Weizmann Logo
ECCC
Electronic Colloquium on Computational Complexity

Under the auspices of the Computational Complexity Foundation (CCF)

Login | Register | Classic Style



REPORTS > DETAIL:

Revision(s):

Revision #5 to TR26-130 | 7th August 2026 13:52

Optimal Bitwise Pseudorandom Generators for Modular Sums Modulo Every Fixed Integer

RSS-Feed




Revision #5
Authors: Gonen Krak
Accepted on: 7th August 2026 13:52
Downloads: 67
Keywords: 


Abstract:

We study pseudorandom bit generators for Boolean linear sums modulo a fixed
integer $M$. A source $X \in \{0,1\}^n$ succeeds with error
$\varepsilon$ if, for every $a \in \mathbb{Z}_M^n$, the residue
\[
\sum_{i=1}^n a_i X_i \pmod M
\]
is $\varepsilon$-close in statistical distance to the corresponding residue
under independent uniform bits. Lovett, Reingold, Trevisan, and Vadhan obtained
the optimal seed length for prime-power moduli. We prove the same bound for
every fixed modulus:
\[
O_M\left(\log n + \log \frac{1}{\varepsilon}\right).
\]

The proof builds the generator in stages. It keeps two quantities separate:
the prime field $\mathbb{F}_p$ containing the generator's output, and the
modulus $m$ used by the test. A state $(p,m)$ means that we have a PRG
on $\mathbb{F}_p^n$ that fools every modulus-$m$ phase whose coordinates
contribute separately.

We use two steps to move between states. The first step,
$\mathrm{LIFT}_p$, changes the modulus from $m$ to $pm$. The second
step, $\mathrm{TRANSFER}_{r \to p}$, changes the alphabet from
$\mathbb{F}_r$ to a smaller field $\mathbb{F}_p$.

Starting from the trivial modulus $1$, we process the prime factors of $M$
until we reach the Boolean state $(2,M)$.



Changes to previous version:

Improved Section 2 Explanation


Revision #4 to TR26-130 | 7th August 2026 12:40

Optimal Bitwise Pseudorandom Generators for Modular Sums Modulo Every Fixed Integer





Revision #4
Authors: Gonen Krak
Accepted on: 7th August 2026 12:40
Downloads: 31
Keywords: 


Abstract:

We study pseudorandom bit generators for Boolean linear sums modulo a fixed
integer $M$. A source $X \in \{0,1\}^n$ succeeds with error
$\varepsilon$ if, for every $a \in \mathbb{Z}_M^n$, the residue
\[
\sum_{i=1}^n a_i X_i \pmod M
\]
is $\varepsilon$-close in statistical distance to the corresponding residue
under independent uniform bits. Lovett, Reingold, Trevisan, and Vadhan obtained
the optimal seed length for prime-power moduli. We prove the same bound for
every fixed modulus:
\[
O_M\left(\log n + \log \frac{1}{\varepsilon}\right).
\]

The proof builds the generator in stages. It keeps two quantities separate:
the prime field $\mathbb{F}_p$ containing the generator's output, and the
modulus $m$ used by the test. A state $(p,m)$ means that we have a PRG
on $\mathbb{F}_p^n$ that fools every modulus-$m$ phase whose coordinates
contribute separately.

We use two steps to move between states. The first step,
$\mathrm{LIFT}_p$, changes the modulus from $m$ to $pm$. The second
step, $\mathrm{TRANSFER}_{r \to p}$, changes the alphabet from
$\mathbb{F}_r$ to a smaller field $\mathbb{F}_p$.

Starting from the trivial modulus $1$, we process the prime factors of $M$
until we reach the Boolean state $(2,M)$.



Changes to previous version:

Rewrote several lemmas to be easier to understand


Revision #3 to TR26-130 | 5th August 2026 09:03

Optimal Bitwise Pseudorandom Generators for Modular Sums Modulo Every Fixed Integer





Revision #3
Authors: Gonen Krak
Accepted on: 5th August 2026 09:03
Downloads: 82
Keywords: 


Abstract:

We study pseudorandom bit generators for Boolean linear sums modulo a fixed
integer $M$. A source $X \in \{0,1\}^n$ succeeds with error
$\varepsilon$ if, for every $a \in \mathbb{Z}_M^n$, the residue
\[
\sum_{i=1}^n a_i X_i \pmod M
\]
is $\varepsilon$-close in statistical distance to the corresponding residue
under independent uniform bits. Lovett, Reingold, Trevisan, and Vadhan obtained
the optimal seed length for prime-power moduli. We prove the same bound for
every fixed modulus:
\[
O_M\left(\log n + \log \frac{1}{\varepsilon}\right).
\]

The proof builds the generator in stages. It keeps two quantities separate:
the prime field $\mathbb{F}_p$ containing the generator's output, and the
modulus $m$ used by the test. A state $(p,m)$ means that we have a PRG
on $\mathbb{F}_p^n$ that fools every modulus-$m$ phase whose coordinates
contribute separately.

We use two steps to move between states. The first step,
$\mathrm{LIFT}_p$, changes the modulus from $m$ to $pm$. The second
step, $\mathrm{TRANSFER}_{r \to p}$, changes the alphabet from
$\mathbb{F}_r$ to a smaller field $\mathbb{F}_p$.

Starting from the trivial modulus $1$, we process the prime factors of $M$
until we reach the Boolean state $(2,M)$.



