an $n$-dimensional lattice. The smoothing parameter is a key quantity in the study of lattices, and $\\\\gapspp$ has been emerging as a core problem in lattice-based cryptography, e.g., in worst-case to average-case reductions. We show that $\\\\gapspp$ admits SZK proofs for remarkably low approximation factors, improving on prior work by up to roughly $\\\\sqrt{n}$. Specifically: $•$ There is a noninteractive SZK proof for $O(łog(n) \\\\sqrt{łog (1/\\\\eps)})$-approximate $\\\\gapspp$. Moreover, for any negligible $ε$ and a larger approximation factor $Øtil(\\\\sqrt{n łog(1/\\\\eps)})$, there is such a proof with an efficient prover. $•$ There is an (interactive) SZK proof with an efficient prover for $O(łog n + \\\\sqrt{łog(1/\\\\eps)/łog n})$-approximate $\\\\problem{coGapSPP}$. We show this by proving that $O(łog n)$-approximate $\\\\gapspp$ is in $øNP$. In addition, we give an (interactive) SZK proof with an efficient prover for approximating the lattice covering radius to within an $O(\\\\sqrt{n})$ factor, improving upon the prior best factor of $ω(\\\\sqrt{n łog n})$.\",\"urldate\":\"2018-05-30\",\"url\":\"https://eprint.iacr.org/2017/1226\",\"booktitle\":\"PKC\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Alamati\"],\"firstnames\":[\"Navid\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Peikert\"],\"firstnames\":[\"Chris\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2018\",\"bibtex\":\"@inproceedings{APSNewOld18,\\n  title = {New (and old) proof systems for lattice problems},\\n  abstract = {$\\n\\\\newcommand{\\\\Otil}{\\\\ensuremath{\\\\widetilde{O}}}\\n\\\\newcommand{\\\\problem}[1]{\\\\ensuremath{\\\\mathsf{#1}}}\\n\\\\newcommand{\\\\gapspp}{\\\\problem{GapSPP}}\\n\\\\newcommand{\\\\oNP}{\\\\mathsf{coNP}}\\n\\\\newcommand{\\\\eps}{\\\\epsilon}\\n\\\\newcommand{\\\\ensuremath}[1]{#1}\\n$We continue the study of statistical zero-knowledge (SZK)\\nproofs, both interactive and noninteractive, for computational\\nproblems on point lattices.  We are particularly interested in the\\nproblem $\\\\gapspp$ of approximating the $\\\\epsilon$-smoothing\\nparameter (for some $\\\\epsilon < 1/2$) of an $n$-dimensional\\nlattice.  The smoothing parameter is a key quantity in the study of\\nlattices, and $\\\\gapspp$ has been emerging as a core problem in\\nlattice-based cryptography, e.g., in worst-case to average-case\\nreductions.\\n\\nWe show that $\\\\gapspp$ admits SZK proofs for remarkably low\\napproximation factors, improving on prior work by up to\\nroughly $\\\\sqrt{n}$.  Specifically:\\n\\n $\\\\bullet$  There is a noninteractive SZK proof for\\n$O(\\\\log(n) \\\\sqrt{\\\\log (1/\\\\eps)})$-approximate $\\\\gapspp$.  Moreover,\\nfor any negligible $\\\\epsilon$ and a larger approximation factor\\n$\\\\Otil(\\\\sqrt{n \\\\log(1/\\\\eps)})$, there is such a proof with an\\nefficient prover.\\n $\\\\bullet$  There is an (interactive) SZK proof with an efficient prover for\\n$O(\\\\log n + \\\\sqrt{\\\\log(1/\\\\eps)/\\\\log n})$-approximate\\n$\\\\problem{coGapSPP}$.  We show this by proving that\\n$O(\\\\log n)$-approximate $\\\\gapspp$ is in $\\\\oNP$.\\n\\nIn addition, we give an (interactive) SZK proof with an efficient\\nprover for approximating the lattice covering radius to within\\nan $O(\\\\sqrt{n})$ factor, improving upon the prior best factor of\\n$\\\\omega(\\\\sqrt{n \\\\log n})$.},\\n  urldate = {2018-05-30},\\n  url = {https://eprint.iacr.org/2017/1226},\\n  booktitle = {PKC},\\n  author = {Alamati, Navid and Peikert, Chris and {Stephens-Davidowitz}, Noah},\\n  year = {2018}\\n}\\n\\n\",\"author_short\":[\"Alamati, N.\",\"Peikert, C.\",\"Stephens-Davidowitz, N.\"],\"key\":\"APSNewOld18\",\"id\":\"APSNewOld18\",\"bibbaseid\":\"alamati-peikert-stephensdavidowitz-newandoldproofsystemsforlatticeproblems-2018\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://eprint.iacr.org/2017/1226\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":19,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Implementing BP-obfuscation using graph-induced encoding\",\"abstract\":\"We implemented (a simplified version of) the branching-program obfuscator due to Gentry et al. (GGH15), which is itself a variation of the first obfuscation candidate by Garg et al. (GGHRSW13). To keep within the realm of feasibility, we had to give up on some aspects of the construction, specifically the ‘‘multiplicative bundling'' factors that protect against mixed-input attacks. Hence our implementation can only support read-once branching programs. To be able to handle anything more than just toy problems, we developed a host of algorithmic and code-level optimizations. These include new variants of discrete Gaussian sampler and lattice trapdoor sampler, efficient matrix-manipulation routines, and many tradeoffs. We expect that these optimizations will find other uses in lattice-based cryptography beyond just obfuscation. Our implementation is the first obfuscation attempt using the GGH15 graded encoding scheme, offering performance advantages over other graded encoding methods when obfuscating finite-state machines with many states. In out most demanding setting, we were able to obfuscate programs with input length of 20 nibbles (80 bits) and over 100 states, which seems out of reach for prior implementations. Although further optimizations are surely possible, we do not expect any implementation of current schemes to be able to handle much larger parameters.\",\"urldate\":\"2018-05-30\",\"url\":\"https://eprint.iacr.org/2017/104\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Halevi\"],\"firstnames\":[\"Shai\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Halevi\"],\"firstnames\":[\"Tzipora\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Shoup\"],\"firstnames\":[\"Victor\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2017\",\"booktitle\":\"CCS\",\"bibtex\":\"@inproceedings{HHSSImplementingBPObfuscation17,\\n  title = {Implementing {BP}-obfuscation using graph-induced encoding},\\n  abstract = {We implemented (a simplified version of) the branching-program obfuscator due to Gentry et al. (GGH15), which is itself a variation of the first obfuscation candidate by Garg et al. (GGHRSW13). To keep within the realm of feasibility, we had to give up on some aspects of the construction, specifically the ‘‘multiplicative bundling'' factors that protect against mixed-input attacks. Hence our implementation can only support read-once branching programs.\\n\\nTo be able to handle anything more than just toy problems, we developed a host of algorithmic and code-level optimizations. These include new variants of discrete Gaussian sampler and lattice trapdoor sampler, efficient matrix-manipulation routines, and many tradeoffs. We expect that these optimizations will find other uses in lattice-based cryptography beyond just obfuscation.\\n\\nOur implementation is the first obfuscation attempt using the GGH15 graded encoding scheme, offering performance advantages over other graded encoding methods when obfuscating finite-state machines with many states. In out most demanding setting, we were able to obfuscate programs with input length of 20 nibbles (80 bits) and over 100 states, which seems out of reach for prior implementations. Although further optimizations are surely possible, we do not expect any implementation of current schemes to be able to handle much larger parameters.},\\n  urldate = {2018-05-30},\\n  url = {https://eprint.iacr.org/2017/104},\\n  author = {Halevi, Shai and Halevi, Tzipora and Shoup, Victor and {Stephens-Davidowitz}, Noah},\\n  year = {2017},\\n  booktitle = {CCS},\\n}\\n\\n\",\"author_short\":[\"Halevi, S.\",\"Halevi, T.\",\"Shoup, V.\",\"Stephens-Davidowitz, N.\"],\"key\":\"HHSSImplementingBPObfuscation17\",\"id\":\"HHSSImplementingBPObfuscation17\",\"bibbaseid\":\"halevi-halevi-shoup-stephensdavidowitz-implementingbpobfuscationusinggraphinducedencoding-2017\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://eprint.iacr.org/2017/104\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":8,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Message transmission with Reverse Firewalls–secure communication on corrupted machines\",\"abstract\":\"Suppose Alice wishes to send a message to Bob privately over an untrusted channel. Cryptographers have developed a whole suite of tools to accomplish this task, with a wide variety of notions of security, setup assumptions, and running times. However, almost all prior work on this topic made a seemingly innocent assumption: that Alice has access to a trusted computer with a proper implementation of the protocol. The Snowden revelations show us that, in fact, powerful adversaries can and will corrupt users' machines in order to compromise their security. And, (presumably) accidental vulnerabilities are regularly found in popular cryptographic software, showing that users cannot even trust implementations that were created honestly. This leads to the following (seemingly absurd) question: ‘‘Can Alice securely send a message to Bob even if she cannot trust her own computer?!'' Bellare, Paterson, and Rogaway recently studied this question. They show a strong lower bound that in particular rules out even semantically secure public-key encryption in their model. However, Mironov and Stephens-Davidowitz recently introduced a new framework for solving such problems: reverse firewalls. A secure reverse firewall is a third party that ‘‘sits between Alice and the outside world'' and modifies her sent and received messages so that even if the her machine has been corrupted, Alice's security is still guaranteed. We show how to use reverse firewalls to sidestep the impossibility result of Bellare et al., and we achieve strong security guarantees in this extreme setting. Indeed, we find a rich structure of solutions that vary in efficiency, security, and setup assumptions, in close analogy with message transmission in the classical setting. Our strongest and most important result shows a protocol that achieves interactive, concurrent CCA-secure message transmission with a reverse firewall–i.e., CCA-secure message transmission on a possibly compromised machine! Surprisingly, this protocol is quite efficient and simple, requiring only four rounds and a small constant number of public-key operations for each party. It could easily be used in practice. Behind this result is a technical composition theorem that shows how key agreement with a sufficiently secure reverse firewall can be used to construct a message-transmission protocol with its own secure reverse firewall.\",\"urldate\":\"2018-05-30\",\"url\":\"https://eprint.iacr.org/2015/548\",\"booktitle\":\"CRYPTO\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Dodis\"],\"firstnames\":[\"Yevgeniy\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Mironov\"],\"firstnames\":[\"Ilya\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2016\",\"url_crypto_talk\":\"http://www.youtube.com/watch?v=2DOc-9u1EbQ\",\"bibtex\":\"@inproceedings{DMSMessageTransmission16,\\n  title = {Message transmission with Reverse Firewalls--secure communication on corrupted machines},\\n  abstract = {Suppose Alice wishes to send a message to Bob privately over an untrusted channel. Cryptographers have developed a whole suite of tools to accomplish this task, with a wide variety of notions of security, setup assumptions, and running times. However, almost all prior work on this topic made a seemingly innocent assumption: that Alice has access to a trusted computer with a proper implementation of the protocol. The Snowden revelations show us that, in fact, powerful adversaries can and will corrupt users' machines in order to compromise their security. And, (presumably) accidental vulnerabilities are regularly found in popular cryptographic software, showing that users cannot even trust implementations that were created honestly. This leads to the following (seemingly absurd) question: ‘‘Can Alice securely send a message to Bob even if she cannot trust her own computer?!''\\n\\nBellare, Paterson, and Rogaway recently studied this question. They show a strong lower bound that in particular rules out even semantically secure public-key encryption in their model. However, Mironov and Stephens-Davidowitz recently introduced a new framework for solving such problems: reverse firewalls. A secure reverse firewall is a third party that ‘‘sits between Alice and the outside world'' and modifies her sent and received messages so that even if the her machine has been corrupted, Alice's security is still guaranteed. We show how to use reverse firewalls to sidestep the impossibility result of Bellare et al., and we achieve strong security guarantees in this extreme setting.\\n\\nIndeed, we find a rich structure of solutions that vary in efficiency, security, and setup assumptions, in close analogy with message transmission in the classical setting. Our strongest and most important result shows a protocol that achieves interactive, concurrent CCA-secure message transmission with a reverse firewall--i.e., CCA-secure message transmission on a possibly compromised machine! Surprisingly, this protocol is quite efficient and simple, requiring only four rounds and a small constant number of public-key operations for each party. It could easily be used in practice. Behind this result is a technical composition theorem that shows how key agreement with a sufficiently secure reverse firewall can be used to construct a message-transmission protocol with its own secure reverse firewall.},\\n  urldate = {2018-05-30},\\n  url = {https://eprint.iacr.org/2015/548},\\n  booktitle = {CRYPTO},\\n  author = {Dodis, Yevgeniy and Mironov, Ilya and {Stephens-Davidowitz}, Noah},\\n  year = {2016},\\n  url_CRYPTO_talk = {http://www.youtube.com/watch?v=2DOc-9u1EbQ}\\n}\\n\\n\",\"author_short\":[\"Dodis, Y.\",\"Mironov, I.\",\"Stephens-Davidowitz, N.\"],\"key\":\"DMSMessageTransmission16\",\"id\":\"DMSMessageTransmission16\",\"bibbaseid\":\"dodis-mironov-stephensdavidowitz-messagetransmissionwithreversefirewallssecurecommunicationoncorruptedmachines-2016\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://eprint.iacr.org/2015/548\",\" crypto talk\":\"http://www.youtube.com/watch?v=2DOc-9u1EbQ\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":11,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"Cryptographic Reverse Firewalls\",\"abstract\":\"Recent revelations by Edward Snowden show that a user's own hardware and software can be used against her in various ways (e.g., to leak her private information). And, a series of recent announcements has shown that widespread implementations of cryptographic software often contain serious bugs that cripple security. This motivates us to consider the following (seemingly absurd) question: How can we guarantee a user's security when she may be using a malfunctioning or arbitrarily compromised machine? To that end, we introduce the notion of a cryptographic reverse firewall (RF). Such a machine sits between the user's computer and the outside world, potentially modifying the messages that she sends and receives as she engages in a cryptographic protocol. A good reverse firewall accomplishes three things: (1) it maintains functionality, so that if the user's computer is working correctly, the RF will not break the functionality of the underlying protocol; (2) it preserves security, so that regardless of how the user's machine behaves, the presence of the RF will provide the same security guarantees as the properly implemented protocol; and (3) it resists exfiltration, so that regardless of how the user's machine behaves, the presence of the RF will prevent the machine from leaking any information to the outside world. Importantly, we do not model the firewall as a trusted party. It does not share any secrets with the user, and the protocol should be both secure and functional without the firewall (when it is implemented correctly). Our security definition for reverse firewalls depends on the security notion(s) of the underlying protocol. As such, our model generalizes much prior work and provides a general framework for building cryptographic schemes that remain secure when run on compromised machine. It is also a modern take on a line of work that received considerable attention in the 80s and 90s. We show that our definition is achievable by constructing a private function evaluation protocol with a secure reverse firewall for each party. Along the way, we design an oblivious transfer protocol that also has a secure RF for each party, and a rerandomizable garbled circuit that is both more efficient and more secure than previous constructions. Finally, we show how to convert $\\\\$emph\\\\any\\\\ protocol into a protocol with an exfiltration-resistant reverse firewall for all parties. (In other words, we provide a generic way to prevent a tampered machine from leaking information to an eavesdropper via any protocol.)\",\"urldate\":\"2018-05-30\",\"url\":\"http://eprint.iacr.org/2014/758\",\"booktitle\":\"Eurocrypt\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Mironov\"],\"firstnames\":[\"Ilya\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2015\",\"url_slides\":\"http://www.cs.nyu.edu/crg/newSlides/02_23_16.pdf\",\"bibtex\":\"@inproceedings{MSCryptographicReverse15,\\n  title = {Cryptographic Reverse Firewalls},\\n  abstract = {Recent revelations by Edward Snowden show that a user's own hardware and software can be used against her in various ways (e.g., to leak her private information). And, a series of recent announcements has shown that widespread implementations of cryptographic software often contain serious bugs that cripple security. This motivates us to consider the following (seemingly absurd) question: How can we guarantee a user's security when she may be using a malfunctioning or arbitrarily compromised machine? To that end, we introduce the notion of a cryptographic reverse firewall (RF). Such a machine sits between the user's computer and the outside world, potentially modifying the messages that she sends and receives as she engages in a cryptographic protocol.\\n\\nA good reverse firewall accomplishes three things: (1) it maintains functionality, so that if the user's computer is working correctly, the RF will not break the functionality of the underlying protocol; (2) it preserves security, so that regardless of how the user's machine behaves, the presence of the RF will provide the same security guarantees as the properly implemented protocol; and (3) it resists exfiltration, so that regardless of how the user's machine behaves, the presence of the RF will prevent the machine from leaking any information to the outside world. Importantly, we do not model the firewall as a trusted party. It does not share any secrets with the user, and the protocol should be both secure and functional without the firewall (when it is implemented correctly).\\n\\nOur security definition for reverse firewalls depends on the security notion(s) of the underlying protocol. As such, our model generalizes much prior work and provides a general framework for building cryptographic schemes that remain secure when run on compromised machine. It is also a modern take on a line of work that received considerable attention in the 80s and 90s.\\n\\nWe show that our definition is achievable by constructing a private function evaluation protocol with a secure reverse firewall for each party. Along the way, we design an oblivious transfer protocol that also has a secure RF for each party, and a rerandomizable garbled circuit that is both more efficient and more secure than previous constructions. Finally, we show how to convert $\\\\backslash$emph\\\\{any\\\\} protocol into a protocol with an exfiltration-resistant reverse firewall for all parties. (In other words, we provide a generic way to prevent a tampered machine from leaking information to an eavesdropper via any protocol.)},\\n  urldate = {2018-05-30},\\n  url = {http://eprint.iacr.org/2014/758},\\n  booktitle = {Eurocrypt},\\n  author = {Mironov, Ilya and {Stephens-Davidowitz}, Noah},\\n  year = {2015},\\n  url_slides = {http://www.cs.nyu.edu/crg/newSlides/02_23_16.pdf}\\n}\\n\\n\",\"author_short\":[\"Mironov, I.\",\"Stephens-Davidowitz, N.\"],\"key\":\"MSCryptographicReverse15\",\"id\":\"MSCryptographicReverse15\",\"bibbaseid\":\"mironov-stephensdavidowitz-cryptographicreversefirewalls-2015\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://eprint.iacr.org/2014/758\",\" slides\":\"http://www.cs.nyu.edu/crg/newSlides/02_23_16.pdf\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":35,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"SETH-hardness of coding problems\",\"booktitle\":\"FOCS\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Vaikuntanathan\"],\"firstnames\":[\"Vinod\"],\"suffixes\":[]}],\"url\":\"http://eccc.weizmann.ac.il/report/2019/159/\",\"year\":\"2019\",\"abstract\":\"We show that assuming the strong exponential-time hypothesis (SETH), there are \\\\em no non-trivial algorithms for the nearest codeword problem (NCP), the minimum distance problem (MDP), or the nearest codeword problem with preprocessing (NCPP) on linear codes over any finite field. More precisely, we show that there are no NCP, MDP, or NCPP algorithms running in time $q^{(1-ε)n}$ for any constant $ε>0$ for codes with $q^n$ codewords. (In the case of NCPP, we assume non-uniform SETH.) % \\\\nnoteHere's an attempt at bragging a bit. Could just delete it. Our results are inspired by recent similar lower bounds for computational lattice problems. However, our results are qualitatively quite different. In fact, our lower bounds show a strong \\\\emphseparation between lattices and codes: these coding problems have no non-trivial algorithms while highly non-trivial algorithms are known for the analogous lattice problems. We also show that there are no sub-exponential-time algorithms for $γ$-approximate versions of these problems for some constant $γ > 1$, under different versions of the exponential-time hypothesis.\",\"bibtex\":\"@inproceedings{SVCodeSETH19,\\n\\ttitle = {{SETH}-hardness of coding problems},\\n\\tbooktitle = {FOCS},\\n\\tauthor = {{Stephens-Davidowitz}, Noah and Vaikuntanathan, Vinod},\\n\\turl = {http://eccc.weizmann.ac.il/report/2019/159/},\\n\\tyear = {2019},\\n\\tabstract = {We show that assuming the strong exponential-time hypothesis (SETH), there are {\\\\em no non-trivial algorithms} for the nearest codeword problem (NCP), the minimum distance problem (MDP), or the nearest codeword problem with preprocessing (NCPP) on linear codes over any finite field. More precisely, we show that there are no NCP, MDP, or NCPP algorithms running in time $q^{(1-\\\\epsilon)n}$ for any constant $\\\\epsilon>0$ for codes with $q^n$ codewords. (In the case of NCPP, we assume non-uniform SETH.)\\n\\t\\n\\t%\\t\\t\\\\nnote{Here's an attempt at bragging a bit. Could just delete it.} Our results are inspired by recent similar lower bounds for computational lattice problems. However, our results are qualitatively quite different. In fact, our lower bounds show a strong \\\\emph{separation} between lattices and codes: these coding problems have no non-trivial algorithms while highly non-trivial algorithms are known for the analogous lattice problems.