Hardness of Approximate Nearest Neighbor Search
under L-infinity
Abstract
We show conditional hardness of Approximate Nearest Neighbor Search (ANN) under the norm with two simple reductions. Our first reduction shows that hardness of a special case of the Shortest Vector Problem (SVP), which captures many provably hard instances of SVP, implies a lower bound for ANN with polynomial preprocessing time under the same norm. Combined with a recent quantitative hardness result on SVP under (Bennett et al., FOCS 2017), our reduction implies that finding a -approximate nearest neighbor under with polynomial preprocessing requires near-linear query time, unless the Strong Exponential Time Hypothesis (SETH) is false. This complements the results of Rubinstein (STOC 2018), who showed hardness of ANN under , , and edit distance.
Further improving the approximation factor for hardness, we show that, assuming SETH, near-linear query time is required for any approximation factor less than under . This shows a conditional separation between ANN under the norm and the norm since there are sublinear time algorithms achieving better than -approximation for the and norm. Lastly, we show that the approximation factor of is a barrier for any naive gadget reduction from the Orthogonal Vectors problem.
1 Introduction
Nearest Neighbor Search is formally defined as the following problem: Given a set of points , and a query point , find a point that is closest to . This is a fundamental algorithmic problem that has numerous applications in machine learning, computer vision, and databases (See [SDI06] and references therein for applications).
A naive solution is to enumerate all points in , compare the distance with , and return that attains the minimum. This naturally gives a linear time ( where ) algorithm assuming one can compute the distance between two points in -time. Unfortunately, for a very large , which is the usual setting, this is costly. Ideally, we would like to return the solution without looking at every point in . Another naive solution on the other extreme is to enumerate all possible query points and, for each , store its nearest neighbor in in a look-up table. That way, we can handle each query using only query time. However, this would require almost exponential (in dimension ) preprocessing time as one needs to enumerate through all possible and compute the corresponding nearest neighbor. Furthermore, this requires a huge space overhead since one needs to store all the corresponding solutions for each .
A natural question is, can we obtain efficient preprocessing time (say polynomial in and ) and efficient query time (sublinear in ) simultaneously. When , such algorithms are known. If , for instance, one can construct a binary search tree with and determine the closest point to any query in time. For arbitrary , the Voronoi diagram gives a solution using space with query time, but it is not at all clear if this can be further improved without paying an exponential price in (this is typically called the curse of dimensionality).
Instead, if we are satisfied with an approximate nearest neighbor rather than an exact nearest neighbor, i.e., find such that , we can do much better. We refer to such a problem as -approximate nearest neighbor search (or -ANN for short). Previous works have shown that for many interesting metrics, we can indeed achieve improvements. For various distance metrics such as , and edit distance, upper and lower bounds are well known. For (Hamming or Manhattan) and (Euclidean), one can use dimensionality reduction, locality sensitive hashing, or recently developed data-dependent hashing techniques [AR15] to improve upon the naive linear scan. Under these norms, current state-of-the-art techniques for worst-case data achieve -approximation using preprocessing time and query time where . Furthermore, these are known to be optimal for hashing based techniques [And+17]. We refer the reader to the survey by Andoni et al. [AIR18] for further information.
Even if one uses non-hashing based techniques for these norms, one cannot hope to indefinitely improve the query time’s dependence on for -approximation unless one refutes the Strong Exponential Time Hypothesis (SETH). More precisely, for any , there exists a constant such that -ANN under , and edit distance requires query time with polynomial preprocessing time unless SETH is false [Rub18]. Yet, unlike or , remains a mystery as we have not seen any improvement on either the upper or lower bound front for the past decade [Ind01, ACP08, PTW10]. In Section 1.1, we elaborate on the current status of ANN under . Moreover, we give a brief overview of the Shortest Vector Problem (), a fundamental lattice problem central to post-quantum cryptography, and its connection to ANN.
1.1 Previous Works
Approximate nearest neighbors (ANN) in .
Whether or not we can achieve a better time-space tradeoff for is not just a purely intellectual endeavor, but a practical one as well. For instance, if the coordinates are heterogeneous, adding up different coordinates may not make sense as it would be “comparing apples to oranges”. To circumvent this difficulty, one can convert each coordinate to a rank space and use the maximum rank difference as the distance measure [Fag96, Fag99]. Another motivation for studying comes from the fact that it can be used as a target space for embedding any general normed spaces. (e.g., one can embed any metric space into in dimensions with distortion [Mat96]). Then, an efficient algorithm for ANN under can be used as a black box to give efficient algorithms for other norms, as achieved in [And+17a]. Therefore, if one can design a better algorithm for ANN under , algorithms for other norms may see improvements as well.
