Jump to content

Lenstra–Lenstra–Lovász lattice basis reduction algorithm

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Js coron (talk | contribs) at 20:00, 13 April 2005 (Creation). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.
(diff) ← Previous revision | Latest revision (diff) | Newer revision → (diff)

The Lenstra-Lenstra-Lovász lattice reduction algorithm, given as input a lattice basis, outputs a basis with short, nearly orthogonal vectors. More precisely, given as input d lattice basis vectors with n-dimensional integer coordinates and a norm lesser than B, the LLL algorithm outputs an LLL-reduced lattice basis in time .

The LLL algorithm has found numerous applications in cryptanalysis of public-key encryption schemes: knapsack cryptosystems, RSA with particular settings...

Reference:

A. K. Lenstra, H. W. Lenstra, Jr. and L. Lovász, Factoring Polynomials with Rational Coefficients, Math. Ann. 261 (1982)