\\n\\t\\n\\tWe also show that there are no sub-exponential-time algorithms for $\\\\gamma$-approximate versions of these problems for some constant $\\\\gamma > 1$, under different versions of the exponential-time hypothesis.},\\n}\\n\\n\",\"author_short\":[\"Stephens-Davidowitz, N.\",\"Vaikuntanathan, V.\"],\"key\":\"SVCodeSETH19\",\"id\":\"SVCodeSETH19\",\"bibbaseid\":\"stephensdavidowitz-vaikuntanathan-sethhardnessofcodingproblems-2019\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://eccc.weizmann.ac.il/report/2019/159/\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":100,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"title\":\"How to eat your entropy and have it too – optimal recovery strategies for compromised RNGs\",\"abstract\":\"Random number generators (RNGs) play a crucial role in many cryptographic schemes and protocols, but their security proof usually assumes that their internal state is initialized with truly random seeds and remains secret at all times. However, in many practical situations these are unrealistic assumptions: The seed is often gathered after a reset/reboot from low entropy external events such as the timing of manual key presses, and the state can be compromised at unknown points in time via side channels or penetration attacks. The usual remedy (used by all the major operating systems, including Windows, Linux, FreeBSD, MacOS, iOS, etc.) is to periodically replenish the internal state through an auxiliary input with additional randomness harvested from the environment. However, recovering from such attacks in a provably correct and computationally optimal way had remained an unsolved challenge so far. In this paper we formalize the problem of designing an efficient recovery mechanism from state compromise, by considering it as an online optimization problem. If we knew the timing of the last compromise and the amount of entropy gathered since then, we could stop producing any outputs until the state becomes truly random again. However, our challenge is to recover within a time proportional to this optimal solution even in the hardest (and most realistic) case in which (a) we know nothing about the timing of the last state compromise, and the amount of new entropy injected since then into the state, and (b) any premature production of outputs leads to the total loss of all the added entropy \\\\$\\\\$em used by the RNG\\\\, since the attacker can use brute force to enumerate all the possible low-entropy states. In other words, the challenge is to develop recovery mechanisms which are guaranteed to save the day as quickly as possible after a compromise we are not even aware of. The dilemma that we face is that any entropy used prematurely will be lost, and any entropy which is kept unused will delay the recovery. After developing our formal definitional framework for RNGs with inputs, we show how to construct a nearly optimal RNG which is secure in our model. Our technique is inspired by the design of the Fortuna RNG (which is a heuristic RNG construction that is currently used by Windows and comes without any formal analysis), but we non-trivially adapt it to our much stronger adversarial setting. Along the way, our formal treatment of Fortuna enables us to improve its entropy efficiency by almost a factor of two, and to show that our improved construction is essentially tight, by proving a rigorous lower bound on the possible efficiency of any recovery mechanism in our very general model of the problem.\",\"urldate\":\"2018-05-30\",\"url\":\"https://eprint.iacr.org/2014/167\",\"booktitle\":\"CRYPTO\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Dodis\"],\"firstnames\":[\"Yevgeniy\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Shamir\"],\"firstnames\":[\"Adi\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Wichs\"],\"firstnames\":[\"Daniel\"],\"suffixes\":[]}],\"year\":\"2014\",\"url_crypto_talk\":\"http://www.youtube.com/watch?v=CTuA1wY-704\",\"bibtex\":\"@inproceedings{DSSWHowEat14,\\n  title = {How to eat your entropy and have it too -- optimal recovery strategies for compromised RNGs},\\n  abstract = {Random number generators (RNGs) play a crucial role in many cryptographic schemes and protocols, but their security proof usually assumes that their internal state is initialized with truly random seeds and remains secret at all times. However, in many practical situations these are unrealistic assumptions: The seed is often gathered after a reset/reboot from low entropy external events such as the timing of manual key presses, and the state can be compromised at unknown points in time via side channels or penetration attacks. The usual remedy (used by all the major operating systems, including Windows, Linux, FreeBSD, MacOS, iOS, etc.) is to periodically replenish the internal state through an auxiliary input with additional randomness harvested from the environment. However, recovering from such attacks in a provably correct and computationally optimal way had remained an unsolved challenge so far.\\n\\nIn this paper we formalize the problem of designing an efficient recovery mechanism from state compromise, by considering it as an online optimization problem. If we knew the timing of the last compromise and the amount of entropy gathered since then, we could stop producing any outputs until the state becomes truly random again. However, our challenge is to recover within a time proportional to this optimal solution even in the hardest (and most realistic) case in which (a) we know nothing about the timing of the last state compromise, and the amount of new entropy injected since then into the state, and (b) any premature production of outputs leads to the total loss of all the added entropy \\\\{$\\\\backslash$em used by the RNG\\\\}, since the attacker can use brute force to enumerate all the possible low-entropy states. In other words, the challenge is to develop recovery mechanisms which are guaranteed to save the day as quickly as possible after a compromise we are not even aware of. The dilemma that we face is that any entropy used prematurely will be lost, and any entropy which is kept unused will delay the recovery.\\n\\nAfter developing our formal definitional framework for RNGs with inputs, we show how to construct a nearly optimal RNG which is secure in our model. Our technique is inspired by the design of the Fortuna RNG (which is a heuristic RNG construction that is currently used by Windows and comes without any formal analysis), but we non-trivially adapt it to our much stronger adversarial setting. Along the way, our formal treatment of Fortuna enables us to improve its entropy efficiency by almost a factor of two, and to show that our improved construction is essentially tight, by proving a rigorous lower bound on the possible efficiency of any recovery mechanism in our very general model of the problem.},\\n  urldate = {2018-05-30},\\n  url = {https://eprint.iacr.org/2014/167},\\n  booktitle = {CRYPTO},\\n  author = {Dodis, Yevgeniy and Shamir, Adi and {Stephens-Davidowitz}, Noah and Wichs, Daniel},\\n  year = {2014},\\n  url_crypto_talk = {http://www.youtube.com/watch?v=CTuA1wY-704}\\n}\\n\\n\",\"author_short\":[\"Dodis, Y.\",\"Shamir, A.\",\"Stephens-Davidowitz, N.\",\"Wichs, D.\"],\"key\":\"DSSWHowEat14\",\"id\":\"DSSWHowEat14\",\"bibbaseid\":\"dodis-shamir-stephensdavidowitz-wichs-howtoeatyourentropyandhaveittoooptimalrecoverystrategiesforcompromisedrngs-2014\",\"role\":\"author\",\"urls\":{\"Paper\":\"https://eprint.iacr.org/2014/167\",\" crypto talk\":\"http://www.youtube.com/watch?v=CTuA1wY-704\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":17,\"html\":\"\"},{\"bibtype\":\"unpublished\",\"type\":\"unpublished\",\"title\":\"The Cyclic Sieving Phenomenon on the Alternating Sign Matrices\",\"abstract\":\"We first present a previously unpublished result of Stanton that the group of order four generated by rotation by 90 degrees acting on alternating sign matrices exhibits the CSP with the obvious q-analogue of |ASM(n)|.\",\"url\":\"http://noahsd.com/papers/ASMCSP.pdf\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Cloninger\"],\"firstnames\":[\"Alex\"],\"suffixes\":[]}],\"year\":\"2007\",\"bibtex\":\"@unpublished{SCCyclicSieving07,\\n  title = {The Cyclic Sieving Phenomenon on the Alternating Sign Matrices},\\n  abstract = {We first present a previously unpublished result of Stanton that the group of order four generated by rotation by 90 degrees acting on alternating sign matrices exhibits the CSP with the obvious q-analogue of |ASM(n)|.},\\n  url = {http://noahsd.com/papers/ASMCSP.pdf},\\n  author = {{Stephens-Davidowitz}, Noah and Cloninger, Alex},\\n  year = {2007}\\n}\\n\\n\",\"author_short\":[\"Stephens-Davidowitz, N.\",\"Cloninger, A.\"],\"key\":\"SCCyclicSieving07\",\"id\":\"SCCyclicSieving07\",\"bibbaseid\":\"stephensdavidowitz-cloninger-thecyclicsievingphenomenononthealternatingsignmatrices-2007\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://noahsd.com/papers/ASMCSP.pdf\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":28,\"html\":\"\"},{\"bibtype\":\"unpublished\",\"type\":\"unpublished\",\"title\":\"On link patterns and Alternating Sign Matrices\",\"abstract\":\"We devise an algorithm to generate an alternating sign matrix(ASM) with the same blue and green link pattern on the circle. We also find a characterization of link patterns that are achieved by a unique ASM.\",\"url\":\"http://noahsd.com/papers/ASMLinks.pdf\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Hong\"],\"firstnames\":[\"Fraser\",\"Chiu\",\"Kim\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Cloninger\"],\"firstnames\":[\"Alex\"],\"suffixes\":[]},{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2007\",\"bibtex\":\"@unpublished{HCSLinkPatterns07,\\n  title = {On link patterns and Alternating Sign Matrices},\\n  abstract = {We devise an algorithm to generate an alternating sign matrix(ASM) with the same blue and green link pattern on the circle. We also find a characterization of link patterns that are achieved by a unique ASM.},\\n  url = {http://noahsd.com/papers/ASMLinks.pdf},\\n  author = {Hong, Fraser Chiu Kim and Cloninger, Alex and {Stephens-Davidowitz}, Noah},\\n  year = {2007}\\n}\\n\\n\\n\",\"author_short\":[\"Hong, F. C. K.\",\"Cloninger, A.\",\"Stephens-Davidowitz, N.\"],\"key\":\"HCSLinkPatterns07\",\"id\":\"HCSLinkPatterns07\",\"bibbaseid\":\"hong-cloninger-stephensdavidowitz-onlinkpatternsandalternatingsignmatrices-2007\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://noahsd.com/papers/ASMLinks.pdf\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":17,\"html\":\"\"},{\"bibtype\":\"inproceedings\",\"type\":\"inproceedings\",\"abstract\":\"$ \\\\newcommand{Øtil}{\\\\ensuremath{\\\\widetilde{O}}} \\\\newcommand{\\\\problem}[1]{\\\\ensuremath{\\\\mathsf{#1}}} \\\\newcommand{\\\\gapspp}{\\\\problem{GapSPP}} \\\\newcommand{øNP}{\\\\mathsf{coNP}} \\\\newcommand{\\\\eps}{ε} \\\\newcommand{\\\\ensuremath}[1]{#1} \\\\newcommand{\\\\R}{ℝ} \\\\newcommand{łat}{\\\\mathcal{L}} $For $0 ≤ α ≤ 1/2$, we show an algorithm that does the following. Given appropriate preprocessing $P(łat)$ consisting of $N_α := 2^{O(n^{1-2α} + łog n)}$ vectors in some lattice $łat ⊂ \\\\R^n$ and a target vector $t ∈ \\\\R^n$, the algorithm finds $y ∈ łat$ such that $\\\\|y- t\\\\| ≤ n^{1/2 + α} η(łat)$ in time $\\\\mathrm{poly}(n) · N_α$, where $η(łat)$ is the smoothing parameter of the lattice. The algorithm itself is very simple and was originally studied by Doulgerakis, Laarhoven, and de Weger (to appear in PQCrypto, 2019), who proved its correctness under certain reasonable heuristic assumptions on the preprocessing $P(łat)$ and target $t$. Our primary contribution is a choice of preprocessing that allows us to prove correctness without any heuristic assumptions. Our main motivation for studying this is the recent breakthrough algorithm for IdealSVP due to Hanrot, Pellet–Mary, and Stehlé (to appear in Eurocrypt, 2019), which uses the DLW algorithm as a key subprocedure. In particular, our result implies that the HPS IdealSVP algorithm can be made to work with fewer heuristic assumptions. Our only technical tool is the discrete Gaussian distribution over $łat$, and in particular, a lemma showing that the one-dimensional projections of this distribution behave very similarly to the continuous Gaussian. This lemma might be of independent interest.\",\"title\":\"A time-distance trade-off for GDD with preprocessing—Instantiating the DLW heuristic\",\"url\":\"http://arxiv.org/abs/1902.08340\",\"author\":[{\"propositions\":[],\"lastnames\":[\"Stephens-Davidowitz\"],\"firstnames\":[\"Noah\"],\"suffixes\":[]}],\"year\":\"2019\",\"booktitle\":\"CCC\",\"bibtex\":\"@inproceedings{SteTimedistanceTradeoff19,\\n\\tabstract = {$\\n\\t\\\\newcommand{\\\\Otil}{\\\\ensuremath{\\\\widetilde{O}}}\\n\\t\\\\newcommand{\\\\problem}[1]{\\\\ensuremath{\\\\mathsf{#1}}}\\n\\t\\\\newcommand{\\\\gapspp}{\\\\problem{GapSPP}}\\n\\t\\\\newcommand{\\\\oNP}{\\\\mathsf{coNP}}\\n\\t\\\\newcommand{\\\\eps}{\\\\epsilon}\\n\\t\\\\newcommand{\\\\ensuremath}[1]{#1}\\n\\t\\\\newcommand{\\\\R}{\\\\mathbb{R}} \\\\newcommand{\\\\lat}{\\\\mathcal{L}} $For $0 \\\\leq \\\\alpha \\\\leq 1/2$, we show an algorithm that does the following. Given appropriate preprocessing $P(\\\\lat)$ consisting of $N_\\\\alpha := 2^{O(n^{1-2\\\\alpha} + \\\\log n)}$ vectors in some lattice $\\\\lat \\\\subset \\\\R^n$ and a target vector $t \\\\in \\\\R^n$, the algorithm finds $y \\\\in \\\\lat$ such that $\\\\|y- t\\\\| \\\\leq n^{1/2 + \\\\alpha} \\\\eta(\\\\lat)$ in time $\\\\mathrm{poly}(n) \\\\cdot N_\\\\alpha$, where $\\\\eta(\\\\lat)$ is the smoothing parameter of the lattice.\\n\\t\\n\\tThe algorithm itself is very simple and was originally studied by Doulgerakis, Laarhoven, and de Weger (to appear in PQCrypto, 2019), who proved its correctness under certain reasonable heuristic assumptions on the preprocessing $P(\\\\lat)$ and target $t$. Our primary contribution is a choice of preprocessing that allows us to prove correctness without any heuristic assumptions.\\n\\t\\n\\tOur main motivation for studying this is the recent breakthrough algorithm for IdealSVP due to Hanrot, Pellet--Mary, and Stehl\\\\'e (to appear in Eurocrypt, 2019), which uses the DLW algorithm as a key subprocedure. In particular, our result implies that the HPS IdealSVP algorithm can be made to work with fewer heuristic assumptions.\\n\\t\\n\\tOur only technical tool is the discrete Gaussian distribution over $\\\\lat$, and in particular, a lemma showing that the one-dimensional projections of this distribution behave very similarly to the continuous Gaussian. This lemma might be of independent interest.},\\n\\ttitle = {A time-distance trade-off for {GDD} with preprocessing---{Instantiating} the {DLW} heuristic},\\n\\turl = {http://arxiv.org/abs/1902.08340},\\n\\tauthor = {{Stephens-Davidowitz}, Noah},\\n\\tyear = {2019},\\n\\tbooktitle={CCC},\\n}\\n\\n\\n\\n\",\"author_short\":[\"Stephens-Davidowitz, N.\"],\"key\":\"SteTimedistanceTradeoff19\",\"id\":\"SteTimedistanceTradeoff19\",\"bibbaseid\":\"stephensdavidowitz-atimedistancetradeoffforgddwithpreprocessinginstantiatingthedlwheuristic-2019\",\"role\":\"author\",\"urls\":{\"Paper\":\"http://arxiv.org/abs/1902.08340\"},\"metadata\":{\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\"downloads\":20,\"html\":\"\"}],\n      metadata: {\"owner\":\"stephens-davidowitz, n\",\"authorlinks\":{\"stephens-davidowitz, n\":\"http://www.noahsd.com/\"}},\n      ownerID: \"NsKfZS8svvuZwZEBa\"\n    };\n  </script>\n\n  <script type=\"text/javascript\">\n  var site$;\n  if (typeof $ != 'undefined') {\n    console.log('existing jquery: storing and then restoring');\n    site$ = $;\n    $ = null;\n  }\n  </script>\n\n  <script src=\"https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js\">\n  </script>\n  <script type=\"text/javascript\">\n  if (site$) {\n    console.log('existing jquery: avoiding conflict and restoring');\n    bb$ = $.noConflict(true);\n    $ = site$;\n  } else {\n    bb$ = $;\n  }\n  </script>\n\n  <script src=\"//bibbase.org/js/bibbase.min.js\"\n          type=\"text/javascript\">\n  </script>\n\n  <script type=\"text/javascript\"\n          src=\"https://cdnjs.cloudflare.com/ajax/libs/mathjax/2.7.1/MathJax.js?config=TeX-AMS-MML_HTMLorMML\">\n  </script>\n  <script type=\"text/x-mathjax-config\">\n    MathJax.Hub.Config({tex2jax: {inlineMath: [['$','$'], ['\\\\(','\\\\)']]},\n                        skipTags: [\"body\"],\n                        processClass: \"bibbase_paper\"});\n  </script>\n\n  <style>\n  @media print {\n    .dontprint {\n        display: none !important;\n    }\n\n  .bibbase_group {\n    background-color: #E0E0E0;\n    font-style: italic;\n    font-size: larger;\n    text-shadow: 0px 0px 3px #FFFFFF;\n    border-radius: 4px 4px 4px 4px;\n    -moz-border-radius: 4px 4px 4px 4px;\n    -webkit-border-radius: 4px;\n    padding: 5px 40px 5px;\n    margin-top: 10px;\n    margin-bottom: 5px;\n    cursor: pointer;\n  }\n\n  .bibbase_paper {\n    margin-bottom: 5px;\n  }\n\n  }\n  </style>\n\n  \n  <div style=\"float: right; margin-right: 10px; margin-top: 10px; text-align: right; font-size: 12px\">\n    generated by\n    <a href=\"//bibbase.org\"\n       onclick=\"trackOutboundLink('bibbase', 'logo clicked', window.location.href, '//bibbase.org'); return false;\">\n      <img src=\"//bibbase.org/img/logo.svg\"\n           style=\"vertical-align: middle; margin-left: 3px; height: 16px;\"/\n           alt=\"bibbase.org\"\n           title=\"BibBase – The easiest way to maintain your publications page.\"\n        ></a>\n    \n  </div>\n  \n\n  <div id=\"bibbase_header\" class=\"dontprint\" style=\"\">\n\n    <ul class=\"nav nav-pills\" style=\"margin: 0px;\">\n\n      <li class=\"dropdown\" id=\"groupby_dropdown\">\n      <a class=\"dropdown-toggle\"\n         data-toggle=\"dropdown\"\n         href=\"#\">\n          Group by\n          <b class=\"caret\"></b>\n      </a>\n      <ul class=\"dropdown-menu\">\n        <li class=\"groupby year\"><a onclick=\"groupby('year')\">\n            Year</a>\n        </li>\n        <li class=\"groupby author\"><a onclick=\"groupby('author_short')\">\n            Author</a>\n        </li>\n        <li class=\"groupby type\"><a onclick=\"groupby('type')\">\n            Type</a>\n        </li>\n        <li class=\"groupby keyword\"><a onclick=\"groupby('keyword')\">\n            Keyword</a>\n        </li>\n        <li class=\"groupby downloads\"><a onclick=\"groupby('downloads')\">\n            Downloads</a>\n        </li>\n      </ul>\n      </li>\n\n\n      <li class=\"dropdown\" id=\"menu_dropdown\">\n      <a class=\"dropdown-toggle\"\n         data-toggle=\"dropdown\"\n         href=\"#\" alt=\"controls\">\n          <i class=\"fa fa-reorder\" alt=\"controls\"></i>\n          <b class=\"caret\"></b>\n      </a>\n      <ul class=\"dropdown-menu\">\n        <li>\n          <a onclick=\"toggleAll()\">\n            <i class=\"fa fa-chevron-down fa-fw\"></i> Expand/Collapse All\n          </a>\n        </li>\n        <li>\n          <a download=\"bibbase.bib\" href=\"data:text/bibtex;base64,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\">\n            <i class=\"fa fa-download fa-fw\"></i> Download BibTeX\n          </a>\n        </li>\n        <li>\n          <a href=\"//bibbase.org/rss?bib=https://dl.dropbox.com/s/26018h26wgh5c2o/bibbase.bib\">\n            <i class=\"fa fa-rss fa-fw\"></i> RSS Feed\n          </a>\n          </li>\n      </ul>\n      </li>\n\n      \n\n\n      \n    </ul>\n\n\n    <div class=\"alert alert-success bibbase_msg\" id=\"bibbase_msg_embed\"\n         style=\"display: none;\">\n\n      Excellent! Next you can\n      <a href=\"/network/register?next=/network/newSiteFromTemplate%3Fbiburl=https://dl.dropbox.com/s/26018h26wgh5c2o/bibbase.bib\"\n      >create a new website with this list</a>, or\n      embed it in an existing web page by copying &amp; pasting\n      any of the following snippets.\n\n      <div style=\"text-align: left; margin-top: 1em;\">\n        <strong>JavaScript</strong>\n        <span class=\"comment recommended\">(easiest)</span>\n        <div class=\"well well-small\">\n          <code>\n            &lt;script src=\"https://bibbase.org/show?bib=https://dl.dropbox.com/s/26018h26wgh5c2o/bibbase.bib&amp;jsonp=1&amp;theme=side&amp;fullnames=1&amp;jsonp=1\"&gt;&lt;/script&gt;\n          </code>\n        </div>\n\n        <strong>PHP</strong>\n        <div class=\"well well-small\">\n          <code>\n            &lt;?php\n            $contents = file_get_contents(\"https://bibbase.org/show?bib=https://dl.dropbox.com/s/26018h26wgh5c2o/bibbase.bib&amp;jsonp=1&amp;theme=side&amp;fullnames=1\");\n            print_r($contents);\n            ?&gt;\n          </code>\n        </div>\n\n        <strong>iFrame</strong>\n        <span class=\"comment\">(not recommended)</span>\n        <div class=\"well well-small\">\n          <code>\n            &lt;iframe src=\"https://bibbase.org/show?bib=https://dl.dropbox.com/s/26018h26wgh5c2o/bibbase.bib&amp;jsonp=1&amp;theme=side&amp;fullnames=1\"&gt;&lt;/iframe&gt;\n          </code>\n        </div>\n\n        <p>\n          For more details see the <a href=\"//bibbase.org/help\">documention</a>.\n        </p>\n      </div>\n    </div>\n\n    <div class=\"alert alert-success bibbase_msg\" id=\"bibbase_msg_preview\"\n         style=\"display: none;\">\n\n      This is a preview! To use this list on your own web site\n      or create a new web site from it,\n      <a href=\"/network/register?next=/network/newAccountWithFile%3FfileId=\"\n      >create a free account</a>. The file will be added\n      and you will be able to edit it in the File Manager.\n      We will show you instructions once you've created your account.\n    </div>\n\n    <div class=\"alert alert-warning bibbase_msg\" id=\"bibbase_msg_mendeley1\"\n         style=\"display: none;\">\n\n      <p>To the site owner:</p>\n\n      <p><strong>Action required!</strong> Mendeley is changing its\n        API. In order to keep using Mendeley with BibBase past April\n        14th, you need to:\n        <ol>\n          <li>renew the authorization for BibBase on Mendeley, and</li>\n          <li>update the BibBase URL\n            in your page the same way you did when you initially set up\n            this page.\n          </li>\n        </ol>\n      </p>\n\n      <p>\n        <a href=\"http://bibbase.org/cgi-bin/mendeley2/get.py\">\n          <i class=\"fa fa-angle-double-right\"></i>\n          Fix it now</a>\n      </p>\n    </div>\n\n  </div>\n\n\n  <div id=\"bibbase_body\">\n    \n  \n  <div class=\"bibbase_group_whole\" id=\"group_2024\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2024')\"\n      onkeypress=\"toggleGroup('group_2024')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2024</span>\n      <span class=\"bibbase_group_count\">\n        \n        (2)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"bennett-ghentiyala-stephensdavidowitz-themorethemerrieronthecomplexityoffindingmulticollisionswithconnectionstocodesandlattices-2024\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://eccc.weizmann.ac.il/report/2024/018\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'bennett-ghentiyala-stephensdavidowitz-themorethemerrieronthecomplexityoffindingmulticollisionswithconnectionstocodesandlattices-2024', 'https://eccc.weizmann.ac.il/report/2024/018', event);\">\n    The more the merrier! On the complexity of finding multicollisions, with connections to codes and lattices.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Huck Bennett;  Surendra Ghentiyala;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n   2024.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://eccc.weizmann.ac.il/report/2024/018\"\n     onclick=\"log_download('bennett-ghentiyala-stephensdavidowitz-themorethemerrieronthecomplexityoffindingmulticollisionswithconnectionstocodesandlattices-2024', 'https://eccc.weizmann.ac.il/report/2024/018', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"The more the merrier! On the complexity of finding multicollisions, with connections to codes and lattices [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/bennett-ghentiyala-stephensdavidowitz-themorethemerrieronthecomplexityoffindingmulticollisionswithconnectionstocodesandlattices-2024\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>16 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('bennett-ghentiyala-stephensdavidowitz-themorethemerrieronthecomplexityoffindingmulticollisionswithconnectionstocodesandlattices-2024')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@unpublished{BGS24,\n  title = {The more the merrier! On the complexity of finding multicollisions, with connections to codes and lattices},\n  author = {Huck Bennett and Surendra Ghentiyala and Noah {Stephens-Davidowitz}},\n  year = {2024},\n  url = {https://eccc.weizmann.ac.il/report/2024/018},\n}\n\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"regev-stephensdavidowitz-areverseminkowskitheorem-2024\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1611.05979\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'regev-stephensdavidowitz-areverseminkowskitheorem-2024', 'http://arxiv.org/abs/1611.05979', event);\">\n    A reverse Minkowski theorem.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Oded Regev;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  <i>Annals of Mathematics</i>.  2024.\n  <span class=\"note\">A preliminary version appeared in STOC 2017.</span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1611.05979\"\n     onclick=\"log_download('regev-stephensdavidowitz-areverseminkowskitheorem-2024', 'http://arxiv.org/abs/1611.05979', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"A reverse Minkowski theorem [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n  <a href=\"http://www.youtube.com/watch?v=mgDNeg3U5TQ\"\n     onclick=\"log_download('regev-stephensdavidowitz-areverseminkowskitheorem-2024', 'http://www.youtube.com/watch?v=mgDNeg3U5TQ', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"A reverse Minkowski theorem [link]\"\n       title=\" tcs+ talk\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\"> tcs+ talk</span></a>\n  &nbsp;\n  \n  <a href=\"http://www.youtube.com/watch?v=9mvPxAKj5BU\"\n     onclick=\"log_download('regev-stephensdavidowitz-areverseminkowskitheorem-2024', 'http://www.youtube.com/watch?v=9mvPxAKj5BU', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"A reverse Minkowski theorem [link]\"\n       title=\" ias talk\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\"> ias talk</span></a>\n  &nbsp;\n  \n  <a href=\"http://www.youtube.com/watch?v=j7YvtVvv3qs\"\n     onclick=\"log_download('regev-stephensdavidowitz-areverseminkowskitheorem-2024', 'http://www.youtube.com/watch?v=j7YvtVvv3qs', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"A reverse Minkowski theorem [link]\"\n       title=\" bourbaki seminar\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\"> bourbaki seminar</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/regev-stephensdavidowitz-areverseminkowskitheorem-2024\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>18 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('regev-stephensdavidowitz-areverseminkowskitheorem-2024')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@article{RSReverseMinkowski17,\n  title = {A reverse {Minkowski} theorem},\n  abstract = {$ \\newcommand{\\R}{\\mathbb{R}} \\newcommand{\\lat}{\\mathcal{L}} $We prove a conjecture due to Dadush, showing that if $\\lat \\subset \\R^n$ is a lattice such that $\\det(\\lat&#x27;) \\ge 1$ for all sublattices $\\lat&#x27; \\subseteq \\lat$, then \\[\\sum \\exp(-\\pi t^2 \\| y\\|^2) \\le 3/2 \\; , \\] where $t := 10(\\log n + 2)$ and the sum is over all $y \\in L$. From this we also derive bounds on the number of short lattice vectors and on the covering radius.},\n  url = {http://arxiv.org/abs/1611.05979},\n  journal = {Annals of Mathematics},\n  author = {Regev, Oded and {Stephens-Davidowitz}, Noah},\n  year = {2024},\n  url_TCS+_talk = {http://www.youtube.com/watch?v=mgDNeg3U5TQ},\n  url_IAS_talk = {http://www.youtube.com/watch?v=9mvPxAKj5BU},\n  url_Bourbaki_seminar = {http://www.youtube.com/watch?v=j7YvtVvv3qs},\n  note = {A preliminary version appeared in STOC 2017.}\n}\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  $ \\newcommand{\\R}{ℝ} \\newcommand{łat}{\\mathcal{L}} $We prove a conjecture due to Dadush, showing that if $łat ⊂ \\R^n$ is a lattice such that $\\det(łat') \\ge 1$ for all sublattices $łat' ⊆ łat$, then \\[∑ \\exp(-π t^2 \\| y\\|^2) łe 3/2   , \\] where $t := 10(łog n + 2)$ and the sum is over all $y ∈ L$. From this we also derive bounds on the number of short lattice vectors and on the covering radius.\n</div>\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n  <div class=\"bibbase_group_whole\" id=\"group_2023\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2023')\"\n      onkeypress=\"toggleGroup('group_2023')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2023</span>\n      <span class=\"bibbase_group_count\">\n        \n        (7)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"chung-golovnev-li-obremski-saraogi-stephensdavidowitz-ontherandomizedcomplexityofrangeavoidancewithapplicationstocryptographyandmetacomplexity-2023\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://eccc.weizmann.ac.il/report/2023/193\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'chung-golovnev-li-obremski-saraogi-stephensdavidowitz-ontherandomizedcomplexityofrangeavoidancewithapplicationstocryptographyandmetacomplexity-2023', 'https://eccc.weizmann.ac.il/report/2023/193', event);\">\n    On the randomized complexity of range avoidance, with applications to cryptography and metacomplexity.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Eldon Chung;  Alexander Golovnev;  Zeyong Li;  Maciej Obremski;  Sidhant Saraogi;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n   2023.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://eccc.weizmann.ac.il/report/2023/193\"\n     onclick=\"log_download('chung-golovnev-li-obremski-saraogi-stephensdavidowitz-ontherandomizedcomplexityofrangeavoidancewithapplicationstocryptographyandmetacomplexity-2023', 'https://eccc.weizmann.ac.il/report/2023/193', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"On the randomized complexity of range avoidance, with applications to cryptography and metacomplexity [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/chung-golovnev-li-obremski-saraogi-stephensdavidowitz-ontherandomizedcomplexityofrangeavoidancewithapplicationstocryptographyandmetacomplexity-2023\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>3 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('chung-golovnev-li-obremski-saraogi-stephensdavidowitz-ontherandomizedcomplexityofrangeavoidancewithapplicationstocryptographyandmetacomplexity-2023')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@unpublished{CGLOSS23,\n  title = {On the randomized complexity of range avoidance, with applications to cryptography and metacomplexity},\n  author = {Eldon Chung and Alexander Golovnev and Zeyong Li and Maciej Obremski and Sidhant Saraogi and Noah {Stephens-Davidowitz}},\n  year = {2023},\n  url = {https://eccc.weizmann.ac.il/report/2023/193},\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"aggarwal-espitau-peters-stephensdavidowitz-recursivelatticereductionaframeworkforfindingshortlatticevectors-2023\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://arxiv.org/abs/2311.15064\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'aggarwal-espitau-peters-stephensdavidowitz-recursivelatticereductionaframeworkforfindingshortlatticevectors-2023', 'https://arxiv.org/abs/2311.15064', event);\">\n    Recursive lattice reduction—A framework for finding short lattice vectors .\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Divesh Aggarwal;  Thomas Espitau;  Spencer Peters;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n   2023.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://arxiv.org/abs/2311.15064\"\n     onclick=\"log_download('aggarwal-espitau-peters-stephensdavidowitz-recursivelatticereductionaframeworkforfindingshortlatticevectors-2023', 'https://arxiv.org/abs/2311.15064', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Recursive lattice reduction—A framework for finding short lattice vectors  [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/aggarwal-espitau-peters-stephensdavidowitz-recursivelatticereductionaframeworkforfindingshortlatticevectors-2023\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>6 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('aggarwal-espitau-peters-stephensdavidowitz-recursivelatticereductionaframeworkforfindingshortlatticevectors-2023')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@unpublished{AEPD23Recursive,\n  title = {Recursive lattice reduction---A framework for finding short lattice vectors\n},\n  author = {Aggarwal, Divesh and Espitau, Thomas and Peters, Spencer and {Stephens-Davidowitz}, Noah},\n  year = {2023},\n  url = {https://arxiv.org/abs/2311.15064},\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"regev-stephensdavidowitz-asimpleproofofareverseminkowskitheoremforintegrallattices-2023\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/2306.03697\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'regev-stephensdavidowitz-asimpleproofofareverseminkowskitheoremforintegrallattices-2023', 'http://arxiv.org/abs/2306.03697', event);\">\n    A simple proof of a reverse Minkowski theorem for integral lattices.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Oded Regev;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n   2023.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/2306.03697\"\n     onclick=\"log_download('regev-stephensdavidowitz-asimpleproofofareverseminkowskitheoremforintegrallattices-2023', 'http://arxiv.org/abs/2306.03697', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"A simple proof of a reverse Minkowski theorem for integral lattices [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/regev-stephensdavidowitz-asimpleproofofareverseminkowskitheoremforintegrallattices-2023\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>6 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('regev-stephensdavidowitz-asimpleproofofareverseminkowskitheoremforintegrallattices-2023')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@unpublished{RSSimpleProofReverse2023,\n  title = {A simple proof of a reverse {{Minkowski}} theorem for integral lattices},\n  author = {Regev, Oded and {Stephens-Davidowitz}, Noah},\n  year = {2023},\n  url = {http://arxiv.org/abs/2306.03697},\n}\n\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"aggarwal-bennett-brakerski-golovnev-kumar-li-peters-stephensdavidowitz-etal-latticeproblemsbeyondpolynomialtime-2023\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/2211.11693\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'aggarwal-bennett-brakerski-golovnev-kumar-li-peters-stephensdavidowitz-etal-latticeproblemsbeyondpolynomialtime-2023', 'http://arxiv.org/abs/2211.11693', event);\">\n    Lattice problems beyond polynomial time.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Divesh Aggarwal;  Huck Bennett;  Zvika Brakerski;  Alexander Golovnev;  Rajendra Kumar;  Zeyong Li;  Spencer Peters;  Noah Stephens-Davidowitz;  and  Vinod Vaikuntanathan.\n</span>\n\n  \n\n</span>\n\n  In <i>STOC</i>,  2023. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/2211.11693\"\n     onclick=\"log_download('aggarwal-bennett-brakerski-golovnev-kumar-li-peters-stephensdavidowitz-etal-latticeproblemsbeyondpolynomialtime-2023', 'http://arxiv.org/abs/2211.11693', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Lattice problems beyond polynomial time [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/aggarwal-bennett-brakerski-golovnev-kumar-li-peters-stephensdavidowitz-etal-latticeproblemsbeyondpolynomialtime-2023\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>44 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('aggarwal-bennett-brakerski-golovnev-kumar-li-peters-stephensdavidowitz-etal-latticeproblemsbeyondpolynomialtime-2023')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{ABB+LatticeProblemsPolynomial2022,\n  title = {Lattice problems beyond polynomial time},\n  author = {Aggarwal, Divesh and Bennett, Huck and Brakerski, Zvika and Golovnev, Alexander and Kumar, Rajendra and Li, Zeyong and Peters, Spencer and {Stephens-Davidowitz}, Noah and Vaikuntanathan, Vinod},\n  year = {2023},\n  booktitle = {STOC},\n  url = {http://arxiv.org/abs/2211.11693},\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"golovnev-guo-peters-stephensdavidowitz-revisitingtimespacetradeoffsforfunctioninversion-2023\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://eccc.weizmann.ac.il/report/2022/145/\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'golovnev-guo-peters-stephensdavidowitz-revisitingtimespacetradeoffsforfunctioninversion-2023', 'https://eccc.weizmann.ac.il/report/2022/145/', event);\">\n    Revisiting time-space tradeoffs for function inversion.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Alexander Golovnev;  Siyao Guo;  Spencer Peters;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>CRYPTO</i>,  2023. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://eccc.weizmann.ac.il/report/2022/145/\"\n     onclick=\"log_download('golovnev-guo-peters-stephensdavidowitz-revisitingtimespacetradeoffsforfunctioninversion-2023', 'https://eccc.weizmann.ac.il/report/2022/145/', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Revisiting time-space tradeoffs for function inversion [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/golovnev-guo-peters-stephensdavidowitz-revisitingtimespacetradeoffsforfunctioninversion-2023\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>1 download</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('golovnev-guo-peters-stephensdavidowitz-revisitingtimespacetradeoffsforfunctioninversion-2023')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{GGPSRevisitingTimespaceTradeoffs2022,\n  title = {Revisiting time-space tradeoffs for function inversion},\n  author = {Golovnev, Alexander and Guo, Siyao and Peters, Spencer and {Stephens-Davidowitz}, Noah},\n  year = {2023},\n  url = {https://eccc.weizmann.ac.il/report/2022/145/},\n  booktitle = {CRYPTO},\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"bennett-ganju-peetathawatchai-stephensdavidowitz-justhowhardarerotationsofnalgorithmsandcryptographywiththesimplestlattice-2023\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://eprint.iacr.org/2021/1548\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'bennett-ganju-peetathawatchai-stephensdavidowitz-justhowhardarerotationsofnalgorithmsandcryptographywiththesimplestlattice-2023', 'https://eprint.iacr.org/2021/1548', event);\">\n    Just how hard are rotations of $ℤ^n$? Algorithms and cryptography with the simplest lattice.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Huck Bennett;  Atul Ganju;  Pura Peetathawatchai;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>Eurocrypt</i>,  2023. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://eprint.iacr.org/2021/1548\"\n     onclick=\"log_download('bennett-ganju-peetathawatchai-stephensdavidowitz-justhowhardarerotationsofnalgorithmsandcryptographywiththesimplestlattice-2023', 'https://eprint.iacr.org/2021/1548', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Just how hard are rotations of $ℤ^n$? Algorithms and cryptography with the simplest lattice [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/bennett-ganju-peetathawatchai-stephensdavidowitz-justhowhardarerotationsofnalgorithmsandcryptographywiththesimplestlattice-2023\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>1 download</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('bennett-ganju-peetathawatchai-stephensdavidowitz-justhowhardarerotationsofnalgorithmsandcryptographywiththesimplestlattice-2023')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{BGPSJustHowHard2021,\n  title = {Just how hard are rotations of $\\mathbb{Z}^n$? Algorithms and cryptography with the simplest lattice},\n  author = {Bennett, Huck and Ganju, Atul and Peetathawatchai, Pura and {Stephens-Davidowitz}, Noah},\n  year = {2023},\n\turl = {https://eprint.iacr.org/2021/1548},\n\tbooktitle = {Eurocrypt},\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"golovnev-guo-peters-stephensdavidowitz-ontheimpossibilityofbranchandboundsearchtodecisionreductionsforapproximateoptimization-2023\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://eccc.weizmann.ac.il/report/2021/141/\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'golovnev-guo-peters-stephensdavidowitz-ontheimpossibilityofbranchandboundsearchtodecisionreductionsforapproximateoptimization-2023', 'https://eccc.weizmann.ac.il/report/2021/141/', event);\">\n    On the (im)possibility of branch-and-bound search-to-decision reductions for approximate optimization.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Alexander Golovnev;  Siyao Guo;  Spencer Peters;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>APPROX</i>,  2023. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://eccc.weizmann.ac.il/report/2021/141/\"\n     onclick=\"log_download('golovnev-guo-peters-stephensdavidowitz-ontheimpossibilityofbranchandboundsearchtodecisionreductionsforapproximateoptimization-2023', 'https://eccc.weizmann.ac.il/report/2021/141/', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"On the (im)possibility of branch-and-bound search-to-decision reductions for approximate optimization [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/golovnev-guo-peters-stephensdavidowitz-ontheimpossibilityofbranchandboundsearchtodecisionreductionsforapproximateoptimization-2023\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('golovnev-guo-peters-stephensdavidowitz-ontheimpossibilityofbranchandboundsearchtodecisionreductionsforapproximateoptimization-2023')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{GGPSImPossibilityBranchandbound2021,\n  title = {On the (im)possibility of branch-and-bound search-to-decision reductions for approximate optimization},\n  author = {Golovnev, Alexander and Guo, Siyao and Peters, Spencer and {Stephens-Davidowitz}, Noah},\n  year = {2023},\n  booktitle = {APPROX},\n  url = {https://eccc.weizmann.ac.il/report/2021/141/},\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n  <div class=\"bibbase_group_whole\" id=\"group_2022\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2022')\"\n      onkeypress=\"toggleGroup('group_2022')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2022</span>\n      <span class=\"bibbase_group_count\">\n        \n        (2)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"eisenberg-regev-stephensdavidowitz-atightreverseminkowskiinequalityfortheepsteinzetafunction-2022\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/2201.05201\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'eisenberg-regev-stephensdavidowitz-atightreverseminkowskiinequalityfortheepsteinzetafunction-2022', 'http://arxiv.org/abs/2201.05201', event);\">\n    A tight reverse Minkowski inequality for the Epstein zeta function.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Yael Eisenberg;  Oded Regev;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  <i>Proceedings of the AMS</i>.  2022.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/2201.05201\"\n     onclick=\"log_download('eisenberg-regev-stephensdavidowitz-atightreverseminkowskiinequalityfortheepsteinzetafunction-2022', 'http://arxiv.org/abs/2201.05201', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"A tight reverse Minkowski inequality for the Epstein zeta function [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/eisenberg-regev-stephensdavidowitz-atightreverseminkowskiinequalityfortheepsteinzetafunction-2022\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>1 download</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('eisenberg-regev-stephensdavidowitz-atightreverseminkowskiinequalityfortheepsteinzetafunction-2022')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@article{ERSTightReverseMinkowski2022,\n  title = {A tight reverse {{Minkowski}} inequality for the {{Epstein}} zeta function},\n  author = {Eisenberg, Yael and Regev, Oded and {Stephens-Davidowitz}, Noah},\n  year = {2022},\n  journal = {Proceedings of the AMS},\n  url = {http://arxiv.org/abs/2201.05201},\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"coretti-dodis-karthikeyan-stephensdavidowitz-tessaro-onseedlessprngsandprematurenext-2022\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://eprint.iacr.org/2022/558\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'coretti-dodis-karthikeyan-stephensdavidowitz-tessaro-onseedlessprngsandprematurenext-2022', 'https://eprint.iacr.org/2022/558', event);\">\n    On seedless PRNGs and premature next.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Sandro Coretti;  Yevgeniy Dodis;  Harish Karthikeyan;  Noah Stephens-Davidowitz;  and  Stefano Tessaro.\n</span>\n\n  \n\n</span>\n\n  In <i>ITC</i>,  2022. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://eprint.iacr.org/2022/558\"\n     onclick=\"log_download('coretti-dodis-karthikeyan-stephensdavidowitz-tessaro-onseedlessprngsandprematurenext-2022', 'https://eprint.iacr.org/2022/558', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"On seedless PRNGs and premature next [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/coretti-dodis-karthikeyan-stephensdavidowitz-tessaro-onseedlessprngsandprematurenext-2022\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>1 download</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('coretti-dodis-karthikeyan-stephensdavidowitz-tessaro-onseedlessprngsandprematurenext-2022')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{CDK+SeedlessPRNGsPremature2022,\n  title = {On seedless {{PRNGs}} and premature next},\n  booktitle = {{{ITC}}},\n  author = {Coretti, Sandro and Dodis, Yevgeniy and Karthikeyan, Harish and {Stephens-Davidowitz}, Noah and Tessaro, Stefano},\n  year = {2022},\n  url = {https://eprint.iacr.org/2022/558},\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n  <div class=\"bibbase_group_whole\" id=\"group_2021\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2021')\"\n      onkeypress=\"toggleGroup('group_2021')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2021</span>\n      <span class=\"bibbase_group_count\">\n        \n        (6)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"dodis-guo-stephensdavidowitz-xie-notimetohashonsuperefficiententropyaccumulation-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://eprint.iacr.org/2021/523\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'dodis-guo-stephensdavidowitz-xie-notimetohashonsuperefficiententropyaccumulation-2021', 'https://eprint.iacr.org/2021/523', event);\">\n    No time to hash: On super efficient entropy accumulation.