A compression algorithm for AC0[p] circuits using Certifying ...

92
A compression algorithm for AC 0 [p] circuits using Certifying Polynomials Srikanth Srinivasan Department of Mathematics, IIT Bombay. September 30, 2015 S. Compression for AC 0 (p) September 30, 2015 1 / 27

Transcript of A compression algorithm for AC0[p] circuits using Certifying ...

Page 1: A compression algorithm for AC0[p] circuits using Certifying ...

A compression algorithm for AC0[p] circuits usingCertifying Polynomials

Srikanth SrinivasanDepartment of Mathematics, IIT Bombay.

September 30, 2015

S. Compression for AC0(p) September 30, 2015 1 / 27

Page 2: A compression algorithm for AC0[p] circuits using Certifying ...

Meta-algorithmic problems

Meta-algorithmic problems: Problems that take as input or outputthe description of a computational model.

Example 1: Circuit SAT. Input: Boolean Circuit C, Qn: Is fC ≡ 0?

Example 2: PIT. Input: Algebraic circuit C, Qn: Is PC ≡ 0?

Example 3: Minimum Circuit Size problem (MCSP).I Input: f : {0, 1}n → {0, 1}, k.I Qn: Does f have a circuit of size at most k?

S. Compression for AC0(p) September 30, 2015 2 / 27

Page 3: A compression algorithm for AC0[p] circuits using Certifying ...

Meta-algorithmic problems

Meta-algorithmic problems: Problems that take as input or outputthe description of a computational model.

Example 1: Circuit SAT. Input: Boolean Circuit C, Qn: Is fC ≡ 0?

Example 2: PIT. Input: Algebraic circuit C, Qn: Is PC ≡ 0?

Example 3: Minimum Circuit Size problem (MCSP).I Input: f : {0, 1}n → {0, 1}, k.I Qn: Does f have a circuit of size at most k?

S. Compression for AC0(p) September 30, 2015 2 / 27

Page 4: A compression algorithm for AC0[p] circuits using Certifying ...

Meta-algorithmic problems

Meta-algorithmic problems: Problems that take as input or outputthe description of a computational model.

Example 1: Circuit SAT. Input: Boolean Circuit C, Qn: Is fC ≡ 0?

Example 2: PIT. Input: Algebraic circuit C, Qn: Is PC ≡ 0?

Example 3: Minimum Circuit Size problem (MCSP).I Input: f : {0, 1}n → {0, 1}, k.I Qn: Does f have a circuit of size at most k?

S. Compression for AC0(p) September 30, 2015 2 / 27

Page 5: A compression algorithm for AC0[p] circuits using Certifying ...

Meta-algorithmic problems

Meta-algorithmic problems: Problems that take as input or outputthe description of a computational model.

Example 1: Circuit SAT. Input: Boolean Circuit C, Qn: Is fC ≡ 0?

Example 2: PIT. Input: Algebraic circuit C, Qn: Is PC ≡ 0?

Example 3: Minimum Circuit Size problem (MCSP).

I Input: f : {0, 1}n → {0, 1}, k.I Qn: Does f have a circuit of size at most k?

S. Compression for AC0(p) September 30, 2015 2 / 27

Page 6: A compression algorithm for AC0[p] circuits using Certifying ...

Meta-algorithmic problems

Meta-algorithmic problems: Problems that take as input or outputthe description of a computational model.

Example 1: Circuit SAT. Input: Boolean Circuit C, Qn: Is fC ≡ 0?

Example 2: PIT. Input: Algebraic circuit C, Qn: Is PC ≡ 0?

Example 3: Minimum Circuit Size problem (MCSP).I Input: f : {0, 1}n → {0, 1}, k.I Qn: Does f have a circuit of size at most k?

S. Compression for AC0(p) September 30, 2015 2 / 27

Page 7: A compression algorithm for AC0[p] circuits using Certifying ...

Compression Algorithm for a circuit class C

C: a class of circuits (AC0, AC0[p], etc.).

Compression problem for C (Chen, Kabanets, Kolokolova, Shaltiel,Zuckerman (2014))

I Input: f : {0, 1}n → {0, 1} with small Boolean circuits from C.I Qn: Construct a non-trivially small general circuit for f .

Non-trivially small: size � 2n/n.

(Chen et al.) Compression algorithms imply circuit lower bounds.

S. Compression for AC0(p) September 30, 2015 3 / 27

Page 8: A compression algorithm for AC0[p] circuits using Certifying ...

Compression Algorithm for a circuit class C

C: a class of circuits (AC0, AC0[p], etc.).

Compression problem for C (Chen, Kabanets, Kolokolova, Shaltiel,Zuckerman (2014))

I Input: f : {0, 1}n → {0, 1} with small Boolean circuits from C.I Qn: Construct a non-trivially small general circuit for f .

Non-trivially small: size � 2n/n.

(Chen et al.) Compression algorithms imply circuit lower bounds.

S. Compression for AC0(p) September 30, 2015 3 / 27

Page 9: A compression algorithm for AC0[p] circuits using Certifying ...

Compression Algorithm for a circuit class C

C: a class of circuits (AC0, AC0[p], etc.).

Compression problem for C (Chen, Kabanets, Kolokolova, Shaltiel,Zuckerman (2014))

I Input: f : {0, 1}n → {0, 1} with small Boolean circuits from C.

I Qn: Construct a non-trivially small general circuit for f .

Non-trivially small: size � 2n/n.

(Chen et al.) Compression algorithms imply circuit lower bounds.

S. Compression for AC0(p) September 30, 2015 3 / 27

Page 10: A compression algorithm for AC0[p] circuits using Certifying ...

Compression Algorithm for a circuit class C

C: a class of circuits (AC0, AC0[p], etc.).

