Source-linked AI summary
Matrix Samplers and Quantum-Proof Extractors: Their Correspondence and Almost-Optimal Constructions
Kuan Cheng, Ruiyang Wu
TL;DR
Matrix samplers seek to estimate matrix means with less randomness without substantially increasing sample counts. The paper establishes a correspondence between quantum-proof extractors and matrix samplers. In particular, its theorem gives conditions in both directions for converting between them.
Problem
How can matrix samplers reduce randomness while keeping sample counts small, and what type of randomness extractor corresponds to a matrix sampler?
Source: §1 · pp. 1, 4Method
The paper establishes a correspondence between quantum-proof extractors and matrix samplers, then uses that correspondence with a quantum-proof extractor to construct a matrix sampler.
Source: §1.1 · p. 5, Strong matrix samplers · p. 5Results
A strong (weak) log(2D)-qubit-proof extractor with entropy n−log(1/δ) and error ε/2 yields a strong (ordinary) D-dimensional (δ, ε) matrix sampler; conversely, a strong (ordinary) sampler yields a strong (weak) extractor with error ε/2 + 2aδ.
Source: §1.1 · p. 5Takeaways & Limitations
Quantum-proof extractor constructions provide a route to constructing matrix samplers.
Source: Strong matrix samplers · p. 5The stated condition assumes a sufficiently small positive µ and sufficiently large n.
Source: The quantum extractor–matrix sampler… · p. 7
Abstract
from arXiv · showhide
We establish an equivalence between matrix samplers and quantum-proof randomness extractors. The classical sampler--extractor equivalence is established by a seminal work of Zuckerman (Random Structures & Algorithms, 1997). Using this equivalence, we construct explicit strong matrix samplers with optimal randomness overhead and near-optimal sample complexity via constructing quantum-proof extractors. Specifically for matrix dimension $D$, accuracy $\varepsilon$ and failure probability $\delta\leq\varepsilon$, our matrix sampler uses $m+O_\alpha(\log(D/\delta))$ random bits and $O_\alpha(\varepsilon^{-2-\alpha}\log^{1+\alpha}(D/\delta))$ samples, for any constant $\alpha>0$. Compared with the matrix sampler of Xun and Zuckerman (CCC 2025), our construction has improvements in two aspects. Under the same optimal random seed length, we can replace the $\operatorname{poly} D$ dependence in the number of samples by $O(\log^{1-\gamma} D)$. Under the same scale of sample size, we can remove their $\log\log D$ factor in the length of the random seed. Our underlying strong quantum-proof extractor has output length $n-O_\alpha(a+\log(1/\eta))$ and seed length at most $(1+\alpha)\log a+(2+\alpha)\log(1/\eta)+O_\alpha(1)$ for $n$-bit sources with conditional min-entropy $n-a$ and error $\eta$. We also obtain strong quantum-proof extractors for every constant entropy rate, for any error as small as $2^{-\Omega(n)}$, having optimal seed length $O(\log(n/\eta))$ and output length $\Omega(n)$, improving previous constructions.
1 Introduction
The introduction links matrix sampling and quantum-proof extraction through a two-way correspondence, presenting constructions for strong matrix samplers and quantum-proof extractors, including an extractor with linear output. It also discusses incorporating quantum side information, reducing seed length, and deriving sampler parameters from extractors.
1.1 Our Results
- A strong log(2D)-qubit-proof extractor implies a strong D-dimensional matrix sampler, and the reverse implication yields a log(D)-qubit-proof extractor with error ε/2 + 2aδ.The forward implication uses extractor parameters (n − log(1/δ), ε/2); the reverse applies to sources of min-entropy n − a. [1.1 Our Results]Source: §1.1 · p. 5
Strong matrix samplers
- The explicit strong matrix sampler has optimal random seed length and sample complexity at most the (1 + α)-th power of the optimal bound for constant α.Compared with Xun and Zuckerman [XZ25], it removes an extra log log D factor from the dimension-dependent seed term and improves sample-count dependence from polynomial in D to O(log(D/δ))^(1+α).Source: Strong matrix samplers · p. 5
- The strong quantum-proof extractor has seed length d ≤ (1 + α) log a + (2 + α) log(1/η) + Oα(1), where a = n − k.It is the extractor used to construct the matrix sampler. [Strong matrix samplers]Source: Strong matrix samplers · p. 5
- For every constant entropy rate, the paper gives explicit strong quantum-proof extractors that support exponentially small error and can attain output length (1 − θ)k.The construction applies for µn ≤ k ≤ n under log(n/η) ≤ cµn; unlike [BATS12], it works for all constant entropy rates rather than requiring k ≥ (1/2 + β)n, and it handles a wider error range.Source: Strong matrix samplers · p. 6
1.2 Technical Overview
- For fixed matrix-valued tests, the technical overview applies a strong quantum-proof extractor with entropy threshold n − Λ and error ε/2, where Λ = log(2D/δ).Here Λ captures the matrix dimension and failure probability in the extractor parameters.Source: §1.2 · p. 6
The quantum extractor–matrix sampler correspondence.