From a technical perspective, stands unique compared to other norms. While there has been fruitful algorithmic progress for other norms by using various techniques such as dimensionality reduction [JL84, Kle97], locality sensitive hashing [AI08] and data-dependent hashing [And+17], remains resistant to these techniques. The seemingly unorthodox upper bound devised by Indyk [Ind01] almost two decades ago remains state-of-the-art. This algorithm achieves -approximation with query time with preprocessing time for any . Surprisingly, this regime is known to be tight under some restricted computation model (decision tree model) [ACP08, PTW10, BK18].
However, for a general computational model such as word-RAM,111Here we remark that the only known technique for word-RAM lower bounds uses the cell-probe model [Yao79], in which computation is given for free and one only gets charged for information access. Proving any super-logarithmic query time lower bound for the cell-probe model (under any polynomial preprocessing time) would lead to a breakthrough in circuit complexity [DGW19]. it is a major open problem whether the tradeoff given by Indyk’s algorithm is optimal. Even if we allow a polynomial yet sublinear query time, it is open whether we can achieve a constant factor approximation with polynomial preprocessing time (and no exponential dependence on ).
Shortest vector problem (SVP).
is a fundamental problem in lattice-based cryptography. For instance, the average-case hardness of learning with errors (LWE) [Reg09], which serves as the basis of many post-quantum cryptography proposals [Ala+20], is based on the worst-case hardness of approximating up to polynomial factors in the norm. For finite norms, NP-hardness of exact , the Shortest Vector Problem in the norm, was shown by [Ajt98] using randomized reductions. This hardness result has been improved to hardness of constant factor approximations [Mic01, Kho05], and (almost polynomial) factor approximations [Kho05, HR07] under the assumption that NP problems do not have randomized quasi-polynomial time algorithms. Since approximating up to factors larger than is in , it is unlikely that NP-hardness can be shown for this regime [AR05]. For further information on , we refer the reader to [MG02] and [Kho10].
In this work, we consider the special case of finding short vectors in the norm, which we denote by . This problem is interesting because of its relevance to practical lattice-based cryptosystems, in which the key size has to be as small as possible for efficiency while being large enough to rule out attacks from any conceivable adversaries. For instance, the practical security of Dilithium, a recent lattice-based signature scheme by [Duc+18], is based on the intractability of solving . NP-hardness of exact was shown by [Boa81], and [Din02] showed hardness of approximation up to factor . Recently, [BGSD17] proved that for any constant , there is a constant such that does not have a time algorithm achieving -approximation assuming SETH. We note that the best known provable algorithm for -approximate runs in time [AM18].
The relationship between nearest neighbor search and has already been explored in previous works [BJG15, Bec+16, Laa15], but the focus of these works was on speeding up heuristic sieving algorithms for using nearest neighbor search. More precisely, LSH-based ANN algorithms have been used as a subprocedure in sieving algorithms to solve with better time-space tradeoffs under heuristic assumptions. In this work, we turn this relationship around and prove a near-linear query time lower bound for -ANN with polynomial preprocessing time using the aforementioned (conditional) lower bound on [BGSD17].
1.2 Our Results
We give two separate reductions that show conditional hardness of ANN with polynomial preprocessing time under the norm. Our result demonstrates a separation between the norm and the norm. That is, while algorithms with polynomial preprocessing and sublinear query time for -ANN, where is an arbitrary constant and the data is in the high dimensional regime , exist for the and norm [IM98, Val15, AIR18], our second reduction (Corollary 1.4) shows that we cannot expect to have sublinear algorithms for -ANN under the norm for any in the high dimensional regime.
Our first result is the following theorem, which translates any hardness assumption on -, which is the Shortest Vector Problem under the norm restricted to lattice vectors with -coefficients in the given basis (See Section 2 for a formal definition), into a hardness result (Corollary 1.2) for -ANN under the norm. While this reduction leads to a weaker hardness result compared to Corollary 1.4, it establishes a simple connection between the two canonical problems which could potentially lead to fine-grained hardness results that are not based on SETH (See Section 1.3). We remark that an analogous reduction can be shown for a special case of the Closest Vector Problem (), which is the problem of computing the distance from some target point to the lattice (See Remark 3.4).
Theorem 1.1 (Informal).
For any and , if there is no algorithm which solves - in time, where is the rank of the given lattice, then there exists a such that -Approximate Nearest Neighbor under the norm cannot be solved with polynomial preprocessing and query time.
The key observation that connects this rather generic translation between and ANN to a quantitative hardness result on ANN under the norm is that -SAT reduces to this special subcase of (with a small gap, in fact). The quantitative hardness of based on SETH [BGSD17] (See Theorem 2.8) implies the hardness of ANN under the norm.