Compression problem for C (Chen, Kabanets, Kolokolova, Shaltiel,Zuckerman (2014))

I Input: f : {0, 1}n → {0, 1} with small Boolean circuits from C.I Qn: Construct a non-trivially small general circuit for f .

Non-trivially small: size � 2n/n.

(Chen et al.) Compression algorithms imply circuit lower bounds.

S. Compression for AC0(p) September 30, 2015 3 / 27

Page 11: A compression algorithm for AC0[p] circuits using Certifying ...

Compression Algorithm for a circuit class C

C: a class of circuits (AC0, AC0[p], etc.).

Compression problem for C (Chen, Kabanets, Kolokolova, Shaltiel,Zuckerman (2014))

I Input: f : {0, 1}n → {0, 1} with small Boolean circuits from C.I Qn: Construct a non-trivially small general circuit for f .

Non-trivially small: size � 2n/n.

(Chen et al.) Compression algorithms imply circuit lower bounds.

S. Compression for AC0(p) September 30, 2015 3 / 27

Page 12: A compression algorithm for AC0[p] circuits using Certifying ...

Compression Algorithm for a circuit class C

C: a class of circuits (AC0, AC0[p], etc.).

Compression problem for C (Chen, Kabanets, Kolokolova, Shaltiel,Zuckerman (2014))

I Input: f : {0, 1}n → {0, 1} with small Boolean circuits from C.I Qn: Construct a non-trivially small general circuit for f .

Non-trivially small: size � 2n/n.

(Chen et al.) Compression algorithms imply circuit lower bounds.

S. Compression for AC0(p) September 30, 2015 3 / 27

Page 13: A compression algorithm for AC0[p] circuits using Certifying ...

Compression problem for DNFs

Input: f : {0, 1}n → {0, 1} with DNFs of size s.

Qn: Construct a non-trivially small DNF for f .

∧ ∧ ∧

x1 x5 x3 x7 x5 x65 x2

· · ·

≤ s

· · · · · · · · ·

f(x)

S. Compression for AC0(p) September 30, 2015 4 / 27

Page 14: A compression algorithm for AC0[p] circuits using Certifying ...

Compression problem for DNFs

DNF of size s: a union of s subcubes.

Finding optimal sized DNF for f :Covering f with subcubes in f−1(1).

Number of subcubes: 3n.

(Lovasz 1975) O(n)-approximation intime 2O(n).

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 5 / 27

Page 15: A compression algorithm for AC0[p] circuits using Certifying ...

Compression problem for DNFs

DNF of size s: a union of s subcubes.

Finding optimal sized DNF for f :Covering f with subcubes in f−1(1).

Number of subcubes: 3n.

(Lovasz 1975) O(n)-approximation intime 2O(n).

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 5 / 27

Page 16: A compression algorithm for AC0[p] circuits using Certifying ...

Compression problem for DNFs

DNF of size s: a union of s subcubes.

Finding optimal sized DNF for f :Covering f with subcubes in f−1(1).

Number of subcubes: 3n.

(Lovasz 1975) O(n)-approximation intime 2O(n).

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 5 / 27

Page 17: A compression algorithm for AC0[p] circuits using Certifying ...

Compression problem for DNFs

DNF of size s: a union of s subcubes.

Finding optimal sized DNF for f :Covering f with subcubes in f−1(1).

Number of subcubes: 3n.

(Lovasz 1975) O(n)-approximation intime 2O(n).

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 5 / 27

Page 18: A compression algorithm for AC0[p] circuits using Certifying ...

Compression problem for DNFs

DNF of size s: a union of s subcubes.

Finding optimal sized DNF for f :Covering f with subcubes in f−1(1).

Number of subcubes: 3n.

(Lovasz 1975) O(n)-approximation intime 2O(n).

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 5 / 27

Page 19: A compression algorithm for AC0[p] circuits using Certifying ...

Compression problem for DNFs

Input: f : {0, 1}n → {0, 1} with DNFs of size s.

Qn: Construct a non-trivially small DNF for f .

Say s = 2n−t = 2n/superpoly(n).

Can obtain a DNF of size 2n−Θ(t).

S. Compression for AC0(p) September 30, 2015 6 / 27

Page 20: A compression algorithm for AC0[p] circuits using Certifying ...

Compression problem for DNFs

Input: f : {0, 1}n → {0, 1} with DNFs of size s.

Qn: Construct a non-trivially small DNF for f .

Say s = 2n−t = 2n/superpoly(n).

Can obtain a DNF of size 2n−Θ(t).

S. Compression for AC0(p) September 30, 2015 6 / 27

Page 21: A compression algorithm for AC0[p] circuits using Certifying ...

Compression algorithms for other classes of circuits (Chenet al. (2014))

Input: f : {0, 1}n → {0, 1} with C-circuits of size s.

Qn: Construct a non-trivially small circuit for f .

Say C-circuits of size s ⇒ DNFs of size 2n−t.

Can obtain a DNF of size 2n−Θ(t).

S. Compression for AC0(p) September 30, 2015 7 / 27

Page 22: A compression algorithm for AC0[p] circuits using Certifying ...

Compression algorithms for other classes of circuits (Chenet al. (2014))

Input: f : {0, 1}n → {0, 1} with C-circuits of size s.

Qn: Construct a non-trivially small circuit for f .

Say C-circuits of size s ⇒ DNFs of size 2n−t.

Can obtain a DNF of size 2n−Θ(t).

S. Compression for AC0(p) September 30, 2015 7 / 27

Page 23: A compression algorithm for AC0[p] circuits using Certifying ...

Compression algorithms for other classes of circuits (Chenet al. (2014))

Gives non-trivial compression algorithms for:

AC0 circuits of size 2no(1)

(Impagliazzo-Matthews-Paturi, Hastad).

depth d = O(1)

∧xi1 xis

fan-in unbounded

...

