ECCC-Report TR98-074https://eccc.weizmann.ac.il/report/1998/074Comments and Revisions published for TR98-074en-usThu, 18 May 2000 00:00:00 +0300
Revision 2
| Pseudorandom generators without the XOR Lemma Revision of: TR98-074 |
Madhu Sudan,
Luca Trevisan,
Salil Vadhan
https://eccc.weizmann.ac.il/report/1998/074#revision2
Impagliazzo and Wigderson have recently shown that
if there exists a decision problem solvable in time 2^{O(n)}
and having circuit complexity 2^{Omega(n)}
(for all but finitely many n) then P=BPP. This result
is a culmination of a series of works showing
connections between the existence of hard predicates
and the existence of good pseudorandom generators.
The construction of Impagliazzo and Wigderson
goes through three phases of "hardness amplification"
(a multivariate polynomial encoding, a first derandomized
XOR Lemma, and a second derandomized XOR Lemma) that are composed
with the Nisan-Wigderson generator. In this paper we present
two different approaches to proving the main result of
Impagliazzo and Wigderson. In developing each approach, we
introduce new techniques and prove new results that could be useful in
future
improvements and/or applications of hardness-randomness trade-offs.
Our first result is that when (a modified version of) the Nisan-Wigderson
generator construction is applied with a "mildly" hard predicate,
the result is a generator that produces a distribution indistinguishable
from having large min-entropy. An extractor can then be used to
produce a distribution computationally indistinguishable from uniform.
This is the first construction of a pseudorandom generator that
works with a mildly hard predicate without doing hardness amplification.
We then show that in the Impagliazzo-Wigderson construction
only the first hardness-amplification phase
(encoding with multivariate polynomial) is necessary, since it
already gives the required average-case hardness. We prove this
result by (i) establishing a connection between the hardness-amplification
problem and a list-decoding problem for error-correcting codes; and
(ii) presenting a
list-decoding algorithm for error-correcting codes based on multivariate
polynomials that improves and simplifies a previous
one by Arora and Sudan.
Thu, 18 May 2000 00:00:00 +0300https://eccc.weizmann.ac.il/report/1998/074#revision2
Revision 1
| Pseudorandom generators without the XOR Lemma Revision of: TR98-074 |
Madhu Sudan,
Luca Trevisan,
Salil Vadhan
https://eccc.weizmann.ac.il/report/1998/074#revision1
Impagliazzo and Wigderson have recently shown that
if there exists a decision problem solvable in time 2^{O(n)}
and having circuit complexity 2^{Omega(n)}
(for all but finitely many n) then P=BPP. This result
is a culmination of a series of works showing
connections between the existence of hard predicates
and the existence of good pseudorandom generators.
The construction of Impagliazzo and Wigderson
goes through three phases of "hardness amplification"
(a multivariate polynomial encoding, a first derandomized
XOR Lemma, and a second derandomized XOR Lemma) that are composed
with the Nisan-Wigderson generator. In this paper we present
two different approaches to proving the main result of
Impagliazzo and Wigderson. In developing each approach, we
introduce new techniques and prove new results that could be useful in
future
improvements and/or applications of hardness-randomness trade-offs.
Our first result is that when (a modified version of) the Nisan-Wigderson
generator construction is applied with a "mildly" hard predicate,
the result is a generator that produces a distribution indistinguishable
from having large min-entropy. An extractor can then be used to
produce a distribution computationally indistinguishable from uniform.
This is the first construction of a pseudorandom generator that
works with a mildly hard predicate without doing hardness amplification.
We then show that in the Impagliazzo-Wigderson construction
only the first hardness-amplification phase
(encoding with multivariate polynomial) is necessary, since it
already gives the required average-case hardness. We prove this
result by (i) establishing a connection between the hardness-amplification
problem and a list-decoding problem for error-correcting codes; and
(ii) presenting a
list-decoding algorithm for error-correcting codes based on multivariate
polynomials that improves and simplifies a previous
one by Arora and Sudan.
Thu, 10 Jun 1999 00:00:00 +0300https://eccc.weizmann.ac.il/report/1998/074#revision1
Paper TR98-074
| Pseudorandom generators without the XOR Lemma |
Madhu Sudan,
Luca Trevisan,
Salil Vadhan
https://eccc.weizmann.ac.il/report/1998/074
Impagliazzo and Wigderson have recently shown that
if there exists a decision problem solvable in time $2^{O(n)}$
and having circuit complexity $2^{\Omega(n)}$
(for all but finitely many $n$) then $\p=\bpp$. This result
is a culmination of a series of works showing
connections between the existence of hard predicates
and the existence of good pseudorandom generators.
The construction of Impagliazzo and Wigderson
goes through three phases of ``hardness amplification''
(a multivariate polynomial encoding, a first derandomized
XOR Lemma, and a second derandomized XOR Lemma) that are composed
with the Nisan-Wigderson generator. In this paper we present
two different approaches to proving of the main result of
Impagliazzo and Wigderson. In developing each approach, we
introduce new techniques and prove new results that could be
useful in future improvements and/or applications of
hardness-randomness trade-offs.
Our first result is that when (a modified version of) the
Nisan-Wigderson generator construction is applied with a
``mildly'' hard predicate, the result is a generator that
produces a distribution indistinguishable from having large
min-entropy. An extractor can then be used to produce a
distribution computationally indistinguishable from uniform.
This is the first construction of a pseudorandom generator
that works with a mildly hard predicate without doing
hardness amplification.
We then show that in the Impagliazzo--Wigderson construction
only the first hardness-amplification phase (encoding with
multivariate polynomial) is necessary, since it already
gives the required average-case hardness. We prove this
result by (i) establishing a connection between the
hardness-amplification problem and a list-decoding problem
for error correcting codes based on multivariate polynomials;
and (ii) presenting a list-decoding algorithm that improves
and simplifies a previous one by Arora and Sudan~\cite{AroraSu97}.
Thu, 17 Dec 1998 09:46:59 +0200https://eccc.weizmann.ac.il/report/1998/074