Reed-Solomon Codes over Cyclic Polynomial Ring with Lower Encoding/Decoding Complexity

Wenhao Liu^§, Zhengyi Jiang^§, Zhongyi Huang^§ Linqi Song^⋆, Hanxu Hou^†^‡
^§ Department of Mathematical Sciences, Tsinghua University
^⋆ Department of Computer Science, City University of Hong Kong
^† Dongguan University of Technology

Abstract

⁰⁰0^‡: Corresponding author. This work was partially supported by the Key-Area Research and Development Program of Guangdong Province 2020B0101110003, National Key R&D Program of China (No. 2020YFA0712300), the National Natural Science Foundation of China (No. 62071121, 62371411, 12025104), Basic Research Enhancement Program of China under Grant 2021-JCJQ-JJ-0483.

Reed-Solomon (RS) codes are constructed over a finite field that have been widely employed in storage and communication systems. Many fast encoding/decoding algorithms such as fast Fourier transform (FFT) and modular approach are designed for RS codes to reduce the encoding/decoding complexity defined as the number of XORs involved in the encoding/decoding procedure. In this paper, we present the construction of RS codes over the cyclic polynomial ring $\mathbb{F}_{2}[x]/(1+x+\ldots+x^{p-1})$ and show that our codes are maximum distance separable (MDS) codes. Moreover, we propose the FFT and modular approach over the ring that can be employed in our codes for encoding/decoding complexity reduction. We show that our codes have 17.9% encoding complexity reduction and 7.5% decoding complexity reduction compared with RS codes over finite field, for $(n,k)=(2048,1984)$ .

I Introduction

Reed-Solomon (RS) codes are a class of maximum distance separable (MDS) codes that have been widely employed in communication and storage systems [1]. An $(n,k)$ RS code encodes $k$ data symbols to obtain the $n$ codeword symbols over the field $\mathbb{F}_{2^{q}}$ , where $n,k,q$ are positive integers, $n>k$ and $n\leq 2^{q}$ . In general, we can construct RS codes by choosing the Vandermonde matrix as generator matrix and the codes are MDS if and only if $n\leq 2^{q}$ .

Encoding/decoding complexity defined as the total number of XORs involved in the encoding/decoding (error correction) procedure is the key metric for RS codes. Field addition and field multiplication are two basic operations in the encoding/decoding procedure, where one field addition over $\mathbb{F}_{2^{q}}$ requires $q$ XORs and one field multiplication over $\mathbb{F}_{2^{q}}$ requires much more XORs. Many fast encoding/decoding algorithms [2, 3, 4, 5, 6, 7, 8, 9, 10] have been proposed for encoding/decoding complexity reduction. We can divide the existing fast encoding/decoding algorithms into two methods. One method is to reduce the number of basic field operations, including addition and multiplication operations, such as [2, 3, 4, 5]. To the best of our knowledge, the fast Fourier transform (FFT) and modular approach [4] achieve the best asymptotic number of field operations, where the number of field operations involved in encoding procedure is $O(n\log(n-k))$ and the number of field operations involved in decoding procedure is $O(n\log(n-k)+(n-k)\log^{2}(n-k))$ . Another method [6, 7, 8, 9, 10] is to construct RS codes over the cyclic polynomial ring $\mathbb{F}_{2}[x]/(1+x+\ldots+x^{p-1})$ or more general ring that can avoid the expensive field multiplication. We will present new fast encoding/decoding algorithms for RS codes by jointly considering the above two methods.

The main contributions of the paper are summarized as follows. First, we propose RS codes over the cyclic polynomial ring $\mathbb{F}_{2}[x]/(1+x+\ldots+x^{p-1})$ and show that our codes are MDS codes. Second, we propose fast encoding/decoding algorithms for our codes by employing the FFT and modular approach over the ring $\mathbb{F}_{2}[x]/(1+x+\ldots+x^{p-1})$ in the encoding/decoding procedure. We show that our codes can achieve the best asymptotic number of field operations required in the encoding/decoding procedure. Third, we evaluate the encoding/decoding complexity for our codes and the RS codes over finite field to show that our codes have lower encoding/decoding complexity. Specifically, our codes can reduce $17.9\%$ encoding complexity and $7.5\%$ decoding complexity compared with RS codes over the field $\mathbb{F}_{2^{11}}$ with the fast encoding/decoding algorithms in [4], for $(n,k)=(2048,1984)$ .

II RS Codes over Cyclic Polynomial Ring

In this section, we present the construction of our RS codes over the cyclic polynomial ring $\mathbb{F}_{2}[x]/(1+x+\ldots+x^{p-1})$ , where $p$ is an odd number. Then we show our codes are MDS codes. Throughout the paper, we use the notation $M_{p}(x)=1+x+\ldots+x^{p-1}$ and $[t]=\{1,2,\ldots,t\}$ for positive integer $t$ . Let $|S|$ be the number of elements in set $S$ .

II-A Construction

We denote the ring $\mathbb{F}_{2}[x]/(M_{p}(x))$ by $\mathcal{R}_{p}$ and our codes are operated over $\mathcal{R}_{p}$ , where $p$ is an odd number. We can factorize $M_{p}(x)$ as a product of $t$ distinct irreducible polynomials over $\mathbb{F}_{2}$ , i.e.,

M_{p}(x)=\prod\limits_{i=1}^{t}p_{i}(x),

where $t\geq 1$ and $p_{i}(x)\in\mathbb{F}_{2}[x]$ for $i\in[t]$ .

By the Chinese remainder theorem, the ring $\mathcal{R}_{p}$ is isomorphic to the direct sum of the $t$ fields $\mathbb{F}_{2}[x]/(p_{1}(x))$ , $\mathbb{F}_{2}[x]/(p_{2}(x))$ , $\ldots$ , $\mathbb{F}_{2}[x]/(p_{t}(x))$ [11, Theorem 6]. The isomorphism $\Phi:\mathcal{R}_{p}\rightarrow$
$(\mathbb{F}_{2}[x]/(p_{1}(x)),\ldots,\mathbb{F}_{2}[x]/(p_{t}(x)))$ is defined by

\displaystyle\Phi(r(x))=(r(x)\bmod p_{1}(x),\ldots,r(x)\bmod p_{t}(x)),

(1)

where $r(x)\in\mathcal{R}_{p}$ . For element $r\in\mathcal{R}_{p}$ , denote the $i$ -th component of $\Phi(r)$ as $r^{(i)}$ , i.e., $\Phi(r)=(r^{(1)},r^{(2)},\ldots,r^{(t)})$ . We can directly obtain the following result without proof.

Lemma 1.

The polynomial $r(x)\in\mathcal{R}_{p}$ is invertible if and only if $\forall i\in[t],r(x)\not\equiv 0\pmod{p_{i}(x)}$ .

Next, we provide the definition of our $(n=2^{m},k=2^{m}-2^{\mu})$ RS codes over $\mathcal{R}_{p}$ , where $m=\gcd(\deg(p_{1}(x)),\ldots,\deg(p_{t}(x)))$ and $\mu\in\{0,1,\ldots,m-1\}$ .

For $i=1,2,\ldots,t$ , since $\lvert\mathbb{F}_{2}[x]/(p_{i}(x))\rvert=2^{\deg(p_{i})}$ and $m\mid\deg(p_{i})$ , there exists a unique subfield of size $2^{m}$ in $\mathbb{F}_{2}[x]/(p_{i}(x))$ . We choose a basis of the subfield and denote it as $\{v_{j}^{(i)}\}_{j=0,1,\ldots,m-1}$ . For $j=0,1,\ldots,m-1$ , let $v_{j}=\Phi^{-1}(v_{j}^{(1)},v_{j}^{(2)},\ldots,v_{j}^{(t)})$ , where $\Phi^{-1}$ is the inverse mapping of $\Phi$ which is in Eq. (1). For $l=0,1,\ldots,2^{m}-1$ , define

\omega_{l}=l_{0}v_{0}+l_{1}v_{1}+\ldots+l_{m-1}v_{m-1},

(2)

where $l_{0},l_{1},\ldots,l_{m-1}\in\{0,1\}$ and $(l_{0},l_{1},\ldots,l_{m-1})$ is the binary representation of $l$ .

Given the $k$ data symbols $g_{0},g_{1},\ldots,g_{k-1}\in\mathcal{R}_{p}$ , we will proof in Theorem 2 that there exists a polynomial $f(x)=\sum_{i=0}^{k-1}f_{i}x^{i}\in\mathcal{R}_{p}[x]$ such that $f(\omega_{2^{\mu}+i})=g_{i}$ for $i=0,1,\ldots,k-1$ and we define the $n$ codeword symbols as

(f(\omega_{0}),f(\omega_{1}),\ldots,f(\omega_{n-1})),

thus our codes are systematic codes. The codes defined above can be viewed as replacing the data symbols with $\{f_{i}\}_{i=0}^{k-1}$ and constructing codes by the generator matrix

\begin{pmatrix}1&1&\cdots&1\\ \omega_{0}&\omega_{1}&\cdots&\omega_{n-1}\\ \vdots&\vdots&\ddots&\vdots\\ \omega_{0}^{k-1}&\omega_{1}^{k-1}&\cdots&\omega_{n-1}^{k-1}\end{pmatrix}.