· · ·

S. Compression for AC0(p) September 30, 2015 8 / 27

Page 24: A compression algorithm for AC0[p] circuits using Certifying ...

Compression algorithms for other classes of circuits (Chenet al. (2014))

Gives non-trivial compression algorithms for:

AC0 circuits of size 2no(1)

(Impagliazzo-Matthews-Paturi, Hastad).

depth d = O(1)

∧xi1 xis

fan-in unbounded

...

· · ·

S. Compression for AC0(p) September 30, 2015 8 / 27

Page 25: A compression algorithm for AC0[p] circuits using Certifying ...

Compression algorithms for other classes of circuits (Chenet al. (2014))

Gives non-trivial compression algorithms for:

AC0 circuits of size 2no(1)

(Impagliazzo-Matthews-Paturi, Hastad).

Theorem (Chen et al. (2014))

Say f has an AC0 circuit of size s. Then the algorithm outputs a circuit ofsize 2n/M , where M = exp(n/(C log(s/n))d−1).

DeMorgan formulas of size � n1.5. (Subbotovskaya, Santhanam)

Further algorithms using memoization.

General formulas, branching programs.

S. Compression for AC0(p) September 30, 2015 9 / 27

Page 26: A compression algorithm for AC0[p] circuits using Certifying ...

Compression algorithms for other classes of circuits (Chenet al. (2014))

Gives non-trivial compression algorithms for:

AC0 circuits of size 2no(1)

(Impagliazzo-Matthews-Paturi, Hastad).

Theorem (Chen et al. (2014))

Say f has an AC0 circuit of size s. Then the algorithm outputs a circuit ofsize 2n/M , where M = exp(n/(C log(s/n))d−1).

DeMorgan formulas of size � n1.5. (Subbotovskaya, Santhanam)

Further algorithms using memoization.

General formulas, branching programs.

S. Compression for AC0(p) September 30, 2015 9 / 27

Page 27: A compression algorithm for AC0[p] circuits using Certifying ...

Compression algorithms for other classes of circuits (Chenet al. (2014))

Gives non-trivial compression algorithms for:

AC0 circuits of size 2no(1)

(Impagliazzo-Matthews-Paturi, Hastad).

Theorem (Chen et al. (2014))

Say f has an AC0 circuit of size s. Then the algorithm outputs a circuit ofsize 2n/M , where M = exp(n/(C log(s/n))d−1).

DeMorgan formulas of size � n1.5. (Subbotovskaya, Santhanam)

Further algorithms using memoization.

General formulas, branching programs.

S. Compression for AC0(p) September 30, 2015 9 / 27

Page 28: A compression algorithm for AC0[p] circuits using Certifying ...

Compression algorithms for other classes of circuits (Chenet al. (2014))

Gives non-trivial compression algorithms for:

AC0 circuits of size 2no(1)

(Impagliazzo-Matthews-Paturi, Hastad).

Theorem (Chen et al. (2014))

Say f has an AC0 circuit of size s. Then the algorithm outputs a circuit ofsize 2n/M , where M = exp(n/(C log(s/n))d−1).

DeMorgan formulas of size � n1.5. (Subbotovskaya, Santhanam)

Further algorithms using memoization.

General formulas, branching programs.

S. Compression for AC0(p) September 30, 2015 9 / 27

Page 29: A compression algorithm for AC0[p] circuits using Certifying ...

More general classes of circuits

Compression algorithms for more powerful classes of circuits?

Natural next question: AC0[2]: AC0 augmented with ⊕ gates.

depth d = O(1)

∧xi1 xis

fan-in unbounded

...

· · ·

S. Compression for AC0(p) September 30, 2015 10 / 27

Page 30: A compression algorithm for AC0[p] circuits using Certifying ...

More general classes of circuits

Compression algorithms for more powerful classes of circuits?

Natural next question: AC0[2]: AC0 augmented with ⊕ gates.

depth d = O(1)

∧xi1 xis

fan-in unbounded

...

· · ·

S. Compression for AC0(p) September 30, 2015 10 / 27

Page 31: A compression algorithm for AC0[p] circuits using Certifying ...

Compression algorithms for AC0[p] circuits

Theorem (Chen et al. (2014))

Say f has an AC0 circuit of size s. Then we can find in poly(2n) time acircuit of size 2n/M , where M = exp(n/(C log(s/n))d−1).

Theorem (This work)

Say f has an AC0[2] circuit of size s. Then we can find in poly(2n) time acircuit of size 2n/M , where M = exp(n/(C log s)2(d−1)).

Also works for AC0[p] (p prime).

S. Compression for AC0(p) September 30, 2015 11 / 27

Page 32: A compression algorithm for AC0[p] circuits using Certifying ...

Compression algorithms for AC0[p] circuits

Theorem (Chen et al. (2014))

Say f has an AC0 circuit of size s. Then we can find in poly(2n) time acircuit of size 2n/M , where M = exp(n/(C log(s/n))d−1).

Theorem (This work)

Say f has an AC0[2] circuit of size s. Then we can find in poly(2n) time acircuit of size 2n/M , where M = exp(n/(C log s)2(d−1)).

Also works for AC0[p] (p prime).

S. Compression for AC0(p) September 30, 2015 11 / 27

Page 33: A compression algorithm for AC0[p] circuits using Certifying ...

Compression algorithms for AC0[p] circuits

Theorem (Chen et al. (2014))

Say f has an AC0 circuit of size s. Then we can find in poly(2n) time acircuit of size 2n/M , where M = exp(n/(C log(s/n))d−1).

