Subset Balancing and Generalized Subset Sum via Lattices

Abstract

We study the Subset Balancing problem: given x ∈ Zn and a coefficient set C ⊂eq Z, find a nonzero vector c ∈ Cn such that c· x = 0. The standard meet-in-the-middle algorithm runs in time O(|C|n/2), and recent improvements (SODA 2022, Chen, Jin, Randolph, and Servedio; STOC 2026, Randolph and Wegrzycki) beyond this barrier apply mainly when d is constant. We give a reduction from Subset Balancing with C = \-d, …, d\ to a single instance of SVP∞ in dimension n+1. Instantiating this reduction with the best known ∞-SVP algorithms yields a deterministic O((62π e)n)-time algorithm and a randomized O(22.443n)-time algorithm. The exponent depends only on n, improving on meet-in-the-middle for all d 15. For sufficiently large d we also obtain a polynomial-time algorithm. The reduction extends from the box constraint [-d,d]n to any centrally symmetric convex body K⊂eqRn, giving deterministic time O(2cK n) for a constant cK depending only on the shape of K. We further study the Generalized Subset Sum problem of finding c ∈ Cn such that c · x = τ. For C = \-d, …, d\ or C = \-d,…,d\\0\, we reduce the worst-case problem to CVP∞ in dimension n+1. We observe that distances in our lattice take only integer values, so an approximate CVP∞ oracle still suffices, yielding a deterministic worst-case algorithm running in time 2O(n d). In the average-case setting, we demonstrate that for both coefficient sets the embedded CVP∞ instance satisfies a bounded-distance promise with high probability, removing the d factor altogether and obtaining a deterministic algorithm running in time O((182π e)n).

0

Turn this paper into a lesson

ArcXiv compiles a structured reading guide from this paper's metadata: plain-English importance, contributions, prerequisite concepts, which sections to read first, flashcards, and a quiz. Grounded in the abstract, never invented.

Discussion (0)

Sign in to join the discussion.

Loading comments…