Pseudorandom generators without the XOR Lemma

被引:207
作者
Sudan, M
Trevisan, L
Vadhan, S
机构
[1] MIT, Comp Sci Lab, Cambridge, MA 02141 USA
[2] Columbia Univ, Dept Comp Sci, New York, NY 10027 USA
[3] Harvard Univ, Div Engn & Appl Sci, Cambridge, MA 02138 USA
关键词
pseudorandom generators; extractors; polynomial reconstruction; list decoding;
D O I
10.1006/jcss.2000.1730
中图分类号
TP3 [计算技术、计算机技术];
学科分类号
0812 ;
摘要
R. Impagliazzo and A. Wigderson (1997, in "Proceedings of the Twenty-ninth Annual ACM Symposium on Theory of Computing," pp. 220-229) have recently shown that if there exists a decision problem solvable in time 20(O(n)) and having circuit complexity 2(Omega (n)) (for all bnt finitely many n) then P = BPP. This result is a culmination of a series of works showing connections between the existence of hard predicates and the existence of good pseudorandom generators. The construction of Impagliazzo and Wigderson goes through three phases of "hardness amplification" (a multivariate polynomial encoding,a first derandomized XOR Lemma, and a second derandomized XOR Lemma) that are composed with a pseudorandom generator construction of N. Nisan and A. Wigderson ( 1999, J. Comput. System Sci. 49, 149-167). In this paper we present two different approaches to proving the main result of Impagliazzo and Wigderson. In developing each approach, we introduce new techniques and prove new results that could be useful in future improvements and/or applications of hardness-randomness trade-offs. Our first result is that when (a modified version of) the Nisan-Wigderson generator construction is applied with a "mildly" hard predicate, the result is a generator that produces a distribution indistinguishable from having large min-entropy. An extractor can then be used to produce a distribution computationally indistinguishable from uniform. This is the first construction of a pseudorandom generator that works with a mildly hard predicate without doing hardness amplification. We then show that in the Impagliazzo-Wigderson construction only the first hardness-amplification phase (encoding with multivariate polynomial) is necessary, since it already gives the required average-case hardness. We prove this result by (i) establishing a connection between the hardness-amplification problem and a list-decoding problem for error-correcting codes; and (ii) presenting a list-decoding algorithm for error-correcting codes based on multivariate polynomials that improves and simplifies a previous one by S. Arora and M. Sudan (1997, in "Proceedings of the Twenty-Ninth Annual ACM Symposium on Theory of Computing," pp. 485-495). (C) 2001 Academic Press.
引用
收藏
页码:236 / 266
页数:31
相关论文
共 54 条
[1]  
ADLEMAN L, 1978, P 19 IEEE S FDN COMP, P75
[2]  
Andreev AE, 1997, LECT NOTES COMPUT SC, V1256, P177
[3]  
[Anonymous], 1982, 23 ANN S FDN COMPUTE, DOI DOI 10.1109/SFCS.1982.45
[4]  
[Anonymous], ALGORITHMS COMBINATO
[5]  
Ar S, 1998, SIAM J COMPUT, V28, P488, DOI 10.1137/S0097539796297577
[6]  
ARORA S, 1997, P 29 ANN ACM S THEOR, P485
[7]  
ARVIND V, 1997, LECT NOTES COMPUTER, V134, P235
[8]  
Babai L., 1993, Computational Complexity, V3, P307, DOI 10.1007/BF01275486
[9]  
BEAVER D, 1990, LECT NOTES COMPUT SC, V415, P37
[10]  
BENNETT CH, 1986, LECT NOTES COMPUT SC, V218, P468