Theorem (This work)

Say f has an AC0[2] circuit of size s. Then we can find in poly(2n) time acircuit of size 2n/M , where M = exp(n/(C log s)2(d−1)).

Also works for AC0[p] (p prime).

S. Compression for AC0(p) September 30, 2015 11 / 27

Page 34: A compression algorithm for AC0[p] circuits using Certifying ...

Polynomials and polynomial approximations

P (x1, . . . , xn) ∈ F2[x1, . . . , xn]. Multilinear.

E.g.: x1x2 + x3 + x1x5.

Special kind of depth-2 AC0[2] circuit.

Degree D ⇒ size∑

i≤D(ni

)=(

n≤D).

Say that P ε-approximates f if Prx∈{0,1}n [P (x) 6= f(x)] ≤ ε.

∧ ∧ ∧x1 x5 x3 x7 x5 x6 x2

· · ·

· · · · · · · · ·

S. Compression for AC0(p) September 30, 2015 12 / 27

Page 35: A compression algorithm for AC0[p] circuits using Certifying ...

Polynomials and polynomial approximations

P (x1, . . . , xn) ∈ F2[x1, . . . , xn]. Multilinear.

E.g.: x1x2 + x3 + x1x5.

Special kind of depth-2 AC0[2] circuit.

Degree D ⇒ size∑

i≤D(ni

)=(

n≤D).

Say that P ε-approximates f if Prx∈{0,1}n [P (x) 6= f(x)] ≤ ε.

∧ ∧ ∧x1 x5 x3 x7 x5 x6 x2

· · ·

· · · · · · · · ·

S. Compression for AC0(p) September 30, 2015 12 / 27

Page 36: A compression algorithm for AC0[p] circuits using Certifying ...

Polynomials and polynomial approximations

P (x1, . . . , xn) ∈ F2[x1, . . . , xn]. Multilinear.

E.g.: x1x2 + x3 + x1x5.

Special kind of depth-2 AC0[2] circuit.

Degree D ⇒ size∑

i≤D(ni

)=(

n≤D).

Say that P ε-approximates f if Prx∈{0,1}n [P (x) 6= f(x)] ≤ ε.

∧ ∧ ∧x1 x5 x3 x7 x5 x6 x2

· · ·

· · · · · · · · ·

S. Compression for AC0(p) September 30, 2015 12 / 27

Page 37: A compression algorithm for AC0[p] circuits using Certifying ...

Polynomials and polynomial approximations

P (x1, . . . , xn) ∈ F2[x1, . . . , xn]. Multilinear.

E.g.: x1x2 + x3 + x1x5.

Special kind of depth-2 AC0[2] circuit.

Degree D ⇒ size∑

i≤D(ni

)=(

n≤D).

Say that P ε-approximates f if Prx∈{0,1}n [P (x) 6= f(x)] ≤ ε.

∧ ∧ ∧x1 x5 x3 x7 x5 x6 x2

· · ·

· · · · · · · · ·

S. Compression for AC0(p) September 30, 2015 12 / 27

Page 38: A compression algorithm for AC0[p] circuits using Certifying ...

Polynomials and polynomial approximations

P (x1, . . . , xn) ∈ F2[x1, . . . , xn]. Multilinear.

E.g.: x1x2 + x3 + x1x5.

Special kind of depth-2 AC0[2] circuit.

Degree D ⇒ size∑

i≤D(ni

)=(

n≤D).

Say that P ε-approximates f if Prx∈{0,1}n [P (x) 6= f(x)] ≤ ε.

∧ ∧ ∧x1 x5 x3 x7 x5 x6 x2

· · ·

· · · · · · · · ·

S. Compression for AC0(p) September 30, 2015 12 / 27

Page 39: A compression algorithm for AC0[p] circuits using Certifying ...

Razborov approximations to AC0[2] circuits

(Razborov 1987): Can ε-approximatesmall AC0[2] circuits by low-degreepolynomials.

Circuit has size nO(1) ⇒ degree ofpolynomial is O(log n)d−1 log(1/ε).

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 13 / 27

Page 40: A compression algorithm for AC0[p] circuits using Certifying ...

Razborov approximations to AC0[2] circuits

(Razborov 1987): Can ε-approximatesmall AC0[2] circuits by low-degreepolynomials.

Circuit has size nO(1) ⇒ degree ofpolynomial is O(log n)d−1 log(1/ε).

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 13 / 27

Page 41: A compression algorithm for AC0[p] circuits using Certifying ...

Natural approach to compression problem

Given f : {0, 1}n → {0, 1} with AC0[2]circuits of size s = nO(1).

Find low-degree ε-approximation P .

Size(P ) = exp((log n)O(1) log(1/ε)).

“Fix” P at all the error points with acircuit of size ε2n.

Overall size: Size(P ) + ε2n.

Bottleneck: How to find P?

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 14 / 27

Page 42: A compression algorithm for AC0[p] circuits using Certifying ...

Natural approach to compression problem

Given f : {0, 1}n → {0, 1} with AC0[2]circuits of size s = nO(1).

Find low-degree ε-approximation P .

Size(P ) = exp((log n)O(1) log(1/ε)).

“Fix” P at all the error points with acircuit of size ε2n.

Overall size: Size(P ) + ε2n.

Bottleneck: How to find P?

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 14 / 27

Page 43: A compression algorithm for AC0[p] circuits using Certifying ...

Natural approach to compression problem

Given f : {0, 1}n → {0, 1} with AC0[2]circuits of size s = nO(1).

Find low-degree ε-approximation P .

Size(P ) = exp((log n)O(1) log(1/ε)).

“Fix” P at all the error points with acircuit of size ε2n.

Overall size: Size(P ) + ε2n.

Bottleneck: How to find P?

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 14 / 27

Page 44: A compression algorithm for AC0[p] circuits using Certifying ...