(3)

For $l=0,1,\ldots,n-1$ , denote $\Phi(\omega_{l})=(\omega_{l}^{(1)},\omega_{l}^{(2)},\ldots,\omega_{l}^{(t)})$ . We can compute that $\omega_{l}^{(i)}=l_{0}v_{0}^{(i)}+l_{1}v_{1}^{(i)}+\ldots+l_{m-1}v_{m-1}^{(i)}$ , where $i=1,2,\ldots,t$ and $(l_{0},l_{1},\ldots,l_{m-1})$ is the binary representation of $l$ . The next theorem shows that our codes are well-defined and are MDS codes.

Theorem 2.

Our codes are well-defined and are MDS codes.

Proof:

Firstly, we proof that the determinant of any $k\times k$ submatrix of the generator matrix in Eq. (3) is invertible in $\mathcal{R}_{p}$ . This is equivalent to show that the determinant

\prod\limits_{0\leq l<t\leq k-1}(\omega_{j_{l}}-\omega_{j_{t}})

is invertible in $\mathcal{R}_{p}$ , where $0\leq j_{0}\leq j_{1}\leq\cdots\leq j_{k-1}\leq n-1$ . And it is equivalent to proof that $\forall\ 0\ \leq i<j\leq{n-1}$ , $\omega_{i}-\omega_{j}$ is invertible in $\mathcal{R}_{p}$ . For any $j\neq k$ , we can show

\omega_{j}-\omega_{k}\equiv\omega_{j}^{(i)}-\omega_{k}^{(i)}\not\equiv 0\pmod{% p_{i}(x)},\forall i\in[t],

by the fact that the binary representations of $j$ and $k$ are different and $v_{0}^{(i)},v_{1}^{(i)},\ldots,v_{m-1}^{(i)}$ are linearly independent for any $i\in[t]$ . Therefore, $\omega_{j}-\omega_{k}$ is invertible by Lemma 1, and the determinant of any $k\times k$ submatrix of the generator matrix in Eq. (3) is invertible in $\mathcal{R}_{p}$ .

Given the $k$ data symbols $g_{0},g_{1},\ldots,g_{k-1}\in\mathcal{R}_{p}$ , finding a polynomial $f(x)=\sum_{i=0}^{k-1}f_{i}x^{i}\in\mathcal{R}_{p}[x]$ such that $f(\omega_{2^{\mu}+i})=g_{i}$ for $i=0,1,\ldots,k-1$ is equivalent to solving the equation

\begin{pmatrix}f_{0}\\ f_{1}\\ \vdots\\ f_{k-1}\end{pmatrix}^{T}\begin{pmatrix}1&1&\cdots&1\\ \omega_{n-k}&\omega_{n-k+1}&\cdots&\omega_{n-1}\\ \vdots&\vdots&\ddots&\vdots\\ \omega_{n-k}^{k-1}&\omega_{n-k+1}^{k-1}&\cdots&\omega_{n-1}^{k-1}\end{pmatrix}% =\begin{pmatrix}g_{0}\\ g_{1}\\ \vdots\\ g_{k-1}\end{pmatrix}.

(4)

Since the determinant of any $k\times k$ submatrix of the generator matrix in Eq. (3) is invertible, the polynomial $f(x)$ exists and is unique, thus our codes are well-defined.

Similar to the proof in [6], our codes are MDS codes if and only if the determinant of any $k\times k$ submatrix of the generator matrix in Eq. (3) is invertible in $\mathcal{R}_{p}$ . Therefore, our codes are MDS codes.

∎

III Encoding and Decoding Methods

In this section, we present FFT and the inverse FFT (IFFT) algorithms over $\mathcal{R}_{p}$ . Then the encoding/decoding algorithms based on FFT and modular approach for our codes are presented. By a small abuse of the notation, we use the same indeterminate $\alpha$ when referring to polynomials as elements in $\mathcal{R}_{p}$ or $\mathbb{F}_{2}[x]/(p_{i}(x)),\forall i\in[t]$ . When the modulo operation is applied to a vector, it represents performing the modulo operation on each component.

For simplicity, we assume $m=\deg(p_{1}(x))=\deg(p_{2}(x))=\cdots=\deg(p_{t}(x))$ in this section, in which case the subfield generated by $\{\omega_{l}^{(i)}\}_{l=0,1,\ldots,n-1}$ is identical to $\mathbb{F}_{2}[x]/(p_{i}(x))$ for $i=1,2,\ldots,t$ . Otherwise, the same argument holds by replacing $\mathbb{F}_{2}[x]/(p_{i}(x))$ with the subfield generated by $\{\omega_{l}^{(i)}\}_{l=0,1,\ldots,n-1}$ for $i=1,2,\ldots,t$ .

III-A FFT and IFFT Algorithms over $\{\mathbb{F}_{2}[x]/(p_{i}(x))\}_{i\in[t]}$ and $\mathcal{R}_{p}$

The FFT and IFFT algorithms over $\{\mathbb{F}_{2}[x]/(p_{i}(x))\}_{i\in[t]}$ and $\mathcal{R}_{p}$ are presented as follows.

(1)

[FFT and IFFT Algorithms over $\{\mathbb{F}_{2}[x]/(p_{i}(x))\}_{i\in[t]}$ ]

For $i=1,2,\ldots,t$ , the subspace polynomial [12] over $\mathbb{F}_{2}[x]/(p_{i}(x))$ is defined by $s_{\tau}^{(i)}(x)=\prod\limits_{l=0}^{2^{\tau}-1}(x-\omega_{l}^{(i)})$ for $\tau=0,1,\ldots,m$ . For $l=0,1,\ldots,2^{m}-1$ , define

\,\overline{\!{X}}_{l}^{(i)}(x)=\frac{s_{0}^{(i)}(x)^{l_{0}}s_{1}^{(i)}(x)^{l_% {1}}\cdots s^{(i)}_{m-1}(x)^{l_{m-1}}}{s_{0}^{(i)}(v_{0}^{(i)})^{l_{0}}s_{1}^{% (i)}(v_{1}^{(i)})^{l_{1}}\cdots s^{(i)}_{m-1}(v_{m-1}^{(i)})^{l_{m-1}}},

where $(l_{0},l_{1},\ldots,l_{m-1})$ is the binary representation of $l$ . To avoid confusion, we use $\alpha$ instead of $x$ to denote $\mathbb{F}_{2}[x]/(p_{i}(x))$ when it comes to polynomial ring $(\mathbb{F}_{2}[\alpha]/(p_{i}(\alpha)))[x]$ . Since the degree of $\,\overline{\!{X}}_{l}^{(i)}(x)$ is $l$ for $l=0,1,\ldots,2^{m}-1$ , the set $\,\overline{\!{X}}^{(i)}=\{\,\overline{\!{X}}_{0}^{(i)},\,\overline{\!{X}}_{1}% ^{(i)},\ldots,\,\overline{\!{X}}_{2^{m}-1}^{(i)}\}$ is a basis of $(\mathbb{F}_{2}[\alpha]/(p_{i}(\alpha)))[x]/(x^{2^{m}}-x)$ . For any $\tau\in\{0,1,\ldots,m\}$ , any $f(x)\in(\mathbb{F}_{2}[\alpha]/(p_{i}(\alpha)))[x]$ with $\deg(f(x))<2^{\tau}$ can be uniquely represented as the linear combination $f(x)=\sum\limits_{l=0}^{2^{\tau}-1}f_{l}\,\overline{\!{X}}_{l}^{(i)}(x)$ . The vector $\,\overline{\!{f}}=(f_{0},f_{1},\ldots,f_{2^{\tau}-1})$ is the coordinate vector of $f(x)$ with respect to the basis $\,\overline{\!{X}}^{(i)}$ . Then the FFT over the field $\mathbb{F}_{2}[x]/(p_{i}(x))$ , denoted by $\text{FFT}_{\,\overline{\!{X}}^{(i)}}$ , is defined by

\displaystyle\text{FFT}_{\,\overline{\!{X}}^{(i)}}(\,\overline{\!{f}},\tau,% \beta)=(f(\omega_{0}^{(i)}+\beta),f(\omega_{1}^{(i)}+\beta),\ldots,f(\omega_{2% ^{\tau}-1}^{(i)}+\beta)),

where $\beta\in\mathbb{F}_{2}[x]/(p_{i}(x))$ .

Since the set $\{\omega_{0}^{(i)},\omega_{1}^{(i)},\ldots,\omega_{2^{m}-1}^{(i)}\}$ forms a finite field of size $2^{m}$ and $\omega_{l}^{(i)}=l_{0}v_{0}^{(i)}+l_{1}v_{1}^{(i)}+\ldots+l_{m-1}v_{m-1}^{(i)}$ holds, $\text{FFT}_{\,\overline{\!{X}}^{(i)}}$ is well-defined and can be calculated by [4, Algorithm 2].

