Improved Space Bounds for Subset Sum (2402.13170v3)
Abstract: More than 40 years ago, Schroeppel and Shamir presented an algorithm that solves the Subset Sum problem for $n$ integers in time $O*(2{0.5n})$ and space $O*(2{0.25n})$. The time upper bound remains unbeaten, but the space upper bound has been improved to $O*(2{0.249999n})$ in a recent breakthrough paper by Nederlof and W\k{e}grzycki (STOC 2021). Their algorithm is a clever combination of a number of previously known techniques with a new reduction and a new algorithm for the Orthogonal Vectors problem. In this paper, we improve the space bound by Nederlof and W\k{e}grzycki to $O*(2{0.246n})$ and also simplify their algorithm and its analysis. We achieve this by using an idea, due to Howgrave-Graham and Joux, of using a random prime number to filter the family of subsets. We incorporate it into the algorithm by Schroeppel and Shamir and then use this amalgam inside the representation technique. This allows us to reduce an instance of Subset Sum to a larger number of instances of weighted orthogonal vector.
- A public-key cryptosystem with worst-case/average-case equivalence. In STOC, pages 284–293. ACM, 1997.
- Improved Merlin–Arthur protocols for central problems in fine-grained complexity. In ITCS, volume 215 of LIPIcs, pages 3:1–3:25. Schloss Dagstuhl - Leibniz-Zentrum für Informatik, 2022.
- Color-coding. J. ACM, 42(4):844–856, 1995.
- Space-time tradeoffs for subset sum: An improved worst case algorithm. In ICALP (1), volume 7965 of Lecture Notes in Computer Science, pages 45–56. Springer, 2013.
- Subset sum in the absence of concentration. In STACS, volume 30 of LIPIcs, pages 48–61. Schloss Dagstuhl - Leibniz-Zentrum für Informatik, 2015.
- Dense subset sum may be the hardest. In STACS, volume 47 of LIPIcs, pages 13:1–13:14. Schloss Dagstuhl - Leibniz-Zentrum für Informatik, 2016.
- Faster space-efficient algorithms for subset sum, k-sum, and related problems. SIAM J. Comput., 47(5):1755–1777, 2018.
- Improved generic algorithms for hard knapsacks. In Annual International Conference on the Theory and Applications of Cryptographic Techniques, pages 364–385. Springer, 2011.
- Improved classical and quantum algorithms for subset-sum. In ASIACRYPT (2), volume 12492 of Lecture Notes in Computer Science, pages 633–666. Springer, 2020.
- Nondeterministic extensions of the strong exponential time hypothesis and consequences for non-reducibility. In ITCS 2016, pages 261–270. ACM, 2016.
- Timothy M. Chan. More Logarithmic-Factor Speedups for 3SUM, (median,+)-Convolution, and Some Geometric 3SUM-Hard Problems, pages 881–897.
- Truly low-space element distinctness and subset sum via pseudorandom hash functions. In Proceedings of the 2022 Annual ACM-SIAM Symposium on Discrete Algorithms (SODA), pages 1661–1678. SIAM, 2022.
- Subset sum in time 2n/2/poly(n)superscript2𝑛2poly𝑛2^{n/2}/\operatorname{poly}(n)2 start_POSTSUPERSCRIPT italic_n / 2 end_POSTSUPERSCRIPT / roman_poly ( italic_n ). In APPROX/RANDOM, volume 275 of LIPIcs, pages 39:1–39:18. Schloss Dagstuhl - Leibniz-Zentrum für Informatik, 2023.
- Efficient dissection of composite problems, with applications to cryptanalysis, knapsacks, and combinatorial search problems. In Annual Cryptology Conference, pages 719–740. Springer, 2012.
- Computing partitions with applications to the knapsack problem. J. ACM, 21(2):277–292, 1974.
- New generic algorithms for hard knapsacks. In Annual International Conference on the Theory and Applications of Cryptographic Techniques, pages 235–256. Springer, 2010.
- Efficient cryptographic schemes provably as secure as subset sum. Journal of cryptology, 9(4):199–216, 1996.
- Hendrik W. Lenstra, Jr. and Carl Pomerance. Primality testing with gaussian periods. Journal of the European Mathematical Society, 21(4):1229–1269, 2019.
- Deterministic time-space trade-offs for k𝑘kitalic_k-SUM. In ICALP, volume 55 of LIPIcs, pages 58:1–58:14. Schloss Dagstuhl - Leibniz-Zentrum für Informatik, 2016.
- Public-key cryptographic primitives provably as secure as subset sum. In Theory of Cryptography Conference, pages 382–400. Springer, 2010.
- Hiding information and signatures in trapdoor knapsacks. IEEE transactions on Information Theory, 24(5):525–530, 1978.
- Jesper Nederlof. A short note on Merlin–Arthur protocols for subset sum. Inf. Process. Lett., 118:15–16, 2017.
- Improving Schroeppel and Shamir’s algorithm for subset sum via orthogonal vectors. In STOC, pages 1670–1683. ACM, 2021.
- Andrew M. Odlyzko. The rise and fall of knapsack cryptosystems. Cryptology and computational number theory, 42(2), 1990.
- A T=O(2n/2)𝑇𝑂superscript2𝑛2T=O(2^{n/2})italic_T = italic_O ( 2 start_POSTSUPERSCRIPT italic_n / 2 end_POSTSUPERSCRIPT ), S=O(2n/4)𝑆𝑂superscript2𝑛4S=O(2^{n/4})italic_S = italic_O ( 2 start_POSTSUPERSCRIPT italic_n / 4 end_POSTSUPERSCRIPT ) algorithm for certain NP-complete problems. SIAM J. Comput., 10(3):456–464, 1981.