Natural approach to compression problem

Given f : {0, 1}n → {0, 1} with AC0[2]circuits of size s = nO(1).

Find low-degree ε-approximation P .

Size(P ) = exp((log n)O(1) log(1/ε)).

“Fix” P at all the error points with acircuit of size ε2n.

Overall size: Size(P ) + ε2n.

Bottleneck: How to find P?

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 14 / 27

Page 45: A compression algorithm for AC0[p] circuits using Certifying ...

Natural approach to compression problem

Given f : {0, 1}n → {0, 1} with AC0[2]circuits of size s = nO(1).

Find low-degree ε-approximation P .

Size(P ) = exp((log n)O(1) log(1/ε)).

“Fix” P at all the error points with acircuit of size ε2n.

Overall size: Size(P ) + ε2n.

Bottleneck: How to find P?

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 14 / 27

Page 46: A compression algorithm for AC0[p] circuits using Certifying ...

Natural approach to compression problem

Given f : {0, 1}n → {0, 1} with AC0[2]circuits of size s = nO(1).

Find low-degree ε-approximation P .

Size(P ) = exp((log n)O(1) log(1/ε)).

“Fix” P at all the error points with acircuit of size ε2n.

Overall size: Size(P ) + ε2n.

Bottleneck: How to find P?

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 14 / 27

Page 47: A compression algorithm for AC0[p] circuits using Certifying ...

Certifying polynomials (ABFR ’94, Green ’95)

R ∈ F2[x1, . . . , xn] is a Certifyingpolynomial for f if R(x) = 1⇒ f(x) = 1.

R 6= 0.

Also studied as Algebraic Immunity, Weakdegree.

Notion of one-sided approximation.

Any (*) function f has a certifyingpolynomial of degree at most n/2.

Gives a “local” circuit for f of size(n≤n/2

)= 2n−1.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 15 / 27

Page 48: A compression algorithm for AC0[p] circuits using Certifying ...

Certifying polynomials (ABFR ’94, Green ’95)

R ∈ F2[x1, . . . , xn] is a Certifyingpolynomial for f if R(x) = 1⇒ f(x) = 1.

R 6= 0.

Also studied as Algebraic Immunity, Weakdegree.

Notion of one-sided approximation.

Any (*) function f has a certifyingpolynomial of degree at most n/2.

Gives a “local” circuit for f of size(n≤n/2

)= 2n−1.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 15 / 27

Page 49: A compression algorithm for AC0[p] circuits using Certifying ...

Certifying polynomials (ABFR ’94, Green ’95)

R ∈ F2[x1, . . . , xn] is a Certifyingpolynomial for f if R(x) = 1⇒ f(x) = 1.

R 6= 0.

Also studied as Algebraic Immunity, Weakdegree.

Notion of one-sided approximation.

Any (*) function f has a certifyingpolynomial of degree at most n/2.

Gives a “local” circuit for f of size(n≤n/2

)= 2n−1.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 15 / 27

Page 50: A compression algorithm for AC0[p] circuits using Certifying ...

Certifying polynomials (ABFR ’94, Green ’95)

R ∈ F2[x1, . . . , xn] is a Certifyingpolynomial for f if R(x) = 1⇒ f(x) = 1.

R 6= 0.

Also studied as Algebraic Immunity, Weakdegree.

Notion of one-sided approximation.

Any (*) function f has a certifyingpolynomial of degree at most n/2.

Gives a “local” circuit for f of size(n≤n/2

)= 2n−1.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 15 / 27

Page 51: A compression algorithm for AC0[p] circuits using Certifying ...

Certifying polynomials (ABFR ’94, Green ’95)

R ∈ F2[x1, . . . , xn] is a Certifyingpolynomial for f if R(x) = 1⇒ f(x) = 1.

R 6= 0.

Also studied as Algebraic Immunity, Weakdegree.

Notion of one-sided approximation.

Any (*) function f has a certifyingpolynomial of degree at most n/2.

Gives a “local” circuit for f of size(n≤n/2

)= 2n−1.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 15 / 27

Page 52: A compression algorithm for AC0[p] circuits using Certifying ...

Certifying polynomials (ABFR ’94, Green ’95)

R ∈ F2[x1, . . . , xn] is a Certifyingpolynomial for f if R(x) = 1⇒ f(x) = 1.

R 6= 0.

Also studied as Algebraic Immunity, Weakdegree.

Notion of one-sided approximation.

Any (*) function f has a certifyingpolynomial of degree at most n/2.

Gives a “local” circuit for f of size(n≤n/2

)= 2n−1.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 15 / 27

Page 53: A compression algorithm for AC0[p] circuits using Certifying ...

Certifying polynomials

I Any function f has a certifying polynomial of degree at most n/2.I Gives a “local” circuit for f of size

(n

≤n/2

)= 2n−1.

Thm (Kopparty-S. ’12): f has AC0[2] circuit of size poly(n) ⇒certifying polynomials of degree D = n

2 −n

(logn)O(1) .

Gives a circuit of size 2n/ exp(n/(log n)O(1)).

S. Compression for AC0(p) September 30, 2015 16 / 27

Page 54: A compression algorithm for AC0[p] circuits using Certifying ...

Certifying polynomials

I Any function f has a certifying polynomial of degree at most n/2.I Gives a “local” circuit for f of size

(n

≤n/2

)= 2n−1.

Thm (Kopparty-S. ’12): f has AC0[2] circuit of size poly(n) ⇒certifying polynomials of degree D = n

2 −n

(logn)O(1) .

Gives a circuit of size 2n/ exp(n/(log n)O(1)).

S. Compression for AC0(p) September 30, 2015 16 / 27

Page 55: A compression algorithm for AC0[p] circuits using Certifying ...