Corollary 1.2 (Informal).
Assuming SETH, for any , there exists a constant such that -ANN under the norm cannot be solved with polynomial preprocessing and query time.
One caveat of Corollary 1.2 is that the precise relationship between the approximation factor and query time lower bound is not known (See Remark 2.9). Moreover, the approximation factor for which hardness can be shown is less than 2. A natural question is whether hardness can be shown for larger approximation factors. Further strengthening the hardness result based on SETH, we show that a modification of the reduction from online partial matching by Indyk [Ind01] demonstrates hardness with a larger gap of for Bichromatic Closest Pair under .
Theorem 1.3 (Informal).
Assuming SETH, for any and , there exists a constant such that -approximate Bichromatic Closest Pair on instances with dimension under the norm cannot be solved in time.
Since a lower bound for -approximate Bichromatic Closest Pair implies a lower bound for -ANN with polynomial preprocessing time [WW18], Theorem 1.3 implies the following corollary.
Corollary 1.4 (Informal).
Assuming SETH, for any and , there exists a constant such that -ANN on instances with dimension under the norm cannot be solved with polynomial preprocessing and query time.
Furthermore, we show that any naive gadget reduction from Orthogonal Vectors (Definition 2.2), which essentially captures most known reduction techniques from SETH, to -approximate Bichromatic Closest Pair cannot show hardness for any approximation factor larger than 3 (Theorem 3.9). This essentially follows from the triangle inequality. We note that this limitation was mentioned in [Rub18] as well. Hence, showing any hardness with an approximation factor larger than 3 would require a novel technique bypassing the naive gadget reduction techniques. Therefore, our hardness result for ANN under is tight in this sense.
We note that the result of [Rub18], who showed hardness under the norm, already implies the hardness of ANN under the norm since one can embed into a subspace of with low distortion [Ind03]. This reduction is similar to that of [RR06], who showed that is, in a certain sense, the “easiest norm” for lattice problems. However, hardness under the norm through this reduction only holds for (as opposed to in our results) because of the embedding’s dimension blow-up. Moreover, our reductions are simpler and do not require the distributed PCP [ARW17] machinery used in [Rub18]. Our Corollary 1.4 is also stronger in the sense that it holds for larger (and known) approximation factors. The approximation factor for hardness in [Rub18] is exponentially small in and depends on an unspecified relation between the reduction parameters due to SETH.
1.3 Future Directions
Our result shows that the hardness of ANN under for approximation factor 3 is the best one can hope for with current reduction techniques. The difficulty of proving hardness beyond -approximation was hinted in [Rub18], but no norm which explicitly instantiates this barrier was known previously.
An obvious next direction is determining whether hardness of -ANN under for can be shown, as it is widely believed [ACP08, PTW10, BK18] that the tradeoff between the required preprocessing/query time and approximation guarantee given by Indyk’s algorithm [Ind01] is optimal. However, it is not clear whether such a result can be obtained from SETH. Our connection between -ANN and suggests a direction for overcoming this technical barrier. Instead of basing hardness on SETH, consider the following conjecture on .
Conjecture 1.5.
For any , there exists such that there is no time algorithm for -.
It is straightforward to see that Lemma 3.1 and 3.2 (formal version of Theorem 1.1) together with Conjecture 1.5 would imply hardness of -ANN under . We remark that almost all instances arising in NP-hardness proofs of - are indeed captured by [MG02, Din02, BGSD17].222 [Din02] generates a lattice in which coefficients of the short lattice vector take values in instead of . Still, there are only many candidates for the short vector, so our reduction applies to this case as well with minor modifications.
One potential direction is to prove Conjecture 1.5 assuming SETH. However, this would then overcome the barrier of -approximation for ANN, suggesting that such a result would be difficult to obtain. Another interesting direction is to show the quantitative hardness of other computational problems assuming Conjecture 1.5 since is itself a natural problem which encapsulates the difficulty of canonical problems such as -SAT and Subset Sum. Additional motivation for this direction is given by [BGSD17, Agg+21], who remark that the concrete lower bound for general may in fact be since the kissing number in the norm is . Since it is not at all clear whether a lower bound for can be deduced from SETH, it may make sense to directly assume the quantitative hardness of or .
Acknowledgments.
We thank Noah Stephens-Davidowitz and Oded Regev for helpful comments.
2 Preliminaries
We present two reductions that show hardness of -ANN. Our first reduction reduces a special case of the Shortest Vector Problem to -ANN. Our second reduction reduces the Subset Query problem to -ANN. Both reductions involve an intermediate problem, referred to as the Bichromatic Closest Pair problem in [Rub18]. In this section, we present formal definitions of these problems and their lower bounds assuming SETH.
