Source-linked AI summary
NP-Hardness of Bounded Distance Decoding for Reed-Solomon Codes
Daqing Wan, Jun Zhang
TL;DR
The paper addresses the longstanding complexity question between the unique-decoding and covering-radius scales for Reed–Solomon codes. It reduces moments subset sum using a universal completion pool and an extension-field quotient, proving deterministic NP-completeness for an additive gap ⌊n^α⌋ with subexponential alphabet size.
Problem
Understanding computational complexity between the unique-decoding and covering-radius scales remains a longstanding problem for Reed–Solomon codes.
Source: §1 · p. 1Method
The reduction uses moments subset sum, a universal completion pool, and an extension-field quotient to protect soundness against auxiliary subsets.
Source: §9 · p. 26, §10.1 · p. 28Results
For every fixed rational 0 < α < 1/2, bounded-distance decoding is NP-complete with gap ⌊n^α⌋ and alphabet size 2^Θ(n^η log n) = 2^o(n), for η depending only on α.
Source: §1 · p. 3Takeaways & Limitations
The construction gives deterministic hardness at a power-growing additive gap while retaining a subexponential alphabet size.
Source: §1 · p. 3The quotient soundness mechanism requires an extension field and does not improve the prime-field result; full-length evaluation sets and a linear-size gap remain open challenges.
Source: §1 · p. 5, §9 · p. 26
Abstract
from arXiv · showhide
For an $[n,K]$ Reed--Solomon code, the covering radius is $n-K$. Gandikota, Ghazi, and Grigorescu proved deterministic NP-hardness of bounded-distance decoding when the decoding radius is $d$ below the covering radius for every $1\le d\le c\log n/\log\log n$, where $c>0$ is an absolute constant. We prove that, for every fixed rational $0<\alpha<1/2$, bounded-distance decoding is NP-complete under deterministic polynomial-time many-one reductions over explicitly represented finite extension fields for the additive gap $d=\lfloor n^\alpha\rfloor$ below the covering radius. The hard codes have odd block length~$n$, dimension $K=(n+1)/2-d$, decoding radius $(n-1)/2$, and rate tending to $1/2$. The alphabet size is subexponential in the evaluation set size: for a fixed $0<\eta<1$ depending only on $\alpha$, it is $2^{\Theta(n^\eta\log n)}=2^{o(n)}$. The proof passes through moments subset sum on $n-1$ nonzero field elements, with required subset size $(n-1)/2$ and $d$ prescribed moments. The arithmetic ingredient is a uniform positive-completion theorem over prime fields $\mathbb{F}_q$ with $q\ge d^{2+\rho}$, for any fixed $\rho>0$. A sharper form follows from a higher-dimensional point-count estimate based on Deligne's theorem; the weaker form used in our reduction is proved more elementarily using additive-character orthogonality, the one-variable Weil bound, a moment identity of order $2d$, and Newton identities. A universal completion pool, an extension-field quotient construction, and a deterministic linear-size simultaneous power condenser complete the reduction.
1 Introduction
This paper proves deterministic NP-completeness of Reed–Solomon bounded-distance decoding for an additive gap of order n^α, while keeping the rate near 1/2 and the alphabet subexponential. The reduction proceeds through moments subset sum and leaves full-length evaluation sets and prime-field hardness unresolved.