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Yevgeniy Dodis;  Siyao Guo;  Noah Stephens-Davidowitz;  and  Zhiye Xie.\n</span>\n\n  \n\n</span>\n\n  In <i>CRYPTO</i>,  2021. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://eprint.iacr.org/2021/523\"\n     onclick=\"log_download('dodis-guo-stephensdavidowitz-xie-notimetohashonsuperefficiententropyaccumulation-2021', 'https://eprint.iacr.org/2021/523', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"No time to hash: On super efficient entropy accumulation [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/dodis-guo-stephensdavidowitz-xie-notimetohashonsuperefficiententropyaccumulation-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>2 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('dodis-guo-stephensdavidowitz-xie-notimetohashonsuperefficiententropyaccumulation-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{DGSX21a,\n\ttitle = {No time to hash: {On} super efficient entropy accumulation},\n\turl = {https://eprint.iacr.org/2021/523},\n\tyear = {2021},\n\tbooktitle = {CRYPTO},\n\tauthor = {Dodis, Yevgeniy and Guo, Siyao and {Stephens-Davidowitz}, Noah and Xie, Zhiye},\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"dodis-guo-stephensdavidowitz-xie-onlinelinearextractorsforindependentsources-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://eprint.iacr.org/2021/1002\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'dodis-guo-stephensdavidowitz-xie-onlinelinearextractorsforindependentsources-2021', 'https://eprint.iacr.org/2021/1002', event);\">\n    Online linear extractors for independent sources.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Yevgeniy Dodis;  Siyao Guo;  Noah Stephens-Davidowitz;  and  Zhiye Xie.\n</span>\n\n  \n\n</span>\n\n  In <i>ITC</i>,  2021. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://eprint.iacr.org/2021/1002\"\n     onclick=\"log_download('dodis-guo-stephensdavidowitz-xie-onlinelinearextractorsforindependentsources-2021', 'https://eprint.iacr.org/2021/1002', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Online linear extractors for independent sources [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/dodis-guo-stephensdavidowitz-xie-onlinelinearextractorsforindependentsources-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('dodis-guo-stephensdavidowitz-xie-onlinelinearextractorsforindependentsources-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{DGSX21b,\n\ttitle = {Online linear extractors for independent sources},\n\tauthor = {Dodis, Yevgeniy and Guo, Siyao and {Stephens-Davidowitz}, Noah and Xie, Zhiye},\n\tbooktitle = {ITC},\n\tyear = {2021},\n\turl = {https://eprint.iacr.org/2021/1002},\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"brakerski-stephensdavidowitz-vaikuntanathan-onthehardnessofaveragecaseksum-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://arxiv.org/abs/2010.08821\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'brakerski-stephensdavidowitz-vaikuntanathan-onthehardnessofaveragecaseksum-2021', 'https://arxiv.org/abs/2010.08821', event);\">\n    On the hardness of average-case $k$-SUM.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Zvika Brakerski;  Noah Stephens-Davidowitz;  and  Vinod Vaikuntanathan.\n</span>\n\n  \n\n</span>\n\n  In <i>RANDOM</i>,  2021. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://arxiv.org/abs/2010.08821\"\n     onclick=\"log_download('brakerski-stephensdavidowitz-vaikuntanathan-onthehardnessofaveragecaseksum-2021', 'https://arxiv.org/abs/2010.08821', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"On the hardness of average-case $k$-SUM [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/brakerski-stephensdavidowitz-vaikuntanathan-onthehardnessofaveragecaseksum-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('brakerski-stephensdavidowitz-vaikuntanathan-onthehardnessofaveragecaseksum-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{BSV21,\n\ttitle = {On the hardness of average-case {$k$-SUM}},\n\turl = {https://arxiv.org/abs/2010.08821},\n\tyear = {2021},\n\tauthor = {Brakerski, Zvika and {Stephens-Davidowitz}, Noah and Vaikuntanathan, Vinod},\n\tbooktitle = {RANDOM},\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"aggarwal-bennett-golovnev-stephensdavidowitz-finegrainedhardnessofcvppeverythingthatwecanproveandnothingelse-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1911.02440\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'aggarwal-bennett-golovnev-stephensdavidowitz-finegrainedhardnessofcvppeverythingthatwecanproveandnothingelse-2021', 'http://arxiv.org/abs/1911.02440', event);\">\n    Fine-grained hardness of CVP(P)— Everything that we can prove (and nothing else).\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Divesh Aggarwal;  Huck Bennett;  Alexander Golovnev;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>SODA</i>,  2021. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1911.02440\"\n     onclick=\"log_download('aggarwal-bennett-golovnev-stephensdavidowitz-finegrainedhardnessofcvppeverythingthatwecanproveandnothingelse-2021', 'http://arxiv.org/abs/1911.02440', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Fine-grained hardness of CVP(P)— Everything that we can prove (and nothing else) [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n  <a href=\"https://blog.simons.berkeley.edu/2020/05/fine-grained-hardness-of-lattice-problems-open-questions/\"\n     onclick=\"log_download('aggarwal-bennett-golovnev-stephensdavidowitz-finegrainedhardnessofcvppeverythingthatwecanproveandnothingelse-2021', 'https://blog.simons.berkeley.edu/2020/05/fine-grained-hardness-of-lattice-problems-open-questions/', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Fine-grained hardness of CVP(P)— Everything that we can prove (and nothing else) [link]\"\n       title=\" simons blog post\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\"> simons blog post</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/aggarwal-bennett-golovnev-stephensdavidowitz-finegrainedhardnessofcvppeverythingthatwecanproveandnothingelse-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>4 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('aggarwal-bennett-golovnev-stephensdavidowitz-finegrainedhardnessofcvppeverythingthatwecanproveandnothingelse-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{ABGSFinegrainedHardness19,\n\ttitle = {Fine-grained hardness of {{CVP}}({{P}})--- {{Everything}} that we can prove (and nothing else)},\n\turl = {http://arxiv.org/abs/1911.02440},\n\tauthor = {Aggarwal, Divesh and Bennett, Huck and Golovnev, Alexander and {Stephens-Davidowitz}, Noah},\n\tyear = {2021},\n\tbooktitle = {SODA},\n\turl_Simons_blog_post = {https://blog.simons.berkeley.edu/2020/05/fine-grained-hardness-of-lattice-problems-open-questions/},\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"aggarwal-chen-kumar-li-stephensdavidowitz-dimensionpreservingreductionsbetweensvpandcvpindifferentpnorms-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/2104.06576\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'aggarwal-chen-kumar-li-stephensdavidowitz-dimensionpreservingreductionsbetweensvpandcvpindifferentpnorms-2021', 'http://arxiv.org/abs/2104.06576', event);\">\n    Dimension-preserving reductions between SVP and CVP in different $p$-norms.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Divesh Aggarwal;  Yanlin Chen;  Rajendra Kumar;  Zeyong Li;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>SODA</i>,  2021. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/2104.06576\"\n     onclick=\"log_download('aggarwal-chen-kumar-li-stephensdavidowitz-dimensionpreservingreductionsbetweensvpandcvpindifferentpnorms-2021', 'http://arxiv.org/abs/2104.06576', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Dimension-preserving reductions between SVP and CVP in different $p$-norms [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/aggarwal-chen-kumar-li-stephensdavidowitz-dimensionpreservingreductionsbetweensvpandcvpindifferentpnorms-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>1 download</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('aggarwal-chen-kumar-li-stephensdavidowitz-dimensionpreservingreductionsbetweensvpandcvpindifferentpnorms-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{ACKLS21,\n\ttitle = {Dimension-preserving reductions between {{{SVP}}} and {{{CVP}}} in\tdifferent $p$-norms},\n\tauthor = {Aggarwal, Divesh and Chen, Yanlin and Kumar, Rajendra and Li, Zeyong and {Stephens-Davidowitz}, Noah},\n\tbooktitle = {SODA},\n\tyear = {2021},\n\turl = {http://arxiv.org/abs/2104.06576},\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"aggarwal-li-stephensdavidowitz-a2n2timealgorithmforsqrtnsvpandsqrtnhermitesvpandanimprovedtimeapproximationtradeoffforhsvp-2021\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/2007.09556\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'aggarwal-li-stephensdavidowitz-a2n2timealgorithmforsqrtnsvpandsqrtnhermitesvpandanimprovedtimeapproximationtradeoffforhsvp-2021', 'http://arxiv.org/abs/2007.09556', event);\">\n    A $2^{n/2}$-time algorithm for $\\sqrt{n}$-SVP and $\\sqrt{n}$-Hermite SVP, and an improved time-approximation tradeoff for (H)SVP.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Divesh Aggarwal;  Zeyong Li;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>Eurocrypt</i>,  2021. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/2007.09556\"\n     onclick=\"log_download('aggarwal-li-stephensdavidowitz-a2n2timealgorithmforsqrtnsvpandsqrtnhermitesvpandanimprovedtimeapproximationtradeoffforhsvp-2021', 'http://arxiv.org/abs/2007.09556', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"A $2^{n/2}$-time algorithm for $\\sqrt{n}$-SVP and $\\sqrt{n}$-Hermite SVP, and an improved time-approximation tradeoff for (H)SVP [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/aggarwal-li-stephensdavidowitz-a2n2timealgorithmforsqrtnsvpandsqrtnhermitesvpandanimprovedtimeapproximationtradeoffforhsvp-2021\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>3 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('aggarwal-li-stephensdavidowitz-a2n2timealgorithmforsqrtnsvpandsqrtnhermitesvpandanimprovedtimeapproximationtradeoffforhsvp-2021')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{ALSTimeAlgorithm20,\n\ttitle = {A $2^{n/2}$-time algorithm for $\\sqrt{n}$-{{SVP}} and $\\sqrt{n}$-{{Hermite SVP}}, and an improved time-approximation tradeoff for ({{H}}){{SVP}}},\n\tauthor = {Aggarwal, Divesh and Li, Zeyong and {Stephens-Davidowitz}, Noah},\n\tbooktitle = {Eurocrypt},\n\tyear = {2021},\n\turl = {http://arxiv.org/abs/2007.09556}\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n  <div class=\"bibbase_group_whole\" id=\"group_2020\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2020')\"\n      onkeypress=\"toggleGroup('group_2020')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2020</span>\n      <span class=\"bibbase_group_count\">\n        \n        (3)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"mukherjee-stephensdavidowitz-latticereductionformodulesorhowtoreducemodulesvptomodulesvp-2020\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://eprint.iacr.org/2019/1142\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'mukherjee-stephensdavidowitz-latticereductionformodulesorhowtoreducemodulesvptomodulesvp-2020', 'http://eprint.iacr.org/2019/1142', event);\">\n    Lattice reduction for modules, or how to reduce ModuleSVP to ModuleSVP.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Tamalika Mukherjee;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>CRYPTO</i>,  2020. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://eprint.iacr.org/2019/1142\"\n     onclick=\"log_download('mukherjee-stephensdavidowitz-latticereductionformodulesorhowtoreducemodulesvptomodulesvp-2020', 'http://eprint.iacr.org/2019/1142', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Lattice reduction for modules, or how to reduce ModuleSVP to ModuleSVP [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/mukherjee-stephensdavidowitz-latticereductionformodulesorhowtoreducemodulesvptomodulesvp-2020\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>3 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('mukherjee-stephensdavidowitz-latticereductionformodulesorhowtoreducemodulesvptomodulesvp-2020')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{MSLatticeReduction19,\n\ttitle = {Lattice reduction for modules, or how to reduce {ModuleSVP} to {ModuleSVP}},\n\turl = {http://eprint.iacr.org/2019/1142},\n\tauthor = {Mukherjee, Tamalika and {Stephens-Davidowitz}, Noah},\n\tyear = {2020},\n\tbooktitle = {CRYPTO},\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"aggarwal-guo-obremski-ribeiro-stephensdavidowitz-extractorlowerboundsrevisited-2020\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://eccc.weizmann.ac.il/report/2019/173/\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'aggarwal-guo-obremski-ribeiro-stephensdavidowitz-extractorlowerboundsrevisited-2020', 'https://eccc.weizmann.ac.il/report/2019/173/', event);\">\n    Extractor lower bounds, revisited.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Divesh Aggarwal;  Siyao Guo;  Maciej Obremski;  João Ribeiro;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>RANDOM</i>,  2020. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://eccc.weizmann.ac.il/report/2019/173/\"\n     onclick=\"log_download('aggarwal-guo-obremski-ribeiro-stephensdavidowitz-extractorlowerboundsrevisited-2020', 'https://eccc.weizmann.ac.il/report/2019/173/', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Extractor lower bounds, revisited [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/aggarwal-guo-obremski-ribeiro-stephensdavidowitz-extractorlowerboundsrevisited-2020\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('aggarwal-guo-obremski-ribeiro-stephensdavidowitz-extractorlowerboundsrevisited-2020')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{AGO+ExtractorLower19,\n\ttitle = {Extractor lower bounds, revisited},\n\tauthor = {Aggarwal, Divesh and Guo, Siyao and Obremski, Maciej and Ribeiro, Jo\\~ao and {Stephens-Davidowitz}, Noah},\n\turl ={https://eccc.weizmann.ac.il/report/2019/173/},\n\tyear = {2020},\n\tbooktitle = {RANDOM},\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"aggarwal-li-nguyen-stephensdavidowitz-slidereductionrevisitedfillingthegapsinsvpapproximation-2020\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1908.03724\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'aggarwal-li-nguyen-stephensdavidowitz-slidereductionrevisitedfillingthegapsinsvpapproximation-2020', 'http://arxiv.org/abs/1908.03724', event);\">\n    Slide reduction, revisited—Filling the gaps in SVP approximation.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Divesh Aggarwal;  Jianwei Li;  Phong Q. Nguyen;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>CRYPTO</i>,  2020. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1908.03724\"\n     onclick=\"log_download('aggarwal-li-nguyen-stephensdavidowitz-slidereductionrevisitedfillingthegapsinsvpapproximation-2020', 'http://arxiv.org/abs/1908.03724', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Slide reduction, revisited—Filling the gaps in SVP approximation [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/aggarwal-li-nguyen-stephensdavidowitz-slidereductionrevisitedfillingthegapsinsvpapproximation-2020\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>1 download</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('aggarwal-li-nguyen-stephensdavidowitz-slidereductionrevisitedfillingthegapsinsvpapproximation-2020')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{ALNSSlideReduction19,\n\ttitle = {Slide reduction, revisited---{F}illing the gaps in {SVP} approximation},\n\turl = {http://arxiv.org/abs/1908.03724},\n\tauthor = {Aggarwal, Divesh and Li, Jianwei and Nguyen, Phong Q. and {Stephens-Davidowitz}, Noah},\n\tyear = {2020},\n\tabstract = {We show how to generalize Gama and Nguyen&#x27;s slide reduction algorithm [STOC &#x27;08] for solving the approximate Shortest Vector Problem over lattices (SVP). As a result, we show the fastest provably correct algorithm for $\\delta$-approximate SVP for all approximation factors $n^{1/2+\\epsilon} \\leq \\delta \\leq n^{O(1)}$. This is the range of approximation factors most relevant for cryptography.},\n\tbooktitle={CRYPTO},\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  We show how to generalize Gama and Nguyen's slide reduction algorithm [STOC '08] for solving the approximate Shortest Vector Problem over lattices (SVP). As a result, we show the fastest provably correct algorithm for $δ$-approximate SVP for all approximation factors $n^{1/2+ε} ≤ δ ≤ n^{O(1)}$. This is the range of approximation factors most relevant for cryptography.\n</div>\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n  <div class=\"bibbase_group_whole\" id=\"group_2019\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2019')\"\n      onkeypress=\"toggleGroup('group_2019')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2019</span>\n      <span class=\"bibbase_group_count\">\n        \n        (4)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"aggarwal-stephensdavidowitz-animprovedconstantinbanaszczykstransferencetheorem-2019\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1907.09020\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'aggarwal-stephensdavidowitz-animprovedconstantinbanaszczykstransferencetheorem-2019', 'http://arxiv.org/abs/1907.09020', event);\">\n    An improved constant in Banaszczyk's transference theorem.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Divesh Aggarwal;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n   2019.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1907.09020\"\n     onclick=\"log_download('aggarwal-stephensdavidowitz-animprovedconstantinbanaszczykstransferencetheorem-2019', 'http://arxiv.org/abs/1907.09020', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"An improved constant in Banaszczyk&#x27;s transference theorem [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/aggarwal-stephensdavidowitz-animprovedconstantinbanaszczykstransferencetheorem-2019\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>41 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('aggarwal-stephensdavidowitz-animprovedconstantinbanaszczykstransferencetheorem-2019')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@unpublished{ASImprovedConstant19,\n\ttitle = {An improved constant in {{Banaszczyk}}&#x27;s transference theorem},\n\turl = {http://arxiv.org/abs/1907.09020},\n\tauthor = {Aggarwal, Divesh and {Stephens-Davidowitz}, Noah},\n\tyear = {2019},\n\tabstract = {$ \\newcommand{\\R}{\\ensuremath{\\mathbb{R}}} \\newcommand{\\lat}{\\mathcal{L}} \\newcommand{\\ensuremath}[1]{#1} $We show that \\[ \\mu(\\lat) \\lambda_1(\\lat^*) &lt; \\big( 0.1275 + o(1) \\big) \\cdot n \\; , \\] where $\\mu(\\lat)$ is the covering radius of an $n$-dimensional lattice $\\lat \\subset \\R^n$ and $\\lambda_1(\\lat^*)$ is the length of the shortest non-zero vector in the dual lattice $\\lat^*$. This improves on Banaszczyk&#x27;s celebrated transference theorem (Math. Annal., 1993) by about 20%. Our proof follows Banaszczyk exactly, except in one step, where we replace a Fourier-analytic bound on the discrete Gaussian mass with a slightly stronger bound based on packing. The packing-based bound that we use was already proven by Aggarwal, Dadush, Regev, and Stephens-Davidowitz (STOC, 2015) in a very different context. Our contribution is therefore simply the observation that this implies a better transference theorem.},\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  $ \\newcommand{\\R}{\\ensuremath{ℝ}} \\newcommand{łat}{\\mathcal{L}} \\newcommand{\\ensuremath}[1]{#1} $We show that \\[ μ(łat) λ_1(łat^*) < \\big( 0.1275 + o(1) \\big) · n   , \\] where $μ(łat)$ is the covering radius of an $n$-dimensional lattice $łat ⊂ \\R^n$ and $λ_1(łat^*)$ is the length of the shortest non-zero vector in the dual lattice $łat^*$. This improves on Banaszczyk's celebrated transference theorem (Math. Annal., 1993) by about 20%. Our proof follows Banaszczyk exactly, except in one step, where we replace a Fourier-analytic bound on the discrete Gaussian mass with a slightly stronger bound based on packing. The packing-based bound that we use was already proven by Aggarwal, Dadush, Regev, and Stephens-Davidowitz (STOC, 2015) in a very different context. Our contribution is therefore simply the observation that this implies a better transference theorem.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"miller-stephensdavidowitz-kissingnumbersandtransferencetheoremsfromgeneralizedtailbounds-2019\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1802.05708\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'miller-stephensdavidowitz-kissingnumbersandtransferencetheoremsfromgeneralizedtailbounds-2019', 'http://arxiv.org/abs/1802.05708', event);\">\n    Kissing numbers and transference theorems from generalized tail bounds.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Stephen D. Miller;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  <i>SIDMA</i>, 33(3).  2019.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1802.05708\"\n     onclick=\"log_download('miller-stephensdavidowitz-kissingnumbersandtransferencetheoremsfromgeneralizedtailbounds-2019', 'http://arxiv.org/abs/1802.05708', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Kissing numbers and transference theorems from generalized tail bounds [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/miller-stephensdavidowitz-kissingnumbersandtransferencetheoremsfromgeneralizedtailbounds-2019\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>53 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('miller-stephensdavidowitz-kissingnumbersandtransferencetheoremsfromgeneralizedtailbounds-2019')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@article{MSKissing18,\n  title = {Kissing numbers and transference theorems from generalized tail bounds},\n  abstract = {We generalize Banaszczyk&#x27;s seminal tail bound for the Gaussian mass of a lattice to a wide class of test functions. We therefore obtain quite general transference bounds, as well as bounds on the number of lattice points contained in certain bodies. As example applications, we bound the lattice kissing number in $\\ell_p$ norms by $e^{(n+ o(n))/p}$ for $0 &lt; p \\leq 2$, and also give a proof of a new transference bound in the $\\ell_1$ norm.},\n  url = {http://arxiv.org/abs/1802.05708},\n  author = {Miller, Stephen D. and {Stephens-Davidowitz}, Noah},\n  journal = {SIDMA},\n  year = {2019},\n  volume = {33},\n  number = {3},\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  We generalize Banaszczyk's seminal tail bound for the Gaussian mass of a lattice to a wide class of test functions. We therefore obtain quite general transference bounds, as well as bounds on the number of lattice points contained in certain bodies. As example applications, we bound the lattice kissing number in $\\ell_p$ norms by $e^{(n+ o(n))/p}$ for $0 < p ≤ 2$, and also give a proof of a new transference bound in the $\\ell_1$ norm.