- If bad set B={x:||Ax||>ε} has size greater than δ2^n, these inputs construct a source with quantum side information for which a measurement’s acceptance probabilities differ by ε/2, contradicting the extraction guarantee.Source: The quantum extractor–matrix sampler… · pp. 6–7
- A matrix sampler bounds distinguishing advantage by ε/2 outside at most δ2^n exceptional inputs, yielding average advantage at most ε/2 + 2aδ for a source of min-entropy n − a.The proof turns a binary measurement into matrix tests fy(z) = 2My,z − I.Source: The quantum extractor–matrix sampler… · p. 7
A quantum-proof extractor with linear output.
- For h = log(n/η), the overview gives an explicit strong quantum-proof extractor with seed length Oµ(h log^2(n/h)) and output length Ωµ(n).The linear output is built from blocks generated using a weak design: each block is shown close to uniform given earlier blocks, the seeds, and the adversary’s side information.Source: The quantum extractor–matrix sampler… · p. 7, A quantum-proof extractor with linear… · p. 8
- Ωµ(n) output bits are achieved with seed length O(h log2(n/h)); replacing outputs by uniform blocks incurs at most η/M error per block and at most η total error.The passage gives output length Mm0 = Ωµ(n) and seed length λ(v + 1) = O(h log2(n/h)).Source: A quantum-proof extractor with linear… · p. 8
Reducing the seed length.
- Using prefix-reused geometric blocks and reverse-order seed growth, G uses Oµ(h) external seed bits to produce Oµ(h log2(n/h)) seed bits; combined with Flin, it outputs Ωµ(n) bits with error at most η.The reverse processing order preserves entropy in each block for extraction, and the construction establishes that the generated seed is η-close to uniform given the side information.Source: Reducing the seed length · p. 9
- For sources with conditional min-entropy n − a, combining the quantum-proof Goldreich–Wigderson extractor [GW97] and the lifting theorem [BFS17] with the constant-rate extractor gives output loss O(a + log(1/η)) and seed length O(log a + log(1/η)).The source is split into a reserved block of C0(a + log(1/η)) bits and the remaining block; the constant-rate extractor is applied to the reserved block.Source: Reducing the seed length · p. 9
- Balancing ℓ gives seed length d ≤ (1 + α) log a + (2 + α) log(1/η) + Oα(1), with total output loss Oα(a + log(1/η)).The construction uses polynomial evaluations to produce 2ℓ-wise independent candidate seeds, selected using a public seed; the moment bound yields error η for the stated choice of t.Source: Reducing the seed length · p. 10
- m + Oα(log(D/δ)) random bits suffice by setting a = ⌈log(4D/δ)⌉ and η = ε/4; the extractor’s d-bit seed gives 2d samples.The extractor’s output loss becomes the sampler’s randomness overhead, and the resulting sample complexity is that of Theorem 1.6.Source: Reducing the seed length · p. 10
2 Preliminaries
The preliminaries fix notation and review Hermitian dilation, conditional min-entropy, and quantum side information. They also state entropy inequalities and smoothing tools used in extraction arguments.
2 Preliminaries
- The paper writes extractor source, seed, and output lengths as n, d, and m, and sampler randomness and sample complexity as r and t.It also fixes D, δ, ε, and η for dimension, failure probability, accuracy, and extraction error.Source: §2 · p. 10
2.1 Hermitian dilation
- Hermitian dilation preserves a matrix’s operator norm, is linear, and has eigenvalues in opposite pairs.Its largest eigenvalue equals the original matrix’s operator norm.Source: §2.1 · p. 11
2.2 Quantum side information and extraction
- A cq state pairs a classical register with a quantum register, and trace distance contracts under quantum channels.The paper also defines normalized and subnormalized states and the trace norm.Source: §2.2 · p. 11
- Conditional min-entropy Hmin(X | E) is the negative logarithm of the optimal probability of guessing X by measuring E.It also has a semidefinite characterization through an operator that upper-bounds each conditional block.Source: §2.2 · p. 11
- The preliminaries give leakage and chain inequalities for conditional min-entropy, and introduce smooth min-entropy and extraction from smooth sources.They also define two-universal hashing and cite Renner’s min-entropy inequalities.Source: §2.2 · p. 12
3 The Quantum Extractor–Matrix Sampler Correspondence
The section proves a two-way correspondence between quantum-proof extractors and matrix samplers. The conversion works in both strong and weak/ordinary forms, with parameters relating dimension, entropy, error, and failure probability.