Main result
- For every fixed rational 0 < α < 1/2, bounded-distance decoding on explicitly represented finite-extension-field Reed–Solomon [n,K] codes of odd block length n is NP-complete under deterministic polynomial-time many-one reductions, with gap exactly floor(n^α) below the covering radius.The code rate tends to 1/2.Source: §1 · p. 3
- The hard instances can be chosen over fields of size 2^Θ(n^η log n)=2^o(n), with 0<η<1 depending only on α; the bound is still superpolynomial in n.NP-hardness over polynomial-size alphabets remains open in this parameter regime.Source: §1 · pp. 3–4
Scope and open problems
- The result does not establish hardness for standard primitive or extended full-length codes, because its evaluation set is constructed inside a larger extension field.The paper also leaves open a gap d = Ω(n) at constant rate.Source: §1 · pp. 4–5
Proof approach
- When characteristic exceeds d, Newton identities convert the first d power sums to elementary symmetric functions, directly reducing moments subset sum to Reed–Solomon decoding at radius exactly d below covering radius.Source: §1 · p. 4
Prior approaches
- The earlier Prouhet–Tarry–Escott approach faces exponential gadget growth in d, alongside bit-size and unintended-subset obstacles to polynomial-power gaps.The paper also notes that improving character-sum estimates alone cannot make the Cheng–Wan gap a positive fraction of length.Source: §1 · pp. 4–5
Arithmetic ingredient
- The completion theorem guarantees distinct nonzero representatives for every target vector when q ≥ d^(2+ρ) and h = Cρd + O(1), for sufficiently large d.The reduction uses the elementary Weil-bound version, which permits Cρ > 2 + 2/ρ; the sharper higher-dimensional estimate permits Cρ > 1 + 2/ρ.Source: §1 · p. 5
Proof approach
- A universal pool of possible correcting elements lets the NP witness choose an existential completion, while an extension-field quotient makes auxiliary subsets harmless to soundness.A deterministic simultaneous power condenser supplies O([K : Fq]) directions whose higher powers can span the extension field.Source: §1 · p. 5
Scope and open problems
- The extension-field quotient mechanism cannot improve the prime-field result: prime fields have no nonzero proper additive subspace for the construction to use.The paper notes that a different soundness mechanism would be required for prime fields.Source: §1 · p. 5
2 Coding and algebraic preliminaries
This section sets up gap-parameterized Reed–Solomon decoding and moments subset sum, then presents reductions linking decoding to moments and exact-one satisfiability to vector subset sum.
2.1 Reed–Solomon codes, BDD, and deep holes
- RS-BDD asks whether a degree-<K polynomial agrees at least K+d times, with d measuring the gap below covering radius n-K; at d=1, non-deep-hole recognition is NP-complete [GV05].The covering-radius bound is attained, so equality identifies deep holes.Source: §2.1 · p. 6
2.2 Moments subset sum and finite-field PTE
- MSS(d) asks for a k-element subset matching d prescribed power sums; equal-moment subsets yield finite-field PTE sets after canceling their intersection.For explicitly represented finite fields, a subset is a certificate and its moment equations can be checked in polynomially many field operations.Source: §2.2 · pp. 6–7
2.3 A self-contained reduction from MSS to RS-BDD
- When char(F)>d, Newton identities convert moments to symmetric targets, which define an RS-BDD instance whose agreement-polynomial construction preserves yes/no answers.The reduction uses the first d leading coefficients to encode the symmetric targets.Source: §2.3 · pp. 7–8
2.4 Exact 1-in-3-SAT and its vector subset-sum encoding
- A 2m-coordinate vector subset-sum encoding makes solutions choose one Boolean value per variable and enforce exactly one true variable per clause.In the later extension-field construction, quotienting the first moment recovers this encoding, while auxiliary elements fill residual higher moments.Source: §2.4 · pp. 8–9
3 Earlier Reed–Solomon BDD hardness and the PTE bottleneck
Earlier Reed–Solomon BDD hardness reductions used assignment-specific PTE gadgets, whose size and soundness requirements limited the attainable gap. This paper separates the arithmetic completion task from soundness by using a universal pool and a quotient map.
3 Earlier Reed–Solomon BDD hardness and the PTE bottleneck
- The earlier construction's PTE gadgets have size 2^Θ(d), with assignment-specific gadgets contributing an exponential factor.The gadgets also require bit-size control and protection against unintended auxiliary subsets.Source: §3 · p. 10
- A witness could select pieces of multiple auxiliary gadgets, so the prior proof used magnitude separation to force auxiliary subsets to have tiny or huge first-moment sums.This is the bimodality condition.Source: §3 · p. 10
- A nonconstructive existence theorem for small signed PTE systems did not improve the reduction because explicit, assignment-labeled gadgets still had to withstand unintended sub-subsets.The earlier Reed–Solomon BDD hardness result reduced through moments subset sum.Source: §3 · p. 10
- The new construction uses one-sided completion for every target, one universal pool for all Boolean choices, and a quotient map to enforce soundness.This avoids requiring arithmetic restrictions on auxiliary sub-subsets.Source: §3 · p. 10
- The cited point-count estimates help a complexity reduction despite not providing an algorithm to find a completing subset.The reduction needs existence, not an explicit completion algorithm.Source: §3 · p. 10
4 Uniform positive moment completion
Section 4 establishes uniform positive moment completion through a sharper higher-dimensional estimate and a weaker elementary estimate. The elementary route is the one used in the hardness reduction.
4.1 Notation and the higher-dimensional estimate
- The sharper point-count estimates are target-uniform and follow from the higher-dimensional argument of [Wan26], without repeating its cohomological proof.The proof uses the Deligne–Hooley–Katz estimate and Betti-number bounds [WZ26].Source: §4.1 · p. 11
4.2 An elementary one-variable point-count estimate
- The elementary point-count bounds use additive-character orthogonality, the one-variable Weil bound, and a moment identity of order 2d.Newton identities recover the elementary symmetric functions from the first d power sums, bounding the number of ordered tuples by d! for each fixed tuple.Source: §4.2 · pp. 11–12
4.3 Strong and elementary completion theorems
- The stronger completion theorem gives positive completion for every target using the higher-dimensional estimates and a distinct-coordinate sieve.The proof establishes positivity of the count of ordered tuples with distinct nonzero coordinates, then forgets their order to obtain the subset.Source: §4.3 · pp. 13–14
- The elementary completion theorem also gives positive completion for every target and is the sole completion theorem used in the NP-hardness reduction.Its proof applies the point-count bound and a union bound to exclude zero or repeated coordinates.Source: §4 · p. 10, §4.3 · p. 13
5 The extension-field quotient construction and power-spanning directions
The extension-field construction stores Boolean choices in a quotient while placing auxiliary elements in its kernel, protecting soundness. A deterministic power condenser supplies a linear-size set of directions whose powers span the required spaces.
5.1 Explicit field construction and a product-spanning subspace
- The construction builds an explicitly represented extension field deterministically in polynomial time, representing elements by basis coefficient vectors.Field operations use coefficientwise addition, polynomial multiplication with reduction, and inversion by the extended Euclidean algorithm.Source: §5.1 · p. 15
- Boolean-choice elements lie outside H, while auxiliary elements lie in H, so every auxiliary subset vanishes under the quotient map in the first moment.The quotient identity holds for every auxiliary sub-subset, without requiring bundle structure or bimodality.Source: §5.1 · p. 16
5.2 A deterministic power condenser of linear size
- The condenser tests polynomial identities on affine subspaces and fixes coordinates while preserving nonvanishing for active polynomials.The resulting construction runs in time polynomial in L, d, and log q.Source: §5.2 · pp. 16, 18, 19
- The power-condenser construction deterministically selects a projectively distinct set of linear size, with its higher-power spans reaching the full extension field.The construction reaches the target spans within L rounds.Source: §5.2 · pp. 16–18
6 A balanced universal completion pool
The balanced universal completion theorem constructs a single auxiliary pool whose subsets can complete arbitrary residual moments. Completions are existential witnesses rather than subsets the reduction itself constructs.
6 A balanced universal completion pool
- Theorem 6.1 provides balanced universal completion for every residual vector under the hypotheses of Theorem 4.4.The theorem uses a pool built from projectively distinct directions and a complement trick to keep each completion half the size of D.Source: §6 · p. 19
- The construction chooses coefficients using the spanning directions, then applies the completion theorem to obtain subsets whose moments realize the residual values.The resulting auxiliary set is assembled from these subsets.Source: §6 · pp. 19–20
- The pool is constructed explicitly, but the completing subsets are not; they are supplied as part of the existential NP witness.The subsets realize the required residual moments.Source: §6 · p. 20
7 The intermediate moments-subset-sum hardness reduction
The reduction encodes Exact 1-in-3-SAT as moments subset sum using Boolean-choice elements and a universal auxiliary completion pool. Its correctness separates assignment soundness from moment completion, and its parameters give a subexponential alphabet with polynomial-time construction.
7.1 Construction of the MSS instance
- A universal auxiliary pool completes higher-moment residuals, while a quotient map makes its elements vanish from the first-moment equation that certifies the Boolean assignment.The reduction uses an extension field and requires the completion subset to have fixed size.Source: §7.1 · pp. 21, 23
- The MSS instance is constructed from Boolean-choice vectors encoding Exact 1-in-3-SAT assignments, with a target sum reached exactly when the assignment satisfies the formula.The vector-sum equivalence requires exactly one selected value per variable and exactly one true variable per clause.Source: §7.1 · p. 21
7.2 Correctness
- The formula is satisfiable if and only if the constructed MSS instance has a solution.Completeness uses the auxiliary pool to complete residual moments; soundness projects the first-moment equation through the quotient and needs no special structure from the selected auxiliary subset.Source: §7.2 · pp. 23–24
7.3 Size and running time
- The construction retains at least ⌊n^α⌋ moment equations, and truncating to that number preserves completeness while soundness still follows from the first moment.The parameter choices ensure ⌊n^α⌋ ≤ d and ⌊n^α⌋ ≤ (n−1)/2 for sufficiently large outputs.Source: §7.3 · p. 24
- The resulting alphabet size is 2^Θ(n^η log n) = 2^o(n), with each represented field element requiring Θ(n^η log n) bits.The field, power basis, and required arithmetic are constructed deterministically in polynomial time.Source: §7.3 · pp. 24–25
8 Proof of the Reed–Solomon BDD theorem
The proof reduces moments subset sum to Reed–Solomon bounded-distance decoding. The resulting decision problem is NP-hard, belongs to NP, and has a decoding radius exactly d below the covering radius.
8 Proof of the Reed–Solomon BDD theorem
- The Reed–Solomon instance has a requested decoding radius exactly d below its covering radius.The reduction translates the moments subset sum instance into a code of dimension K.Source: §8 · pp. 25–26
- The received word lies within the requested radius if and only if the moments subset sum instance is satisfiable, establishing NP-hardness.Membership in NP follows by using a polynomial-size polynomial as a certificate and checking its evaluations and Hamming distance deterministically.Source: §8 · p. 26
- The relative gap vanishes asymptotically because d = o(n).Source: §8 · p. 26
9 Why the proof needs extension fields
The proof uses the prime field for completion and an extension field for soundness. The extension provides a proper additive subspace whose quotient preserves Boolean information while hiding auxiliary elements.
9 Why the proof needs extension fields
- The prime field supports the completion lemma, while the extension field supplies a proper additive subspace for the quotient construction.The quotient stores the Boolean subset-sum instance; product-spanning lets auxiliary directions correct higher-moment residuals in the full field.Source: §9 · p. 26
- A prime field has no nonzero proper additive subspace, so choosing either zero or the whole field loses one of the quotient construction’s required properties.With H = 0 there is no nonzero auxiliary pool; with H = Fp the quotient carries no Boolean information.Source: §9 · p. 26
- This obstruction rules out the quotient construction over prime fields, not polynomial-moment hardness there; a different soundness mechanism is required.The cited magnitude-bimodality method is one such mechanism but currently incurs an exponential-in-d gadget size.Source: §9 · p. 26
10 Comparison, open problems, and perspective
The paper compares its additive-gap result with prior decoding work, describes a deterministic power condenser, and identifies constraints on smaller completion fields and prime-field soundness. It leaves full-length and prime-field hardness mechanisms as open directions.
10.1 Coding-theoretic comparison with earlier results
- The result gives deterministic NP-hardness at an additive gap Θ(n^α) for every fixed rational 0 < α < 1/2, using extension fields of size 2^o(n) and constructed evaluation sets.The advance replaces a prior polylogarithmic additive gap; it does not establish hardness for standard primitive or extended full-length codes.Source: §10.1 · pp. 27–28
10.2 The deterministic power condenser
- The deterministic linear-size power condenser may be useful as a simultaneous rank condenser, relying on product-spanning and characteristic exceeding the relevant degrees.Its construction exploits special properties of the maps x ↦ x^j.Source: §10.2 · p. 28
10.3 Improving the completion field size
- The proof’s completion theorem and direction construction both impose quadratic-scale base-field requirements, so improving completion alone cannot support every fixed α < 1.The paper states that reaching smaller fields would require both a suitable all-target completion theorem and a deterministic direction construction valid in that regime; neither is proved here.Source: §10.3 · pp. 28–29
10.4 An alternative soundness construction over prime fields
- Recovering polynomial-moment hardness over prime fields remains open because the present proof supplies no replacement soundness construction.The paper lists quotient, positional, and signed or matrix-valued measurement approaches as possible directions.Source: §10.4 · p. 29