(2)

[FFT and IFFT Algorithms over $\mathcal{R}_{p}$ ]

Similarly, define $s_{\tau}(x)=\prod\limits_{l=0}^{2^{\tau}-1}(x-\omega_{l})\in\mathcal{R}_{p}[x]$ for $\tau=0,1,\ldots,m$ . For $l=0,1,\ldots,2^{m}-1$ , define

\,\overline{\!{X}}_{l}(x)=\frac{s_{0}(x)^{l_{0}}s_{1}(x)^{l_{1}}\cdots s_{m-1}% (x)^{l_{m-1}}}{s_{0}(v_{0})^{l_{0}}s_{1}(v_{1})^{l_{1}}\cdots s_{m-1}(v_{m-1})% ^{l_{m-1}}},

where $(l_{0},l_{1},\ldots,l_{m-1})$ is the binary representation of $l$ . Since we proved that for any $i\neq j$ , $\omega_{i}-\omega_{j}$ is invertible in $\mathcal{R}_{p}$ in Theorem 2, we can show that $s_{i}(v_{i})$ is invertible in $\mathcal{R}_{p}$ for $i=0,1,\ldots,m-1$ . Therefore, $\,\overline{\!{X}}_{l}(x)$ is well defined, the degree of $\,\overline{\!{X}}_{l}(x)$ is $l$ and the leading coefficient is invertible. Then the set $\,\overline{\!{X}}=\{\,\overline{\!{X}}_{0},\,\overline{\!{X}}_{1},\ldots,\,% \overline{\!{X}}_{2^{m}-1}\}$ forms a basis of $\mathcal{R}_{p}[x]/(x^{2^{m}}-x)$ . Similarly, for any $\tau\in\{0,1,\ldots,m\}$ and $f(x)\in\mathcal{R}_{p}[x]$ with $\deg(f(x))<2^{\tau}$ , the coordinate vector of $f(x)$ with respect to the basis $\,\overline{\!{X}}$ is denoted as $\,\overline{\!{f}}$ . Then the FFT over $\mathcal{R}_{p}$ , denoted by $\text{FFT}_{\,\overline{\!{X}}}$ , is defined by

\displaystyle\text{FFT}_{\,\overline{\!{X}}}(\,\overline{\!{f}},\tau,\beta)=(f% (\omega_{0}+\beta),f(\omega_{1}+\beta),\ldots,f(\omega_{2^{\tau}-1}+\beta)),

where $\beta\in\mathcal{R}_{p}$ .

Next we provide the algorithm for computing $\text{FFT}_{\,\overline{\!{X}}}(\,\overline{\!{f}},\tau,\beta)$ and prove its correctness. The FFT algorithm over $\mathcal{R}_{p}$ is presented in Algorithm 1, where $f(x)=\sum\limits_{l=0}^{2^{\tau}-1}f_{l}\,\overline{\!{X}}_{l}(x)\in\mathcal{R% }_{p}[x]$ and $\deg(f(x))<2^{\tau}$ . We proof in Theorem 3 that Algorithm 1 exactly output $\text{FFT}_{\,\overline{\!{X}}}(\,\overline{\!{f}},\tau,\beta)$ .

Algorithm 1

\text{FFT}_{\,\overline{\!{X}}}(\,\overline{\!{f}},\tau,\beta)

over

\mathcal{R}_{p}

\,\overline{\!{f}}

= (

{f}_{0}

{f}_{1}

,…,

{f}_{2^{\tau}-1}

\tau

\beta

(f(\omega_{0}+\beta),f(\omega_{1}+\beta)),\ldots,f(\omega_{2^{\tau}-1}+\beta))

3:if

\tau

= 0 then

4: return

{f}_{0}

5:end if

6:for

l

= 0,1,…,

2^{\tau-1}-1

a_{l}^{0}={f}_{l}+\frac{s_{\tau-1}(\beta)}{s_{\tau-1}(v_{\tau-1})}{f}_{l+2^{% \tau-1}}

a_{l}^{1}=a_{l}^{0}+{f}_{l+2^{\tau-1}}

9:end for

10:

a^{0}

(a_{0}^{0},a_{1}^{0},\ldots,a_{2^{\tau-1}-1}^{0})

a^{1}

(a_{0}^{1},a_{1}^{1},\ldots,a_{2^{\tau-1}-1}^{1})

11:

A_{0}

\text{FFT}_{\,\overline{\!{X}}}(a^{0},\tau-1,\beta)

A_{1}

\text{FFT}_{\,\overline{\!{X}}}(a^{1},\tau-1,v_{\tau-1}+\beta)

12:return

(A_{0},A_{1})

Theorem 3.

Algorithm 1 exactly output $\text{FFT}_{\,\overline{\!{X}}}(\,\overline{\!{f}},\tau,\beta)=(f(\omega_{0}+% \beta),f(\omega_{1}+\beta)),\ldots,f(\omega_{2^{\tau}-1}+\beta))$ .

Proof:

Denote $\Phi(f_{j})=(f_{j}^{(1)},f_{j}^{(1)},\ldots,f_{j}^{(t)})$ for $j=0,1,\ldots,2^{\tau}-1$ and $\Phi(\beta)=(\beta^{(1)},\beta^{(2)},\ldots,\beta^{(t)})$ . For $i=1,2,\ldots,t$ , define $f^{(i)}(x)=\sum\limits_{j=0}^{2^{\tau}-1}{f}_{j}^{(i)}\,\overline{\!{X}}_{j}^{% (i)}(x)$ and denote $\,\overline{\!{f^{(i)}}}=({f}_{0}^{(i)},{f}_{1}^{(i)},\ldots,{f}_{2^{\tau}-1}^% {(i)})$ as the coefficient vector of $f^{(i)}(x)$ with respect to the basis $\,\overline{\!{X}}^{(i)}$ .

For $i=1,2,\ldots,t$ , taking all elements in the computation process modulo $p_{i}(\alpha)$ component-wise, the input is $\,\overline{\!{f^{(i)}}}=({f}_{0}^{(i)},{f}_{1}^{(i)},\ldots,{f}_{2^{\tau}-1}^% {(i)})$ . Therefore, the input of Algorithm 1 is identical to the input of $\text{FFT}_{\,\overline{\!{X}}^{(i)}}(\,\overline{\!{f^{(i)}}},\tau,\beta^{(i)})$ in [4, Algorithm 2] when taken modulo $p_{i}(\alpha)$ .

For $i=1,2,\ldots,t$ , it is straightforward to verify that the intermediate steps of this algorithm are also identical to the $\text{FFT}_{\,\overline{\!{X}}^{(i)}}(\,\overline{\!{f^{(i)}}},\tau,\beta^{(i)})$ algorithm in [4, Algorithm 2] under modulo $p_{i}(\alpha)$ by the following equation

\frac{s_{\tau-1}(\beta)}{s_{\tau-1}(v_{\tau-1})}\equiv\frac{s_{\tau-1}^{(i)}(% \beta^{(i)})}{s_{\tau-1}^{(i)}(v^{(i)}_{\tau-1})}\pmod{p_{i}(\alpha)}.

Based on the above discussion, the output of Algorithm 1 is equivalent to the output of
$\text{FFT}_{\,\overline{\!{X}}^{(i)}}(\,\overline{\!{f^{(i)}}},\tau,\beta^{(i)})$ under modulo $p_{i}(\alpha)$ for $i=1,2,\ldots,t$ . Assuming the output of Algorithm 1 is $(r_{1},\ldots,r_{2^{\tau}-1})$ , then we have

\displaystyle(r_{1},\ldots,r_{2^{\tau}-1})\equiv(f^{(i)}(\omega_{0}^{(i)}+% \beta^{(i)}),f^{(i)}(\omega_{1}^{(i)}+\beta^{(i)})),\ldots,f^{(i)}(\omega_{2^{% \tau}-1}^{(i)}+\beta^{(i)}))\pmod{p_{i}(\alpha)}.

(5)

Since $\Phi$ is a ring isomorphism, it must be the case that $r_{j}=\Phi^{-1}(f^{(1)}(\omega_{j}^{(1)}+\beta^{(1)}),f^{(2)}(\omega_{j}^{(2)}% +\beta^{(2)}),\ldots,f^{(t)}(\omega_{j}^{(t)}+\beta^{(t)}))=f(\omega_{j}+\beta)$ for $j=0,1,\ldots,2^{\tau}-1$ . Therefore Algorithm 1 exactly output $(r_{1},\ldots,r_{2^{\tau}-1})=(f(\omega_{0}+\beta),f(\omega_{1}+\beta),\ldots,% f(\omega_{2^{\tau}-1}+\beta))$ .

∎

The IFFT algorithm over $\{\mathbb{F}_{2}[x]/(p_{i}(x))\}_{i\in[t]}$ and $\mathcal{R}_{p}$ can be defined similarly.

III-B Encoding Algorithm

Given the $k$ data symbols $g_{0},g_{1},\ldots,g_{k-1}\in\mathcal{R}_{p}$ , there exists $f(x)=\sum_{i=0}^{k-1}f_{i}x^{i}\in\mathcal{R}_{p}[x]$ such that $f(\omega_{2^{\mu}+i})=g_{i}$ for $i=0,1,\ldots,k-1$ by the construction in Section II. For $j=1,2,\ldots,2^{m-\mu}$ , denote

F_{j}=(f(\omega_{(j-1)\cdot 2^{\mu}}),f(\omega_{(j-1)\cdot 2^{\mu}+1}),\ldots,% f(\omega_{j\cdot 2^{\mu}-1})).