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"stephensdavidowitz-vaikuntanathan-sethhardnessofcodingproblems-2019\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://eccc.weizmann.ac.il/report/2019/159/\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'stephensdavidowitz-vaikuntanathan-sethhardnessofcodingproblems-2019', 'http://eccc.weizmann.ac.il/report/2019/159/', event);\">\n    SETH-hardness of coding problems.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Noah Stephens-Davidowitz;  and  Vinod Vaikuntanathan.\n</span>\n\n  \n\n</span>\n\n  In <i>FOCS</i>,  2019. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://eccc.weizmann.ac.il/report/2019/159/\"\n     onclick=\"log_download('stephensdavidowitz-vaikuntanathan-sethhardnessofcodingproblems-2019', 'http://eccc.weizmann.ac.il/report/2019/159/', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"SETH-hardness of coding problems [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/stephensdavidowitz-vaikuntanathan-sethhardnessofcodingproblems-2019\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>100 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('stephensdavidowitz-vaikuntanathan-sethhardnessofcodingproblems-2019')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{SVCodeSETH19,\n\ttitle = {{SETH}-hardness of coding problems},\n\tbooktitle = {FOCS},\n\tauthor = {{Stephens-Davidowitz}, Noah and Vaikuntanathan, Vinod},\n\turl = {http://eccc.weizmann.ac.il/report/2019/159/},\n\tyear = {2019},\n\tabstract = {We show that assuming the strong exponential-time hypothesis (SETH), there are {\\em no non-trivial algorithms} for the nearest codeword problem (NCP), the minimum distance problem (MDP), or the nearest codeword problem with preprocessing (NCPP) on linear codes over any finite field. More precisely, we show that there are no NCP, MDP, or NCPP algorithms running in time $q^{(1-\\epsilon)n}$ for any constant $\\epsilon&gt;0$ for codes with $q^n$ codewords. (In the case of NCPP, we assume non-uniform SETH.)\n\t\n\t%\t\t\\nnote{Here&#x27;s an attempt at bragging a bit. Could just delete it.} Our results are inspired by recent similar lower bounds for computational lattice problems. However, our results are qualitatively quite different. In fact, our lower bounds show a strong \\emph{separation} between lattices and codes: these coding problems have no non-trivial algorithms while highly non-trivial algorithms are known for the analogous lattice problems.\n\t\n\tWe also show that there are no sub-exponential-time algorithms for $\\gamma$-approximate versions of these problems for some constant $\\gamma &gt; 1$, under different versions of the exponential-time hypothesis.},\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  We show that assuming the strong exponential-time hypothesis (SETH), there are \\em no non-trivial algorithms for the nearest codeword problem (NCP), the minimum distance problem (MDP), or the nearest codeword problem with preprocessing (NCPP) on linear codes over any finite field. More precisely, we show that there are no NCP, MDP, or NCPP algorithms running in time $q^{(1-ε)n}$ for any constant $ε>0$ for codes with $q^n$ codewords. (In the case of NCPP, we assume non-uniform SETH.) % \\nnoteHere's an attempt at bragging a bit. Could just delete it. Our results are inspired by recent similar lower bounds for computational lattice problems. However, our results are qualitatively quite different. In fact, our lower bounds show a strong \\emphseparation between lattices and codes: these coding problems have no non-trivial algorithms while highly non-trivial algorithms are known for the analogous lattice problems. We also show that there are no sub-exponential-time algorithms for $γ$-approximate versions of these problems for some constant $γ > 1$, under different versions of the exponential-time hypothesis.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"stephensdavidowitz-atimedistancetradeoffforgddwithpreprocessinginstantiatingthedlwheuristic-2019\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1902.08340\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'stephensdavidowitz-atimedistancetradeoffforgddwithpreprocessinginstantiatingthedlwheuristic-2019', 'http://arxiv.org/abs/1902.08340', event);\">\n    A time-distance trade-off for GDD with preprocessing—Instantiating the DLW heuristic.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>CCC</i>,  2019. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1902.08340\"\n     onclick=\"log_download('stephensdavidowitz-atimedistancetradeoffforgddwithpreprocessinginstantiatingthedlwheuristic-2019', 'http://arxiv.org/abs/1902.08340', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"A time-distance trade-off for GDD with preprocessing—Instantiating the DLW heuristic [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/stephensdavidowitz-atimedistancetradeoffforgddwithpreprocessinginstantiatingthedlwheuristic-2019\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>20 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('stephensdavidowitz-atimedistancetradeoffforgddwithpreprocessinginstantiatingthedlwheuristic-2019')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{SteTimedistanceTradeoff19,\n\tabstract = {$\n\t\\newcommand{\\Otil}{\\ensuremath{\\widetilde{O}}}\n\t\\newcommand{\\problem}[1]{\\ensuremath{\\mathsf{#1}}}\n\t\\newcommand{\\gapspp}{\\problem{GapSPP}}\n\t\\newcommand{\\oNP}{\\mathsf{coNP}}\n\t\\newcommand{\\eps}{\\epsilon}\n\t\\newcommand{\\ensuremath}[1]{#1}\n\t\\newcommand{\\R}{\\mathbb{R}} \\newcommand{\\lat}{\\mathcal{L}} $For $0 \\leq \\alpha \\leq 1/2$, we show an algorithm that does the following. Given appropriate preprocessing $P(\\lat)$ consisting of $N_\\alpha := 2^{O(n^{1-2\\alpha} + \\log n)}$ vectors in some lattice $\\lat \\subset \\R^n$ and a target vector $t \\in \\R^n$, the algorithm finds $y \\in \\lat$ such that $\\|y- t\\| \\leq n^{1/2 + \\alpha} \\eta(\\lat)$ in time $\\mathrm{poly}(n) \\cdot N_\\alpha$, where $\\eta(\\lat)$ is the smoothing parameter of the lattice.\n\t\n\tThe algorithm itself is very simple and was originally studied by Doulgerakis, Laarhoven, and de Weger (to appear in PQCrypto, 2019), who proved its correctness under certain reasonable heuristic assumptions on the preprocessing $P(\\lat)$ and target $t$. Our primary contribution is a choice of preprocessing that allows us to prove correctness without any heuristic assumptions.\n\t\n\tOur main motivation for studying this is the recent breakthrough algorithm for IdealSVP due to Hanrot, Pellet--Mary, and Stehl\\&#x27;e (to appear in Eurocrypt, 2019), which uses the DLW algorithm as a key subprocedure. In particular, our result implies that the HPS IdealSVP algorithm can be made to work with fewer heuristic assumptions.\n\t\n\tOur only technical tool is the discrete Gaussian distribution over $\\lat$, and in particular, a lemma showing that the one-dimensional projections of this distribution behave very similarly to the continuous Gaussian. This lemma might be of independent interest.},\n\ttitle = {A time-distance trade-off for {GDD} with preprocessing---{Instantiating} the {DLW} heuristic},\n\turl = {http://arxiv.org/abs/1902.08340},\n\tauthor = {{Stephens-Davidowitz}, Noah},\n\tyear = {2019},\n\tbooktitle={CCC},\n}\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  $ \\newcommand{Øtil}{\\ensuremath{\\widetilde{O}}} \\newcommand{\\problem}[1]{\\ensuremath{\\mathsf{#1}}} \\newcommand{\\gapspp}{\\problem{GapSPP}} \\newcommand{øNP}{\\mathsf{coNP}} \\newcommand{\\eps}{ε} \\newcommand{\\ensuremath}[1]{#1} \\newcommand{\\R}{ℝ} \\newcommand{łat}{\\mathcal{L}} $For $0 ≤ α ≤ 1/2$, we show an algorithm that does the following. Given appropriate preprocessing $P(łat)$ consisting of $N_α := 2^{O(n^{1-2α} + łog n)}$ vectors in some lattice $łat ⊂ \\R^n$ and a target vector $t ∈ \\R^n$, the algorithm finds $y ∈ łat$ such that $\\|y- t\\| ≤ n^{1/2 + α} η(łat)$ in time $\\mathrm{poly}(n) · N_α$, where $η(łat)$ is the smoothing parameter of the lattice. The algorithm itself is very simple and was originally studied by Doulgerakis, Laarhoven, and de Weger (to appear in PQCrypto, 2019), who proved its correctness under certain reasonable heuristic assumptions on the preprocessing $P(łat)$ and target $t$. Our primary contribution is a choice of preprocessing that allows us to prove correctness without any heuristic assumptions. Our main motivation for studying this is the recent breakthrough algorithm for IdealSVP due to Hanrot, Pellet–Mary, and Stehlé (to appear in Eurocrypt, 2019), which uses the DLW algorithm as a key subprocedure. In particular, our result implies that the HPS IdealSVP algorithm can be made to work with fewer heuristic assumptions. Our only technical tool is the discrete Gaussian distribution over $łat$, and in particular, a lemma showing that the one-dimensional projections of this distribution behave very similarly to the continuous Gaussian. This lemma might be of independent interest.\n</div>\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n  <div class=\"bibbase_group_whole\" id=\"group_2018\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2018')\"\n      onkeypress=\"toggleGroup('group_2018')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2018</span>\n      <span class=\"bibbase_group_count\">\n        \n        (3)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"aggarwal-stephensdavidowitz-gapsethhardnessofsvp-2018\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1712.00942\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'aggarwal-stephensdavidowitz-gapsethhardnessofsvp-2018', 'http://arxiv.org/abs/1712.00942', event);\">\n    (Gap/S)ETH Hardness of SVP.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Divesh Aggarwal;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>STOC</i>,  2018. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1712.00942\"\n     onclick=\"log_download('aggarwal-stephensdavidowitz-gapsethhardnessofsvp-2018', 'http://arxiv.org/abs/1712.00942', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"(Gap/S)ETH Hardness of SVP [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/aggarwal-stephensdavidowitz-gapsethhardnessofsvp-2018\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>81 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('aggarwal-stephensdavidowitz-gapsethhardnessofsvp-2018')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{ASGapETH18,\n  title = {{(Gap/S)ETH} Hardness of {SVP}},\n  abstract = {$ \\newcommand{\\problem}[1]{\\ensuremath{\\mathrm{#1}} } \\newcommand{\\SVP}{\\problem{SVP}} \\newcommand{\\ensuremath}[1]{#1} $We prove the following quantitative hardness results for the Shortest Vector Problem in the $\\ell_p$ norm ($\\SVP_p$), where $n$ is the rank of the input lattice. $\\bullet$ For &quot;almost all&quot; $p &gt; p_0 \\approx 2.1397$, there no $2^{n/C_p}$-time algorithm for $\\SVP_p$ for some explicit constant $C_p &gt; 0$ unless the (randomized) Strong Exponential Time Hypothesis (SETH) is false. $\\bullet$ For any $p &gt; 2$, there is no $2^{o(n)}$-time algorithm for $\\SVP_p$ unless the (randomized) Gap-Exponential Time Hypothesis (Gap-ETH) is false. Furthermore, for each $p &gt; 2$, there exists a constant $\\gamma_p &gt; 1$ such that the same result holds even for $\\gamma_p$-approximate $\\SVP_p$. $\\bullet$ There is no $2^{o(n)}$-time algorithm for $\\SVP_p$ for any $1 \\leq p \\leq 2$ unless either (1) (non-uniform) Gap-ETH is false; or (2) there is no family of lattices with exponential kissing number in the $\\ell_2$ norm. Furthermore, for each $1 \\leq p \\leq 2$, there exists a constant $\\gamma_p &gt; 1$ such that the same result holds even for $\\gamma_p$-approximate $\\SVP_p$.},\n  url = {http://arxiv.org/abs/1712.00942},\n  booktitle = {STOC},\n  author = {Aggarwal, Divesh and {Stephens-Davidowitz}, Noah},\n  year = {2018}\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  $ \\newcommand{\\problem}[1]{\\ensuremath{\\mathrm{#1}} } \\newcommand{§VP}{\\problem{SVP}} \\newcommand{\\ensuremath}[1]{#1} $We prove the following quantitative hardness results for the Shortest Vector Problem in the $\\ell_p$ norm ($§VP_p$), where $n$ is the rank of the input lattice. $•$ For \"almost all\" $p > p_0 ≈ 2.1397$, there no $2^{n/C_p}$-time algorithm for $§VP_p$ for some explicit constant $C_p > 0$ unless the (randomized) Strong Exponential Time Hypothesis (SETH) is false. $•$ For any $p > 2$, there is no $2^{o(n)}$-time algorithm for $§VP_p$ unless the (randomized) Gap-Exponential Time Hypothesis (Gap-ETH) is false. Furthermore, for each $p > 2$, there exists a constant $γ_p > 1$ such that the same result holds even for $γ_p$-approximate $§VP_p$. $•$ There is no $2^{o(n)}$-time algorithm for $§VP_p$ for any $1 ≤ p ≤ 2$ unless either (1) (non-uniform) Gap-ETH is false; or (2) there is no family of lattices with exponential kissing number in the $\\ell_2$ norm. Furthermore, for each $1 ≤ p ≤ 2$, there exists a constant $γ_p > 1$ such that the same result holds even for $γ_p$-approximate $§VP_p$.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"aggarwal-stephensdavidowitz-justtaketheaverageanembarrassinglysimple2ntimealgorithmforsvpandcvp-2018\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1709.01535\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'aggarwal-stephensdavidowitz-justtaketheaverageanembarrassinglysimple2ntimealgorithmforsvpandcvp-2018', 'http://arxiv.org/abs/1709.01535', event);\">\n    Just take the average! An embarrassingly simple $2^n$-time algorithm for SVP (and CVP).\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Divesh Aggarwal;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>SOSA</i>,  2018. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1709.01535\"\n     onclick=\"log_download('aggarwal-stephensdavidowitz-justtaketheaverageanembarrassinglysimple2ntimealgorithmforsvpandcvp-2018', 'http://arxiv.org/abs/1709.01535', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Just take the average! An embarrassingly simple $2^n$-time algorithm for SVP (and CVP) [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/aggarwal-stephensdavidowitz-justtaketheaverageanembarrassinglysimple2ntimealgorithmforsvpandcvp-2018\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>58 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('aggarwal-stephensdavidowitz-justtaketheaverageanembarrassinglysimple2ntimealgorithmforsvpandcvp-2018')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{ASJustTake18,\n  title = {Just take the average! An embarrassingly simple $2^n$-time algorithm for {SVP} (and {CVP})},\n  abstract = {We show a $2^{n+o(n)}$-time (and space) algorithm for the Shortest Vector Problem on lattices (SVP) that works by repeatedly running an embarrassingly simple &quot;pair and average&quot; sieving-like procedure on a list of lattice vectors. This matches the running time (and space) of the current fastest known algorithm, due to Aggarwal, Dadush, Regev, and Stephens-Davidowitz (ADRS, in STOC, 2015), with a far simpler algorithm. Our algorithm is in fact a modification of the ADRS algorithm, with a certain careful rejection sampling step removed. The correctness of our algorithm follows from a more general &quot;meta-theorem,&quot; showing that such rejection sampling steps are unnecessary for a certain class of algorithms and use cases. In particular, this also applies to the related $2^{n + o(n)}$-time algorithm for the Closest Vector Problem (CVP), due to Aggarwal, Dadush, and Stephens-Davidowitz (ADS, in FOCS, 2015), yielding a similar embarrassingly simple algorithm for $\\gamma$-approximate CVP for any $\\gamma = 1+2^{-o(n/\\log n)}$. (We can also remove the rejection sampling procedure from the $2^{n+o(n)}$-time ADS algorithm for exact CVP, but the resulting algorithm is still quite complicated.)},\n  url = {http://arxiv.org/abs/1709.01535},\n  booktitle = {SOSA},\n  author = {Aggarwal, Divesh and {Stephens-Davidowitz}, Noah},\n  year = {2018}\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  We show a $2^{n+o(n)}$-time (and space) algorithm for the Shortest Vector Problem on lattices (SVP) that works by repeatedly running an embarrassingly simple \"pair and average\" sieving-like procedure on a list of lattice vectors. This matches the running time (and space) of the current fastest known algorithm, due to Aggarwal, Dadush, Regev, and Stephens-Davidowitz (ADRS, in STOC, 2015), with a far simpler algorithm. Our algorithm is in fact a modification of the ADRS algorithm, with a certain careful rejection sampling step removed. The correctness of our algorithm follows from a more general \"meta-theorem,\" showing that such rejection sampling steps are unnecessary for a certain class of algorithms and use cases. In particular, this also applies to the related $2^{n + o(n)}$-time algorithm for the Closest Vector Problem (CVP), due to Aggarwal, Dadush, and Stephens-Davidowitz (ADS, in FOCS, 2015), yielding a similar embarrassingly simple algorithm for $γ$-approximate CVP for any $γ = 1+2^{-o(n/łog n)}$. (We can also remove the rejection sampling procedure from the $2^{n+o(n)}$-time ADS algorithm for exact CVP, but the resulting algorithm is still quite complicated.)\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"alamati-peikert-stephensdavidowitz-newandoldproofsystemsforlatticeproblems-2018\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://eprint.iacr.org/2017/1226\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'alamati-peikert-stephensdavidowitz-newandoldproofsystemsforlatticeproblems-2018', 'https://eprint.iacr.org/2017/1226', event);\">\n    New (and old) proof systems for lattice problems.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Navid Alamati;  Chris Peikert;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>PKC</i>,  2018. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://eprint.iacr.org/2017/1226\"\n     onclick=\"log_download('alamati-peikert-stephensdavidowitz-newandoldproofsystemsforlatticeproblems-2018', 'https://eprint.iacr.org/2017/1226', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"New (and old) proof systems for lattice problems [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/alamati-peikert-stephensdavidowitz-newandoldproofsystemsforlatticeproblems-2018\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>19 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('alamati-peikert-stephensdavidowitz-newandoldproofsystemsforlatticeproblems-2018')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{APSNewOld18,\n  title = {New (and old) proof systems for lattice problems},\n  abstract = {$\n\\newcommand{\\Otil}{\\ensuremath{\\widetilde{O}}}\n\\newcommand{\\problem}[1]{\\ensuremath{\\mathsf{#1}}}\n\\newcommand{\\gapspp}{\\problem{GapSPP}}\n\\newcommand{\\oNP}{\\mathsf{coNP}}\n\\newcommand{\\eps}{\\epsilon}\n\\newcommand{\\ensuremath}[1]{#1}\n$We continue the study of statistical zero-knowledge (SZK)\nproofs, both interactive and noninteractive, for computational\nproblems on point lattices.  We are particularly interested in the\nproblem $\\gapspp$ of approximating the $\\epsilon$-smoothing\nparameter (for some $\\epsilon &lt; 1/2$) of an $n$-dimensional\nlattice.  The smoothing parameter is a key quantity in the study of\nlattices, and $\\gapspp$ has been emerging as a core problem in\nlattice-based cryptography, e.g., in worst-case to average-case\nreductions.\n\nWe show that $\\gapspp$ admits SZK proofs for remarkably low\napproximation factors, improving on prior work by up to\nroughly $\\sqrt{n}$.  Specifically:\n\n $\\bullet$  There is a noninteractive SZK proof for\n$O(\\log(n) \\sqrt{\\log (1/\\eps)})$-approximate $\\gapspp$.  Moreover,\nfor any negligible $\\epsilon$ and a larger approximation factor\n$\\Otil(\\sqrt{n \\log(1/\\eps)})$, there is such a proof with an\nefficient prover.\n $\\bullet$  There is an (interactive) SZK proof with an efficient prover for\n$O(\\log n + \\sqrt{\\log(1/\\eps)/\\log n})$-approximate\n$\\problem{coGapSPP}$.  We show this by proving that\n$O(\\log n)$-approximate $\\gapspp$ is in $\\oNP$.\n\nIn addition, we give an (interactive) SZK proof with an efficient\nprover for approximating the lattice covering radius to within\nan $O(\\sqrt{n})$ factor, improving upon the prior best factor of\n$\\omega(\\sqrt{n \\log n})$.},\n  urldate = {2018-05-30},\n  url = {https://eprint.iacr.org/2017/1226},\n  booktitle = {PKC},\n  author = {Alamati, Navid and Peikert, Chris and {Stephens-Davidowitz}, Noah},\n  year = {2018}\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  $ \\newcommand{Øtil}{\\ensuremath{\\widetilde{O}}} \\newcommand{\\problem}[1]{\\ensuremath{\\mathsf{#1}}} \\newcommand{\\gapspp}{\\problem{GapSPP}} \\newcommand{øNP}{\\mathsf{coNP}} \\newcommand{\\eps}{ε} \\newcommand{\\ensuremath}[1]{#1} $We continue the study of statistical zero-knowledge (SZK) proofs, both interactive and noninteractive, for computational problems on point lattices. We are particularly interested in the problem $\\gapspp$ of approximating the $ε$-smoothing parameter (for some $ε < 1/2$) of an $n$-dimensional lattice. The smoothing parameter is a key quantity in the study of lattices, and $\\gapspp$ has been emerging as a core problem in lattice-based cryptography, e.g., in worst-case to average-case reductions. We show that $\\gapspp$ admits SZK proofs for remarkably low approximation factors, improving on prior work by up to roughly $\\sqrt{n}$. Specifically: $•$ There is a noninteractive SZK proof for $O(łog(n) \\sqrt{łog (1/\\eps)})$-approximate $\\gapspp$. Moreover, for any negligible $ε$ and a larger approximation factor $Øtil(\\sqrt{n łog(1/\\eps)})$, there is such a proof with an efficient prover. $•$ There is an (interactive) SZK proof with an efficient prover for $O(łog n + \\sqrt{łog(1/\\eps)/łog n})$-approximate $\\problem{coGapSPP}$. We show this by proving that $O(łog n)$-approximate $\\gapspp$ is in $øNP$. In addition, we give an (interactive) SZK proof with an efficient prover for approximating the lattice covering radius to within an $O(\\sqrt{n})$ factor, improving upon the prior best factor of $ω(\\sqrt{n łog n})$.\n</div>\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n  <div class=\"bibbase_group_whole\" id=\"group_2017\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2017')\"\n      onkeypress=\"toggleGroup('group_2017')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2017</span>\n      <span class=\"bibbase_group_count\">\n        \n        (5)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"regev-stephensdavidowitz-aninequalityforgaussiansonlattices-2017\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1502.04796\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'regev-stephensdavidowitz-aninequalityforgaussiansonlattices-2017', 'http://arxiv.org/abs/1502.04796', event);\">\n    An inequality for Gaussians on lattices.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Oded Regev;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  <i>SIDMA</i>, 31(2).  2017.