2.1 Complexity Assumptions
Definition 2.1 (Strong Exponential Time Hypothesis [IP99]).
For any , there exists such that -SAT on variables cannot be solved in time.
Orthogonal Vectors (OV) is an intermediate problem commonly used to show fine-grained hardness results in [Wil05, Wil07]. Note that SETH implies the Orthogonal Vectors Conjecture, which states that Orthogonal Vectors cannot be solved in subquadratic time. For recent developments in fine-grained complexity assuming the Orthogonal Vectors Conjecture, we refer the reader to the survey [Wil17] and references therein.
Definition 2.2 (Orthogonal Vectors).
Given two sets , decide whether there exists a pair such that .
Conjecture 2.3 (Orthogonal Vectors Conjecture).
For every , there exists a constant such that given two sets each of cardinality , deciding if there is a pair such that cannot be solved in time on instances with .
2.2 Nearest Neighbor Search Problems
Definition 2.4 (Approximate Nearest Neighbor Search).
The -Approximate Nearest Neighbor Search problem (-ANN) under the norm is defined as follows. Let be a set of vectors. Given numbers , , and a vector , distinguish between the following two cases after preprocessing :
-
•
(YES) There exists such that with .
-
•
(NO) For all , .
Definition 2.5 (Approximate Bichromatic Closest Pair).
The -approximate Bichromatic Closest Pair problem under the norm is defined as follows. Let each be a set of size . Given numbers and , distinguish between the following two cases:
-
•
(YES) There exists and with .
-
•
(NO) For all and , .
2.3 Lattice Problems
A lattice is defined as the set of all integer combinations of linearly independent basis vectors , i.e.,
We denote the rank of by and the ambient dimension by .
Definition 2.6 (Shortest Vector Problem).
The -approximate Shortest Vector Problem under the norm (-) is defined as follows. Let be a -dimensional lattice of rank given in the form of a basis , where . Given numbers and , distinguish between the following two cases:
-
•
(YES) There exists a non-zero vector such that
-
•
(NO) For any non-zero ,
Definition 2.7 (Shortest Vector Problem with Binary Restriction).
The -approximate Shortest Vector Problem with Binary Restriction under the norm (-) is defined as follows. Let be a -dimensional lattice of rank given in the form of a basis , where . Given numbers and , distinguish between the following two cases:
-
•
(YES) There exists a non-zero vector such that
-
•
(NO) For any non-zero ,
Theorem 2.8 ([BGSD17, Corollary 6.7]).
Assuming SETH, for any , there exists such that - cannot be solved in time, where is the rank of the given lattice.
Remark 2.9.
The precise form of the approximation factor in Theorem 2.8 is , where comes from the hard -SAT instance from SETH. Since the dependence is not known, so is the dependence of on .
2.4 Subset Query Problems
Definition 2.10 (Subset Query).
The Subset Query problem is defined as follows. Given sets and a query , distinguish between the following two cases:
-
•
(YES) There exists such that .
-
•
(NO) For all , .
Definition 2.11 (Bichromatic Subset Query).
The Bichromatic Subset Query problem is defined as follows. Given two collections of sets and , distinguish between the following two cases:
-
•
(YES) There exists such that .
-
•
(NO) For all , .
It is well-known that Bichromatic Subset Query is SETH-hard (as it is equivalent to Orthogonal Vectors) due to the following celebrated result of Williams [Wil05].
Theorem 2.12 ([Wil05, Theorem 5.1]).
Assuming SETH, for any , there exists a constant such that Bichromatic Subset Query cannot be solved in time on instances with .
3 Proof of Main Theorems
We give two simple reductions that imply the hardness of -ANN assuming SETH. To this end, we first present a reduction from Bichromatic Closest Pair to ANN. Then, we reduce and Bichromatic Subset Query to Bichromatic Closest Pair, thereby showing the conditional quantitative hardness of -ANN. Furthermore, we show that the hard approximation factor of , which our reduction from Bichromatic Subset Query achieves, is the best possible for any “natural” reduction from the Orthogonal Vectors problem (See Theorem 3.9). Since most known SETH-based hardness results are obtained via a reduction from Orthogonal Vectors, our result implies that showing hardness for approximation factor larger than would require new techniques.
3.1 Bichromatic Closest Pair to ANN
A standard reduction from [WW18] shows that a sublinear algorithm for -ANN with polynomial preprocessing time implies a subquadratic algorithm for -approximate Bichromatic Closest Pair. We include a short proof of this fact for completeness.
Lemma 3.1.
Given numbers and , if there exists an algorithm for -ANN under the norm with preprocessing time and query time , where denotes the number of data points, then there exists a -time algorithm for -approximate Bichromatic Closest Pair under .
