Abstract
Cryptanalysis of lattice-based cryptography is an important field in cryptography since lattice problems are among the most robust assumptions and have been used to construct a variety of cryptographic primitives. The security estimation model for concrete parameters is one of the most important topics in lattice-based cryptography. In this research, we focus on the Gauss Sieve algorithm proposed by Micciancio and Voulgaris, a heuristic lattice sieving algorithm for the central lattice problem, shortest vector problem (SVP).We propose a technique of lifting computations in prime-cyclotomic ideals into that in cyclic ideals. Lifting makes rotations easier to compute and reduces the complexity of inner products from O(n3) to O(n2). We implemented the Gauss Sieve on multi-GPU systems using two layers of parallelism in our framework, and achieved up to 55 times speed of previous results of dimension 96. We were able to solve SVP on ideal lattice in dimension up to 130, which is the highest dimension SVP instance solved by sieve algorithm so far. As a result, we are able to provide a better estimate of the complexity of solving central lattice problem.
| Original language | English |
|---|---|
| Pages (from-to) | 1187-1209 |
| Number of pages | 23 |
| Journal | Journal of Information Science and Engineering |
| Volume | 37 |
| Issue number | 5 |
| DOIs | |
| State | Published - 09 2021 |
| Externally published | Yes |
Bibliographical note
Publisher Copyright:© 2021 Institute of Information Science. All rights reserved.
Keywords
- Cryptography
- GPU
- Gauss sieve
- Ideal lattices
- Lattice-based cryptography
- Parallel programming
- Shortest vector problem
- Sieving algorithm
Fingerprint
Dive into the research topics of 'Parallelization on gauss sieve algorithm over ideal lattice'. Together they form a unique fingerprint.Cite this
- APA
- Author
- BIBTEX
- Harvard
- Standard
- RIS
- Vancouver