Theorem 1.5
- A strong (resp. weak) log(2D)-qubit-proof extractor with entropy threshold n − log(1/δ) and error ε/2 gives a strong (resp. ordinary) D-dimensional (δ, ε) matrix sampler.The extractor-to-sampler implication is proved by turning matrix tests into measurements and contradicting the extractor guarantee if sampling fails.Source: §3 · pp. 13–14
- A strong (resp. ordinary) D-dimensional (δ, ε) matrix sampler gives a strong (resp. weak) (log D)-qubit-proof extractor with entropy threshold n − a and error ε/2 + 2aδ.This implication holds for every 0 ≤ a ≤ n.Source: §3 · p. 13
Proof of Theorem 1.5
- For the reverse implication, the proof turns measurement operators into bounded matrix tests and bounds distinguishing advantage using the sampler guarantee.The proof separates inputs where the sampler bound fails and uses the source’s min-entropy to bound their total probability.Source: §3 · pp. 14–15
4 A Quantum-Proof Extractor with Linear Output
The section constructs explicit strong quantum-proof extractors with linear output for sources of constant conditional min-entropy rate. Multilinear evaluations on weak designs, followed by hashing, yield a construction with seed length O_µ(h log^2(n/h)), where h = log(n/η).
4.1 Collision bounds and hashing
- Ext(x; y, w) = hw(F(x, y)) is strong quantum-proof when the collision bound and two-universal hash conditions hold.The proof combines a collision bound with the quantum leftover hash lemma.Source: §4.1 · p. 15
4.2 Multilinear evaluations and weak designs
- The construction adapts Raz, Reingold, and Vadhan’s extractor approach to sources with quantum side information.It encodes inputs as distinct formal polynomials and evaluates them on coordinates selected by the weak design.Source: §4.2 · pp. 16–17
- d = λ(v + 1) and m = Mm0 give a strong quantum-proof extractor when the weak-design and parameter conditions of Theorem 4.4 hold.The construction uses an (ℓ, ϱ) weak design and maps each evaluation through a hash.Source: §4.2 · p. 16
4.3 Linear output at constant entropy rate
- m ≥ µn/128 and seed length d = O_µ(h log^2(n/h)) for constant-rate sources when h = log(n/η) is sufficiently small relative to n.The construction is explicit and polynomial-time for fixed µ.Source: §4.3 · pp. 18–19
5 Reducing the Seed Length
The paper reduces the seed length for constant-rate strong quantum-proof extraction to O_µ(log(n/η)) while retaining linear output. It generates internal extractor seeds from sampled source blocks and combines extractors to obtain the stated construction.
5 Reducing the Seed Length
- The section reduces the linear-output construction’s seed length from O_µ(h log^2(n/h)) to O_µ(h), with h = log(n/η).The output length remains linear.Source: §5 · p. 19
5.1 Sampling and extraction tools
- The construction uses an entropy sampler and a short-seed strong quantum-proof extractor as ingredients.The short-seed extractor has seed length at most 2m + C log(n/η) for output length m within its stated entropy bound.Source: §5.1 · pp. 19–20
5.2 Generating the internal seed
- Theorem 5.3 constructs an explicit strong quantum-proof extractor for constant-rate sources with error as small as 2^-cn.Its proof processes sampled blocks in reverse order and uses their outputs to generate internal seeds.Source: §5.2 · pp. 20–21
5.3 Combining the extractors
- The public seed has length O_µ(log(n/η)) and the output has length Ω_µ(n) for constant-rate sources in the stated error range.The construction is polynomial-time for fixed µ, θ.Source: §5.3 · p. 25
6 Extraction with Small Entropy Deficiency
This section constructs strong quantum-proof extractors for sources with entropy deficiency a, first controlling output loss and then refining seed length. The refinement trades additional output loss for a seed length logarithmic in the deficiency and inverse error.
6.1 A base extractor with small output loss
- The base construction has public seed length dB = O(log a + log(1/(bη))) and output loss n−m = O(a + log(1/(bη))); both F and HL are computable in polynomial time.Source: §6.1 · p. 27
6.2 Seed-length refinement by limited independence
- Theorem 6.4 bounds output length by m ≥ N − O(a + log(1/η) + ℓ[log a + log(1/η) + log ℓ]).The construction uses 2ℓ-wise independent candidate seeds generated from polynomial evaluations.Source: §6.2 · pp. 27–28
- d ≤ (1 + α) log a + (2 + α) log(1/η) + O_α(1) for the refined extractor.Its output length is at least n − O_α(a + log(1/η)).Source: §6 · p. 25, §6.2 · p. 30
7 Strong Matrix Samplers
The section obtains strong matrix samplers by converting strong quantum-proof extractors through the sampler–extractor correspondence. It also proves lower bounds on sample complexity and randomness overhead.
