Tuple lattice sieving

S Bai, T Laarhoven, D Stehlé - LMS Journal of Computation and …, 2016 - cambridge.org
sieving algorithms to solve SVP with less memory. We consider reductions of tuples of vectors
rather than pairs of vectors as existing sieve … The naive algorithm for this triple sieve runs …

Speed-ups and time–memory trade-offs for tuple lattice sieving

G Herold, E Kirshanova, T Laarhoven - … on Practice and Theory of Public …, 2018 - Springer
… It serves as a useful abstraction of the tuple lattice sieving problem for which our results
are provable – the results only become heuristic when applying them to tuple lattice sieving. …

Faster tuple lattice sieving using spherical locality-sensitive filters

T Laarhoven - arXiv preprint arXiv:1705.02828, 2017 - arxiv.org
… their results for arbitrary tuple sizes, for example showing that a triple sieve can solve the …
to tuple lattice sieving to obtain even better time complexities. For instance, our triple sieve

Progressive lattice sieving

T Laarhoven, A Mariano - International Conference on Post-Quantum …, 2018 - Springer
… progressive approach to lattice sieving, where we gradually introduce new basis vectors only
when the sieve has stabilized … For tuple sieving [BLS16, HK17, HKL18] we simply run tuple

The general sieve kernel and new records in lattice reduction

MR Albrecht, L Ducas, G Herold, E Kirshanova… - … Conference on the …, 2019 - Springer
… In this work, we report performance records for achieving various lattice reduction tasks
using sieving. For exact-SVP, we are able to outperform the pruned enumeration of FPLLL/…

Advanced lattice sieving on GPUs, with tensor cores

L Ducas, M Stevens, W van Woerden - … on the Theory and Applications of …, 2021 - Springer
… After the sieving part we have a list of tuples with indices and the corresponding length of
the new vector they represent. The hash identifier of the new vector can efficiently be …

Shortest vector from lattice sieving: a few dimensions for free

L Ducas - Annual International Conference on the Theory and …, 2018 - Springer
… of sieve-type algorithms. Precisely, we show that a few calls to the sieve algorithm in lattices
… applied to most other variants of sieve algorithms, including LSH sieve algorithms and tuple-…

Some sieving algorithms for lattice problems

V Arvind, PS Joglekar - IARCS Annual Conference on …, 2008 - drops.dagstuhl.de
… of lattice problems based on the sieving technique due to … M ⊆ Rn and a full rank integer
lattice L ⊆ Qn, the subspace … }, T ⊂ [N] be the set of tuples left after the sieving procedure. …

A review of sieve algorithms in solving the shortest lattice vector problem

Z Sun, C Gu, Y Zheng - IEEE Access, 2020 - ieeexplore.ieee.org
… preliminaries on lattice and sieve algorithms. Section III provides an overview of sieve algorithms
… Moreover, by applying tuple sieve technique to Gauss Sieve algorithm, they proposed …

Lower bounds on lattice sieving and information set decoding

E Kirshanova, T Laarhoven - … in Cryptology–CRYPTO 2021: 41st Annual …, 2021 - Springer
… , MO15], and especially in lattice sieving many subsequent … For the applications of interest
in this paper (lattice sieving … Similar optimality results extend to the tuple sieving results of …