The L² CVP distance to the log-unit lattice converges to (π/(2√6))√n, enabling sub-polynomial approximation factors for the Short Generator Problem and reducing the CDPR factor for ML-KEM from exp(O(√n)) to sub-polynomial.
Worst-case to average-case reductions for module lattices.Designs, Codes and Cryptography, 75: 565-599
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
fields
cs.DS 1years
2026 1verdicts
UNVERDICTED 1representative citing papers
citing papers explorer
-
Module Lattice Security (Part III): Structured CVP Distance on the Log-Unit Lattice
The L² CVP distance to the log-unit lattice converges to (π/(2√6))√n, enabling sub-polynomial approximation factors for the Short Generator Problem and reducing the CDPR factor for ML-KEM from exp(O(√n)) to sub-polynomial.