Jump to content
Wikipedia The Free Encyclopedia

Pseudorandom generators for polynomials

From Wikipedia, the free encyclopedia
Computer science concept

In theoretical computer science, a pseudorandom generator for low-degree polynomials is an efficient procedure that maps a short truly random seed to a longer pseudorandom string in such a way that low-degree polynomials cannot distinguish the output distribution of the generator from the truly random distribution. That is, evaluating any low-degree polynomial at a point determined by the pseudorandom string is statistically close to evaluating the same polynomial at a point that is chosen uniformly at random.

Pseudorandom generators for low-degree polynomials are a particular instance of pseudorandom generators for statistical tests, where the statistical tests considered are evaluations of low-degree polynomials.

Definition

[edit ]

A pseudorandom generator G : F F n {\displaystyle G:\mathbb {F} ^{\ell }\rightarrow \mathbb {F} ^{n}} {\displaystyle G:\mathbb {F} ^{\ell }\rightarrow \mathbb {F} ^{n}} for polynomials of degree d {\displaystyle d} {\displaystyle d} over a finite field F {\displaystyle \mathbb {F} } {\displaystyle \mathbb {F} } is an efficient procedure that maps a sequence of {\displaystyle \ell } {\displaystyle \ell } field elements to a sequence of n {\displaystyle n} {\displaystyle n} field elements such that any n {\displaystyle n} {\displaystyle n}-variate polynomial over F {\displaystyle \mathbb {F} } {\displaystyle \mathbb {F} } of degree d {\displaystyle d} {\displaystyle d} is fooled by the output distribution of G {\displaystyle G} {\displaystyle G}. In other words, for every such polynomial p ( x 1 , , x n ) {\displaystyle p(x_{1},\dots ,x_{n})} {\displaystyle p(x_{1},\dots ,x_{n})}, the statistical distance between the distributions p ( U n ) {\displaystyle p(U_{n})} {\displaystyle p(U_{n})} and p ( G ( U ) ) {\displaystyle p(G(U_{\ell }))} {\displaystyle p(G(U_{\ell }))} is at most a small ϵ {\displaystyle \epsilon } {\displaystyle \epsilon }, where U k {\displaystyle U_{k}} {\displaystyle U_{k}} is the uniform distribution over F k {\displaystyle \mathbb {F} ^{k}} {\displaystyle \mathbb {F} ^{k}}.

Construction

[edit ]
Lovett (3rd from left) in 2009

The case d = 1 {\displaystyle d=1} {\displaystyle d=1} corresponds to pseudorandom generators for linear functions and is solved by small-bias generators. For example, the construction of Naor & Naor (1990) achieves a seed length of = log n + O ( log ( ϵ 1 ) ) {\displaystyle \ell =\log n+O(\log(\epsilon ^{-1}))} {\displaystyle \ell =\log n+O(\log(\epsilon ^{-1}))}, which is optimal up to constant factors.

Bogdanov & Viola (2007) conjectured that the sum of small-bias generators fools low-degree polynomials and were able to prove this under the Gowers inverse conjecture. Lovett (2009) proved unconditionally that the sum of 2 d {\displaystyle 2^{d}} {\displaystyle 2^{d}} small-bias spaces fools polynomials of degree d {\displaystyle d} {\displaystyle d}. Viola (2008) proves that, in fact, taking the sum of only d {\displaystyle d} {\displaystyle d} small-bias generators is sufficient to fool polynomials of degree d {\displaystyle d} {\displaystyle d}. The analysis of Viola (2008) gives a seed length of = d log n + O ( 2 d log ( ϵ 1 ) ) {\displaystyle \ell =d\cdot \log n+O(2^{d}\cdot \log(\epsilon ^{-1}))} {\displaystyle \ell =d\cdot \log n+O(2^{d}\cdot \log(\epsilon ^{-1}))}.

References

[edit ]

AltStyle によって変換されたページ (->オリジナル) /