Certifying polynomials

I Any function f has a certifying polynomial of degree at most n/2.I Gives a “local” circuit for f of size

(n

≤n/2

)= 2n−1.

Thm (Kopparty-S. ’12): f has AC0[2] circuit of size poly(n) ⇒certifying polynomials of degree D = n

2 −n

(logn)O(1) .

Gives a circuit of size 2n/ exp(n/(log n)O(1)).

S. Compression for AC0(p) September 30, 2015 16 / 27

Page 56: A compression algorithm for AC0[p] circuits using Certifying ...

Finding Certifying polynomials

I Thm (Kopparty-S. ’12): f has AC0[2] circuit of size poly(n) ⇒certifying polynomials of degree D = n

2 −n

(logn)O(1) .

I Gives a circuit of size 2n/ exp(n/(log n)O(1)).

Finding R =∑|S|≤D αS

∏i∈S xi.

Need R(x) = 0 for all x ∈ f−1(0).

Has solution set VD.

Need non-zero element of VD.

S. Compression for AC0(p) September 30, 2015 17 / 27

Page 57: A compression algorithm for AC0[p] circuits using Certifying ...

Finding Certifying polynomials

I Thm (Kopparty-S. ’12): f has AC0[2] circuit of size poly(n) ⇒certifying polynomials of degree D = n

2 −n

(logn)O(1) .

I Gives a circuit of size 2n/ exp(n/(log n)O(1)).

Finding R =∑|S|≤D αS

∏i∈S xi.

Need R(x) = 0 for all x ∈ f−1(0).

Has solution set VD.

Need non-zero element of VD.

S. Compression for AC0(p) September 30, 2015 17 / 27

Page 58: A compression algorithm for AC0[p] circuits using Certifying ...

Finding Certifying polynomials

I Thm (Kopparty-S. ’12): f has AC0[2] circuit of size poly(n) ⇒certifying polynomials of degree D = n

2 −n

(logn)O(1) .

I Gives a circuit of size 2n/ exp(n/(log n)O(1)).

Finding R =∑|S|≤D αS

∏i∈S xi.

Need R(x) = 0 for all x ∈ f−1(0).

Has solution set VD.

Need non-zero element of VD.

S. Compression for AC0(p) September 30, 2015 17 / 27

Page 59: A compression algorithm for AC0[p] circuits using Certifying ...

Finding Certifying polynomials

I Thm (Kopparty-S. ’12): f has AC0[2] circuit of size poly(n) ⇒certifying polynomials of degree D = n

2 −n

(logn)O(1) .

I Gives a circuit of size 2n/ exp(n/(log n)O(1)).

Finding R =∑|S|≤D αS

∏i∈S xi.

Need R(x) = 0 for all x ∈ f−1(0).

Has solution set VD.

Need non-zero element of VD.

S. Compression for AC0(p) September 30, 2015 17 / 27

Page 60: A compression algorithm for AC0[p] circuits using Certifying ...

Finding Certifying polynomials

I Thm (Kopparty-S. ’12): f has AC0[2] circuit of size poly(n) ⇒certifying polynomials of degree D = n

2 −n

(logn)O(1) .

I Gives a circuit of size 2n/ exp(n/(log n)O(1)).

Finding R =∑|S|≤D αS

∏i∈S xi.

Need R(x) = 0 for all x ∈ f−1(0).

Has solution set VD.

Need non-zero element of VD.

S. Compression for AC0(p) September 30, 2015 17 / 27

Page 61: A compression algorithm for AC0[p] circuits using Certifying ...

Using VD to compress

Each R ∈ VD covers a subset of f−1(1).

Select a few R1, . . . , Rm ∈ VD such that∨iRi = f . f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 18 / 27

Page 62: A compression algorithm for AC0[p] circuits using Certifying ...

Problems with the approach

There are points in f−1(1) that are nevercovered by R ∈ VD.

I F = {x ∈ f−1(1) | R ∈ VD ⇒ R(x) =0}.

I Need to say that F is small.

Each R ∈ VD might cover only smallsubset of f−1(1) \ F .

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 19 / 27

Page 63: A compression algorithm for AC0[p] circuits using Certifying ...

Problems with the approach

There are points in f−1(1) that are nevercovered by R ∈ VD.

I F = {x ∈ f−1(1) | R ∈ VD ⇒ R(x) =0}.

I Need to say that F is small.

Each R ∈ VD might cover only smallsubset of f−1(1) \ F .

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 19 / 27

Page 64: A compression algorithm for AC0[p] circuits using Certifying ...

Problems with the approach

There are points in f−1(1) that are nevercovered by R ∈ VD.

I F = {x ∈ f−1(1) | R ∈ VD ⇒ R(x) =0}.

I Need to say that F is small.

Each R ∈ VD might cover only smallsubset of f−1(1) \ F .

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 19 / 27

Page 65: A compression algorithm for AC0[p] circuits using Certifying ...

Handling second issue

A random R ∈ VD covers each x 6∈ Fwith probability 1

2 .

Picking R1, . . . , RO(n) ∈u VD coversf−1(1) with high probability.

Can be easily derandomized usingError-Correcting codes.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 20 / 27

Page 66: A compression algorithm for AC0[p] circuits using Certifying ...

Handling second issue

A random R ∈ VD covers each x 6∈ Fwith probability 1

2 .

Picking R1, . . . , RO(n) ∈u VD coversf−1(1) with high probability.

Can be easily derandomized usingError-Correcting codes.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 20 / 27

Page 67: A compression algorithm for AC0[p] circuits using Certifying ...

Handling second issue

A random R ∈ VD covers each x 6∈ Fwith probability 1

2 .

Picking R1, . . . , RO(n) ∈u VD coversf−1(1) with high probability.

