Improved Generic Algorithms for Hard Knapsacks
Résumé
At Eurocrypt 2010, Howgrave-Graham and Joux described an algorithm for solving hard knapsacks of density close to 1 in time (20337n) and memory (20256n), thereby improving a 30-year old algorithm by Shamir and Schroeppel. In this paper we extend the Howgrave-Graham-Joux technique to get an algorithm with running time down to (20291n). An implementation shows the practicability of the technique. Another challenge is to reduce the memory requirement. We describe a constant memory algorithm based on cycle finding with running time (2072n); we also show a time-memory tradeoff.