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1502.04796\"\n     onclick=\"log_download('regev-stephensdavidowitz-aninequalityforgaussiansonlattices-2017', 'http://arxiv.org/abs/1502.04796', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"An inequality for Gaussians on lattices [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/regev-stephensdavidowitz-aninequalityforgaussiansonlattices-2017\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>44 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('regev-stephensdavidowitz-aninequalityforgaussiansonlattices-2017')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@article{RSInequalityGaussians17,\n\ttitle = {An inequality for {Gaussians} on lattices},\n\tabstract = {$ \\newcommand{\\R}{\\ensuremath{\\mathbb{R}}} \\newcommand{\\lat}{\\mathcal{L}} \\newcommand{\\ensuremath}[1]{#1} $We show that for any lattice $\\lat \\subseteq \\R^n$ and vectors $x,y \\in \\R^n$, \\[ f(\\lat + x)^2 f(\\lat + y)^2 \\leq f(\\lat)^2 f(\\lat + x + y) f(\\lat + x - y) \\; , \\] where $f$ is the Gaussian measure $f(A) := \\sum_{w \\in A} \\exp(-\\pi \\| w \\|^2)$. We show a number of applications, including bounds on the moments of the discrete Gaussian distribution, various monotonicity properties of the heat kernel on flat tori, and a positive correlation inequality for Gaussian measures on lattices.},\n\turldate = {2018-05-28},\n\turl = {http://arxiv.org/abs/1502.04796},\n\tjournal = {SIDMA},\n\tauthor = {Regev, Oded and {Stephens-Davidowitz}, Noah},\n\tyear = {2017},\n\t\tvolume = {31},\n\tnumber = {2},\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  $ \\newcommand{\\R}{\\ensuremath{ℝ}} \\newcommand{łat}{\\mathcal{L}} \\newcommand{\\ensuremath}[1]{#1} $We show that for any lattice $łat ⊆ \\R^n$ and vectors $x,y ∈ \\R^n$, \\[ f(łat + x)^2 f(łat + y)^2 ≤ f(łat)^2 f(łat + x + y) f(łat + x - y)   , \\] where $f$ is the Gaussian measure $f(A) := ∑_{w ∈ A} \\exp(-π \\| w \\|^2)$. We show a number of applications, including bounds on the moments of the discrete Gaussian distribution, various monotonicity properties of the heat kernel on flat tori, and a positive correlation inequality for Gaussian measures on lattices.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"bennett-golovnev-stephensdavidowitz-onthequantitativehardnessofcvp-2017\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1704.03928\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'bennett-golovnev-stephensdavidowitz-onthequantitativehardnessofcvp-2017', 'http://arxiv.org/abs/1704.03928', event);\">\n    On the quantitative hardness of CVP.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Huck Bennett;  Alexander Golovnev;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>FOCS</i>,  2017. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1704.03928\"\n     onclick=\"log_download('bennett-golovnev-stephensdavidowitz-onthequantitativehardnessofcvp-2017', 'http://arxiv.org/abs/1704.03928', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"On the quantitative hardness of CVP [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n  <a href=\"http://www.youtube.com/watch?v=sd-SMjAl0ks\"\n     onclick=\"log_download('bennett-golovnev-stephensdavidowitz-onthequantitativehardnessofcvp-2017', 'http://www.youtube.com/watch?v=sd-SMjAl0ks', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"On the quantitative hardness of CVP [link]\"\n       title=\" princeton talk\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\"> princeton talk</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/bennett-golovnev-stephensdavidowitz-onthequantitativehardnessofcvp-2017\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>66 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('bennett-golovnev-stephensdavidowitz-onthequantitativehardnessofcvp-2017')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{BGSQuantitativeHardness17,\n  title = {On the quantitative hardness of {CVP}},\n  abstract = {$ \\newcommand{\\eps}{\\epsilon} \\newcommand{\\problem}[1]{\\ensuremath{\\mathrm{#1}} } \\newcommand{\\CVP}{\\problem{CVP}} \\newcommand{\\SVP}{\\problem{SVP}} \\newcommand{\\CVPP}{\\problem{CVPP}} \\newcommand{\\ensuremath}[1]{#1} $For odd integers $p \\geq 1$ (and $p = \\infty$), we show that the Closest Vector Problem in the $\\ell_p$ norm ($\\CVP_p$) over rank $n$ lattices cannot be solved in $2^{(1-\\eps) n}$ time for any constant $\\eps &gt; 0$ unless the Strong Exponential Time Hypothesis (SETH) fails. We then extend this result to &quot;almost all&quot; values of $p \\geq 1$, not including the even integers. This comes tantalizingly close to settling the quantitative time complexity of the important special case of $\\CVP_2$ (i.e., $\\CVP$ in the Euclidean norm), for which a $2^{n +o(n)}$-time algorithm is known. In particular, our result applies for any $p = p(n) \\neq 2$ that approaches $2$ as $n \\to \\infty$. We also show a similar SETH-hardness result for $\\SVP_\\infty$; hardness of approximating $\\CVP_p$ to within some constant factor under the so-called Gap-ETH assumption; and other quantitative hardness results for $\\CVP_p$ and $\\CVPP_p$ for any $1 \\leq p &lt; \\infty$ under different assumptions.},\n  url = {http://arxiv.org/abs/1704.03928},\n  booktitle = {FOCS},\n  author = {Bennett, Huck and Golovnev, Alexander and {Stephens-Davidowitz}, Noah},\n  year = {2017},\n  url_Princeton_Talk = {http://www.youtube.com/watch?v=sd-SMjAl0ks}\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  $ \\newcommand{\\eps}{ε} \\newcommand{\\problem}[1]{\\ensuremath{\\mathrm{#1}} } \\newcommand{\\CVP}{\\problem{CVP}} \\newcommand{§VP}{\\problem{SVP}} \\newcommand{\\CVPP}{\\problem{CVPP}} \\newcommand{\\ensuremath}[1]{#1} $For odd integers $p ≥ 1$ (and $p = ∞$), we show that the Closest Vector Problem in the $\\ell_p$ norm ($\\CVP_p$) over rank $n$ lattices cannot be solved in $2^{(1-\\eps) n}$ time for any constant $\\eps > 0$ unless the Strong Exponential Time Hypothesis (SETH) fails. We then extend this result to \"almost all\" values of $p ≥ 1$, not including the even integers. This comes tantalizingly close to settling the quantitative time complexity of the important special case of $\\CVP_2$ (i.e., $\\CVP$ in the Euclidean norm), for which a $2^{n +o(n)}$-time algorithm is known. In particular, our result applies for any $p = p(n) \\neq 2$ that approaches $2$ as $n \\to ∞$. We also show a similar SETH-hardness result for $§VP_∞$; hardness of approximating $\\CVP_p$ to within some constant factor under the so-called Gap-ETH assumption; and other quantitative hardness results for $\\CVP_p$ and $\\CVPP_p$ for any $1 ≤ p < ∞$ under different assumptions.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"peikert-regev-stephensdavidowitz-pseudorandomnessofringlweforanyringandmodulus-2017\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://eprint.iacr.org/2017/258\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'peikert-regev-stephensdavidowitz-pseudorandomnessofringlweforanyringandmodulus-2017', 'https://eprint.iacr.org/2017/258', event);\">\n    Pseudorandomness of Ring-LWE for any ring and modulus.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Chris Peikert;  Oded Regev;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>STOC</i>,  2017. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://eprint.iacr.org/2017/258\"\n     onclick=\"log_download('peikert-regev-stephensdavidowitz-pseudorandomnessofringlweforanyringandmodulus-2017', 'https://eprint.iacr.org/2017/258', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Pseudorandomness of Ring-LWE for any ring and modulus [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/peikert-regev-stephensdavidowitz-pseudorandomnessofringlweforanyringandmodulus-2017\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>67 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('peikert-regev-stephensdavidowitz-pseudorandomnessofringlweforanyringandmodulus-2017')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{PRSPseudorandomnessRingLWE17,\n  title = {Pseudorandomness of {Ring-LWE} for any ring and modulus},\n  abstract = {We give a polynomial-time quantum reduction from worst-case (ideal) lattice problems directly to the decision version of (Ring-)LWE. This extends to decision all the worst-case hardness results that were previously known for the search version, for the same or even better parameters and with no algebraic restrictions on the modulus or number field. Indeed, our reduction is the first that works for decision Ring-LWE with any number field and any modulus.},\n  url = {https://eprint.iacr.org/2017/258},\n  booktitle = {STOC},\n  author = {Peikert, Chris and Regev, Oded and {Stephens-Davidowitz}, Noah},\n  year = {2017}\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  We give a polynomial-time quantum reduction from worst-case (ideal) lattice problems directly to the decision version of (Ring-)LWE. This extends to decision all the worst-case hardness results that were previously known for the search version, for the same or even better parameters and with no algebraic restrictions on the modulus or number field. Indeed, our reduction is the first that works for decision Ring-LWE with any number field and any modulus.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"stephensdavidowitz-onthegaussianmeasureoverlattices-2017\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  On the Gaussian measure over lattices.\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  Ph.D. Thesis, New York University,  2017.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/stephensdavidowitz-onthegaussianmeasureoverlattices-2017\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('stephensdavidowitz-onthegaussianmeasureoverlattices-2017')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@phdthesis{NSDthesis,\n  type = {PhD Thesis},\n  title = {On the {Gaussian} measure over lattices},\n  school = {New York University},\n  author = {{Stephens-Davidowitz}, Noah},\n  year = {2017}\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"halevi-halevi-shoup-stephensdavidowitz-implementingbpobfuscationusinggraphinducedencoding-2017\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://eprint.iacr.org/2017/104\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'halevi-halevi-shoup-stephensdavidowitz-implementingbpobfuscationusinggraphinducedencoding-2017', 'https://eprint.iacr.org/2017/104', event);\">\n    Implementing BP-obfuscation using graph-induced encoding.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Shai Halevi;  Tzipora Halevi;  Victor Shoup;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>CCS</i>,  2017. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://eprint.iacr.org/2017/104\"\n     onclick=\"log_download('halevi-halevi-shoup-stephensdavidowitz-implementingbpobfuscationusinggraphinducedencoding-2017', 'https://eprint.iacr.org/2017/104', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Implementing BP-obfuscation using graph-induced encoding [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/halevi-halevi-shoup-stephensdavidowitz-implementingbpobfuscationusinggraphinducedencoding-2017\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>8 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('halevi-halevi-shoup-stephensdavidowitz-implementingbpobfuscationusinggraphinducedencoding-2017')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{HHSSImplementingBPObfuscation17,\n  title = {Implementing {BP}-obfuscation using graph-induced encoding},\n  abstract = {We implemented (a simplified version of) the branching-program obfuscator due to Gentry et al. (GGH15), which is itself a variation of the first obfuscation candidate by Garg et al. (GGHRSW13). To keep within the realm of feasibility, we had to give up on some aspects of the construction, specifically the ‘‘multiplicative bundling&#x27;&#x27; factors that protect against mixed-input attacks. Hence our implementation can only support read-once branching programs.\n\nTo be able to handle anything more than just toy problems, we developed a host of algorithmic and code-level optimizations. These include new variants of discrete Gaussian sampler and lattice trapdoor sampler, efficient matrix-manipulation routines, and many tradeoffs. We expect that these optimizations will find other uses in lattice-based cryptography beyond just obfuscation.\n\nOur implementation is the first obfuscation attempt using the GGH15 graded encoding scheme, offering performance advantages over other graded encoding methods when obfuscating finite-state machines with many states. In out most demanding setting, we were able to obfuscate programs with input length of 20 nibbles (80 bits) and over 100 states, which seems out of reach for prior implementations. Although further optimizations are surely possible, we do not expect any implementation of current schemes to be able to handle much larger parameters.},\n  urldate = {2018-05-30},\n  url = {https://eprint.iacr.org/2017/104},\n  author = {Halevi, Shai and Halevi, Tzipora and Shoup, Victor and {Stephens-Davidowitz}, Noah},\n  year = {2017},\n  booktitle = {CCS},\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  We implemented (a simplified version of) the branching-program obfuscator due to Gentry et al. (GGH15), which is itself a variation of the first obfuscation candidate by Garg et al. (GGHRSW13). To keep within the realm of feasibility, we had to give up on some aspects of the construction, specifically the ‘‘multiplicative bundling'' factors that protect against mixed-input attacks. Hence our implementation can only support read-once branching programs. To be able to handle anything more than just toy problems, we developed a host of algorithmic and code-level optimizations. These include new variants of discrete Gaussian sampler and lattice trapdoor sampler, efficient matrix-manipulation routines, and many tradeoffs. We expect that these optimizations will find other uses in lattice-based cryptography beyond just obfuscation. Our implementation is the first obfuscation attempt using the GGH15 graded encoding scheme, offering performance advantages over other graded encoding methods when obfuscating finite-state machines with many states. In out most demanding setting, we were able to obfuscate programs with input length of 20 nibbles (80 bits) and over 100 states, which seems out of reach for prior implementations. Although further optimizations are surely possible, we do not expect any implementation of current schemes to be able to handle much larger parameters.\n</div>\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n  <div class=\"bibbase_group_whole\" id=\"group_2016\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2016')\"\n      onkeypress=\"toggleGroup('group_2016')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2016</span>\n      <span class=\"bibbase_group_count\">\n        \n        (4)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"stephensdavidowitz-searchtodecisionreductionsforlatticeproblemswithapproximationfactorsslightlygreaterthanone-2016\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1512.04138\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'stephensdavidowitz-searchtodecisionreductionsforlatticeproblemswithapproximationfactorsslightlygreaterthanone-2016', 'http://arxiv.org/abs/1512.04138', event);\">\n    Search-to-decision reductions for lattice problems with approximation factors (slightly) greater than one.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>APPROX</i>,  2016. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1512.04138\"\n     onclick=\"log_download('stephensdavidowitz-searchtodecisionreductionsforlatticeproblemswithapproximationfactorsslightlygreaterthanone-2016', 'http://arxiv.org/abs/1512.04138', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Search-to-decision reductions for lattice problems with approximation factors (slightly) greater than one [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/stephensdavidowitz-searchtodecisionreductionsforlatticeproblemswithapproximationfactorsslightlygreaterthanone-2016\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>43 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('stephensdavidowitz-searchtodecisionreductionsforlatticeproblemswithapproximationfactorsslightlygreaterthanone-2016')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{SteSearchtodecisionReductions16,\n  title = {Search-to-decision reductions for lattice problems with approximation factors (slightly) greater than one},\n  abstract = {We show the first dimension-preserving search-to-decision reductions for approximate SVP and CVP. In particular, for any $\\gamma \\leq 1 + O(\\log n/n)$, we obtain an efficient dimension-preserving reduction from $\\gamma^{O(n/\\log n)}$-SVP to $\\gamma$-GapSVP and an efficient dimension-preserving reduction from $\\gamma^{O(n)}$-CVP to $\\gamma$-GapCVP. These results generalize the known equivalences of the search and decision versions of these problems in the exact case when $\\gamma = 1$. For SVP, we actually obtain something slightly stronger than a search-to-decision reduction--we reduce $\\gamma^{O(n/\\log n)}$-SVP to $\\gamma$-unique SVP, a potentially easier problem than $\\gamma$-GapSVP.},\n  url = {http://arxiv.org/abs/1512.04138},\n  booktitle = {APPROX},\n  author = {{Stephens-Davidowitz}, Noah},\n  year = {2016}\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  We show the first dimension-preserving search-to-decision reductions for approximate SVP and CVP. In particular, for any $γ ≤ 1 + O(łog n/n)$, we obtain an efficient dimension-preserving reduction from $γ^{O(n/łog n)}$-SVP to $γ$-GapSVP and an efficient dimension-preserving reduction from $γ^{O(n)}$-CVP to $γ$-GapCVP. These results generalize the known equivalences of the search and decision versions of these problems in the exact case when $γ = 1$. For SVP, we actually obtain something slightly stronger than a search-to-decision reduction–we reduce $γ^{O(n/łog n)}$-SVP to $γ$-unique SVP, a potentially easier problem than $γ$-GapSVP.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"bennett-dadush-stephensdavidowitz-onthelatticedistortionproblem-2016\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1605.03613\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'bennett-dadush-stephensdavidowitz-onthelatticedistortionproblem-2016', 'http://arxiv.org/abs/1605.03613', event);\">\n    On the Lattice Distortion Problem.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Huck Bennett;  Daniel Dadush;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>ESA</i>,  2016. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1605.03613\"\n     onclick=\"log_download('bennett-dadush-stephensdavidowitz-onthelatticedistortionproblem-2016', 'http://arxiv.org/abs/1605.03613', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"On the Lattice Distortion Problem [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/bennett-dadush-stephensdavidowitz-onthelatticedistortionproblem-2016\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>14 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('bennett-dadush-stephensdavidowitz-onthelatticedistortionproblem-2016')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{BDSLatticeDistortion16,\n  title = {On the {Lattice Distortion Problem}},\n  abstract = {We introduce and study the \\emph{Lattice Distortion Problem} (LDP). LDP asks how &quot;similar&quot; two lattices are. I.e., what is the minimal distortion of a linear bijection between the two lattices? LDP generalizes the Lattice Isomorphism Problem (the lattice analogue of Graph Isomorphism), which simply asks whether the minimal distortion is one. As our first contribution, we show that the distortion between any two lattices is approximated up to a $n^{O(\\log n)}$ factor by a simple function of their successive minima. Our methods are constructive, allowing us to compute low-distortion mappings that are within a $2^{O(n \\log \\log n/\\log n)}$ factor of optimal in polynomial time and within a $n^{O(\\log n)}$ factor of optimal in singly exponential time. Our algorithms rely on a notion of basis reduction introduced by Seysen (Combinatorica 1993), which we show is intimately related to lattice distortion. Lastly, we show that LDP is NP-hard to approximate to within any constant factor (under randomized reductions), by a reduction from the Shortest Vector Problem.},\n  url = {http://arxiv.org/abs/1605.03613},\n  booktitle = {ESA},\n  author = {Bennett, Huck and Dadush, Daniel and {Stephens-Davidowitz}, Noah},\n  year = {2016}\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  We introduce and study the \\emphLattice Distortion Problem (LDP). LDP asks how \"similar\" two lattices are. I.e., what is the minimal distortion of a linear bijection between the two lattices? LDP generalizes the Lattice Isomorphism Problem (the lattice analogue of Graph Isomorphism), which simply asks whether the minimal distortion is one. As our first contribution, we show that the distortion between any two lattices is approximated up to a $n^{O(łog n)}$ factor by a simple function of their successive minima. Our methods are constructive, allowing us to compute low-distortion mappings that are within a $2^{O(n łog łog n/łog n)}$ factor of optimal in polynomial time and within a $n^{O(łog n)}$ factor of optimal in singly exponential time. Our algorithms rely on a notion of basis reduction introduced by Seysen (Combinatorica 1993), which we show is intimately related to lattice distortion. Lastly, we show that LDP is NP-hard to approximate to within any constant factor (under randomized reductions), by a reduction from the Shortest Vector Problem.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"stephensdavidowitz-discretegaussiansamplingreducestocvpandsvp-2016\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1506.07490\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'stephensdavidowitz-discretegaussiansamplingreducestocvpandsvp-2016', 'http://arxiv.org/abs/1506.07490', event);\">\n    Discrete Gaussian sampling reduces to CVP and SVP.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>SODA</i>,  2016. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1506.07490\"\n     onclick=\"log_download('stephensdavidowitz-discretegaussiansamplingreducestocvpandsvp-2016', 'http://arxiv.org/abs/1506.07490', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Discrete Gaussian sampling reduces to CVP and SVP [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/stephensdavidowitz-discretegaussiansamplingreducestocvpandsvp-2016\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>106 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('stephensdavidowitz-discretegaussiansamplingreducestocvpandsvp-2016')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{SteDiscreteGaussian16,\n  title = {Discrete {Gaussian} sampling reduces to {CVP} and {SVP}},\n  abstract = {The discrete Gaussian $D_{L- t, s}$ is the distribution that assigns to each vector $x$ in a shifted lattice $L - t$ probability proportional to $e^{-\\pi \\|x\\|^2/s^2}$. It has long been an important tool in the study of lattices. More recently, algorithms for discrete Gaussian sampling (DGS) have found many applications in computer science. In particular, polynomial-time algorithms for DGS with very high parameters $s$ have found many uses in cryptography and in reductions between lattice problems. And, in the past year, Aggarwal, Dadush, Regev, and Stephens-Davidowitz showed $2^{n+o(n)}$-time algorithms for DGS with a much wider range of parameters and used them to obtain the current fastest known algorithms for the two most important lattice problems, the Shortest Vector Problem (SVP) and the Closest Vector Problem (CVP). Motivated by its increasing importance, we investigate the complexity of DGS itself and its relationship to CVP and SVP. Our first result is a polynomial-time dimension-preserving reduction from DGS to CVP. There is a simple reduction from CVP to DGS, so this shows that DGS is equivalent to CVP. Our second result, which we find to be more surprising, is a polynomial-time dimension-preserving reduction from centered DGS (the important special case when $ t = 0$) to SVP. In the other direction, there is a simple reduction from $\\gamma$-approximate SVP for any $\\gamma = \\Omega(\\sqrt{n/\\log n})$, and we present some (relatively weak) evidence to suggest that this might be the best achievable approximation factor. We also show that our CVP result extends to a much wider class of distributions and even to other norms.