Sparse average-case k-SUM conjecture

From papers

In the (k,N,r)(k,N,r)-SUM problem, the input consists of rr elements z1,,zrz_1,\ldots,z_r, independently and uniformly chosen from {N,,N}\{-N,\ldots,N\}. The goal is to find an ordered kk-tuple of distinct indices K={i1,,ik}K=\{i_1,\ldots,i_k\} such that

jKzj=0,\sum_{j\in K}z_j=0,

where the sum is over Z\mathbb{Z}. The sparse regime has only a few solutions on average, with rkNr^k\approx N. Sparse average-case kk-SUM conjecture. Any algorithm that solves the (k,N,r)(k,N,r)-SUM problem with r=N1/kr=N^{1/k} and probability Ωk(1)\Omega_k(1) has expected running time at least

T=Ωk(rk/2o(1)).T=\Omega_k\left(r^{\lceil k/2\rceil-o(1)}\right).

The conjecture is presented as folklore hardness of the uniform distribution under a standard computational model and underlies the paper's conditional optimality results for dense kk-SUM.

Progress summary

Nothing recorded yet. Refresh searches the literature and the public web for attempts on this problem, and writes the first summary here.

Sources & referencesView supporting material

Primary source

Itai Dinur, Nathan Keller and Ohad Klein, “Fine-Grained Cryptanalysis: Tight Conditional Bounds for Dense k-SUM and k-XOR”, arXiv:2111.00486 (2024).

Solutions 0

No solutions have been posted yet.