7.1 From extractors to samplers
- For sufficiently large absolute constant C0, F:{0,1}^N×{0,1}^d→{0,1}^m is a strong quantum-proof (N−a, ε/4) extractor; Samp(x,y)=F(x,y) is a strong D-dimensional (δ,ε) matrix sampler.Source: §7.1 · p. 30
- The sampler construction achieves the bounds stated in Corollary 7.1 for every fixed α > 0 and 0 < δ ≤ ε ≤ 1/2.When ε ≥ Λ^-C for fixed C, the seed length is r = m + O_α,C(Λ), where Λ = log(2D/δ).Source: §7.1 · p. 31
7.2 Lower bounds
- r ≥ m + log D + log(1/δ) − 1 random bits are necessary for a strong D-dimensional matrix sampler.The proof partitions sampler seeds and constructs diagonal tests.Source: §7.2 · pp. 31–32
- Under 0 < δ ≤ ε ≤ 1/2, the sample complexity has the lower bound t = Ω(ε^-2 log(D/δ)), so this dependence on ε, D, and δ is necessary.Source: §7.2 · p. 32
A Proofs for Smooth Min-Entropy
The proof handles smooth conditional min-entropy by choosing a nearby subnormalized cq state with increased entropy, then extending and dephasing it while controlling purified distance. Normalizing the state preserves the needed entropy threshold and yields a nearby normalized state.
A Proofs for Smooth Min-Entropy
- A nearby extension to register L is dephased in the classical bases of X and L, preserving the XE marginal and leaving ρXLE unchanged.Contractivity bounds the purified distance after dephasing by τ.Source: A Proofs for Smooth Min-Entropy · p. 37
- The proof applies the classical leakage inequality to the subnormalized extension, using the trace-dependent adjustment to conditional min-entropies.The cited inequality is stated to hold for subnormalized states; normalization adds log p to both conditional min-entropies.Source: A Proofs for Smooth Min-Entropy · p. 38
- p ≥ 15/16, so normalizing the chosen subnormalized state preserves conditional min-entropy at least k while keeping it close to the original.The proof assumes 0 ≤ τ ≤ 1/4; the normalized state has distance at most τ + 1 − p.Source: A Proofs for Smooth Min-Entropy · p. 38
- For τ > 1/4, the lemma’s error bound follows directly from the upper bound of one on trace distance.For smaller τ, the proof instead selects a nearby subnormalized cq state with conditional min-entropy at least k + 1.Source: A Proofs for Smooth Min-Entropy · p. 38
B.1 Entropy sampling with a public seed
This appendix combines explicit sampling with entropy sampling on randomly selected coordinates. It also explains how a public seed can replace the sampled subset in the conditioning register while preserving the entropy argument.
B.1 Entropy sampling with a public seed
- r = Oε(log N + log(1/δ)) bits suffice for an explicit map at sample sizes Cε log(1/δ) ≤ t ≤ N.The stated sampler bound applies to every f : [N] → [0, 1].Source: §B.1 · p. 38
- The distinct-sample construction starts from Vadhan’s sampler with threshold β=1/2 and accuracy ε/4, then transforms each test f into a bounded function g.The stated sample-size and seed-length bounds are inherited from that sampler.Source: §B.1 · p. 39
- Entropy sampling considers a normalized cq source X=(X1,…,XN) and an independent random t-element subset J, then forms B=XJ in increasing coordinate order.The theorem uses trace-norm smoothing.Source: §B.1 · p. 39
- The proof replaces J by the public seed R in the conditioning register using a classical channel, with B=XJ and R independent of XE.Applying the channel cannot decrease B’s smooth min-entropy by contractivity and data processing; the proof invokes the entropy-sampling theorem.Source: §B.1 · p. 39
B.2 Short-seed extraction
The section uses short-seed hashing to extract from cq sources and establishes a strong extraction guarantee. It gives a seed bound and describes a polynomial-time hash construction.
B.2 Short-seed extraction
- The short-seed hashing theorem provides an explicit map H:{0,1}^n × {0,1}^d → {0,1}^m with d ≤ 2m + O(log(n/η0)).For a cq source and independent uniform seed W, the output is Z=H(X,W).Source: §B.2 · p. 40
- d ≤ 2m + O(log(n/η)) bits suffice for the strong extractor when k ≥ m + 4 log(1/η) + 12.The seed is uniform and independent of XE, as required for strong extraction.Source: §B.2 · p. 40
- The hash family combines polynomial evaluation with two-universal hashing, and both operations run in polynomial time.The required finite field can be constructed in fixed characteristic.Source: §B.2 · p. 40