Proof.
Consider the following algorithm for -approximate Bichromatic Closest Pair under the norm for two sets and .
-
•
Divide into batches, each of size .
-
•
Preprocess each batch separately, constructing many data structures.
-
•
For each query point , query each data structure created by the preprocessing step.
The total time used for preprocessing is
For each query , one needs to query data structures. Hence, the total query time spent on is
Let be a number satisfying and choose such that
This gives a -time algorithm for -approximate Bichromatic Closest Pair. ∎
3.2 Hardness implies Hardness of ANN under
In this section, we show that a fast algorithm for -approximate Bichromatic Closest Pair under implies a fast algorithm for . Combined with Lemma 3.1, this shows that a lower bound for implies a lower bound for -ANN under . Assuming SETH, lower bounds for are known (Theorem 2.8). Hence, our reduction implies hardness of -ANN under the norm.
Lemma 3.2.
If there exists a -time algorithm that solves -approximate Bichromatic Closest Pair under the norm (where ), then there exists an algorithm for with the same ambient dimension that runs in time, where denotes the rank of the input lattice.
Proof.
Consider an instance of with a lattice basis of size . Divide into and , each of size , and consider the following sets of vectors.
Let be an -time algorithm for -approximate Bichromatic Closest Pair. We run two times with the following inputs, , and return the OR of the outputs. Since , then the runtime is . It remains to show the correctness of our reduction.
Claim 3.3 (Correctness).
Let and . Then
Proof.
First, notice that . It follows that since and is a basis. Similarly, . Hence,
∎
From Claim 3.3, we know that if there exists a vector in or with -norm less than , then there exists a vector in with -norm less than . If all vectors in have -norm greater than , then all non-zero vectors in must have -norm greater than which concludes our proof. ∎
Remark 3.4.
A similar reduction can be shown for , which is the analogue of . To see this, take in the proof of Lemma 3.2, where is a target point which is guaranteed to be close to a -coefficient lattice vector. Then, run the Bichromatic Closest Pair algorithm on the input .
Combining Lemma 3.1 and Lemma 3.2, we obtain our main theorem which connects hardness of and hardness of -ANN.
Theorem 3.5.
For any and , if there is an algorithm for -ANN under the norm with preprocessing time and query time, then there is a -time algorithm for with the same ambient dimension, where denotes the rank of the input lattice.
Proof.
Note that the SETH-hard instance of in Theorem 2.8 has ambient dimension by the Sparsification Lemma [IPZ01]. Hence, we obtain the following lower bound for -ANN under .
Corollary 3.6.
Assuming SETH, for any and , there exists a constant such that -ANN under (where ) cannot be solved with preprocessing and query time.
3.3 Bichromatic Subset Query Hardness implies Hardness of ANN under
In this section, we show that solving -ANN for with polynomial preprocessing time requires nearly linear query time unless SETH is false. We first modify Indyk’s reduction [Ind01] from Subset Query to ANN to show that -approximate Bichromatic Closest Pair under is as hard as Bichromatic Subset Query for any .
Lemma 3.7.
For any , if there exists a -time algorithm for -approximate Bichromatic Closest Pair under the norm, then there exists a -time algorithm for Bichromatic Subset Query.
Proof.
Define functions and as
For a set , consider its corresponding vector where iff . Let and be defined as
Define . If , then , and otherwise. Then, an instance of Bichromatic Subset Query, and , can be reduced to a -approximate Bichromatic Closest Pair instance with and for . If there exists a pair with , then . If no such pair exists, we know that for any , . ∎
Theorem 3.8.
Assuming SETH, for any , , and , there exists such that -ANN under the norm cannot be solved with preprocessing and query time on instances with .
Proof.
Suppose there exists some , and such that there is an algorithm for -ANN under the norm with preprocessing time and query time for all . Then, by Lemma 3.1, there is a -time algorithm for -approximate Bichromatic Closest Pair under with that works for all . By Lemma 3.7, such an algorithm for Bichromatic Closest Pair implies a -time algorithm for Bichromatic Subset Query applying to all . Such an algorithm for Bichromatic Subset Query cannot exist unless SETH is false (Theorem 2.12). ∎
3.4 Limitation of OV-based Hardness for ANN
We show that the hard approximation factor of 3 in Theorem 3.8 is, in a certain sense, tight. More precisely, we show that any “natural” reduction from Orthogonal Vectors (which is how most SETH-based hardness results are obtained) to -ANN under any metric cannot show hardness for due to the triangle inequality. This in turn implies that any improvement to Theorem 3.8 in terms of the approximation factor would require novel techniques for proving SETH-based hardness results. This is formalized in Theorem 3.9.
Theorem 3.9.
