Source author record

Ariel Gabizon

Explore this author’s publications, collaborators and research topics. This catalog record has not been claimed by its author.

ResearcherUnclaimed source record

Catalog footprint

Research overview

9works
7topics
4close collaborators

Published work

9 publications

preprint2016arXiv

Bitcoin Beacon

We examine a protocol πbeaconπ_{\text{beacon}} that outputs unpredictable and publicly verifiable randomness, meaning that the output is unknown at the time that πbeaconπ_{\text{beacon}} starts, yet everyone can verify that the output is close to uniform after πbeaconπ_{\text{beacon}} terminates. We show that πbeaconπ_{\text{beacon}} can be instantiated via Bitcoin under sensible assumptions; in particular we consider an adversary with an arbitrarily large initial budget who may not operate at a loss indefinitely. In case the adversary has an infinite budget, we provide an impossibility result that stems from the similarity between the Bitcoin model and Santha-Vazirani sources. We also give a hybrid protocol that combines trusted parties and a Bitcoin-based beacon.

preprint2016arXiv

On Probabilistic Checking in Perfect Zero Knowledge

We present the first constructions of single-prover proof systems that achieve perfect zero knowledge (PZK) for languages beyond NP, under no intractability assumptions: 1. The complexity class #P has PZK proofs in the model of Interactive PCPs (IPCPs) [KR08], where the verifier first receives from the prover a PCP and then engages with the prover in an Interactive Proof (IP). 2. The complexity class NEXP has PZK proofs in the model of Interactive Oracle Proofs (IOPs) [BCS16,RRR16], where the verifier, in every round of interaction, receives a PCP from the prover. Our constructions rely on succinct simulators that enable us to "simulate beyond NP", achieving exponential savings in efficiency over [BCGV16]. These simulators crucially rely on solving a problem that lies at the intersection of coding theory, linear algebra, and computational complexity, which we call the succinct constraint detection problem, and consists of detecting dual constraints with polynomial support size for codes of exponential block length. Our two results rely on solutions to this problem for fundamental classes of linear codes: * An algorithm to detect constraints for Reed--Muller codes of exponential length. * An algorithm to detect constraints for PCPs of Proximity of Reed--Solomon codes [BS08] of exponential degree. The first algorithm exploits the Raz--Shpilka [RS05] deterministic polynomial identity testing algorithm, and shows, to our knowledge, a first connection of algebraic complexity theory with zero knowledge. Along the way, we give a perfect zero knowledge analogue of the celebrated sumcheck protocol [LFKN92], by leveraging both succinct constraint detection and low-degree testing. The second algorithm exploits the recursive structure of the PCPs of Proximity to show that small-support constraints are "locally" spanned by a small number of small-support constraints.

preprint2015arXiv

Almost Optimal Cover-Free Families

Roughly speaking, an (n,(r,s))(n,(r,s))-Cover Free Family (CFF) is a small set of nn-bit strings such that: "in any d:=r+sd:=r+s indices we see all patterns of weight rr". CFFs have been of interest for a long time both in discrete mathematics as part of block design theory, and in theoretical computer science where they have found a variety of applications, for example, in parametrized algorithms where they were introduced in the recent breakthrough work of Fomin, Lokshtanov and Saurabh under the name `lopsided universal sets'. In this paper we give the first explicit construction of cover-free families of optimal size up to lower order multiplicative terms, {for any rr and ss}. In fact, our construction time is almost linear in the size of the family. Before our work, such a result existed only for r=do(1)r=d^{o(1)}. and r=ω(d/(log⁡log⁡dlog⁡log⁡log⁡d))r= ω(d/(\log\log d\log\log\log d)). As a sample application, we improve the running times of parameterized algorithms from the recent work of Gabizon, Lokshtanov and Pilipczuk.

