Table of Contents
Fetching ...

Near-Optimal Time-Sparsity Trade-Offs for Solving Noisy Linear Equations

Kiril Bangachev, Guy Bresler, Stefan Tiegel, Vinod Vaikuntanathan

TL;DR

This work presents a polynomial-time reduction from solving noisy linear equations over in dimension Θ with a uniformly random coefficient matrix to noisy linear equations over in dimension n where each row of the coefficient matrix has uniformly random support of size k to deduce the hardness of sparse problems from their dense counterparts.

Abstract

We present a polynomial-time reduction from solving noisy linear equations over $\mathbb{Z}/q\mathbb{Z}$ in dimension $Θ(k\log n/\mathsf{poly}(\log k,\log q,\log\log n))$ with a uniformly random coefficient matrix to noisy linear equations over $\mathbb{Z}/q\mathbb{Z}$ in dimension $n$ where each row of the coefficient matrix has uniformly random support of size $k$. This allows us to deduce the hardness of sparse problems from their dense counterparts. In particular, we derive hardness results in the following canonical settings. 1) Assuming the $\ell$-dimensional (dense) LWE over a polynomial-size field takes time $2^{Ω(\ell)}$, $k$-sparse LWE in dimension $n$ takes time $n^{Ω({k}/{(\log k \cdot (\log k + \log \log n))})}.$ 2) Assuming the $\ell$-dimensional (dense) LPN over $\mathbb{F}_2$ takes time $2^{Ω(\ell/\log \ell)}$, $k$-sparse LPN in dimension $n$ takes time $n^{Ω(k/(\log k \cdot (\log k + \log \log n)^2))}~.$ These running time lower bounds are nearly tight as both sparse problems can be solved in time $n^{O(k)},$ given sufficiently many samples. We further give a reduction from $k$-sparse LWE to noisy tensor completion. Concretely, composing the two reductions implies that order-$k$ rank-$2^{k-1}$ noisy tensor completion in $\mathbb{R}^{n^{\otimes k}}$ takes time $n^{Ω(k/ \log k \cdot (\log k + \log \log n))}$, assuming the exponential hardness of standard worst-case lattice problems.

Near-Optimal Time-Sparsity Trade-Offs for Solving Noisy Linear Equations

TL;DR

This work presents a polynomial-time reduction from solving noisy linear equations over in dimension Θ with a uniformly random coefficient matrix to noisy linear equations over in dimension n where each row of the coefficient matrix has uniformly random support of size k to deduce the hardness of sparse problems from their dense counterparts.

Abstract

We present a polynomial-time reduction from solving noisy linear equations over in dimension with a uniformly random coefficient matrix to noisy linear equations over in dimension where each row of the coefficient matrix has uniformly random support of size . This allows us to deduce the hardness of sparse problems from their dense counterparts. In particular, we derive hardness results in the following canonical settings. 1) Assuming the -dimensional (dense) LWE over a polynomial-size field takes time , -sparse LWE in dimension takes time 2) Assuming the -dimensional (dense) LPN over takes time , -sparse LPN in dimension takes time These running time lower bounds are nearly tight as both sparse problems can be solved in time given sufficiently many samples. We further give a reduction from -sparse LWE to noisy tensor completion. Concretely, composing the two reductions implies that order- rank- noisy tensor completion in takes time , assuming the exponential hardness of standard worst-case lattice problems.

Paper Structure

This paper contains 100 sections, 39 theorems, 103 equations, 4 tables, 7 algorithms.

Key Result

Theorem 1.1

There is a $\mathsf{poly}(n)$-time reduction from standard LPN (respectively standard LWE) in dimension to $k$-LPN (respectively $k$-LWE) in dimension $n$. The reduction preserves the number of samples up to a $1-o(1)$ multiplicative factor. Furthermore, for decision and search, the reduction preserves the noise distributionIn particular, it also to the learning with rounding problem. and for ref

Theorems & Definitions (69)

  • Theorem 1.1: Informal, see \ref{['thm:mainreduction']} and \ref{['cor:explwe', 'cor:nearexplpn', 'cor:subexphardness', 'cor:quasihardness']}
  • Corollary 1.1: $k$-LPN hardness
  • Corollary 1.2: $k$-LWE hardness
  • Theorem 1.2: Lattice-Based Lower-Bound For Tensor Completion, Informal
  • Lemma 2.1: Efficient preimage sampling
  • Lemma 2.2: Uniformity of preimage size
  • Lemma 2.3: Computing preimage sizes
  • Remark 1
  • Definition 1: Decision
  • Definition 2: Search
  • ...and 59 more