Let be a positive integer and be a metric space. Let and be embeddings such that for any two strings ,
-
•
If , then .
-
•
If , then .
Then, it must be the case that .
Proof.
For the sake of contradiction, suppose that there exists such and with . For a string , denote by its -th bit and its restriction to the first bits. Let be two strings such that . Then, and determines the value of . That is, if then . Otherwise, . Now consider restrictions and of and , defined as
By our assumption we have , while we have , and . But this is a contradiction if , since it must be the case
due to the triangle inequality. ∎
References
- [ACP08] Alexandr Andoni, Dorian Croitoru and Mihai Patrascu “Hardness of Nearest Neighbor under L-infinity” In Proceedings of the 49th Annual IEEE Symposium on Foundations of Computer Science (FOCS) Philadelphia, PA, USA: IEEE, 2008, pp. 424–433 DOI: 10.1109/FOCS.2008.89
- [Agg+21] Divesh Aggarwal, Huck Bennett, Alexander Golovnev and Noah Stephens-Davidowitz “Fine-grained hardness of CVP(P) – Everything that we can prove (and nothing else)” arXiv: 1911.02440 In ACM-SIAM Symposium on Discrete Algorithms (SODA), 2021 URL: http://arxiv.org/abs/1911.02440
- [AI08] Alexandr Andoni and Piotr Indyk “Near-optimal hashing algorithms for approximate nearest neighbor in high dimensions” In Communications of the ACM 51.1, 2008, pp. 117–122 DOI: 10.1145/1327452.1327494
- [AIR18] Alexandr Andoni, Piotr Indyk and Ilya Razenshteyn “Approximate nearest neighbor search in high dimensions” In Proceedings of the International Congress of Mathematicians (ICM 2018) World Scientific, 2018, pp. 3287–3318 DOI: 10.1142/9789813272880˙0182
- [Ajt98] Miklós Ajtai “The shortest vector problem in L is NP-hard for randomized reductions (extended abstract)” In Proceedings of the Thirtieth Annual ACM Symposium on Theory of Computing (STOC), STOC ’98, 1998, pp. 10–19 DOI: 10.1145/276698.276705
- [Ala+20] Gorjan Alagic et al. “Status Report on the Second Round of the NIST Post-Quantum Cryptography Standardization Process”, 2020 URL: https://csrc.nist.gov/publications/detail/nistir/8309/final
- [AM18] Divesh Aggarwal and Priyanka Mukhopadhyay “Improved Algorithms for the Shortest Vector Problem and the Closest Vector Problem in the Infinity Norm” ISSN: 1868-8969 In 29th International Symposium on Algorithms and Computation (ISAAC) 123, Leibniz International Proceedings in Informatics (LIPIcs) Dagstuhl, Germany: Schloss Dagstuhl–Leibniz-Zentrum fuer Informatik, 2018, pp. 35:1–35:13 DOI: 10.4230/LIPIcs.ISAAC.2018.35
- [And+17] Alexandr Andoni, Thijs Laarhoven, Ilya Razenshteyn and Erik Waingarten “Optimal Hashing-based Time-Space Trade-offs for Approximate Near Neighbors” In Proceedings of the 2017 Annual ACM-SIAM Symposium on Discrete Algorithms (SODA), Proceedings Society for IndustrialApplied Mathematics, 2017, pp. 47–66 DOI: 10.1137/1.9781611974782.4
- [And+17a] Alexandr Andoni et al. “Approximate near neighbors for general symmetric norms” In Proceedings of the 49th Annual ACM SIGACT Symposium on Theory of Computing (STOC), STOC 2017, 2017, pp. 902–913 DOI: 10.1145/3055399.3055418
- [AR05] Dorit Aharonov and Oded Regev “Lattice problems in NP intersect coNP” In Journal of the ACM 52.5, 2005, pp. 749–765 DOI: 10.1145/1089023.1089025
- [AR15] Alexandr Andoni and Ilya P. Razenshteyn “Optimal Data-Dependent Hashing for Approximate Near Neighbors” In Proceedings of the 47th Annual ACM on Symposium on Theory of Computing (STOC), 2015, pp. 793–801 DOI: 10.1145/2746539.2746553
- [ARW17] A. Abboud, A. Rubinstein and R. Williams “Distributed PCP Theorems for Hardness of Approximation in P” ISSN: 0272-5428 In 2017 IEEE 58th Annual Symposium on Foundations of Computer Science (FOCS), 2017, pp. 25–36 DOI: 10.1109/FOCS.2017.12