By the definition of our codes, $F_{1}$ are the $2^{\mu}$ parity symbols and $F_{2},F_{3},\ldots,F_{2^{m-\mu}}$ are the $2^{m}-2^{\mu}$ data symbols. Then we only need to compute the parity symbols $F_{1}$ .

For any $f(x)\in\mathcal{R}_{p}[x]$ with $\deg(f(x))=d$ , i.e., $f(x)=\sum\limits_{j=0}^{d}f_{j}x^{j}$ , denote $f^{(i)}(x)\in(\mathbb{F}_{2}[\alpha]/(p_{i}(\alpha)))[x]$ by

f^{(i)}(x)=\sum\limits_{j=0}^{d}f_{j}^{(i)}x^{j},

(6)

where $i=1,2,\ldots,t$ and $\Phi(f_{j})=(f_{j}^{(1)},f_{j}^{(2)},\ldots,f_{j}^{(t)})$ for $j=0,1,\ldots,d$ .

For $i=1,2,\ldots,t$ and $j=1,2,\ldots,2^{m-\mu}$ , define $F^{(i)}=(f^{(i)}(\omega_{0}^{(i)}),f^{(i)}(\omega_{1}^{(i)}),\ldots,f^{(i)}(% \omega_{n-1}^{(i)}))$ and

F_{j}^{(i)}=(f^{(i)}(\omega_{(j-1)\cdot 2^{\mu}}),f^{(i)}(\omega_{(j-1)\cdot 2% ^{\mu}+1}),\ldots,f^{(i)}(\omega_{j\cdot 2^{\mu}-1})).

For $i=1,2,\ldots,t$ , $F^{(i)}$ is a codeword of RS codes over the field $\mathbb{F}_{2}[x]/(p_{i}(x))$ whose data symbols are $\{F_{j}^{(i)}\}_{j=2}^{2^{m-\mu}}$ . The next Lemma shows the formula for calculating $F_{1}$ .

Lemma 4.

The parity symbols of our RS codes can be calculated as follows,

\displaystyle F_{1}=\text{FFT}_{\,\overline{\!{X}}}(\text{IFFT}_{\,\overline{% \!{X}}}(F_{2},\mu,\omega_{2^{\mu}})+\cdots+\text{IFFT}_{\,\overline{\!{X}}}(F_% {2^{m-\mu}},\mu,\omega_{2^{m}-2^{\mu}}),\mu,0).

Proof:

By the definition of $\text{FFT}_{\,\overline{\!{X}}}$ and $\text{FFT}_{\,\overline{\!{X}}^{(i)}}$ , the following equation can be concluded for any $f\in\mathcal{R}_{p}[x]$ and $i\in[t]$ ,

\text{FFT}_{\,\overline{\!{X}}}(\,\overline{\!{f}},\mu,\beta)\equiv\text{FFT}_% {\,\overline{\!{X}}^{(i)}}(\,\overline{\!{f^{(i)}}},\mu,\beta^{(i)})\pmod{p_{i% }(\alpha)},

(7)

where $\,\overline{\!{f^{(i)}}}$ denotes the coordinate vector of $f^{(i)}(x)$ with respect to the basis $\,\overline{\!{X}}^{(i)}$ and modulo is taken component-wise.

Similarly,

\text{IFFT}_{\,\overline{\!{X}}}(\,\overline{\!{f}},\mu,\beta)\equiv\text{IFFT% }_{\,\overline{\!{X}}^{(i)}}(\,\overline{\!{f^{(i)}}},\mu,\beta^{(i)})\pmod{p_% {i}(\alpha)}.

(8)

Therefore, applying these two equations iteratively yields

		$\displaystyle\text{FFT}_{\,\overline{\!{X}}}(\text{IFFT}_{\,\overline{\!{X}}}(% F_{2},\mu,\omega_{2^{\mu}})+\ldots+\text{IFFT}_{\,\overline{\!{X}}}(F_{2^{m-% \mu}},\mu,\omega_{2^{m}-2^{\mu}}),\mu,0)$		(9)
	$\displaystyle\equiv$	$\displaystyle\text{FFT}_{\,\overline{\!{X}}^{(i)}}(\text{IFFT}_{\,\overline{\!% {X}}^{(i)}}(F_{2}^{(i)},\mu,\omega_{2^{\mu}}^{(i)})+\ldots+\text{IFFT}_{\,% \overline{\!{X}}^{(i)}}(F_{2^{m-\mu}}^{(i)},\mu,\omega_{2^{m}-2^{\mu}}^{(i)}),% \mu,0)\pmod{p_{i}(\alpha)}.$		(9)

For $i\in[t]$ , since $F^{(i)}$ is a codeword of RS codes over the field $\mathbb{F}_{2}[x]/(p_{i}(x))$ and $F_{2}^{(i)},F_{3}^{(i)},\ldots,F_{2^{m-\mu}}^{(i)}$ are data symbols, then the following equation holds for $i\in[t]$ by [13, Lemma 10].

\displaystyle F_{1}^{(i)}=

\displaystyle\text{FFT}_{\,\overline{\!{X}}^{(i)}}(\text{IFFT}_{\,\overline{\!% {X}}^{(i)}}(F_{2}^{(i)},\mu,\omega_{2^{\mu}}^{(i)})+\ldots+\text{IFFT}_{\,% \overline{\!{X}}^{(i)}}(F_{2^{m-\mu}}^{(i)},\mu,\omega_{2^{m}-2^{\mu}}^{(i)}),% \mu,0).

(10)

By Eq. (9) and (10), we have

F_{1}\equiv F_{1}^{(i)}\equiv\text{FFT}_{\,\overline{\!{X}}}(\text{IFFT}_{\,% \overline{\!{X}}}(F_{2},\mu,\omega_{2^{\mu}})+\ldots+\text{IFFT}_{\,\overline{% \!{X}}}(F_{2^{m-\mu}},\mu,\omega_{2^{m}-2^{\mu}}),\mu,0)\pmod{p_{i}(\alpha)},

for $i\in[t]$ . Therefore, the lemma is proved.

∎

III-C Decoding Algorithm

In [4], there are two algorithms for decoding RS codes based on FFT and modular approach, i.e., the frequency-domain modular approach (FDMA) and the fast modular approach (FMA). In this section, we will generalize the FDMA algorithm to our codes, and a similar generalization can be applied to the FMA algorithm.

Assume that the received vector over $\mathcal{R}_{p}$ is represented as

\displaystyle r=F+e=(f(\omega_{0}),f(\omega_{1}),\ldots,f(\omega_{2^{m}-1}))+(% e_{0},e_{1},\ldots,e_{2^{m}-1}),

where $e=(e_{0},e_{1},\ldots,e_{2^{m}-1})$ is the error pattern. Correspondingly, for $i=1,2,\ldots,t$ , the received vector over the field $\mathbb{F}_{2}[x]/(p_{i}(x))$ is represented as $r^{(i)}=F^{(i)}+e^{(i)}=(f^{(i)}(\omega_{0}^{(i)}),f^{(i)}(\omega_{1}^{(i)}),% \ldots,f^{(i)}(\omega_{2^{m}-1}^{(i)}))+(e_{0}^{(i)},e_{1}^{(i)},\ldots,e_{2^{% m}-1}^{(i)})$ , where $e^{(i)}=(e_{0}^{(i)},e_{1}^{(i)},\ldots,e_{2^{m}-1}^{(i)})$ and $\Phi(e_{j})=(e_{j}^{(1)},e_{j}^{(2)},\ldots,e_{j}^{(t)})$ for $j=0,1,\ldots,$
$2^{m}-1$ .

Since $F^{(i)}=(f^{(i)}(\omega_{0}^{(i)}),f^{(i)}(\omega_{1}^{(i)}),\ldots,f^{(i)}(% \omega_{2^{m}-1}^{(i)}))$ is the codeword of RS codes over $\mathbb{F}_{2}[x]/(p_{i}(x))$ for $i=1,2,\ldots,t$ , the trivial approach is to use the FDMA algorithm in [4] to decode $t$ RS codes to obtain the codewords $\{F^{(i)}\}_{i\in[t]}$ , then use $\Phi^{-1}$ to obtain the original codeword $F$ . However, this method performs multiplication in the fields $\{\mathbb{F}_{2}[x]/(p_{i}(x))\}_{i\in[t]}$ , which has a higher multiplication complexity than in the cyclic polynomial ring. Our idea is to merge the decoding procedures over the $t$ fields $\{\mathbb{F}_{2}[x]/(p_{i}(x))\}_{i\in[t]}$ and perform all multiplications in the cyclic polynomial ring without the need for modular decomposition.

We will present the algorithm in five steps:

III-C1 Syndrome

For $i\in[t]$ and $l=0,1,\ldots,2^{m}-1$ , define

	$\displaystyle p_{l}$	$\displaystyle=s_{0}(v_{0})^{l_{0}}s_{1}(v_{1})^{l_{1}}\ldots s_{m-1}(v_{m-1})^% {l_{m-1}},$
	$\displaystyle p_{l}^{(i)}$	$\displaystyle=s_{0}^{(i)}(v_{0}^{(i)})^{l_{0}}s_{1}^{(i)}(v_{1}^{(i)})^{l_{1}}% \ldots s_{m-1}^{(i)}(v_{m-1}^{(i)})^{l_{m-1}},$

where $(l_{0},l_{1},\ldots,l_{m-1})$ is the binary representation of $l$ .