Changes to previous version:

Fixed title


Revision #2 to TR26-130 | 5th August 2026 08:54

Optimal Bitwise Pseudorandom Generators for Modular Sums Modulo $2^{t}\cdot p^{k}$





Revision #2
Authors: Gonen Krak
Accepted on: 5th August 2026 08:54
Downloads: 36
Keywords: 


Abstract:

We study pseudorandom bit generators for Boolean linear sums modulo a fixed
integer $M$. A source $X \in \{0,1\}^n$ succeeds with error
$\varepsilon$ if, for every $a \in \mathbb{Z}_M^n$, the residue
\[
\sum_{i=1}^n a_i X_i \pmod M
\]
is $\varepsilon$-close in statistical distance to the corresponding residue
under independent uniform bits. Lovett, Reingold, Trevisan, and Vadhan obtained
the optimal seed length for prime-power moduli. We prove the same bound for
every fixed modulus:
\[
O_M\left(\log n + \log \frac{1}{\varepsilon}\right).
\]

The proof builds the generator in stages. It keeps two quantities separate:
the prime field $\mathbb{F}_p$ containing the generator's output, and the
modulus $m$ used by the test. A state $(p,m)$ means that we have a PRG
on $\mathbb{F}_p^n$ that fools every modulus-$m$ phase whose coordinates
contribute separately.

We use two steps to move between states. The first step,
$\mathrm{LIFT}_p$, changes the modulus from $m$ to $pm$. The second
step, $\mathrm{TRANSFER}_{r \to p}$, changes the alphabet from
$\mathbb{F}_r$ to a smaller field $\mathbb{F}_p$.

Starting from the trivial modulus $1$, we process the prime factors of $M$
until we reach the Boolean state $(2,M)$.



Changes to previous version:

Improved proof structure, readability, terminology and found simpler proofs for several lemmas. The proof still involves quite heavy notation, but this seems intrinsic to the current proof ideas. New revisions will be made upon received presentation-related feedback or simplification ideas.


Revision #1 to TR26-130 | 3rd August 2026 23:32

Optimal Bitwise Pseudorandom Generators for Modular Sums Modulo Every Fixed Integer





Revision #1
Authors: Gonen Krak
Accepted on: 3rd August 2026 23:32
Downloads: 79
Keywords: 


Abstract:

We study pseudorandom bit generators for Boolean linear sums modulo a fixed
integer $M$. A distribution $X\in\{0,1\}^n$ $\varepsilon$-fools these tests if, for
every $a\in\mathbb{Z}_M^n$, the distribution of
\[
\sum_{i=1}^n a_iX_i \pmod M
\]
is $\varepsilon$-close in statistical distance to the corresponding distribution
under independent uniform bits.

Lovett, Reingold, Trevisan, and Vadhan constructed generators with optimal
seed length for every fixed prime-power modulus. We remove the restriction to
prime powers: for \emph{every} fixed modulus $M\ge2$ we give an explicit
generator with seed length
\[
O_M\!\left(\log n+\log\frac{1}{\varepsilon}\right),
\]
which is optimal up to the constant depending on $M$.

The proof rests on decoupling two parameters that previous arguments had tied
together: the prime alphabet over which the pseudorandom source is defined,
and the modulus of the test. We work with \emph{local phase classes}, which
are closed under arbitrary reparameterisation of each coordinate, and we show
that the construction can move downward between prime alphabets. Two operations
suffice: over the alphabet $\F_p$, taking $p$ multiplicative derivatives
removes one factor of $p$ from the modulus, which lets a sequence of $p$
small-bias masks insert that factor; and any surjection $\F_r\to\F_p$, combined with one mask,
transports a generator to a smaller alphabet. Walking the prime factors of $M$
in decreasing order of alphabet assembles the generator, ending over $\F_2$.
The only imported pseudorandomness primitive is explicit small bias over fixed
prime fields.



Changes to previous version:

Revision 2 Update: Extended the result to every fixed modulus (M) by combining the core proof idea with a new alphabet-transfer reduction.


Paper:

TR26-130 | 1st August 2026 16:54

Optimal Bitwise Pseudorandom Generators for Modular Sums Modulo $2^{t}\cdot p^{k}$





TR26-130
Authors: Gonen Krak
Publication: 1st August 2026 17:08
Downloads: 161
Keywords: 


Abstract:

We study pseudorandom bit generators for Boolean linear sums modulo a fixed
integer $M$. A distribution $X\in\{0,1\}^n$ $\varepsilon$-fools these tests if, for
every $a\in\mathbb{Z}_M^n$, the distribution of
\[
\sum_{i=1}^n a_iX_i \pmod M
\]
is $\varepsilon$-close in statistical distance to the corresponding distribution
under independent uniform bits.

Lovett, Reingold, Trevisan, and Vadhan constructed generators with optimal
seed length for every fixed prime-power modulus. We extend this result to
every fixed modulus of the form
\[
M=2^{t}\cdot p^{k},
\]
where $t,k\ge 0$ and $p$ an odd prime. Specifically, we give an
explicit generator with seed length
\[
O_M\!\left(\log n+\log\frac{1}{\varepsilon}\right),
\]
which is optimal up to the constant depending on $M$.

Our main contribution is a modulus-doubling reduction that transforms any
generator fooling Boolean linear sums modulo $m$ into one fooling such sums
modulo $2m$, while preserving the optimal asymptotic seed length.



ISSN 1433-8092 | Imprint