Can be easily derandomized usingError-Correcting codes.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 20 / 27

Page 68: A compression algorithm for AC0[p] circuits using Certifying ...

Handling second issue

A random R ∈ VD covers each x 6∈ Fwith probability 1

2 .

Picking R1, . . . , RO(n) ∈u VD coversf−1(1) with high probability.

Can be easily derandomized usingError-Correcting codes.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 20 / 27

Page 69: A compression algorithm for AC0[p] circuits using Certifying ...

Handling second issue

A random R ∈ VD covers each x 6∈ Fwith probability 1

2 .

Picking R1, . . . , RO(n) ∈u VD coversf−1(1) with high probability.

Can be easily derandomized usingError-Correcting codes.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 20 / 27

Page 70: A compression algorithm for AC0[p] circuits using Certifying ...

Handling second issue

A random R ∈ VD covers each x 6∈ Fwith probability 1

2 .

Picking R1, . . . , RO(n) ∈u VD coversf−1(1) with high probability.

Can be easily derandomized usingError-Correcting codes.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 20 / 27

Page 71: A compression algorithm for AC0[p] circuits using Certifying ...

Overall approach summary

Argue that for D = n2 −

n(logn)O(1) , F is small.

Obtain m = O(n) polynomials R1, . . . , Rm ∈ VD covering f−1(1) \F .

Output C =∨

iRi ∨ ϕ, where ϕ is a brute-force DNF accepting F .

Size(C) = 2n/ exp(n/(log n)O(1)) + |F |.

S. Compression for AC0(p) September 30, 2015 21 / 27

Page 72: A compression algorithm for AC0[p] circuits using Certifying ...

Overall approach summary

Argue that for D = n2 −

n(logn)O(1) , F is small.

Obtain m = O(n) polynomials R1, . . . , Rm ∈ VD covering f−1(1) \F .

Output C =∨

iRi ∨ ϕ, where ϕ is a brute-force DNF accepting F .

Size(C) = 2n/ exp(n/(log n)O(1)) + |F |.

S. Compression for AC0(p) September 30, 2015 21 / 27

Page 73: A compression algorithm for AC0[p] circuits using Certifying ...

Overall approach summary

Argue that for D = n2 −

n(logn)O(1) , F is small.

Obtain m = O(n) polynomials R1, . . . , Rm ∈ VD covering f−1(1) \F .

Output C =∨

iRi ∨ ϕ, where ϕ is a brute-force DNF accepting F .

Size(C) = 2n/ exp(n/(log n)O(1)) + |F |.

S. Compression for AC0(p) September 30, 2015 21 / 27

Page 74: A compression algorithm for AC0[p] circuits using Certifying ...

Overall approach summary

Argue that for D = n2 −

n(logn)O(1) , F is small.

Obtain m = O(n) polynomials R1, . . . , Rm ∈ VD covering f−1(1) \F .

Output C =∨

iRi ∨ ϕ, where ϕ is a brute-force DNF accepting F .

Size(C) = 2n/ exp(n/(log n)O(1)) + |F |.

S. Compression for AC0(p) September 30, 2015 21 / 27

Page 75: A compression algorithm for AC0[p] circuits using Certifying ...

Constructing certifying polynomials

f has an AC0[2] circuit of size poly(n).I f has ε-approximating polynomial P of degreeD1 = (log n)O(1) log(1/ε).

I E = error set of P . |E| < ε2n.

Find non-zero Q of degree D2 s.t. Q|E = 0.

Need(

n≤D2

)≥ ε2n.

D2 = n2 −Θ(

√n log(1/ε)).

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 22 / 27

Page 76: A compression algorithm for AC0[p] circuits using Certifying ...

Constructing certifying polynomials

f has an AC0[2] circuit of size poly(n).I f has ε-approximating polynomial P of degreeD1 = (log n)O(1) log(1/ε).

I E = error set of P . |E| < ε2n.

Find non-zero Q of degree D2 s.t. Q|E = 0.

Need(

n≤D2

)≥ ε2n.

D2 = n2 −Θ(

√n log(1/ε)).

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 22 / 27

Page 77: A compression algorithm for AC0[p] circuits using Certifying ...

Constructing certifying polynomials

f has an AC0[2] circuit of size poly(n).I f has ε-approximating polynomial P of degreeD1 = (log n)O(1) log(1/ε).

I E = error set of P . |E| < ε2n.

Find non-zero Q of degree D2 s.t. Q|E = 0.

Need(

n≤D2

)≥ ε2n.

D2 = n2 −Θ(

√n log(1/ε)).

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 22 / 27

Page 78: A compression algorithm for AC0[p] circuits using Certifying ...

Constructing certifying polynomials

f has an AC0[2] circuit of size poly(n).I f has ε-approximating polynomial P of degreeD1 = (log n)O(1) log(1/ε).

I E = error set of P . |E| < ε2n.

Find non-zero Q of degree D2 s.t. Q|E = 0.

D2 = n2 −Θ(

√n log(1/ε)).

R = Q · P . R = 1⇒ f = 1.

I deg = n2 −

√n log(1/ε) + (log n)O(1) log(1/ε).

I n2 −

n(logn)O(1) if ε = exp(−n/(log n)O(1)).

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 23 / 27

Page 79: A compression algorithm for AC0[p] circuits using Certifying ...

Constructing certifying polynomials

f has an AC0[2] circuit of size poly(n).I f has ε-approximating polynomial P of degreeD1 = (log n)O(1) log(1/ε).

I E = error set of P . |E| < ε2n.

Find non-zero Q of degree D2 s.t. Q|E = 0.

D2 = n2 −Θ(

√n log(1/ε)).

R = Q · P . R = 1⇒ f = 1.

