Pseudorandom Bit Generators That Fool Modular Sums

  • Authors:
  • Shachar Lovett;Omer Reingold;Luca Trevisan;Salil Vadhan

  • Affiliations:
  • Department of Computer Science, Weizmann Institute of Science, Rehovot, Israel 76100;Department of Computer Science, Weizmann Institute of Science, Rehovot, Israel 76100;Computer Science Division, University of California, Berkeley, USA;School of Engineering and Applied Science, Harvard University, Cambridge 02138

  • Venue:
  • APPROX '09 / RANDOM '09 Proceedings of the 12th International Workshop and 13th International Workshop on Approximation, Randomization, and Combinatorial Optimization. Algorithms and Techniques
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

We consider the following problem: for given n ,M , produce a sequence X 1 ,X 2 ,...,X n of bits that fools every linear test modulo M . We present two constructions of generators for such sequences. For every constant prime power M , the first construction has seed length O M (log(n /*** )), which is optimal up to the hidden constant. (A similar construction was independently discovered by Meka and Zuckerman [MZ]). The second construction works for every M ,n , and has seed length O (logn + log(M /*** )log(M log(1/*** ))). The problem we study is a generalization of the problem of constructing small bias distributions [NN], which are solutions to the M = 2 case. We note that even for the case M = 3 the best previously known constructions were generators fooling general bounded-space computations, and required O (log2 n ) seed length. For our first construction, we show how to employ recently constructed generators for sequences of elements of that fool small-degree polynomials (modulo M ). The most interesting technical component of our second construction is a variant of the derandomized graph squaring operation of [RV]. Our generalization handles a product of two distinct graphs with distinct bounds on their expansion. This is then used to produce pseudorandom-walks where each step is taken on a different regular directed graph (rather than pseudorandom walks on a single regular directed graph as in [RTV, RV]).