Misplaced Pages

Pseudorandom generators for polynomials

Article snapshot taken from Wikipedia with creative commons attribution-sharealike license. Give it a read and then ask your questions in the chat. We can research this topic together.
Computer science concept

In theoretical computer science, a pseudorandom generator for low-degree polynomials is an efficient procedure that maps a short truly random seed to a longer pseudorandom string in such a way that low-degree polynomials cannot distinguish the output distribution of the generator from the truly random distribution. That is, evaluating any low-degree polynomial at a point determined by the pseudorandom string is statistically close to evaluating the same polynomial at a point that is chosen uniformly at random.

Pseudorandom generators for low-degree polynomials are a particular instance of pseudorandom generators for statistical tests, where the statistical tests considered are evaluations of low-degree polynomials.

Definition

A pseudorandom generator G : F F n {\displaystyle G:\mathbb {F} ^{\ell }\rightarrow \mathbb {F} ^{n}} for polynomials of degree d {\displaystyle d} over a finite field F {\displaystyle \mathbb {F} } is an efficient procedure that maps a sequence of {\displaystyle \ell } field elements to a sequence of n {\displaystyle n} field elements such that any n {\displaystyle n} -variate polynomial over F {\displaystyle \mathbb {F} } of degree d {\displaystyle d} is fooled by the output distribution of G {\displaystyle G} . In other words, for every such polynomial p ( x 1 , , x n ) {\displaystyle p(x_{1},\dots ,x_{n})} , the statistical distance between the distributions p ( U n ) {\displaystyle p(U_{n})} and p ( G ( U ) ) {\displaystyle p(G(U_{\ell }))} is at most a small ϵ {\displaystyle \epsilon } , where U k {\displaystyle U_{k}} is the uniform distribution over F k {\displaystyle \mathbb {F} ^{k}} .

Construction

Lovett (3rd from left) in 2009

The case d = 1 {\displaystyle d=1} corresponds to pseudorandom generators for linear functions and is solved by small-bias generators. For example, the construction of Naor & Naor (1990) achieves a seed length of = log n + O ( log ( ϵ 1 ) ) {\displaystyle \ell =\log n+O(\log(\epsilon ^{-1}))} , which is optimal up to constant factors.

Bogdanov & Viola (2007) conjectured that the sum of small-bias generators fools low-degree polynomials and were able to prove this under the Gowers inverse conjecture. Lovett (2009) proved unconditionally that the sum of 2 d {\displaystyle 2^{d}} small-bias spaces fools polynomials of degree d {\displaystyle d} . Viola (2008) proves that, in fact, taking the sum of only d {\displaystyle d} small-bias generators is sufficient to fool polynomials of degree d {\displaystyle d} . The analysis of Viola (2008) gives a seed length of = d log n + O ( 2 d log ( ϵ 1 ) ) {\displaystyle \ell =d\cdot \log n+O(2^{d}\cdot \log(\epsilon ^{-1}))} .

References

Category: