Source-linked AI summary
Deterministic NC Quadratic Root Counting in Characteristic Two
Sanyam Agarwal, Gorav Jindal
TL;DR
Counting polynomial systems over F2 remains hard even when each equation has degree at most two, motivating the study of a single quadratic equation. The paper gives a deterministic logspace-uniform NC algorithm for exact root counting over every fixed finite field of characteristic two.
Problem
Counting systems of polynomial equations over F2 remains hard even when every equation has degree at most two, motivating the structured task of counting roots of a single quadratic equation.
Source: §1 · pp. 1–2Method
The algorithm separates the radical, uses the absolute trace to form a quadratic form over F2, and recovers the quotient’s type bit from a determinant modulo eight.
Source: §1.2 · pp. 3–4, §7 · p. 12Results
The exact counting function for a single quadratic polynomial over any fixed finite field of characteristic two belongs to logspace-uniform NC.
Source: §1 · p. 2, §7 · p. 12Takeaways & Limitations
Browder’s determinant criterion recovers the quotient’s type bit deterministically without a binary decomposition.
Source: §1.2 · pp. 3–4
Abstract
from arXiv · showhide
Counting satisfying assignments of Boolean formulas is a basic problem in theoretical computer science, with $\#3\text{-}\SAT$ as the standard $\SharpP$-complete problem. More generally, counting the solutions of a system of polynomial equations over $\F_2$ is $\SharpP$-complete. Here we focus on the more structured problem of counting the solutions of a single polynomial equation. For polynomial equations over finite fields, Ehrenfeucht and Karpinski \cite{computationalcomplexityofxorandcountingproblems1990} showed a sharp difference between degrees two and three: quadratic root counting is solvable in polynomial time, while the degree-three problem is $\SharpP$-complete. Their quadratic algorithm is sequential. For fixed finite fields, Ishai et al.~\cite{ishai2012randomizing} later gave deterministic parallel algorithms in odd characteristic and randomized parallel algorithms in characteristic two. We give a deterministic $\NC$ algorithm for exactly counting the solutions of a quadratic polynomial equation over every fixed finite field of characteristic two. Our algorithm separates the radical and uses the absolute trace to realize the bit distinguishing the two nondegenerate finite-field types as the Arf invariant \cite{arf1941untersuchungen} of a quadratic form over $\F_2$. It then recovers that invariant from an integral matrix using Browder's determinant criterion \cite{browder2006complete}. This replaces the randomized canonical-form step in the algorithm of Ishai et al.
1 Introduction
The paper gives a deterministic, logspace-uniform NC algorithm for exactly counting roots of a single quadratic polynomial over any fixed finite field of characteristic two. It replaces the randomized binary-decomposition step of the prior parallel approach by recovering the quotient’s type bit from a determinant.
1.1 Background and related work
- Quadratic root counting has a sequential polynomial-time algorithm, but the earlier parallel algorithm for characteristic two was randomized.The corresponding degree-three counting problem is #P-hard [EK90, GGL08].Source: §1 · pp. 1–2, §1.1 · p. 3
1 Introduction
- The algorithm counts roots of a single quadratic polynomial over every fixed finite field of characteristic two using logspace-uniform NC circuits.The circuits have polynomial size, polylogarithmic depth, and O(n) output bits.Source: §1 · p. 2
1.2 Proof ideas
- Taking the absolute trace converts the quotient over K into a quadratic form over F2 whose Arf invariant encodes the quotient’s type bit.The trace form is nondegenerate whenever the original quotient is nondegenerate.Source: §1.2 · pp. 3–4
- Browder’s criterion recovers the Arf invariant from an integral symmetric matrix’s determinant modulo eight, avoiding binary decomposition.The determinant residue distinguishes the two types through ε(h).Source: §1.2 · pp. 3–4
- The algorithm separates the radical, reduces to a nondegenerate quotient, and handles linear terms by homogenization.If the quadratic form is nonzero on its radical, every target fiber has size κ^(n−1); otherwise the quotient has κ^(n−2r) lifts per input.Source: §1.2 · pp. 3–5
- The circuit evaluates a determinant for each possible positive rank in parallel, then uses the computed rank to select the relevant branch.Rank, basis, and determinant stages have polynomial size and polylogarithmic depth.Source: §1.2 · p. 5
2 Preliminaries
The preliminaries fix the finite-field and circuit conventions used throughout and establish the parallel linear-algebra tools for the algorithm. They also define the polar matrix and radical used to analyze quadratic forms.
2 Preliminaries
- The fixed field K and its encoding make field elements constant-size, with all asymptotic bounds measured in n.Circuit families are bounded-fan-in and logspace-uniform in their matrix and vector dimensions.Source: §2 · p. 5
- NC means logspace-uniform Boolean circuits of polynomial size and polylogarithmic depth, with polynomially many output gates allowed.Source: §2 · p. 5
- Fixed-field arithmetic, inversion of nonzero elements, zero testing, absolute trace, and basis-coordinate conversion have constant-size, constant-depth implementations.Each is a Boolean function on a constant number of bits because the field and encoding are fixed.Source: §2 · p. 6
- Uniform parallel routines compute rank, kernel and image bases, complementary preimages, and determinants over fixed finite commutative rings, including Z/8Z.These routines have polynomial size and polylogarithmic depth.Source: §2 · p. 6
- The polar matrix A_q represents B_q(x,y)=q(x+y)+q(x)+q(y); its kernel is the radical, and its rank is even.A quadratic form is nondegenerate exactly when its radical is zero, equivalently when A_q is invertible.Source: §2 · pp. 6–7
3 Counting values of a homogeneous quadratic form
For homogeneous quadratic forms, the exact number of solutions at each target is determined by the radical behavior, the rank, and a bit distinguishing the nondegenerate quotient types. This gives the fiber-count formula used by the algorithm.
3 Counting values of a homogeneous quadratic form
- The exact fiber size for a homogeneous quadratic form is expressed through its rank and one bit distinguishing the two possible nondegenerate quotient types.The section's corollary combines the radical cases with the quotient count.Source: §3 · pp. 7–8
- If the form is nonzero on its radical, every target value has exactly κ^(n−1) preimages.The radical test can be performed by evaluating the form on a basis of the radical.Source: §3 · p. 7
- If the form vanishes on its radical, splitting off the radical reduces the count to a nondegenerate form on a complementary subspace, with each quotient input having κ^(n−2r) lifts.Source: §3 · p. 7
- The type bit ε(h) labels the two linear-equivalence classes in each positive even dimension and records the sign of the normalized signed trace count.For K=F2 it is the usual Arf invariant; for general K the next section identifies it with the trace form's Arf invariant.Source: §3 · p. 8
4 Recovering the type bit in deterministic parallel time
The type bit of a nondegenerate form over K is recovered through restriction of scalars to F2: the trace form has the same Arf invariant. Browder's determinant criterion then computes that invariant from a matrix modulo eight.
4 Recovering the type bit in deterministic parallel time
- The trace form T_h over F2 is nondegenerate whenever h over K is nondegenerate.Its polar form is Tr(B_h(x,y)); nondegeneracy follows from the nondegenerate trace pairing.Source: §4 · p. 9
- The Arf invariant of T_h equals the type bit ε(h), since their signed sums have the same sign.The trace form is obtained by representing Tr(h(x)) as a homogeneous quadratic form over F2.Source: §4 · pp. 8–9
- For a nondegenerate quadratic form g in 2d variables over F2, Browder’s criterion determines Arf(g) from det S(g): residues 1 or 7 modulo 8 yield 0, and 3 or 5 yield 1 [Bro79, Proposition 2.15].Source: §4 · p. 10
5 Algorithm for quadratic forms
The quadratic-form algorithm tests the radical, reduces the vanishing-radical case to a nondegenerate quotient, and computes its type bit through the trace-form determinant. Fixed parallel branches accommodate the input-dependent rank.
5 Algorithm for quadratic forms
- The algorithm computes rank and radical bases, tests whether q vanishes on the radical, and returns κ^(n−1) when it does not.When the radical test passes and rank is zero, it returns κ^n if t=0 and zero otherwise.Source: §5 · p. 10
- For positive rank with q vanishing on the radical, it forms the nondegenerate quotient, converts it to a trace form over F2, and uses a determinant modulo eight to recover its type bit.The resulting bit and target select the exact count given by the fiber formula.Source: §5 · p. 10
- Because the rank is input-dependent, the circuit runs one fixed branch per possible positive rank and uses the computed rank to select the relevant branch.Rank, basis, field-arithmetic, trace, and determinant stages have polynomial size and polylogarithmic depth; the output uses O(n) bits.Source: §5 · pp. 10–11
6 General quadratic polynomials
The section reduces an affine quadratic equation to homogeneous zero counts, then combines those counts to recover the number of solutions. The construction preserves logspace-uniform NC complexity.
6 General quadratic polynomials
- The construction writes f as a homogeneous quadratic part q plus a homogeneous linear part, after absorbing any constant into t.The field variables range over K; only the auxiliary trace form is over F2.Source: §6 · p. 11
- Homogenization handles the linear terms by relating the solutions of f(y) = t to zeros of eqt with nonzero first coordinate.Each solution y has exactly κ −1 lifts; zeros with first coordinate zero correspond to zeros of q.Source: §6 · pp. 11–12
- Subtracting the zero count of q from that of eqt and dividing by κ −1 yields Nf(t) in logspace-uniform NC.Both counts have O(n) bits, and the division is exact.Source: §6 · p. 12
7 Conclusion
The paper gives a deterministic logspace-uniform NC algorithm for exactly counting roots of a single quadratic polynomial over any fixed finite field of characteristic two. It separates the radical, recovers the quotient type from a determinant residue, and handles linear terms by homogenization.
7 Conclusion
- The algorithm exactly counts roots of a single quadratic polynomial over every fixed finite field of characteristic two in deterministic logspace-uniform NC.It separates the radical, forms the absolute-trace form of the nondegenerate quotient, and recovers its type from a determinant modulo eight.Source: §7 · p. 12
- The determinant residue supplies the Arf information needed by the counting formula, avoiding construction of a binary decomposition.The fixed circuit evaluates one determinant for each possible positive rank, and the computed rank selects the relevant value.Source: §7 · p. 12
- Homogenization handles linear terms without changing the algorithm's parallel complexity.Source: §7 · p. 12
AI Disclosure
The authors report using ChatGPT 5.6 Pro for literature review and general exploration, and for manuscript work.
AI Disclosure
- ChatGPT 5.6 Pro was used for literature review and general exploration related to the problem.Source: AI Disclosure · p. 12
- The tool pointed the authors to, which they describe as essential for computing the Arf invariant in deterministic NC for quadratic forms over F2.Source: AI Disclosure · p. 12
- The authors also used the tool to polish proofs and the manuscript.Source: AI Disclosure · p. 12
A Proofs for the homogeneous counting results
The appendix derives homogeneous quadratic root counts by separating the radical from a nondegenerate quotient and using its decomposition-independent type bit. It then combines fiber counts to obtain the exact count for each target value.