- [Bec+16] Anja Becker, Léo Ducas, Nicolas Gama and Thijs Laarhoven “New directions in nearest neighbor searching with applications to lattice sieving” In Proceedings of the 27th Annual ACM-SIAM Symposium on Discrete Algorithms (SODA), SODA ’16 USA: Society for IndustrialApplied Mathematics, 2016, pp. 10–24
- [BGSD17] Huck Bennett, Alexander Golovnev and Noah Stephens-Davidowitz “On the Quantitative Hardness of CVP” ISSN: 0272-5428 In 2017 IEEE 58th Annual Symposium on Foundations of Computer Science (FOCS), 2017, pp. 13–24 DOI: 10.1109/FOCS.2017.11
- [BJG15] Anja Becker, Antoine Joux and Nicolas Gama “Speeding-up lattice sieving without increasing the memory, using sub-quadratic nearest neighbor search”, 2015 URL: https://eprint.iacr.org/2015/522
- [BK18] Mark Braverman and Young Kun Ko “Semi-Direct Sum Theorem and Nearest Neighbor under l_infty” ISSN: 1868-8969 In Approximation, Randomization, and Combinatorial Optimization. Algorithms and Techniques (APPROX/RANDOM) 116, Leibniz International Proceedings in Informatics (LIPIcs) Dagstuhl, Germany: Schloss Dagstuhl–Leibniz-Zentrum fuer Informatik, 2018, pp. 6:1–6:17 DOI: 10.4230/LIPIcs.APPROX-RANDOM.2018.6
- [Boa81] P. Boas “Another np-complete problem and the complexity of computing short vectors in a lattice”, 1981 URL: /paper/Another-np-complete-problem-and-the-complexity-of-a-Boas/69a18eb62802cbf51fae0cb0d2219469425fe0de
- [DGW19] Zeev Dvir, Alexander Golovnev and Omri Weinstein “Static data structure lower bounds imply rigidity” In Proceedings of the 51st Annual ACM SIGACT Symposium on Theory of Computing (STOC), STOC 2019, 2019, pp. 967–978 DOI: 10.1145/3313276.3316348
- [Din02] Irit Dinur “Approximating SVP-infinity to within almost-polynomial factors is NP-hard” In Theoretical Computer Science 285.1, Algorithms and Complexity, 2002, pp. 55–71 DOI: 10.1016/S0304-3975(01)00290-0
- [Duc+18] Léo Ducas et al. “CRYSTALS-Dilithium: A Lattice-Based Digital Signature Scheme” In IACR Transactions on Cryptographic Hardware and Embedded Systems (CHES), 2018, pp. 238–268 DOI: 10.13154/tches.v2018.i1.238-268
- [Fag96] Ronald Fagin “Combining fuzzy information from multiple systems (extended abstract)” In Proceedings of the 15th ACM SIGACT-SIGMOD-SIGART Symposium on Principles of Database Systems (PODS), PODS ’96, 1996, pp. 216–226 DOI: 10.1145/237661.237715
- [Fag99] Ronald Fagin “Combining Fuzzy Information from Multiple Systems” In Journal of Computer and System Sciences 58.1, 1999, pp. 83–99 DOI: 10.1006/jcss.1998.1600
- [HR07] Ishay Haviv and Oded Regev “Tensor-based hardness of the shortest vector problem to within almost polynomial factors” In Proceedings of the 39th Annual ACM Symposium on Theory of Computing (STOC), STOC ’07, 2007, pp. 469–477 DOI: 10.1145/1250790.1250859
- [IM98] Piotr Indyk and Rajeev Motwani “Approximate nearest neighbors: towards removing the curse of dimensionality” In Proceedings of the 30th Annual ACM on Symposium on Theory of Computing (STOC), STOC ’98, 1998, pp. 604–613 DOI: 10.1145/276698.276876
- [Ind01] Piotr Indyk “On Approximate Nearest Neighbors under L-infinity Norm” In Journal of Computer and System Sciences 63.4, 2001, pp. 627–638 DOI: 10.1006/jcss.2001.1781
- [Ind03] Piotr Indyk “Better algorithms for high-dimensional proximity problems via asymmetric embeddings” In Proceedings of the fourteenth annual ACM-SIAM symposium on Discrete algorithms, SODA ’03 USA: Society for IndustrialApplied Mathematics, 2003, pp. 539–545
- [IP99] Russell Impagliazzo and Ramamohan Paturi “The Complexity of k-SAT” In Proceedings of the Fourteenth Annual IEEE Conference on Computational Complexity, COCO ’99 USA: IEEE Computer Society, 1999, pp. 237
- [IPZ01] Russell Impagliazzo, Ramamohan Paturi and Francis Zane “Which Problems Have Strongly Exponential Complexity?” In Journal of Computer and System Sciences 63.4, 2001, pp. 512–530 DOI: 10.1006/jcss.2001.1774