Denote the coordinate vector of the syndrome polynomial $u(x)$ with respect to $\,\overline{\!{X}}$ as $\,\overline{\!{u}}$ , then combined with the following Lemma 5, we show that we can compute $\,\overline{\!{u}}$ by

\,\overline{\!{u}}=\sum_{i=0}^{2^{m-\mu}-1}\text{IFFT}_{\,\overline{\!{X}}}(r_% {i},\mu,\omega_{i\cdot 2^{\mu}})/p_{2^{m}-2^{\mu}},

where $r_{i}=(r_{i\cdot 2^{\mu}},r_{i\cdot 2^{\mu}+1},\ldots,r_{i\cdot 2^{\mu}+2^{\mu% }-1})$ for $i=0,1,\ldots,2^{m-\mu}-1$ . Subsequently, the syndrome
$\{u(\omega_{i})\}_{i=0}^{2^{\mu}-1}$ is computed by $\text{FFT}_{\,\overline{\!{X}}}(\,\overline{\!{u}},\mu,0)$ .

Next Lemma shows the relationship between the obtained syndromes and the corresponding syndromes of $t$ RS codes over fields.

Lemma 5.

For $i=0,1,\ldots,t$ , denote $u^{(i,field)}(x)$ as the syndrome polynomial of the RS code over the field $\mathbb{F}_{2}[x]/(p_{i}(x))$ whose coordinate vector with respect to $\,\overline{\!{X}}^{(i)}$ is denoted as $\,\overline{\!{u^{(i,field)}}}$ , then

u(\omega_{j})\equiv u^{(i,field)}(\omega_{j}^{(i)})\pmod{p_{i}(\alpha)},j=0,1,% \ldots,2^{\mu}-1.

Proof:

By [4, Eq.9], for $i=1,2,\ldots,t$ , $\,\overline{\!{u^{(i,field)}}}$ can be computed by

\displaystyle\,\overline{\!{u^{(i,field)}}}=\sum_{j=0}^{2^{m-\mu}-1}\text{IFFT% }_{\,\overline{\!{X}}^{(i)}}(r_{j}^{(i)},\mu,\omega^{(i)}_{j\cdot 2^{\mu}})/p^% {(i)}_{2^{m}-2^{\mu}},

where $r_{j}^{(i)}=(r_{j\cdot 2^{\mu}}^{(i)},r_{j\cdot 2^{\mu}+1}^{(i)},\ldots,r_{j% \cdot 2^{\mu}+2^{\mu}-1}^{(i)})$ for $i=1,2,\ldots,t$ and $j=0,1,\ldots,2^{m-\mu}-1$ . For $i=1,2,\ldots,t$ , applying Eq. (7) and (8) to the definition of $\,\overline{\!{u}}$ iteratively, we obtain

\displaystyle\,\overline{\!{u}}\equiv\sum_{j=0}^{2^{m-\mu}-1}\text{IFFT}_{\,% \overline{\!{X}}^{(i)}}(r_{j}^{(i)},\mu,\omega^{(i)}_{j\cdot 2^{\mu}})/p^{(i)}% _{2^{m}-2^{\mu}}\equiv\,\overline{\!{u^{(i,field)}}}\pmod{p_{i}(\alpha)},

Therefore, $u(x)\equiv u^{(i,field)}(x^{(i)})\pmod{p_{i}(\alpha)}$ for $i=1,2,\ldots,t$ and the lemma is proved. ∎

III-C2 Solving the Key Equation by FDMA

Given the syndrome $\{u(\omega_{i})\}_{i=0,1,\ldots,2^{\mu}-1}$ , the FDMA algorithm outputs $(\lambda(x),z(x))$ , where $\lambda(x)$ is the error locator polynomial and $z(x)$ is the error evaluation polynomial.

The FDMA algorithm corresponding to our codes is presented in Algorithm 2, in which $\mathbb{I}$ is the indicator function (i.e., $\mathbb{I}_{A}(x)=\begin{cases}x,&\text{ if }A\ \text{is true;}\\ 0,&\text{ if }A\ \text{is false.}\end{cases}$ ) and the extended IFFT algorithm is identical to [4, Algorithm 5]. In Algorithm 2, for $i=1,2,\ldots,t$ and $r_{i}\in\mathbb{F}_{2}[x]/(p_{i}(x))$ , $\Phi^{-1}(r_{1},\ldots,r_{t})$ can be computed as follows by the inverse mapping of the Chinese remainder theorem:

\Phi^{-1}(r_{1},\ldots,r_{t})=\sum_{i=1}^{t}r_{i}\cdot\frac{M_{p}(\alpha)}{p_{% i}(\alpha)}\left[\left(\frac{M_{p}(\alpha)}{p_{i}(\alpha)}\right)^{-1}\right]_% {p_{i}},

where $\left[\left(\frac{M_{p}(\alpha)}{p_{i}(\alpha)}\right)^{-1}\right]_{p_{i}}$ represents the inverse of $\frac{M_{p}(\alpha)}{p_{i}(\alpha)}$ in $\mathbb{F}_{2}[\alpha]/(p_{i}(\alpha))$ . Since $\frac{M_{p}(\alpha)}{p_{i}(\alpha)}\left[\left(\frac{M_{p}(\alpha)}{p_{i}(% \alpha)}\right)^{-1}\right]_{p_{i}}$ can be computed in advance, computing $\Phi^{-1}$ requires $t$ multiplications in $\mathcal{R}_{p}$ . The correctness of the extended IFFT algorithm used in Algorithm 2 can be proved similarly to the FFT algorithm.

The next Lemma 6 shows the relationship between the obtained error locator polynomial and the error evaluation polynomial to the corresponding two polynomials of $t$ RS codes over fields, which shows the rationality of our FDMA algorithm.

Algorithm 2 FDMA over

\mathcal{R}_{p}

\{\omega_{i},u(\omega_{i})\},i=0,1,\ldots,2^{\mu}-1

(\lambda(x),z(x))

that are represented with respect to

\,\overline{\!{X}}

and rank[

\lambda^{(i)}(x),z^{(i)}(x)

i\in[t]

3:Initialize:

d_{i}^{0}=u(\omega_{i-1})

g_{i}^{0}=1

, for

i=1,2,\ldots,2^{\mu}

W(\omega_{i})=0

V(\omega_{i})=0

i=0,1,\ldots,2^{\mu-1}

r^{0}_{1,(k)}=0

r^{0}_{2,(k)}=1

k\in[t]

4:for

j=1,2,\ldots,2^{\mu}

5: for

k=1,2,\ldots,t

6: if

g_{j}^{j-1}\equiv 0\pmod{p_{k}(\alpha)}

or (

d_{j}^{j-1}\equiv 0\pmod{p_{k}(\alpha)}

and

r_{1,(k)}^{j-1}<r_{2,(k)}^{j-1}

) then

\text{Flag}^{(k)}=1

r^{j}_{1,(k)}=r^{j-1}_{2,(k)}

r^{j}_{2,(k)}=r^{j-1}_{1,(k)}+2

9: else

10:

\text{Flag}^{(k)}=2

11:

r^{j}_{1,(k)}=r^{j-1}_{1,(k)}

r^{j}_{2,(k)}=r^{j-1}_{2,(k)}+2

12: end if

13:

\psi_{21}=\Phi^{-1}(\mathbb{I}_{\text{Flag}^{(1)}=1}(\omega_{i}^{(1)}-\omega_{% j-1}^{(1)}),\mathbb{I}_{\text{Flag}^{(2)}=1}(\omega_{i}^{(2)}-\omega_{j-1}^{(2% )}),\ldots,\mathbb{I}_{\text{Flag}^{(t)}=1}(\omega_{i}^{(t)}-\omega_{j-1}^{(t)% }))

14:

\psi_{22}=\Phi^{-1}(\mathbb{I}_{\text{Flag}^{(1)}=2}(\omega_{i}^{(1)}-\omega_{% j-1}^{(1)}),\mathbb{I}_{\text{Flag}^{(2)}=2}(\omega_{i}^{(2)}-\omega_{j-1}^{(2% )}),\ldots,\mathbb{I}_{\text{Flag}^{(t)}=2}(\omega_{i}^{(t)}-\omega_{j-1}^{(t)% }))

15:

\Psi_{j}(\omega_{i})

\begin{pmatrix}-g_{j}^{j-1}&d_{j}^{j-1}\\ \psi_{21}&\psi_{22}\end{pmatrix}

i=0,1,..,2^{\mu}-1

16: end for

17: for

i=j+1,j+2,\ldots,2^{\mu}

18:

\begin{pmatrix}d_{i}^{j}\\ g_{i}^{j}\end{pmatrix}

\Psi_{j}(\omega_{i-1})

\begin{pmatrix}d_{i}^{j-1}\\ g_{i}^{j-1}\end{pmatrix}

19: end for

20: for

i=0,1,\ldots,2^{\mu-1}

21:

\begin{pmatrix}W(\omega_{i})\\ V(\omega_{i})\end{pmatrix}

\Psi_{j}(\omega_{i})

\begin{pmatrix}W(\omega_{i})\\ V(\omega_{i})\end{pmatrix}

22: end for

23:end for

24:for

k=1,2,\ldots,t

25: if

r_{1,(k)}^{2^{\mu}}

r_{2,(k)}^{2^{\mu}}

then

26:

\lambda^{(k)}(\omega_{i})=V(\omega_{i})

i=0,1,\ldots,2^{\mu-1}

27: else

28:

\lambda^{(k)}(\omega_{i})=W(\omega_{i})

i=0,1,\ldots,2^{\mu-1}

29: end if

30:end for

31:

\lambda(\omega_{i})=\Phi^{-1}(\lambda^{(1)}(\omega_{i}),\lambda^{(2)}(\omega_{% i}),\ldots,\lambda^{(t)}(\omega_{i}))

i=0,1,\ldots,2^{\mu-1}

32:

z(\omega_{i})=\lambda(\omega_{i})u(\omega_{i})

i=0,1,\ldots,2^{\mu-1}

33:

\lambda(x)=\text{extended IFFT}_{\,\overline{\!{X}}}((\lambda(\omega_{0}),% \ldots,\lambda(\omega_{2^{\mu-1}})),\mu-1,0)

34:

z(x)=\text{extended IFFT}_{\,\overline{\!{X}}}((z(\omega_{0}),\ldots,z(\omega_% {2^{\mu-1}})),\mu-1,0)

35:return

(\lambda(x),z(x))

and rank[

\lambda^{(i)}(x),z^{(i)}(x)

]=min(

r_{1,(i)}^{2^{\mu}}

r_{2,(i)}^{2^{\mu}}

i\in[t]

Lemma 6.

For $i=1,2,\ldots,t$ , denote the error locator polynomial of RS codes over $\mathbb{F}_{2}[x]/(p_{i}(x))$ as $\lambda^{(i,field)}(x)$ and denote the corresponding error evaluation polynomial as $z^{(i,field)}(x)$ , then $(\lambda(x),z(x))$ obtained by our FDMA algorithm in Algorithm 2 satisfies:

	$\displaystyle\lambda(x)$	$\displaystyle\equiv\lambda^{(i,field)}(x^{(i)})\pmod{p_{i}(\alpha)},$
	$\displaystyle z(x)$	$\displaystyle\equiv z^{(i,field)}(x^{(i)})\pmod{p_{i}(\alpha)}.$

Proof:

For $i=1,2,\ldots,t$ , if all elements in the computation process are taken modulo $p_{i}(\alpha)$ component-wise, the input is the same as the input for the FDMA algorithm over $\mathbb{F}_{2}[x]/(p_{i}(x))$ as described in [4, Algorithm 4] due to Lemma 5. Furthermore, it can be verified that steps 1-30 are also the same as in the FDMA over $\mathbb{F}_{2}[x]/(p_{i}(x))$ when taken modulo $p_{i}(\alpha)$ . Therefore, we obtain

\displaystyle\lambda(\omega_{j})

\displaystyle\equiv\lambda^{(i,field)}(\omega_{j}^{(i)})\pmod{p_{i}(\alpha)},

(11)

where $j=0,1,\ldots,2^{\mu-1}$ .

Similar to Eq. (7), we can obtain the following property of extended IFFT. For any $f\in\mathcal{R}_{p}[x]$ and $i\in[t]$ , the following holds:

\displaystyle\text{extended IFFT}_{\,\overline{\!{X}}}(\,\overline{\!{f}},\mu,% \beta)\equiv\text{extended IFFT}_{\,\overline{\!{X}}^{(i)}}(\,\overline{\!{f^{% (i)}}},\mu,\beta^{(i)})\pmod{p_{i}(\alpha)}.

(12)

Therefore, combining Eq. (11) and Eq. (12), we have:

	$\displaystyle\lambda(x)=$	$\displaystyle\text{extended IFFT}_{\,\overline{\!{X}}}((\lambda(\omega_{0}),% \ldots,\lambda(\omega_{2^{\mu-1}})),\mu-1,0)$
	$\displaystyle\equiv$	$\displaystyle\text{extended IFFT}_{\,\overline{\!{X}}^{(i)}}((\lambda^{(i,% field)}(\omega_{0}^{(i)}),\ldots,\lambda^{(i,field)}(\omega^{(i)}_{2^{\mu-1}})% ),\mu-1,0)$
	$\displaystyle\equiv$	$\displaystyle\lambda^{(i,field)}(x^{(i)})\pmod{p_{i}(\alpha)},$

where the last equation is obtained by Step 23 in [4, Algorithm 4]. The equation for $z(x)$ can be similarly proved.

∎

III-C3 Chein search

The Chein search algorithm to find the error locations corresponding to our codes is given by Algorithm 3. Assuming the set of error locations for RS codes over the field $\mathbb{F}_{2}[x]/(p_{i}(x))$ is denoted as $E^{(i,true)}$ , and the set of error locations obtained by our Chein search algorithm is denoted as $E^{(i)}$ for $i\in[t]$ .

Algorithm 3 Chein search algorithm over

\mathcal{R}_{p}

\,\overline{\!{\lambda}}=(\,\overline{\!{\lambda}}_{0},\,\overline{\!{\lambda}% }_{1},\ldots,\,\overline{\!{\lambda}}_{2^{\mu}-1})

2:the set of error locations

E^{(i)}

for

i\in[t]

3:for

l=0,1,\ldots,2^{m-\mu}-1

(\lambda(\omega_{l\cdot 2^{\mu}}),\ldots,\lambda(\omega_{l\cdot 2^{\mu}+2^{\mu% }-1}))

\text{FFT}_{\,\overline{\!{X}}}(\,\overline{\!{\lambda}},\mu,\omega_{l\cdot 2^% {\mu}})

5: for

i=1,2,\ldots,t

6: for

j=l\cdot 2^{\mu},\ldots,l\cdot 2^{\mu}+2^{\mu}-1

7: if

\lambda(\omega_{j})\equiv 0\pmod{p_{i}(\alpha)}

then

8: Add

\omega_{j}

to the set

E^{(i)}

9: end if

10: end for

11: end for

12:end for

13:for

i=1,2,\ldots,t

14:

\lambda^{(i)}(x)=\lambda(x)\pmod{p_{i}(\alpha)}

15: if

\text{deg}(\lambda^{(i)}(x))

|E^{(i)}|

then

16: Uncorrectable error is detected, and the decoding procedure terminates.

17: end if

18:end for

The next Lemma shows that $E^{(i,true)}=E^{(i)}$ for $i\in[t]$ , which shows the rationality of our Chein search algorithm.

Lemma 7.

$E^{(i,true)}=E^{(i)}$ for $i\in[t]$ .

Proof:

By Lemma 6, it can be deduced that $\lambda(\omega_{j})\equiv\lambda^{(i,field)}(\omega_{j}^{(i)})\pmod{p_{i}(% \alpha)}$ for $i=1,2,\ldots,t$ and $j=0,1,\ldots,2^{m}-1$ . Therefore, Algorithm 3 indeed computes the roots of $\lambda^{(i,field)}$ on $\mathbb{F}_{2}[x]/(p_{i}(x))=\{\omega_{j}^{(i)}\}_{j=0,1,\ldots,2^{m}-1}$ for $i\in[t]$ , which are exactly the error locations for RS codes over $\mathbb{F}_{2}[x]/(p_{i}(x))$ . This establishes the proof that $E^{(i,true)}=E^{(i)}$ for $i\in[t]$ . ∎

III-C4 Formal Derivative

The algorithm for formal derivative is identical to that in [13], which computes the derivative $\lambda^{\prime}(x)$ of the error locator polynomial $\lambda(x)$ .

III-C5 Forney’s Formula

We present Forney’s formula for our codes to retrieve the original data symbols $\{g_{l}\}_{l=0}^{k-1}=\{f(\omega_{l})\}_{l=2^{\mu}}^{2^{m}-1}$ as follows.

For $l=2^{\mu},2^{\mu}+1,\ldots,2^{m}-1$ , if $\omega_{l}\notin\cup_{i}E^{(i)}$ , it implies that there is no error at $\omega_{l}$ . Therefore, let $f(\omega_{l})=r(\omega_{l})$ . Otherwise, calculate $h(\omega_{l})=\frac{z(\omega_{l})}{\lambda^{\prime}(\omega_{l})s_{\mu}(\omega_% {l})}$ and $e(\omega_{l})=\Phi^{-1}(\mathbb{I}_{l\in E^{(1)}}h(\omega_{l}),\ldots,\mathbb{% I}_{l\in E^{(t)}}h(\omega_{l}))$ , then let $f(\omega_{l})=r(\omega_{l})+e(\omega_{l})$ . The next theorem shows that the obtained $\{f(\omega_{l})\}_{l=2^{\mu}}^{2^{m}-1}$ are indeed the original data symbols.

Theorem 8.

If the number of errors is no larger than the error correction capability, then our decoding algorithm can retrieve the original data symbols.