A Proofs for the homogeneous counting results
- The final corollary combines the radical cases and the quotient count to give the exact number of solutions of q(x) = t.Its canonical-form and fiber-count formulas agree with [IKPC12, Appendix A.1, Lemma 7] and recover the formulas underlying [EK90, Lemmas 4, 5, and 6].Source: A Proofs for the homogeneous counting… · pp. 14, 16, 17
- The appendix establishes that q vanishes on its radical exactly when it vanishes on every vector of a basis of that radical.Source: A Proofs for the homogeneous counting… · p. 14
- When q is nonzero on its radical, its restriction there is surjective, and translation by radical vectors gives every target fiber size κ^(n−1).The surjectivity argument uses that squaring is a bijection on K.Source: A Proofs for the homogeneous counting… · p. 14
- If q vanishes on its radical, a basis of the radical and a complementary subspace reduce q to a nondegenerate form on K^(2r), with κ^(n−2r) lifts per quotient point.Source: A Proofs for the homogeneous counting… · pp. 14, 15, 17
- A nondegenerate form is decomposed into binary blocks, and the resulting bit ε(h) is independent of the chosen decomposition.The signed trace count factors across blocks; its sign identifies ε(h).Source: A Proofs for the homogeneous counting… · p. 15
- The appendix derives the nondegenerate fiber counts by equating the counts of zero and nonzero fibers with the trace-sum identities.The resulting expressions give the formulas used in the root-counting corollary.Source: A Proofs for the homogeneous counting… · p. 16
B Proof of the determinant test
The proof establishes that the determinant of an integral lift, reduced modulo eight, distinguishes the two Arf-invariant types of a nondegenerate quadratic form over F2. It shows this test is unchanged by invertible changes of variables and evaluates it on a binary-block form.
B Proof of the determinant test
- For nondegenerate g, det S(g) is odd, and its residue is 1 or 7 modulo 8 for even Arf(g), versus 3 or 5 for odd Arf(g).The block calculation gives det S(g) ≡ 3^k(-1)^(d-k) (mod 8), with Arf(g) = k mod 2.Source: B Proof of the determinant test · pp. 17, 19
- The determinant perturbation lemma supplies the modulo-eight stability needed in the coordinate-invariance argument.For the stated perturbation, det(P + 2D) ≡ det(P) (mod 8).Source: B Proof of the determinant test · pp. 17–19
- The determinant residue modulo eight is invariant under invertible F2-linear changes of variables.The transformed lift differs from the congruent matrix by 2D, where D is integral symmetric and alternating modulo two; the permitted perturbation preserves the determinant modulo eight.Source: B Proof of the determinant test · pp. 18–19
- A change of variables puts g in binary-block form, making S(g) block diagonal and reducing its determinant to the block determinants.The number k of indices with a_i b_i = 1 determines the determinant residue and satisfies Arf(g) = k mod 2.Source: B Proof of the determinant test · p. 19
C Parallel linear algebra in NC
This section gives logspace-uniform parallel constructions for rank, image and kernel bases, and determinants over fixed finite fields and rings. It explains how these constructions yield bounded-fan-in Boolean circuits and how a polynomial-ring simulation implements the rank reduction.
C Parallel linear algebra in NC
- Rank, image and kernel bases, and determinants over fixed finite fields or rings admit logspace-uniform circuits of polynomial size and polylogarithmic depth.The basis construction outputs zero-padded matrices for the kernel and image; the determinant result applies in particular to Z/8Z.Source: C Parallel linear algebra in NC · p. 20
- The parallel rank algorithm uses Mulmuley's reduction and division-free determinant circuits to identify rank from the least nonzero coefficient index.The reduction forms a symmetric block matrix, and the least j with c_j(ξ) nonzero is N − rank(B).Source: C Parallel linear algebra in NC · p. 20
- Berkowitz's circuit is simulated over a truncated polynomial ring using coefficient vectors and balanced convolution and zero-test circuits.Because coefficient degrees are at most Δ = N(N − 1)/2, truncation at ξ^(Δ+1) loses no output information.Source: C Parallel linear algebra in NC · pp. 20–21
- Selected independent columns and a nonsingular minor yield bases for the image and kernel through parallel selection, packing, and inversion.The kernel vectors are ordered by increasing nonselected column index, and the resulting vectors form a basis.Source: C Parallel linear algebra in NC · p. 21