preprint2015arXiv

Fast Algorithms for Parameterized Problems with Relaxed Disjointness Constraints

In parameterized complexity, it is a natural idea to consider different generalizations of classic problems. Usually, such generalization are obtained by introducing a "relaxation" variable, where the original problem corresponds to setting this variable to a constant value. For instance, the problem of packing sets of size at most pp into a given universe generalizes the Maximum Matching problem, which is recovered by taking p=2p=2. Most often, the complexity of the problem increases with the relaxation variable, but very recently Abasi et al. have given a surprising example of a problem --- rr-Simple kk-Path --- that can be solved by a randomized algorithm with running time O∗(2O(klog⁡rr))O^*(2^{O(k \frac{\log r}{r})}). That is, the complexity of the problem decreases with rr. In this paper we pursue further the direction sketched by Abasi et al. Our main contribution is a derandomization tool that provides a deterministic counterpart of the main technical result of Abasi et al.: the O∗(2O(klog⁡rr))O^*(2^{O(k \frac{\log r}{r})}) algorithm for (r,k)(r,k)-Monomial Detection, which is the problem of finding a monomial of total degree kk and individual degrees at most rr in a polynomial given as an arithmetic circuit. Our technique works for a large class of circuits, and in particular it can be used to derandomize the result of Abasi et al. for rr-Simple kk-Path. On our way to this result we introduce the notion of representative sets for multisets, which may be of independent interest. Finally, we give two more examples of problems that were already studied in the literature, where the same relaxation phenomenon happens. The first one is a natural relaxation of the Set Packing problem, where we allow the packed sets to overlap at each element at most rr times. The second one is Degree Bounded Spanning Tree, where we seek for a spanning tree of the graph with a small maximum degree.

preprint2015arXiv

Subspace Polynomials and Cyclic Subspace Codes

Subspace codes have received an increasing interest recently due to their application in error-correction for random network coding. In particular, cyclic subspace codes are possible candidates for large codes with efficient encoding and decoding algorithms. In this paper we consider such cyclic codes and provide constructions of optimal codes for which their codewords do not have full orbits. We further introduce a new way to represent subspace codes by a class of polynomials called subspace polynomials. We present some constructions of such codes which are cyclic and analyze their parameters.

preprint2014arXiv

Deterministic Extractors for Additive Sources

We propose a new model of a weakly random source that admits randomness extraction. Our model of additive sources includes such natural sources as uniform distributions on arithmetic progressions (APs), generalized arithmetic progressions (GAPs), and Bohr sets, each of which generalizes affine sources. We give an explicit extractor for additive sources with linear min-entropy over both Zp\mathbb{Z}_p and Zpn\mathbb{Z}_p^n, for large prime pp, although our results over Zpn\mathbb{Z}_p^n require that the source further satisfy a list-decodability condition. As a corollary, we obtain explicit extractors for APs, GAPs, and Bohr sources with linear min-entropy, although again our results over Zpn\mathbb{Z}_p^n require the list-decodability condition. We further explore special cases of additive sources. We improve previous constructions of line sources (affine sources of dimension 1), requiring a field of size linear in nn, rather than Ω(n2)Ω(n^2) by Gabizon and Raz. This beats the non-explicit bound of Θ(nlog⁡n)Θ(n \log n) obtained by the probabilistic method. We then generalize this result to APs and GAPs.

preprint2014arXiv

On rr-Simple kk-Path

An rr-simple kk-path is a {path} in the graph of length kk that passes through each vertex at most rr times. The rr-SIMPLE kk-PATH problem, given a graph GG as input, asks whether there exists an rr-simple kk-path in GG. We first show that this problem is NP-Complete. We then show that there is a graph GG that contains an rr-simple kk-path and no simple path of length greater than 4log⁡k/log⁡r4\log k/\log r. So this, in a sense, motivates this problem especially when one's goal is to find a short path that visits many vertices in the graph while bounding the number of visits at each vertex. We then give a randomized algorithm that runs in time poly(n)⋅2O(k⋅log⁡r/r)\mathrm{poly}(n)\cdot 2^{O( k\cdot \log r/r)} that solves the rr-SIMPLE kk-PATH on a graph with nn vertices with one-sided error. We also show that a randomized algorithm with running time poly(n)⋅2(c/2)k/r\mathrm{poly}(n)\cdot 2^{(c/2)k/ r} with c<1c<1 gives a randomized algorithm with running time $\poly(n)\cdot 2^{cn}$ for the Hamiltonian path problem in a directed graph - an outstanding open problem. So in a sense our algorithm is optimal up to an O(log⁡r)O(\log r) factor.

