Unconditional deterministic NP-hardness of Euclidean (ℓ₂) shortest vector problem, and at polynomial factors
Difficulty 45: a precise 45-year-old question whose neighbours fell in 2025–26 (unconditional for p > 2 at STOC 2026, conditional for p = 2 in an unrefereed preprint), so the remaining gap is to remove a subexponential-time assumption for ℓ2; momentum is strong but the p > 2 gadgets do not transfer directly. Placed above the smoothed simplex exponent (38) and below the feature-learning exponent (47). Application value 11: worst-case hardness with no effect on deployed lattice cryptography. Leverage 26: foundations of lattice complexity.
The problem
Prove, with no random tricks, that finding the shortest arrow in a lattice is NP-hard in ordinary geometry.
- 1Lattice: regular grid of points
- 2Find the point nearest the origin
- 3NP-hard, but proof needs randomness
- 4Want a proof with no randomness
- 5Open for ordinary distance
Definitions. The shortest vector problem (SVP): given a basis of a lattice , find a nonzero vector of minimum norm . is the decision version: decide whether or .
Path to understanding
foundations → problemThe research entries this problem rests on, in the order to read them. Each links to its explainer.
- Start with
- Step 2
- Step 3
- Quantum algorithmsAlgorithm
- Linear programmingAlgorithm
- Step 4
- Step 5
- Lattice-based cryptography (LWE)Algorithm · host
- Then
- Unconditional deterministic NP-hardness of Euclidean (ℓ₂) shortest vector problem, and at polynomial factorsThe problem
State of the art
Randomised hardness. Ajtai (STOC 1998) proved SVP NP-hard under randomised reductions; Micciancio (2001) extended hardness to factors below ; Khot (J. ACM 2005) to every constant under randomised reductions; Haviv and Regev (STOC 2007) to by tensoring; Micciancio (Theory of Computing 2012, doi:10.4086/toc.2012.v008a022) gave reductions with one-sided error and no false positives and suggested derandomisation as the route to deterministic hardness. Bennett and Peikert (arXiv:2202.07736, 2022) gave a simpler proof via Reed–Solomon codes for all norms.
Realistic applications
Deterministic NP-hardness for would settle a 45-year-old question and remove the last randomness and assumption caveats from the foundations of lattice complexity. It concerns worst-case complexity, not cryptographic security, so it does not change deployed lattice cryptography; the proof techniques (explicit Reed–Solomon and Vandermonde gadgets) may inform reductions for related lattice and code problems.
What counts as solved
A deterministic polynomial-time reduction from an NP-complete problem to exact SVP in , or to in for some constant , with proof from alone. Extending to for some in would be a further result.
How it gets verified
Expert reviewOnly expert review of the argument is possible today.
The result is a deterministic polynomial-time reduction from an NP-complete problem to exact SVP in l_2 (or constant-factor GapSVP) assuming only P != NP. Mathlib has lattices as modules but no reduction or hardness framework, so experts verify the reduction. Checking the gadget construction on small instances can catch errors, but it is not a proof.
Claims under verification
+ add a claimNo claimed results on the Verification board for this problem yet.
Where the work is
Reduction-design proof work.
Bottlenecks
ranked by votes- #1TheoryFrom p > 2 to p = 2
The Hair–Sahai gadgets use Vandermonde and Hadamard matrices whose gap analysis relies on p > 2; for ℓ2 the geometry is more rigid and the known proof for p = 2 needs a subexponential-time assumption.
Community grades
Sign in to add your own grade.
Connected problems
Progress
- Apr 1, 2026Conditional deterministic hardness including ℓ2source
Hair and Sahai obtained deterministic hardness within 2^((log n)^(1−o(1))) for all finite ℓp, including ℓ2, under the assumption NP ⊄ ∩_δ DTIME(exp(n^δ)) (preprint, unrefereed).
- Nov 6, 2025Deterministic NP-hardness of SVP_p for p > 2source
Hair and Sahai gave the first deterministic NP-hardness proof for finite ℓp norms, p > 2 (STOC 2026).
- Jan 1, 2012One-sided-error reduction and derandomisation routesource
Micciancio proved hardness within any constant by reductions with one-sided error and suggested derandomisation as a route to deterministic hardness.
- May 23, 1998SVP is NP-hard under randomised reductionssource
Ajtai proved the Euclidean SVP NP-hard for randomised reductions (STOC 1998).