The Korkine–Zolotarev (KZ) lattice basis reduction algorithm or Hermite–Korkine–Zolotarev (HKZ) algorithm is a lattice reduction algorithm. For lattices in R n {\displaystyle \mathbb {R} ^{n}} it yields a lattice basis with orthogonality defect at most n n {\displaystyle n^{n}} , unlike the 2 n 2 / 2 {\displaystyle 2^{n^{2}/2}} bound of the LLL reduction. KZ has exponential complexity versus the polynomial complexity of the LLL reduction algorithm, however it may still be preferred for solving multiple closest vector problems (CVPs) in the same lattice, where it can be more efficient.
History The definition of a HKZ-reduced basis was first given by Hermite in his second letter to Jacobi in 1845 and later also by Aleksandr Korkin and Yegor Ivanovich Zolotarev in 1877. The first algorithm for constructing a HKZ-reduced basis was given in 1983 by Kannan. and later improved by Claus Schnorr, who also introduced a practical variant known as block Korkine-Zolotarev (BKZ) algorithm in 1987.
Definition A KZ-reduced basis for a lattice is defined as follows: Given a basis
B = { b 1 , b 2 , … , b n } , {\displaystyle \mathbf {B} =\{\mathbf {b} _{1},\mathbf {b} _{2},\dots ,\mathbf {b} _{n}\},}
define its Gram–Schmidt process orthogonal basis
B ∗ = { b 1 ∗ , b 2 ∗ , … , b n ∗ } , {\displaystyle \mathbf {B} ^{*}=\{\mathbf {b} _{1}^{*},\mathbf {b} _{2}^{*},\dots ,\mathbf {b} _{n}^{*}\},}
and the Gram-Schmidt coefficients
μ i , j = ⟨ b i , b j ∗ ⟩ ⟨ b j ∗ , b j ∗ ⟩ {\displaystyle \mu _{i,j}={\frac {\langle \mathbf {b} _{i},\mathbf {b} _{j}^{*}\rangle }{\langle \mathbf {b} _{j}^{*},\mathbf {b} _{j}^{*}\rangle }}} , for any 1 ≤ j < i ≤ n {\displaystyle 1\leq j<i\leq n} . Also define projection functions
π i ( x ) = ∑ j ≥ i ⟨ x , b j ∗ ⟩ ⟨ b j ∗ , b j ∗ ⟩ b j ∗ {\displaystyle \pi _{i}(\mathbf {x} )=\sum _{j\geq i}{\frac {\langle \mathbf {x} ,\mathbf {b} _{j}^{*}\rangle }{\langle \mathbf {b} _{j}^{*},\mathbf {b} _{j}^{*}\rangle }}\mathbf {b} _{j}^{*}}
which project x {\displaystyle \mathbf {x} } orthogonally onto the span of b i ∗ , ⋯ , b n ∗ {\displaystyle \mathbf {b} _{i}^{*},\cdots ,\mathbf {b} _{n}^{*}} . Then the basis B {\displaystyle B} is KZ-reduced if the following holds:
… excerpt ends here. Continue reading the full article.