preprint2014arXiv

Relations between automata and the simple k-path problem

Let GG be a directed graph on nn vertices. Given an integer k<=nk<=n, the SIMPLE kk-PATH problem asks whether there exists a simple kk-path in GG. In case GG is weighted, the MIN-WT SIMPLE kk-PATH problem asks for a simple kk-path in GG of minimal weight. The fastest currently known deterministic algorithm for MIN-WT SIMPLE kk-PATH by Fomin, Lokshtanov and Saurabh runs in time O(2.851k⋅nO(1)⋅log⁡W)O(2.851^k\cdot n^{O(1)}\cdot \log W) for graphs with integer weights in the range [−W,W][-W,W]. This is also the best currently known deterministic algorithm for SIMPLE k-PATH- where the running time is the same without the log⁡W\log W factor. We define Lk(n)⊆[n]kL_k(n)\subseteq [n]^k to be the set of words of length kk whose symbols are all distinct. We show that an explicit construction of a non-deterministic automaton (NFA) of size f(k)⋅nO(1)f(k)\cdot n^{O(1)} for Lk(n)L_k(n) implies an algorithm of running time O(f(k)⋅nO(1)⋅log⁡W)O(f(k)\cdot n^{O(1)}\cdot \log W) for MIN-WT SIMPLE kk-PATH when the weights are non-negative or the constructed NFA is acyclic as a directed graph. We show that the algorithm of Kneis et al. and its derandomization by Chen et al. for SIMPLE kk-PATH can be used to construct an acylic NFA for Lk(n)L_k(n) of size O∗(4k+o(k))O^*(4^{k+o(k)}). We show, on the other hand, that any NFA for Lk(n)L_k(n) must be size at least 2k2^k. We thus propose closing this gap and determining the smallest NFA for Lk(n)L_k(n) as an interesting open problem that might lead to faster algorithms for MIN-WT SIMPLE kk-PATH. We use a relation between SIMPLE kk-PATH and non-deterministic xor automata (NXA) to give another direction for a deterministic algorithm with running time O∗(2k)O^*(2^k) for SIMPLE kk-PATH.

preprint2013arXiv

Improved Extractors for Affine Lines

Let FF be the field of qq elements. We investigate the following Ramsey coloring problem for vector spaces: Given a vector space $\F^n$, give a coloring of the points of FnF^n with two colors such that no affine line (i.e., affine subspace of dimension 11) is monochromatic. Our main result is as follows: For any q≥25⋅nq\geq 25\cdot n and n>4n>4, we give an explicit coloring $D:F^n\ar \set{0,1}$ such that for every affine line l⊆Fnl\subseteq F^n, D(l)={ 0,1 }D(l)=\set{0,1}. Previously this was known only for q≥c⋅n2q\geq c\cdot n^2 for some constant cc \cite{GR05}. We note that this beats the random coloring for which the expected number of monochromatic lines will be 0 only when q≥c⋅nlog⁡nq\geq c\cdot n\log n for some constant cc. Furthermore, our coloring will be `almost balanced' on every affine line. Let us state this formally in the lanuage of \emph{extractors}. We say that a function D:Fn↦{ 0,1 }D:F^n\mapsto \set{0,1} is a \afsext{1}{\eps} if for every affine line $l\subseteq \F^n$, D(X)D(X) is $\eps$-close to uniform when XX is uniformly distributed over ll. We construct a \afsext{1}{\eps} with $\eps = Ω(\sqrt{n/q})$ whenever q≥c⋅nq\geq c\cdot n for some constant cc. The previous result of \cite{GR05} gave a \afsext{1}{\eps} only for q=Ω(n2)q=Ω(n^2).

Research graph

See the researcher in context

Open full explorer

Inspect adjacent papers, topics, institutions and collaborators without losing the researcher page.

Building this map preview

BZPEER is loading the nearby papers, people, topics and institutions for this page.