I deg = n2 −

√n log(1/ε) + (log n)O(1) log(1/ε).

I n2 −

n(logn)O(1) if ε = exp(−n/(log n)O(1)).

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 23 / 27

Page 80: A compression algorithm for AC0[p] circuits using Certifying ...

Constructing certifying polynomials

f has an AC0[2] circuit of size poly(n).I f has ε-approximating polynomial P of degreeD1 = (log n)O(1) log(1/ε).

I E = error set of P . |E| < ε2n.

Find non-zero Q of degree D2 s.t. Q|E = 0.

D2 = n2 −Θ(

√n log(1/ε)).

R = Q · P . R = 1⇒ f = 1.I deg = n

2 −√n log(1/ε) + (log n)O(1) log(1/ε).

I n2 −

n(logn)O(1) if ε = exp(−n/(log n)O(1)).

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 23 / 27

Page 81: A compression algorithm for AC0[p] circuits using Certifying ...

Constructing certifying polynomials

f has an AC0[2] circuit of size poly(n).I f has ε-approximating polynomial P of degreeD1 = (log n)O(1) log(1/ε).

I E = error set of P . |E| < ε2n.

Find non-zero Q of degree D2 s.t. Q|E = 0.

D2 = n2 −Θ(

√n log(1/ε)).

R = Q · P . R = 1⇒ f = 1.I deg = n

2 −√n log(1/ε) + (log n)O(1) log(1/ε).

I n2 −

n(logn)O(1) if ε = exp(−n/(log n)O(1)).

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 23 / 27

Page 82: A compression algorithm for AC0[p] circuits using Certifying ...

Bounding |F |

Need non-zero Q of degree D2 s.t.Q|E = 0. R = Q · P .

Forces Q to be zero on F ′.

x 6∈ F ′ ⇒ Q(x) = 1 for some Q s.t.Q|E = 0.

F ⊆ F ′.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 24 / 27

Page 83: A compression algorithm for AC0[p] circuits using Certifying ...

Bounding |F |

Need non-zero Q of degree D2 s.t.Q|E = 0. R = Q · P .

Forces Q to be zero on F ′.

x 6∈ F ′ ⇒ Q(x) = 1 for some Q s.t.Q|E = 0.

F ⊆ F ′.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 24 / 27

Page 84: A compression algorithm for AC0[p] circuits using Certifying ...

Bounding |F |

Need non-zero Q of degree D2 s.t.Q|E = 0. R = Q · P .

Forces Q to be zero on F ′.

x 6∈ F ′ ⇒ Q(x) = 1 for some Q s.t.Q|E = 0.

F ⊆ F ′.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 24 / 27

Page 85: A compression algorithm for AC0[p] circuits using Certifying ...

Bounding |F |

Need non-zero Q of degree D2 s.t.Q|E = 0. R = Q · P .

Forces Q to be zero on F ′.

x 6∈ F ′ ⇒ Q(x) = 1 for some Q s.t.Q|E = 0.

F ⊆ F ′.

f−1(1)

f−1(0)

S. Compression for AC0(p) September 30, 2015 24 / 27

Page 86: A compression algorithm for AC0[p] circuits using Certifying ...

The problem and its solution

E ⊆ Fn2 . |E| ≤ ε2n.

F ′ = {x | ∀Q of deg D2, Q|E = 0⇒ Q(x) = 0}.How large can |F ′| be?

Theorem (Nie-Wang 2014)

|F ′|2n ≤

|E|( n≤D2

).

Choose D2 so that(

n≤D2

)=√ε2n.

S. Compression for AC0(p) September 30, 2015 25 / 27

Page 87: A compression algorithm for AC0[p] circuits using Certifying ...

The problem and its solution

E ⊆ Fn2 . |E| ≤ ε2n.

F ′ = {x | ∀Q of deg D2, Q|E = 0⇒ Q(x) = 0}.

How large can |F ′| be?

Theorem (Nie-Wang 2014)

|F ′|2n ≤

|E|( n≤D2

).

Choose D2 so that(

n≤D2

)=√ε2n.

S. Compression for AC0(p) September 30, 2015 25 / 27

Page 88: A compression algorithm for AC0[p] circuits using Certifying ...

The problem and its solution

E ⊆ Fn2 . |E| ≤ ε2n.

F ′ = {x | ∀Q of deg D2, Q|E = 0⇒ Q(x) = 0}.How large can |F ′| be?

Theorem (Nie-Wang 2014)

|F ′|2n ≤

|E|( n≤D2

).

Choose D2 so that(

n≤D2

)=√ε2n.

S. Compression for AC0(p) September 30, 2015 25 / 27

Page 89: A compression algorithm for AC0[p] circuits using Certifying ...

Open questions

Compression algorithms for other/stronger circuit classes?

For Maj ◦ AC0?

Other applications of the Nie-Wang result?

Thank you

S. Compression for AC0(p) September 30, 2015 26 / 27

Page 90: A compression algorithm for AC0[p] circuits using Certifying ...

Open questions

Compression algorithms for other/stronger circuit classes?

For Maj ◦ AC0?

Other applications of the Nie-Wang result?

Thank you

S. Compression for AC0(p) September 30, 2015 26 / 27

Page 91: A compression algorithm for AC0[p] circuits using Certifying ...

Open questions

Compression algorithms for other/stronger circuit classes?

For Maj ◦ AC0?

Other applications of the Nie-Wang result?

Thank you

S. Compression for AC0(p) September 30, 2015 26 / 27

Page 92: A compression algorithm for AC0[p] circuits using Certifying ...

Open questions

Compression algorithms for other/stronger circuit classes?

For Maj ◦ AC0?

Other applications of the Nie-Wang result?

Thank you

S. Compression for AC0(p) September 30, 2015 26 / 27