Proof:

It can be verified by Lemma 6 that the steps of Forney’s formula for our codes are equivalent to the following steps when taken modulo $p_{i}(\alpha)$ for $i=1,2,\ldots,t$ : For $l=2^{\mu},2^{\mu}+1,\ldots,2^{m}-1$ , if $\omega_{l}\in E^{(i)}$ , then let $f(\omega_{l})=r^{(i)}(\omega_{l}^{(i)})+\frac{z^{(i)}(\omega_{l}^{(i)})}{% \lambda^{(i)\prime}(\omega_{l}^{(i)})s^{(i)}_{\mu}(\omega_{l}^{(i)})}$ , otherwise let $f(\omega_{l})=r^{(i)}(\omega_{l}^{(i)})$ . By Lemma 7, the steps are indeed the procedure of Forney’s formula over the field $\mathbb{F}_{2}[x]/(p_{i}(x))$ presented in [4]. Therefore for $i=1,2,\ldots,t$ and $l=2^{\mu},2^{\mu}+1,\ldots,2^{m}-1$ , $f(\omega_{l})$ is the original data symbol of RS codes over $\mathbb{F}_{2}[x]/(p_{i}(x))$ when taken modulo $p_{i}(\alpha)$ , i.e., $f(\omega_{l})\equiv f^{(i)}(\omega_{l}^{(i)})\pmod{p_{i}(\alpha)}$ , which implies that $\{f(\omega_{l})\}_{l=2^{\mu}}^{2^{m}-1}$ obtained by Forney’s formula are indeed the original data symbols of our codes. ∎

We can show that the asymptotic number of addition and multiplication operations involved in the encoding/decoding procedure of our codes is identical to [4].

IV Reduce Encoding/decoding complexity

In this section, we propose several methods to reduce encoding/decoding complexity by minimizing the XOR operations required for multiplication in the cyclic polynomial ring $\mathcal{R}_{p}$ .

IV-A Efficient Multiplication by Circular Shifts

Due to the equation $1+x^{p}=(1+x)M_{p}(x)$ in $\mathbb{F}_{2}[x]$ , all multiplication in the ring $\mathcal{R}_{p}$ during encoding/decoding procedure can be replaced with the multiplication in $\mathbb{F}_{2}[x]/(1+x^{p})$ . It is sufficient to take the final results of the encoding/decoding procedure modulo $M_{p}(x)$ to ensure the correctness of the outcomes. The multiplication in $\mathbb{F}_{2}[x]/(1+x^{p})$ can be efficiently performed using circular shifts, as outlined in Algorithm 4, where $[a]_{p}$ represents the integer $b\in\{0,1,\ldots,p-1\}$ such that $a\equiv b\pmod{p}$ .

Algorithm 4 Multiplication in

\mathbb{F}_{2}[x]/(1+x^{p})

f(\alpha)=\sum\limits_{i=0}^{p-1}f_{i}\alpha^{i},g(\alpha)=\sum\limits_{i=0}^{% p-1}g_{i}\alpha^{i}

h(\alpha)=\sum\limits_{i=0}^{p-1}h_{i}\alpha^{i}=f(\alpha)g(\alpha)

3:for

i=0,1,\ldots,p-1

4: if

f_{i}

1

then

5: for

j=0,1,\ldots,p-1

h_{[i+j]_{p}}=h_{[i+j]_{p}}+g_{j}

7: end for

8: end if

9:end for

In comparison to the field multiplication where additional modulo operations are required after polynomial multiplication, multiplication in the ring $\mathbb{F}_{2}[x]/(1+x^{p})$ involves fewer XOR operations.

IV-B Preprocessing in the Ring $\mathbb{F}_{2}[x]/(1+x^{p})$

According to Algorithm 4, the more zeros in the coefficients of $f(\alpha)\in\mathbb{F}_{2}[x]/(1+x^{p})$ , the fewer XOR operations are needed. Therefore, we present the following preprocessing steps: Iterate through the $p$ coefficients of $f(\alpha)$ and count the number of zeros, denoted as $n$ . If $n<\frac{p}{2}$ , then let $f_{1}(\alpha)=f(\alpha)+M_{p}(\alpha)$ and replace $f$ with $f_{1}$ , resulting in $p-n$ zeros in the coefficients of $f_{1}(\alpha)$ , which is more than before preprocessing. Since $f(\alpha)g(\alpha)\equiv f_{1}(\alpha)g(\alpha)\pmod{M_{p}(\alpha)}$ holds, the preprocessing does not affect the correctness.

We categorize all multiplications into two cases. In the first case, both factors are dependent on the received codeword and such multiplications are only computed during the FDMA algorithm when calculating $g_{j-1}^{j}d^{j-1}_{i}$ and $d_{j-1}^{j}g^{j-1}_{i}$ . For this case, it is sufficient to preprocess $g_{j-1}^{j}$ and $d_{j-1}^{j}$ for $j=1,2,\ldots,2^{\mu}$ . The XOR operations involved in preprocessing are counted in the decoding procedure. In the second case, at least one of the factors is independent of the received codeword and can be computed in advance. For example, when performing FFT algorithm in Algorithm 1, the factor $\frac{s_{\tau-1}(\beta)}{s_{\tau-1}(v_{\tau-1})}$ can be computed in advance. Therefore, we preprocess the factor $\frac{s_{\tau-1}(\beta)}{s_{\tau-1}(v_{\tau-1})}$ and the additional XOR operations required are not counted in the encoding/decoding procedure.

IV-C Selection of $v_{j}^{(i)}$

Since the selection of $v_{j}^{(i)}$ for $j=0,1,\ldots,m-1$ and $i=1,2,\ldots,t$ only needs to satisfy the conditions given in II-A, and throughout the encoding/decoding procedure, the majority of multiplications stem from FFT and IFFT, with nearly identical parameters. Therefore, a meticulous choice of $v_{j}^{(i)}$ for $j=0,1,\ldots,m-1$ and $i=1,2,\ldots,t$ will be introduced to reduce the number of XORs required for the multiplication in the FFT and IFFT algorithms.

Taking the computation of the syndrome as an example, it involves calculating $\text{IFFT}_{\,\overline{\!{X}}}(r_{i},\mu,\omega_{i\cdot 2^{\mu}})$ for $i=0,1,\ldots,2^{m-\mu}-1$ . For each $i$ , there are a total of $\frac{1}{2}\mu 2^{\mu}$ multiplications in $\text{IFFT}_{\,\overline{\!{X}}}(r_{i},\mu,\omega_{i\cdot 2^{\mu}})$ . Each multiplication involves a factor of the form $\frac{s_{\tau-1}(\beta)}{s_{\tau-1}(v_{\tau-1})}$ , where $\tau=1,\ldots,\mu$ . Assuming $c_{\beta}$ represents the sum of the number of non-zero coefficients of $\frac{s_{\tau-1}(\beta)}{s_{\tau-1}(v_{\tau-1})}$ after preprocessing in all multiplications during the calculation of $\text{IFFT}_{\,\overline{\!{X}}}(r_{0},\mu,\beta)$ , where the first parameter $r_{0}$ in IFFT is independent of $c_{\beta}$ . The objective is to minimize $\sum\limits_{i=0}^{2^{m-\mu}-1}c_{\omega_{i\cdot 2^{\mu}}}$ . The variables are the bases $\{v_{j}^{(i)}\}_{j=0,1,\ldots,m-1}$ , where $i=1,2,\ldots,t$ .

When the parameters $m$ and $\mu$ of the code are small, an exhaustive algorithm can be employed. Otherwise, we start by randomly choosing $\{v_{j}^{(i)}\}_{j=0,1,\ldots,\mu-1}$ for $i=1,2,\ldots,t$ to determine the expression of $s_{\mu-1}(x)$ and the value of $v_{\mu-1}$ . The subsequent bases for $j=\mu,\ldots,m-1$ can be determined by the following approximate algorithm. Let $r_{0}=\operatorname*{argmin}_{r\in\mathcal{R}_{p}}c_{r}$ . If $r_{0}^{(i)}$ is linearly independent of $\{v_{j}^{(i)},j=0,1,\ldots,\mu-1\}$ for all $i\in[t]$ , then set $v_{\mu}^{(i)}=r_{0}^{(i)}$ for $i=1,2,\ldots,t$ . Otherwise, select the $r$ that has the second smallest $c_{r}$ and check if it satisfies the condition. Continue this process until all bases are determined.

V Comparison of encoding/decoding complexity

In this section, we compare the encoding/decoding complexity of our codes with RS codes over finite fields presented in [4]. First, we discuss the parameters.

$\mathcal{R}_{p}$ is a field if and only if $2$ is a primitive element in $\mathbb{F}_{p}$ [6], which occurs when $p=3,5,11,13,19,\cdots$ . In this case, we can directly apply the encoding/decoding algorithms for RS codes over fields in [4] and reduce encoding/decoding complexity by the methods discussed in Section IV. Now, we consider the case when $\mathcal{R}_{p}$ is not a field. The code lengths of our codes for different $p$ are shown in Table I.

