Abstract
It is well known that almost all subset sum problems with density less than 0.9408 ··· can be solved in polynomial time with an SVP oracle that can find a shortest vector in a special lattice. In this paper, the authors show that a similar result holds for the k-multiple subset sum problem which has k subset sum problems with exactly the same solution. Specially, for the single subset sum problem (k = 1), a modified lattice is introduced to make the proposed analysis much simpler and the bound for the success probability tighter than before. Moreover, some extended versions of the multiple subset sum problem are also considered.
Similar content being viewed by others
References
Garey M R and Johnson D S, Computer and Intractability: A Guide to the Theory of NP-Completeness, Freeman W H and San Francisco, 1979.
Lenstra A K, Lenstra Jr H W, and Lovász L, Factoring polynomials with rational coefficients, Mathematische Ann., 1982, 261: 513–534.
Schnorr C P, A hierarchy of polynomial lattice basis reduction algorithms, Theoretical Computer Science, 1987, 53: 201–224.
Schnorr C P and Euchner M, Lattice basis reduction: Improved practical algorithms and solving subset sum problems, Mathematics of Programming, 1994, 66: 181–199.
Feng Y, Wu W Y, Zhang J Z, and Chen J W, Exact bivariate polynomial factorization over Z by approximation of roots, Journal of Systems Science and Complexity, 2015, 28(1): 243–260.
Lagarias J C and Odlyzko A M, Solving low-density subset sum problems, J. Assoc. Comp. Mach., 1985, 32(1): 229–246.
Coster M J, Joux A, LaMacchia B A, Odlyzko A M, Schnorr C P, and Stern J, Improved lowdensity subset sum algorithms, Comput. Complexity, 1992, 2: 111–128.
Li D and Ma S, Two notes on low-density subset sum algorithm, Proceedings of ISAAC’94, Ed. by Du D and Zhang X, Lecture Notes in Computer Science, Springer-Verlag, 1994, 834: 164–171.
Wang H, Xiao H, and Xiao G, EMSSP and its lattice reduction analysis, J. of Xidian University, 2000, 27(5): 616–618 (in Chinese).
Liu M J, Wang X Y, Bi J G, and Zheng X, Finding shortest lattice vector for lattice with gaps, previous version, available at http://eprint.iacr.org/2011/139.
Merkle R and Hellman M, Hiding information and signatures in trapdoor knapsacks, IEEE Transactions on Information Theory, 1978, 24(5): 525–530.
Odlyzko A M, The rise and fall of knapsack cryptosystems, Proceedings of Symposia in Applied Mathematics, Ed. by Pomerance C, Cryptology and Computational Number Theory, Ameri. Math. Soc., 1990, 42: 75–88.
Hästad J, Solving simultaneous modular equations of low degree, SIAM J. Comput., 1988, 17: 336–341.
Mazo J E and Odlyzko A M, Lattice points in high-dimensional spheres, Monatsh. Math, 1990, 110: 47–61.
Cohen H, A Course in Computational Algebraic Number Theory, Springer-Verlag, Germany, 1996.
Micciancio D, The hardness of the closest vector problem with preprocessing, IEEE Transactions on Information Theory, 2001, 47(3): 1212–1215.
Kannan R, Minkowski’s convex body theorem and integer programming, Math. Oper. Res., 1987, 12(3): 415–440.
Nguyen P Q and Stern J, Adapting density attacks to low-weight knapsacks, Proceedings of Asiacrypt 2005, Ed. by Lee P, Lecture Notes in Computer Science, Springer, 2005, 3788: 41–58.
Author information
Authors and Affiliations
Corresponding author
Additional information
This research was supported by the National Natural Science Foundation of China under Grant Nos. 11201458, 11471314, in part by 973 Project under Grant No. 2011CB302401, and in part by the National Center for Mathematics and Interdisciplinary Sciences, Chinese Academy of Sciences.
This paper was recommended for publication by Editor LI Ziming.
Rights and permissions
About this article
Cite this article
Pan, Y., Zhang, F. Solving low-density multiple subset sum problems with SVP oracle. J Syst Sci Complex 29, 228–242 (2016). https://doi.org/10.1007/s11424-015-3324-9
Received:
Revised:
Published:
Issue Date:
DOI: https://doi.org/10.1007/s11424-015-3324-9