Polynomial-time reductions between MSI and SIS/LWE

Determine whether any polynomial-time reductions exist between the Modular Symbol Inversion (MSI) problem and the Short Integer Solution (SIS) or Learning With Errors (LWE) problems, given that existing worst-case/average-case reductions for SIS or LWE do not apply to MSI.

Background

The authors analyze how MSI relates to lattice problems such as SIS and LWE. Although MSI can be written as a linear system modulo ℓm when path constraints are ignored, the structured sparsity and combinatorial constraints inherent to MSI distinguish it from SIS/LWE.

They explicitly note that known worst-case/average-case reductions for SIS or LWE do not transfer to MSI and that no polynomial-time reductions are currently known between MSI and these lattice problems, highlighting a gap in understanding formal relationships between these problem families.

References

As a result, known worst-case/average-case reductions for SIS or LWE do not apply to MSI, and no polynomial-time reduction between these problems is currently known.

From Orientations to $\ell$-adic Period Vectors  (2603.29789 - Colò, 31 Mar 2026) in Section 8.3, Comparison with SIS, LWE, and isogeny-path