Lattice Reduction by Random Sampling and Birthday Methods

Abstract. We present a novel practical algorithm that given a lattice basis b1,..., bn finds in O(n 2 ( k 6)k/4) average time a shorter vector than b1 provided that b1 is ( k 6)n/(2k) times longer than the length of the shortest, nonzero lattice vector. We assume that the given basis b1,..., bn has an orthogonal basis that is typical for worst case lattice bases. The new reduction method samples short lattice vectors in high dimensional sublattices, it advances in sporadic big jumps. It decreases the approximation factor achievable in a given time by known methods to less than its fourth-th root. We further speed up the new method by the simple and the general birthday method. 1