- [JL84] William B. Johnson and Joram Lindenstrauss “Extensions of Lipschitz mappings into a Hilbert space” In Contemporary Mathematics 26 Providence, Rhode Island: American Mathematical Society, 1984, pp. 189–206 DOI: 10.1090/conm/026/737400
- [Kho05] Subhash Khot “Hardness of approximating the shortest vector problem in lattices” In Journal of the ACM 52.5, 2005, pp. 789–808 DOI: 10.1145/1089023.1089027
- [Kho10] Subhash Khot “Inapproximability Results for Computational Problems on Lattices” In The LLL Algorithm: Survey and Applications, Information Security and Cryptography Berlin, Heidelberg: Springer, 2010, pp. 453–473 DOI: 10.1007/978-3-642-02295-1˙14
- [Kle97] Jon M. Kleinberg “Two algorithms for nearest-neighbor search in high dimensions” In Proceedings of the Twenty-Ninth Annual ACM Symposium on Theory of Computing (STOC) El Paso, Texas, United States: ACM Press, 1997, pp. 599–608 DOI: 10.1145/258533.258653
- [Laa15] Thijs Laarhoven “Sieving for Shortest Vectors in Lattices Using Angular Locality-Sensitive Hashing” In Advances in Cryptology (CRYPTO), Lecture Notes in Computer Science Berlin, Heidelberg: Springer, 2015, pp. 3–22 DOI: 10.1007/978-3-662-47989-6˙1
- [Mat96] Jiří Matoušek “On the distortion required for embedding finite metric spaces into normed spaces” In Israel Journal of Mathematics 93.1, 1996, pp. 333–344 DOI: 10.1007/BF02761110
- [MG02] Daniele Micciancio and Shafi Goldwasser “Complexity of Lattice Problems: A Cryptographic Perspective”, The Springer International Series in Engineering and Computer Science Springer US, 2002 DOI: 10.1007/978-1-4615-0897-7
- [Mic01] Daniele Micciancio “The Shortest Vector in a Lattice is Hard to Approximate to within Some Constant” Publisher: Society for Industrial and Applied Mathematics In SIAM Journal on Computing 30.6, 2001, pp. 2008–2035 DOI: 10.1137/S0097539700373039
- [PTW10] Rina Panigrahy, Kunal Talwar and Udi Wieder “Lower Bounds on Near Neighbor Search via Metric Expansion” In IEEE 51st Annual Symposium on Foundations of Computer Science (FOCS), 2010, pp. 805–814
- [Reg09] Oded Regev “On lattices, learning with errors, random linear codes, and cryptography” In Journal of the ACM 56.6, 2009, pp. 34:1–34:40 DOI: 10.1145/1568318.1568324
- [RR06] Oded Regev and Ricky Rosen “Lattice problems and norm embeddings” In Proceedings of the thirty-eighth annual ACM symposium on Theory of Computing, STOC ’06 New York, NY, USA: Association for Computing Machinery, 2006, pp. 447–456 DOI: 10.1145/1132516.1132581
- [Rub18] Aviad Rubinstein “Hardness of approximate nearest neighbor search” In Proceedings of the 50th Annual ACM SIGACT Symposium on Theory of Computing (STOC), 2018, pp. 1260–1268 DOI: 10.1145/3188745.3188916
- [SDI06] Gregory Shakhnarovich, Trevor Darrell and Piotr Indyk “Nearest-Neighbor Methods in Learning and Vision: Theory and Practice” The MIT Press, 2006
- [Val15] Gregory Valiant “Finding Correlations in Subquadratic Time, with Applications to Learning Parities and the Closest Pair Problem” In Journal of the ACM 62.2, 2015, pp. 13:1–13:45 DOI: 10.1145/2728167
- [Wil05] Ryan Williams “A new algorithm for optimal 2-constraint satisfaction and its implications” In Theoretical Computer Science 348.2-3, 2005, pp. 357–365 DOI: 10.1016/j.tcs.2005.09.023
- [Wil07] R. Ryan Williams “Algorithms and resource requirements for fundamental problems” AAI3274191 ISBN-13: 9780549164777, 2007
- [Wil17] Virginia Vassilevska Williams “On some fine-grained questions in algorithms and complexity” In ICM 2018, 2017
- [WW18] Virginia Vassilevska Williams and R. Ryan Williams “Subcubic Equivalences Between Path, Matrix, and Triangle Problems” In Journal of the ACM 65.5, 2018, pp. 1–38 DOI: 10.1145/3186893
- [Yao79] Andrew Chi-Chih Yao “Some Complexity Questions Related to Distributive Computing” In Proceedings of the 11h Annual ACM SIGACT Symposium on Theory of Computing (STOC), 1979, pp. 209–213