},\n  url = {http://arxiv.org/abs/1506.07490},\n  booktitle = {SODA},\n  author = {{Stephens-Davidowitz}, Noah},\n  year = {2016}\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  The discrete Gaussian $D_{L- t, s}$ is the distribution that assigns to each vector $x$ in a shifted lattice $L - t$ probability proportional to $e^{-π \\|x\\|^2/s^2}$. It has long been an important tool in the study of lattices. More recently, algorithms for discrete Gaussian sampling (DGS) have found many applications in computer science. In particular, polynomial-time algorithms for DGS with very high parameters $s$ have found many uses in cryptography and in reductions between lattice problems. And, in the past year, Aggarwal, Dadush, Regev, and Stephens-Davidowitz showed $2^{n+o(n)}$-time algorithms for DGS with a much wider range of parameters and used them to obtain the current fastest known algorithms for the two most important lattice problems, the Shortest Vector Problem (SVP) and the Closest Vector Problem (CVP). Motivated by its increasing importance, we investigate the complexity of DGS itself and its relationship to CVP and SVP. Our first result is a polynomial-time dimension-preserving reduction from DGS to CVP. There is a simple reduction from CVP to DGS, so this shows that DGS is equivalent to CVP. Our second result, which we find to be more surprising, is a polynomial-time dimension-preserving reduction from centered DGS (the important special case when $ t = 0$) to SVP. In the other direction, there is a simple reduction from $γ$-approximate SVP for any $γ = Ω(\\sqrt{n/łog n})$, and we present some (relatively weak) evidence to suggest that this might be the best achievable approximation factor. We also show that our CVP result extends to a much wider class of distributions and even to other norms.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"dodis-mironov-stephensdavidowitz-messagetransmissionwithreversefirewallssecurecommunicationoncorruptedmachines-2016\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://eprint.iacr.org/2015/548\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'dodis-mironov-stephensdavidowitz-messagetransmissionwithreversefirewallssecurecommunicationoncorruptedmachines-2016', 'https://eprint.iacr.org/2015/548', event);\">\n    Message transmission with Reverse Firewalls–secure communication on corrupted machines.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Yevgeniy Dodis;  Ilya Mironov;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>CRYPTO</i>,  2016. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://eprint.iacr.org/2015/548\"\n     onclick=\"log_download('dodis-mironov-stephensdavidowitz-messagetransmissionwithreversefirewallssecurecommunicationoncorruptedmachines-2016', 'https://eprint.iacr.org/2015/548', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Message transmission with Reverse Firewalls–secure communication on corrupted machines [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n  <a href=\"http://www.youtube.com/watch?v=2DOc-9u1EbQ\"\n     onclick=\"log_download('dodis-mironov-stephensdavidowitz-messagetransmissionwithreversefirewallssecurecommunicationoncorruptedmachines-2016', 'http://www.youtube.com/watch?v=2DOc-9u1EbQ', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Message transmission with Reverse Firewalls–secure communication on corrupted machines [link]\"\n       title=\" crypto talk\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\"> crypto talk</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/dodis-mironov-stephensdavidowitz-messagetransmissionwithreversefirewallssecurecommunicationoncorruptedmachines-2016\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>11 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('dodis-mironov-stephensdavidowitz-messagetransmissionwithreversefirewallssecurecommunicationoncorruptedmachines-2016')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{DMSMessageTransmission16,\n  title = {Message transmission with Reverse Firewalls--secure communication on corrupted machines},\n  abstract = {Suppose Alice wishes to send a message to Bob privately over an untrusted channel. Cryptographers have developed a whole suite of tools to accomplish this task, with a wide variety of notions of security, setup assumptions, and running times. However, almost all prior work on this topic made a seemingly innocent assumption: that Alice has access to a trusted computer with a proper implementation of the protocol. The Snowden revelations show us that, in fact, powerful adversaries can and will corrupt users&#x27; machines in order to compromise their security. And, (presumably) accidental vulnerabilities are regularly found in popular cryptographic software, showing that users cannot even trust implementations that were created honestly. This leads to the following (seemingly absurd) question: ‘‘Can Alice securely send a message to Bob even if she cannot trust her own computer?!&#x27;&#x27;\n\nBellare, Paterson, and Rogaway recently studied this question. They show a strong lower bound that in particular rules out even semantically secure public-key encryption in their model. However, Mironov and Stephens-Davidowitz recently introduced a new framework for solving such problems: reverse firewalls. A secure reverse firewall is a third party that ‘‘sits between Alice and the outside world&#x27;&#x27; and modifies her sent and received messages so that even if the her machine has been corrupted, Alice&#x27;s security is still guaranteed. We show how to use reverse firewalls to sidestep the impossibility result of Bellare et al., and we achieve strong security guarantees in this extreme setting.\n\nIndeed, we find a rich structure of solutions that vary in efficiency, security, and setup assumptions, in close analogy with message transmission in the classical setting. Our strongest and most important result shows a protocol that achieves interactive, concurrent CCA-secure message transmission with a reverse firewall--i.e., CCA-secure message transmission on a possibly compromised machine! Surprisingly, this protocol is quite efficient and simple, requiring only four rounds and a small constant number of public-key operations for each party. It could easily be used in practice. Behind this result is a technical composition theorem that shows how key agreement with a sufficiently secure reverse firewall can be used to construct a message-transmission protocol with its own secure reverse firewall.},\n  urldate = {2018-05-30},\n  url = {https://eprint.iacr.org/2015/548},\n  booktitle = {CRYPTO},\n  author = {Dodis, Yevgeniy and Mironov, Ilya and {Stephens-Davidowitz}, Noah},\n  year = {2016},\n  url_CRYPTO_talk = {http://www.youtube.com/watch?v=2DOc-9u1EbQ}\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Suppose Alice wishes to send a message to Bob privately over an untrusted channel. Cryptographers have developed a whole suite of tools to accomplish this task, with a wide variety of notions of security, setup assumptions, and running times. However, almost all prior work on this topic made a seemingly innocent assumption: that Alice has access to a trusted computer with a proper implementation of the protocol. The Snowden revelations show us that, in fact, powerful adversaries can and will corrupt users' machines in order to compromise their security. And, (presumably) accidental vulnerabilities are regularly found in popular cryptographic software, showing that users cannot even trust implementations that were created honestly. This leads to the following (seemingly absurd) question: ‘‘Can Alice securely send a message to Bob even if she cannot trust her own computer?!'' Bellare, Paterson, and Rogaway recently studied this question. They show a strong lower bound that in particular rules out even semantically secure public-key encryption in their model. However, Mironov and Stephens-Davidowitz recently introduced a new framework for solving such problems: reverse firewalls. A secure reverse firewall is a third party that ‘‘sits between Alice and the outside world'' and modifies her sent and received messages so that even if the her machine has been corrupted, Alice's security is still guaranteed. We show how to use reverse firewalls to sidestep the impossibility result of Bellare et al., and we achieve strong security guarantees in this extreme setting. Indeed, we find a rich structure of solutions that vary in efficiency, security, and setup assumptions, in close analogy with message transmission in the classical setting. Our strongest and most important result shows a protocol that achieves interactive, concurrent CCA-secure message transmission with a reverse firewall–i.e., CCA-secure message transmission on a possibly compromised machine! Surprisingly, this protocol is quite efficient and simple, requiring only four rounds and a small constant number of public-key operations for each party. It could easily be used in practice. Behind this result is a technical composition theorem that shows how key agreement with a sufficiently secure reverse firewall can be used to construct a message-transmission protocol with its own secure reverse firewall.\n</div>\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n  <div class=\"bibbase_group_whole\" id=\"group_2015\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2015')\"\n      onkeypress=\"toggleGroup('group_2015')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2015</span>\n      <span class=\"bibbase_group_count\">\n        \n        (4)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"aggarwal-dadush-stephensdavidowitz-solvingtheclosestvectorproblemin2ntimethediscretegaussianstrikesagain-2015\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1504.01995\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'aggarwal-dadush-stephensdavidowitz-solvingtheclosestvectorproblemin2ntimethediscretegaussianstrikesagain-2015', 'http://arxiv.org/abs/1504.01995', event);\">\n    Solving the Closest Vector Problem in $2^n$ time–The discrete Gaussian strikes again!.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Divesh Aggarwal;  Daniel Dadush;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>FOCS</i>,  2015. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1504.01995\"\n     onclick=\"log_download('aggarwal-dadush-stephensdavidowitz-solvingtheclosestvectorproblemin2ntimethediscretegaussianstrikesagain-2015', 'http://arxiv.org/abs/1504.01995', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Solving the Closest Vector Problem in $2^n$ time–The discrete Gaussian strikes again! [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/aggarwal-dadush-stephensdavidowitz-solvingtheclosestvectorproblemin2ntimethediscretegaussianstrikesagain-2015\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>18 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('aggarwal-dadush-stephensdavidowitz-solvingtheclosestvectorproblemin2ntimethediscretegaussianstrikesagain-2015')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{ADSSolvingClosest15,\n  title = {Solving the {Closest Vector Problem} in $2^n$ time--The discrete {Gaussian} strikes again!},\n  abstract = {We give a $2^{n+o(n)}$-time and space randomized algorithm for solving the exact Closest Vector Problem (CVP) on $n$-dimensional Euclidean lattices. This improves on the previous fastest algorithm, the deterministic $\\widetilde{O}(4^{n})$-time and $\\widetilde{O}(2^{n})$-space algorithm of Micciancio and Voulgaris. We achieve our main result in three steps. First, we show how to modify the sampling algorithm from [ADRS15] to solve the problem of discrete Gaussian sampling over lattice shifts, $L- t$, with very low parameters. While the actual algorithm is a natural generalization of [ADRS15], the analysis uses substantial new ideas. This yields a $2^{n+o(n)}$-time algorithm for approximate CVP for any approximation factor $\\gamma = 1+2^{-o(n/\\log n)}$. Second, we show that the approximate closest vectors to a target vector $t$ can be grouped into &quot;lower-dimensional clusters,&quot; and we use this to obtain a recursive reduction from exact CVP to a variant of approximate CVP that &quot;behaves well with these clusters.&quot; Third, we show that our discrete Gaussian sampling algorithm can be used to solve this variant of approximate CVP. The analysis depends crucially on some new properties of the discrete Gaussian distribution and approximate closest vectors, which might be of independent interest.},\n  url = {http://arxiv.org/abs/1504.01995},\n  booktitle = {FOCS},\n  author = {Aggarwal, Divesh and Dadush, Daniel and {Stephens-Davidowitz}, Noah},\n  year = {2015}\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  We give a $2^{n+o(n)}$-time and space randomized algorithm for solving the exact Closest Vector Problem (CVP) on $n$-dimensional Euclidean lattices. This improves on the previous fastest algorithm, the deterministic $\\widetilde{O}(4^{n})$-time and $\\widetilde{O}(2^{n})$-space algorithm of Micciancio and Voulgaris. We achieve our main result in three steps. First, we show how to modify the sampling algorithm from [ADRS15] to solve the problem of discrete Gaussian sampling over lattice shifts, $L- t$, with very low parameters. While the actual algorithm is a natural generalization of [ADRS15], the analysis uses substantial new ideas. This yields a $2^{n+o(n)}$-time algorithm for approximate CVP for any approximation factor $γ = 1+2^{-o(n/łog n)}$. Second, we show that the approximate closest vectors to a target vector $t$ can be grouped into \"lower-dimensional clusters,\" and we use this to obtain a recursive reduction from exact CVP to a variant of approximate CVP that \"behaves well with these clusters.\" Third, we show that our discrete Gaussian sampling algorithm can be used to solve this variant of approximate CVP. The analysis depends crucially on some new properties of the discrete Gaussian distribution and approximate closest vectors, which might be of independent interest.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"aggarwal-dadush-regev-stephensdavidowitz-solvingtheshortestvectorproblemin2ntimeviadiscretegaussiansampling-2015\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1412.7994\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'aggarwal-dadush-regev-stephensdavidowitz-solvingtheshortestvectorproblemin2ntimeviadiscretegaussiansampling-2015', 'http://arxiv.org/abs/1412.7994', event);\">\n    Solving the Shortest Vector Problem in $2^n$ time via discrete Gaussian sampling.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Divesh Aggarwal;  Daniel Dadush;  Oded Regev;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>STOC</i>,  2015. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1412.7994\"\n     onclick=\"log_download('aggarwal-dadush-regev-stephensdavidowitz-solvingtheshortestvectorproblemin2ntimeviadiscretegaussiansampling-2015', 'http://arxiv.org/abs/1412.7994', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Solving the Shortest Vector Problem in $2^n$ time via discrete Gaussian sampling [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n  <a href=\"http://www.youtube.com/watch?v=PWy0ZBRAUxA\"\n     onclick=\"log_download('aggarwal-dadush-regev-stephensdavidowitz-solvingtheshortestvectorproblemin2ntimeviadiscretegaussiansampling-2015', 'http://www.youtube.com/watch?v=PWy0ZBRAUxA', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Solving the Shortest Vector Problem in $2^n$ time via discrete Gaussian sampling [link]\"\n       title=\" simons talk\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\"> simons talk</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/aggarwal-dadush-regev-stephensdavidowitz-solvingtheshortestvectorproblemin2ntimeviadiscretegaussiansampling-2015\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>48 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('aggarwal-dadush-regev-stephensdavidowitz-solvingtheshortestvectorproblemin2ntimeviadiscretegaussiansampling-2015')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{ADRSSolvingShortest15,\n  title = {Solving the {Shortest Vector Problem} in $2^n$ time via discrete {Gaussian} sampling},\n  abstract = {We give a randomized $2^{n+o(n)}$-time and space algorithm for solving the Shortest Vector Problem (SVP) on n-dimensional Euclidean lattices. This improves on the previous fastest algorithm: the deterministic $\\widetilde{O}(4^n)$-time and $\\widetilde{O}(2^n)$-space algorithm of Micciancio and Voulgaris (STOC 2010, SIAM J. Comp. 2013). In fact, we give a conceptually simple algorithm that solves the (in our opinion, even more interesting) problem of discrete Gaussian sampling (DGS). More specifically, we show how to sample $2^{n/2}$ vectors from the discrete Gaussian distribution at any parameter in $2^{n+o(n)}$ time and space. (Prior work only solved DGS for very large parameters.) Our SVP result then follows from a natural reduction from SVP to DGS. We also show that our DGS algorithm implies a $2^{n + o(n)}$-time algorithm that approximates the Closest Vector Problem to within a factor of $1.97$. In addition, we give a more refined algorithm for DGS above the so-called smoothing parameter of the lattice, which can generate $2^{n/2}$ discrete Gaussian samples in just $2^{n/2+o(n)}$ time and space. Among other things, this implies a $2^{n/2+o(n)}$-time and space algorithm for $1.93$-approximate decision SVP.},\n  url = {http://arxiv.org/abs/1412.7994},\n  booktitle = {STOC},\n  author = {Aggarwal, Divesh and Dadush, Daniel and Regev, Oded and {Stephens-Davidowitz}, Noah},\n  year = {2015},\n  url_Simons_talk = {http://www.youtube.com/watch?v=PWy0ZBRAUxA}\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  We give a randomized $2^{n+o(n)}$-time and space algorithm for solving the Shortest Vector Problem (SVP) on n-dimensional Euclidean lattices. This improves on the previous fastest algorithm: the deterministic $\\widetilde{O}(4^n)$-time and $\\widetilde{O}(2^n)$-space algorithm of Micciancio and Voulgaris (STOC 2010, SIAM J. Comp. 2013). In fact, we give a conceptually simple algorithm that solves the (in our opinion, even more interesting) problem of discrete Gaussian sampling (DGS). More specifically, we show how to sample $2^{n/2}$ vectors from the discrete Gaussian distribution at any parameter in $2^{n+o(n)}$ time and space. (Prior work only solved DGS for very large parameters.) Our SVP result then follows from a natural reduction from SVP to DGS. We also show that our DGS algorithm implies a $2^{n + o(n)}$-time algorithm that approximates the Closest Vector Problem to within a factor of $1.97$. In addition, we give a more refined algorithm for DGS above the so-called smoothing parameter of the lattice, which can generate $2^{n/2}$ discrete Gaussian samples in just $2^{n/2+o(n)}$ time and space. Among other things, this implies a $2^{n/2+o(n)}$-time and space algorithm for $1.93$-approximate decision SVP.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"stephensdavidowitz-dimensionpreservingreductionsbetweenlatticeproblems-2015\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://noahsd.com/latticeproblems.pdf\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'stephensdavidowitz-dimensionpreservingreductionsbetweenlatticeproblems-2015', 'http://noahsd.com/latticeproblems.pdf', event);\">\n    Dimension-preserving reductions between lattice problems.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n   2015.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://noahsd.com/latticeproblems.pdf\"\n     onclick=\"log_download('stephensdavidowitz-dimensionpreservingreductionsbetweenlatticeproblems-2015', 'http://noahsd.com/latticeproblems.pdf', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/pdf.svg\"\n\t     alt=\"Dimension-preserving reductions between lattice problems [pdf]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/stephensdavidowitz-dimensionpreservingreductionsbetweenlatticeproblems-2015\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>97 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('stephensdavidowitz-dimensionpreservingreductionsbetweenlatticeproblems-2015')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@unpublished{SteDimensionpreservingReductions15,\n  title = {Dimension-preserving reductions between lattice problems},\n  abstract = {Computational problems on lattices have found a remarkable number of applications in computer science. In particular, over the past twenty years, many strong cryptographic primitives have been constructed with their security based on the (worst-case) hardness of various lattice problems. \n\nDue to their importance, there has been much work towards understanding the relationship between these problems. For the parameters that typically interest us, the fastest known algorithms for lattice problems run in time that is exponential in the dimension of the lattice. Therefore, we are typically interested in reductions that preserve this dimension. (We actually relax this notion slightly and consider a reduction to be &#x60;&#x60;dimension-preserving&#x27;&#x27; if it increases the dimension by at most an additive constant.) \n\nWe summarize many of the known results in this area.},\n  url = {http://noahsd.com/latticeproblems.pdf},\n  author = {{Stephens-Davidowitz}, Noah},\n  year = {2015}\n}\n\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Computational problems on lattices have found a remarkable number of applications in computer science. In particular, over the past twenty years, many strong cryptographic primitives have been constructed with their security based on the (worst-case) hardness of various lattice problems. Due to their importance, there has been much work towards understanding the relationship between these problems. For the parameters that typically interest us, the fastest known algorithms for lattice problems run in time that is exponential in the dimension of the lattice. Therefore, we are typically interested in reductions that preserve this dimension. (We actually relax this notion slightly and consider a reduction to be ``dimension-preserving'' if it increases the dimension by at most an additive constant.) We summarize many of the known results in this area.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"mironov-stephensdavidowitz-cryptographicreversefirewalls-2015\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://www.cs.nyu.edu/crg/newSlides/02_23_16.pdf\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'mironov-stephensdavidowitz-cryptographicreversefirewalls-2015', 'http://www.cs.nyu.edu/crg/newSlides/02_23_16.pdf', event);\">\n    Cryptographic Reverse Firewalls.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Ilya Mironov;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>Eurocrypt</i>,  2015. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://eprint.iacr.org/2014/758\"\n     onclick=\"log_download('mironov-stephensdavidowitz-cryptographicreversefirewalls-2015', 'http://eprint.iacr.org/2014/758', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"Cryptographic Reverse Firewalls [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n  <a href=\"http://www.cs.nyu.edu/crg/newSlides/02_23_16.pdf\"\n     onclick=\"log_download('mironov-stephensdavidowitz-cryptographicreversefirewalls-2015', 'http://www.cs.nyu.edu/crg/newSlides/02_23_16.pdf', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/pdf.svg\"\n\t     alt=\"Cryptographic Reverse Firewalls [pdf]\"\n       title=\" slides\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\"> slides</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/mironov-stephensdavidowitz-cryptographicreversefirewalls-2015\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>35 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('mironov-stephensdavidowitz-cryptographicreversefirewalls-2015')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{MSCryptographicReverse15,\n  title = {Cryptographic Reverse Firewalls},\n  abstract = {Recent revelations by Edward Snowden show that a user&#x27;s own hardware and software can be used against her in various ways (e.g., to leak her private information). And, a series of recent announcements has shown that widespread implementations of cryptographic software often contain serious bugs that cripple security. This motivates us to consider the following (seemingly absurd) question: How can we guarantee a user&#x27;s security when she may be using a malfunctioning or arbitrarily compromised machine? To that end, we introduce the notion of a cryptographic reverse firewall (RF). Such a machine sits between the user&#x27;s computer and the outside world, potentially modifying the messages that she sends and receives as she engages in a cryptographic protocol.\n\nA good reverse firewall accomplishes three things: (1) it maintains functionality, so that if the user&#x27;s computer is working correctly, the RF will not break the functionality of the underlying protocol; (2) it preserves security, so that regardless of how the user&#x27;s machine behaves, the presence of the RF will provide the same security guarantees as the properly implemented protocol; and (3) it resists exfiltration, so that regardless of how the user&#x27;s machine behaves, the presence of the RF will prevent the machine from leaking any information to the outside world. Importantly, we do not model the firewall as a trusted party. It does not share any secrets with the user, and the protocol should be both secure and functional without the firewall (when it is implemented correctly).\n\nOur security definition for reverse firewalls depends on the security notion(s) of the underlying protocol. As such, our model generalizes much prior work and provides a general framework for building cryptographic schemes that remain secure when run on compromised machine. It is also a modern take on a line of work that received considerable attention in the 80s and 90s.\n\nWe show that our definition is achievable by constructing a private function evaluation protocol with a secure reverse firewall for each party. Along the way, we design an oblivious transfer protocol that also has a secure RF for each party, and a rerandomizable garbled circuit that is both more efficient and more secure than previous constructions. Finally, we show how to convert $\\backslash$emph\\{any\\} protocol into a protocol with an exfiltration-resistant reverse firewall for all parties. (In other words, we provide a generic way to prevent a tampered machine from leaking information to an eavesdropper via any protocol.)},\n  urldate = {2018-05-30},\n  url = {http://eprint.iacr.org/2014/758},\n  booktitle = {Eurocrypt},\n  author = {Mironov, Ilya and {Stephens-Davidowitz}, Noah},\n  year = {2015},\n  url_slides = {http://www.cs.nyu.edu/crg/newSlides/02_23_16.pdf}\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Recent revelations by Edward Snowden show that a user's own hardware and software can be used against her in various ways (e.g., to leak her private information). And, a series of recent announcements has shown that widespread implementations of cryptographic software often contain serious bugs that cripple security. This motivates us to consider the following (seemingly absurd) question: How can we guarantee a user's security when she may be using a malfunctioning or arbitrarily compromised machine? To that end, we introduce the notion of a cryptographic reverse firewall (RF). Such a machine sits between the user's computer and the outside world, potentially modifying the messages that she sends and receives as she engages in a cryptographic protocol. A good reverse firewall accomplishes three things: (1) it maintains functionality, so that if the user's computer is working correctly, the RF will not break the functionality of the underlying protocol; (2) it preserves security, so that regardless of how the user's machine behaves, the presence of the RF will provide the same security guarantees as the properly implemented protocol; and (3) it resists exfiltration, so that regardless of how the user's machine behaves, the presence of the RF will prevent the machine from leaking any information to the outside world. Importantly, we do not model the firewall as a trusted party. It does not share any secrets with the user, and the protocol should be both secure and functional without the firewall (when it is implemented correctly). Our security definition for reverse firewalls depends on the security notion(s) of the underlying protocol. As such, our model generalizes much prior work and provides a general framework for building cryptographic schemes that remain secure when run on compromised machine. It is also a modern take on a line of work that received considerable attention in the 80s and 90s. We show that our definition is achievable by constructing a private function evaluation protocol with a secure reverse firewall for each party. Along the way, we design an oblivious transfer protocol that also has a secure RF for each party, and a rerandomizable garbled circuit that is both more efficient and more secure than previous constructions. Finally, we show how to convert $\\$emph\\any\\ protocol into a protocol with an exfiltration-resistant reverse firewall for all parties. (In other words, we provide a generic way to prevent a tampered machine from leaking information to an eavesdropper via any protocol.)\n</div>\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n  <div class=\"bibbase_group_whole\" id=\"group_2014\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2014')\"\n      onkeypress=\"toggleGroup('group_2014')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2014</span>\n      <span class=\"bibbase_group_count\">\n        \n        (2)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"dadush-regev-stephensdavidowitz-ontheclosestvectorproblemwithadistanceguarantee-2014\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://arxiv.org/abs/1409.8063\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'dadush-regev-stephensdavidowitz-ontheclosestvectorproblemwithadistanceguarantee-2014', 'http://arxiv.org/abs/1409.8063', event);\">\n    On the Closest Vector Problem with a distance guarantee.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Daniel Dadush;  Oded Regev;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n  In <i>CCC</i>,  2014. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://arxiv.org/abs/1409.8063\"\n     onclick=\"log_download('dadush-regev-stephensdavidowitz-ontheclosestvectorproblemwithadistanceguarantee-2014', 'http://arxiv.org/abs/1409.8063', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"On the Closest Vector Problem with a distance guarantee [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/dadush-regev-stephensdavidowitz-ontheclosestvectorproblemwithadistanceguarantee-2014\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>56 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('dadush-regev-stephensdavidowitz-ontheclosestvectorproblemwithadistanceguarantee-2014')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{DRSClosestVector14,\n  title = {On the {Closest Vector Problem} with a distance guarantee},\n  url = {http://arxiv.org/abs/1409.8063},\n  booktitle = {CCC},\n  author = {Dadush, Daniel and Regev, Oded and {Stephens-Davidowitz}, Noah},\n  year = {2014}\n}\n\n</pre>\n</div>\n\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"dodis-shamir-stephensdavidowitz-wichs-howtoeatyourentropyandhaveittoooptimalrecoverystrategiesforcompromisedrngs-2014\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"https://eprint.iacr.org/2014/167\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'dodis-shamir-stephensdavidowitz-wichs-howtoeatyourentropyandhaveittoooptimalrecoverystrategiesforcompromisedrngs-2014', 'https://eprint.iacr.org/2014/167', event);\">\n    How to eat your entropy and have it too – optimal recovery strategies for compromised RNGs.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Yevgeniy Dodis;  Adi Shamir;  Noah Stephens-Davidowitz;  and  Daniel Wichs.\n</span>\n\n  \n\n</span>\n\n  In <i>CRYPTO</i>,  2014. \n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"https://eprint.iacr.org/2014/167\"\n     onclick=\"log_download('dodis-shamir-stephensdavidowitz-wichs-howtoeatyourentropyandhaveittoooptimalrecoverystrategiesforcompromisedrngs-2014', 'https://eprint.iacr.org/2014/167', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"How to eat your entropy and have it too – optimal recovery strategies for compromised RNGs [link]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n  <a href=\"http://www.youtube.com/watch?v=CTuA1wY-704\"\n     onclick=\"log_download('dodis-shamir-stephensdavidowitz-wichs-howtoeatyourentropyandhaveittoooptimalrecoverystrategiesforcompromisedrngs-2014', 'http://www.youtube.com/watch?v=CTuA1wY-704', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/link.svg\"\n\t     alt=\"How to eat your entropy and have it too – optimal recovery strategies for compromised RNGs [link]\"\n       title=\" crypto talk\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\"> crypto talk</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/dodis-shamir-stephensdavidowitz-wichs-howtoeatyourentropyandhaveittoooptimalrecoverystrategiesforcompromisedrngs-2014\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>17 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('dodis-shamir-stephensdavidowitz-wichs-howtoeatyourentropyandhaveittoooptimalrecoverystrategiesforcompromisedrngs-2014')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@inproceedings{DSSWHowEat14,\n  title = {How to eat your entropy and have it too -- optimal recovery strategies for compromised RNGs},\n  abstract = {Random number generators (RNGs) play a crucial role in many cryptographic schemes and protocols, but their security proof usually assumes that their internal state is initialized with truly random seeds and remains secret at all times. However, in many practical situations these are unrealistic assumptions: The seed is often gathered after a reset/reboot from low entropy external events such as the timing of manual key presses, and the state can be compromised at unknown points in time via side channels or penetration attacks. The usual remedy (used by all the major operating systems, including Windows, Linux, FreeBSD, MacOS, iOS, etc.) is to periodically replenish the internal state through an auxiliary input with additional randomness harvested from the environment. However, recovering from such attacks in a provably correct and computationally optimal way had remained an unsolved challenge so far.\n\nIn this paper we formalize the problem of designing an efficient recovery mechanism from state compromise, by considering it as an online optimization problem. If we knew the timing of the last compromise and the amount of entropy gathered since then, we could stop producing any outputs until the state becomes truly random again. However, our challenge is to recover within a time proportional to this optimal solution even in the hardest (and most realistic) case in which (a) we know nothing about the timing of the last state compromise, and the amount of new entropy injected since then into the state, and (b) any premature production of outputs leads to the total loss of all the added entropy \\{$\\backslash$em used by the RNG\\}, since the attacker can use brute force to enumerate all the possible low-entropy states. In other words, the challenge is to develop recovery mechanisms which are guaranteed to save the day as quickly as possible after a compromise we are not even aware of. The dilemma that we face is that any entropy used prematurely will be lost, and any entropy which is kept unused will delay the recovery.\n\nAfter developing our formal definitional framework for RNGs with inputs, we show how to construct a nearly optimal RNG which is secure in our model. Our technique is inspired by the design of the Fortuna RNG (which is a heuristic RNG construction that is currently used by Windows and comes without any formal analysis), but we non-trivially adapt it to our much stronger adversarial setting. Along the way, our formal treatment of Fortuna enables us to improve its entropy efficiency by almost a factor of two, and to show that our improved construction is essentially tight, by proving a rigorous lower bound on the possible efficiency of any recovery mechanism in our very general model of the problem.},\n  urldate = {2018-05-30},\n  url = {https://eprint.iacr.org/2014/167},\n  booktitle = {CRYPTO},\n  author = {Dodis, Yevgeniy and Shamir, Adi and {Stephens-Davidowitz}, Noah and Wichs, Daniel},\n  year = {2014},\n  url_crypto_talk = {http://www.youtube.com/watch?v=CTuA1wY-704}\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  Random number generators (RNGs) play a crucial role in many cryptographic schemes and protocols, but their security proof usually assumes that their internal state is initialized with truly random seeds and remains secret at all times. However, in many practical situations these are unrealistic assumptions: The seed is often gathered after a reset/reboot from low entropy external events such as the timing of manual key presses, and the state can be compromised at unknown points in time via side channels or penetration attacks. The usual remedy (used by all the major operating systems, including Windows, Linux, FreeBSD, MacOS, iOS, etc.) is to periodically replenish the internal state through an auxiliary input with additional randomness harvested from the environment. However, recovering from such attacks in a provably correct and computationally optimal way had remained an unsolved challenge so far. In this paper we formalize the problem of designing an efficient recovery mechanism from state compromise, by considering it as an online optimization problem. If we knew the timing of the last compromise and the amount of entropy gathered since then, we could stop producing any outputs until the state becomes truly random again. However, our challenge is to recover within a time proportional to this optimal solution even in the hardest (and most realistic) case in which (a) we know nothing about the timing of the last state compromise, and the amount of new entropy injected since then into the state, and (b) any premature production of outputs leads to the total loss of all the added entropy \\$\\$em used by the RNG\\, since the attacker can use brute force to enumerate all the possible low-entropy states. In other words, the challenge is to develop recovery mechanisms which are guaranteed to save the day as quickly as possible after a compromise we are not even aware of. The dilemma that we face is that any entropy used prematurely will be lost, and any entropy which is kept unused will delay the recovery. After developing our formal definitional framework for RNGs with inputs, we show how to construct a nearly optimal RNG which is secure in our model. Our technique is inspired by the design of the Fortuna RNG (which is a heuristic RNG construction that is currently used by Windows and comes without any formal analysis), but we non-trivially adapt it to our much stronger adversarial setting. Along the way, our formal treatment of Fortuna enables us to improve its entropy efficiency by almost a factor of two, and to show that our improved construction is essentially tight, by proving a rigorous lower bound on the possible efficiency of any recovery mechanism in our very general model of the problem.\n</div>\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n  <div class=\"bibbase_group_whole\" id=\"group_2007\">\n    <div class=\"bibbase_group\"\n      onclick=\"toggleGroup('group_2007')\"\n      onkeypress=\"toggleGroup('group_2007')\"\n      tabindex=\"0\">\n      <i class=\"fa fa-angle-down bibbase_group_head_icon\"></i>&nbsp;\n      <span>2007</span>\n      <span class=\"bibbase_group_count\">\n        \n        (2)\n        \n      </span>\n    </div>\n    <div class=\"bibbase_group_body\">\n      \n  \n  <div class=\"bibbase_paper\" id=\"stephensdavidowitz-cloninger-thecyclicsievingphenomenononthealternatingsignmatrices-2007\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://noahsd.com/papers/ASMCSP.pdf\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'stephensdavidowitz-cloninger-thecyclicsievingphenomenononthealternatingsignmatrices-2007', 'http://noahsd.com/papers/ASMCSP.pdf', event);\">\n    The Cyclic Sieving Phenomenon on the Alternating Sign Matrices.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Noah Stephens-Davidowitz;  and  Alex Cloninger.\n</span>\n\n  \n\n</span>\n\n   2007.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://noahsd.com/papers/ASMCSP.pdf\"\n     onclick=\"log_download('stephensdavidowitz-cloninger-thecyclicsievingphenomenononthealternatingsignmatrices-2007', 'http://noahsd.com/papers/ASMCSP.pdf', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/pdf.svg\"\n\t     alt=\"The Cyclic Sieving Phenomenon on the Alternating Sign Matrices [pdf]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/stephensdavidowitz-cloninger-thecyclicsievingphenomenononthealternatingsignmatrices-2007\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>28 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('stephensdavidowitz-cloninger-thecyclicsievingphenomenononthealternatingsignmatrices-2007')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@unpublished{SCCyclicSieving07,\n  title = {The Cyclic Sieving Phenomenon on the Alternating Sign Matrices},\n  abstract = {We first present a previously unpublished result of Stanton that the group of order four generated by rotation by 90 degrees acting on alternating sign matrices exhibits the CSP with the obvious q-analogue of |ASM(n)|.},\n  url = {http://noahsd.com/papers/ASMCSP.pdf},\n  author = {{Stephens-Davidowitz}, Noah and Cloninger, Alex},\n  year = {2007}\n}\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  We first present a previously unpublished result of Stanton that the group of order four generated by rotation by 90 degrees acting on alternating sign matrices exhibits the CSP with the obvious q-analogue of |ASM(n)|.\n</div>\n\n\n</div>\n\n\n  <div class=\"bibbase_paper\" id=\"hong-cloninger-stephensdavidowitz-onlinkpatternsandalternatingsignmatrices-2007\">\n  <span class=\"bibbase_paper_titleauthoryear\">\n\n  \n  <span class=\"bibbase_paper_title\">\n  \n  \n  \n  <a href=\"http://noahsd.com/papers/ASMLinks.pdf\"\n     onclick=\"return trackOutboundLink('publications', 'click', 'hong-cloninger-stephensdavidowitz-onlinkpatternsandalternatingsignmatrices-2007', 'http://noahsd.com/papers/ASMLinks.pdf', event);\">\n    On link patterns and Alternating Sign Matrices.\n  </a>\n  \n  \n  \n</span>\n\n  <span class=\"bibbase_paper_author\">\n   Fraser Chiu Kim Hong;  Alex Cloninger;  and  Noah Stephens-Davidowitz.\n</span>\n\n  \n\n</span>\n\n   2007.\n  <span class=\"note\"></span>\n\n<span class=\"bibbase_note\"></span>\n\n<br class=\"bibbase_paper_content\"/>\n\n<span class=\"bibbase_paper_content dontprint\">\n\n  \n  <a href=\"http://noahsd.com/papers/ASMLinks.pdf\"\n     onclick=\"log_download('hong-cloninger-stephensdavidowitz-onlinkpatternsandalternatingsignmatrices-2007', 'http://noahsd.com/papers/ASMLinks.pdf', event.ctrlKey, event)\">\n    <img src=\"//bibbase.org/img/filetypes/pdf.svg\"\n\t     alt=\"On link patterns and Alternating Sign Matrices [pdf]\"\n       title=\"Paper\"\n\t     class=\"bibbase_icon\"\n         ><span class=\"bibbase_icon_text\">Paper</span></a>\n  &nbsp;\n  \n\n  \n\n  \n  <a href=\"//bibbase.org/network/publication/hong-cloninger-stephensdavidowitz-onlinkpatternsandalternatingsignmatrices-2007\"\n     class=\"bibbase bibbase_page link\">link</a>\n  &nbsp;\n  \n\n  <a href=\"#\"\n     onclick=\"showBib(event); return false;\"\n     class=\"bibbase bibtex link\">bibtex\n    <i class=\"fa fa-caret-down\"></i></a>\n\n  \n  &nbsp;\n  <a class=\"bibbase_abstract_link bibbase link\"\n     href=\"#\"\n     onclick=\"showAbstract(event); return false;\">\n    abstract <i class=\"fa fa-caret-down\"></i></a>\n  \n\n  \n  &nbsp;\n  <span class=\"bibbase_stats_paper\" style=\"color: #777;\">\n    <span>17 downloads</span>\n  </span>\n  \n\n  <!-- <a class=\"bibbase read link hidden\" -->\n  <!--    href=\"javascript:toggleRead('hong-cloninger-stephensdavidowitz-onlinkpatternsandalternatingsignmatrices-2007')\" -->\n  <!--    title=\"Marking this paper as read adds it to your library on BibBase.\" -->\n  <!--    > -->\n  <!--   <i class=\"fa fa-check\"></i>&nbsp; -->\n  <!--   <span>mark as read</span> -->\n  <!-- </a> -->\n\n  &nbsp;\n  \n  \n\n</span>\n\n<div class=\"well well-small bibbase\" data-type=\"bibtex\"\n     style=\"display:none\">\n  <pre style=\"white-space: pre-wrap;\">@unpublished{HCSLinkPatterns07,\n  title = {On link patterns and Alternating Sign Matrices},\n  abstract = {We devise an algorithm to generate an alternating sign matrix(ASM) with the same blue and green link pattern on the circle. We also find a characterization of link patterns that are achieved by a unique ASM.},\n  url = {http://noahsd.com/papers/ASMLinks.pdf},\n  author = {Hong, Fraser Chiu Kim and Cloninger, Alex and {Stephens-Davidowitz}, Noah},\n  year = {2007}\n}\n\n\n</pre>\n</div>\n\n\n<div class=\"well well-small bibbase\" data-type=\"abstract\"\n     style=\"display:none\">\n  We devise an algorithm to generate an alternating sign matrix(ASM) with the same blue and green link pattern on the circle. We also find a characterization of link patterns that are achieved by a unique ASM.\n</div>\n\n\n</div>\n\n\n\n\n\n    </div>\n  </div>\n\n\n\n\n  </div>\n\n\n  <!-- Modal -->\n\n  <!-- <iframe id=\"bibbase_network_frame\" -->\n  <!--         src=\"//bibbase.org/network/control\" -->\n  <!--         style=\"display: none;\"> -->\n  <!-- </iframe> -->\n\n</div>\n"}; document.write(bibbase_data.data);