TABLE I: The code lengths of our codes for different

p

$p$	7	9	15	17	21	23	25
Code Length	$2^{3}$	$2^{2}$	$2^{2}$	$2^{8}$	$2^{2}$	$2^{11}$	$2^{4}$

Due to the code length being much smaller than the size of the ring $\mathcal{R}_{p}$ when the irreducible factorization of $M_{p}(x)=\prod\limits_{i=1}^{t}p_{i}(x)$ has a large $t$ , we find that there is no benefit in using our codes in such cases through numerical experiments. Therefore, the subsequent discussion focuses the case of $t=2$ and $\deg(p_{1}(x))=\deg(p_{2}(x))$ , corresponding to $p=7,17,23,\cdots$ .

We compare the encoding/decoding complexity for our codes with RS codes over finite fields presented in [4]. Considering the parameters of our codes: Since $|\mathcal{R}_{p}|=2^{p-1}$ , each data symbol has $p-1$ bits, and the code length is $2^{\frac{p-1}{2}}$ . For the comparison, RS codes over finite fields have two options. The first option is to take RS codes defined over $\mathbb{F}_{2^{p-1}}$ , satisfying $|\mathbb{F}_{2^{p-1}}|=|\mathcal{R}_{p}|$ , and the code length can reach $2^{\frac{p-1}{2}}$ . The second option is to divide each data symbol into two parts, each having $\frac{p-1}{2}$ bits. This enables encoding/decoding using two RS codes over $\mathbb{F}_{2^{\frac{p-1}{2}}}$ with the resulting data symbols, and each RS code can achieve a code length of $2^{\frac{p-1}{2}}$ . We choose the second approach for comparison because it possesses lower encoding/decoding complexity.

For the parameters $p=23$ , $m=11$ , and $\mu=6$ , we consider our (2048, 1984) RS code over $\mathcal{R}_{23}=\mathbb{F}_{2}[x]/(1+x+\ldots+x^{22})$ . The encoding and decoding procedures are performed as described in Section III and IV. For comparison, two (2048, 1984) RS codes over $\mathbb{F}_{2}[x]/(1+x^{2}+x^{11})$ are selected, using the encoding/decoding algorithms described in [4]. The choice of the irreducible polynomial $1+x^{2}+x^{11}$ is made to reduce the number of XORs in field multiplication. The comparisons are carried out by repeatedly performing encoding and decoding and counting the average number of XORs at each step. Table II shows the detailed comparisons.

TABLE II: Comparison of the number of XOR Operations during the Encoding/Decoding Procedure of our (2048, 1984) code over the Ring

\mathbb{F}_{2}[x]/(1+x+\ldots+x^{22})

and Two (2048, 1984) RS Codes over the Field

\mathbb{F}_{2}[x]/(1+x^{2}+x^{11})

Steps	Average XOR Operations
Steps	RS codes over $\mathcal{R}_{23}$	Two RS codes over field
Encoding	1389200.4	1692843.6
Syndrome	1420710	1736304
Key equation	2081194.8	2210871
Chein search	1489731.4	1482622.4
Formal derivative	44896	30605.6
Forney’s formula	242024.5	250949.2
Total decoding	5278556.7	5711352.2

In the encoding/decoding procedure of our codes, we find a choice of $\{v_{i}\}_{i=0,1,\ldots,m-1}$ according to the method in IV-C as follows: $v_{0}=\alpha^{6}$ , $v_{1}=\alpha^{5}$ , $v_{2}=\alpha^{4}$ , $v_{3}=\alpha^{3}$ , $v_{4}=\alpha^{7}$ , $v_{5}=\alpha^{2}$ , $v_{6}=\alpha^{8}+\alpha^{3}$ , $v_{7}=\alpha$ , $v_{8}=\alpha^{9}+\alpha^{8}+\alpha^{3}+\alpha+1$ , $v_{9}=\alpha^{10}+\alpha^{9}+\alpha^{7}+\alpha^{3}+\alpha^{2}+\alpha$ , $v_{10}=\alpha^{9}+\alpha^{7}+\alpha^{3}$ , where $\alpha$ is the indeterminate of $\mathcal{R}_{23}$ .

According to Table II, the proposed algorithm for our codes over the cyclic polynomial ring reduces the number of XORs by 17.9% during encoding and 7.5% during decoding.

VI Conclusion

In this paper, we construct RS codes over the cyclic polynomial ring $\mathcal{R}_{p}$ . In addition, we generalize the encoding/decoding algorithms for RS codes over finite fields in [4] to our codes. We then reduce encoding/decoding complexity by the structure of the cyclic polynomial ring $\mathcal{R}_{p}$ . Finally, we demonstrate that our codes can reduce 17.9% encoding complexity and 7.5% decoding complexity compared with the RS codes over finite fields when $(n,k)=(2048,1984)$ .

References

[1] I. S. Reed and G. Solomon, “Polynomial Codes over Certain Finite Fields,” J. Soc. Ind. Appl. Math., vol. 8, no. 2, pp. 300–304, 1960.
[2] M. F. I. Chowdhury, C.-P. Jeannerod, V. Neiger, É. Schost, and G. Villard, “Faster Algorithms for Multivariate Interpolation With Multiplicities and Simultaneous Polynomial Approximations,” IEEE Trans. Inf. Theory, vol. 61, no. 5, pp. 2370–2387, 2015.
[3] N. Tang and Y. Lin, “Fast Encoding and Decoding Algorithms for Arbitrary $(n,k)$ Reed-Solomon Codes Over $\mathbb{F}_{2^{m}}$ ,” IEEE Communi. Lett., vol. 24, no. 4, pp. 716–719, 2020.
[4] N. Tang and Y. S. Han, “A New Decoding Method for Reed–Solomon Codes Based on FFT and Modular Approach,” IEEE Trans. Commun., vol. 70, no. 12, pp. 7790–7801, 2022.
[5] W. K. Kadir, H.-Y. Lin, and E. Rosnes, “Efficient Interpolation-Based Decoding of Reed-Solomon Codes,” in 2023 IEEE Int. Symp. Inf. Theory (ISIT), 2023, pp. 997–1002.
[6] M. Blaum and R. Roth, “New array codes for multiple phased burst correction,” IEEE Trans. Inf. Theory, vol. 39, no. 1, pp. 66–77, 1993.
[7] H. Hou, K. W. Shum., M. Chen, and H. Li, “BASIC Codes: Low-Complexity Regenerating Codes for Distributed Storage Systems,” IEEE Trans. Inf. Theory, vol. 62, no. 6, pp. 3053–3069, 2016.
[8] H. Hou and Y. S. Han, “A New Construction and an Efficient Decoding Method for Rabin-Like Codes,” IEEE Trans. Commun., vol. 66, no. 2, pp. 521–533, 2018.
[9] H. Hou, Y. S. Han, K. W. Shum, and H. Li, “A Unified Form of EVENODD and RDP Codes and Their Efficient Decoding,” IEEE Trans. Commun., vol. 66, no. 11, pp. 5053–5066, 2018.
[10] H. Hou, Y. S. Han, P. P. Lee, Y. Wu, G. Han, and M. Blaum, “A Generalization of Array Codes with Local Properties and Efficient Encoding/Decoding,” accepted in IEEE Trans. Information Theory, (early access: https://ieeexplore.ieee.org/document/9868795), 2022.
[11] H. Hou, Y. S. Han, P. P. C. Lee, Y. Hu, and H. Li, “A New Design of Binary MDS Array Codes with Asymptotically Weak-Optimal Repair,” IEEE Trans. Inf. Theory, vol. 65, no. 11, pp. 7095––7113, 2019.
[12] S. Gao and T. Mateer, “Additive Fast Fourier Transforms Over Finite Fields,” IEEE Trans. Inf. Theory, vol. 56, no. 12, pp. 6265–6272, 2010.
[13] S.-J. Lin, T. Y. Al-Naffouri, and Y. S. Han, “FFT Algorithm for Binary Extension Finite Fields and Its Application to Reed–Solomon Codes,” IEEE Trans. Inf. Theory, vol. 62, no. 10, pp. 5343–5358, 2016.

Reed-Solomon Codes over Cyclic Polynomial Ring with Lower Encoding/Decoding Complexity

Abstract

I Introduction

II RS Codes over Cyclic Polynomial Ring

II-A Construction

Lemma 1.

Theorem 2.

Proof:

III Encoding and Decoding Methods

Theorem 3.

Proof:

III-B Encoding Algorithm

Lemma 4.

Proof:

III-C Decoding Algorithm

III-C1 Syndrome

Lemma 5.

Proof:

III-C2 Solving the Key Equation by FDMA

Lemma 6.

Proof:

III-C3 Chein search

Lemma 7.

Proof:

III-C4 Formal Derivative

III-C5 Forney’s Formula

Theorem 8.

Proof:

IV Reduce Encoding/decoding complexity

IV-A Efficient Multiplication by Circular Shifts

IV-B Preprocessing in the Ring 𝔽2⁢[x]/(1+xp)subscript𝔽2delimited-[]𝑥1superscript𝑥𝑝\mathbb{F}_{2}[x]/(1+x^{p})blackboard_F start_POSTSUBSCRIPT 2 end_POSTSUBSCRIPT [ italic_x ] / ( 1 + italic_x start_POSTSUPERSCRIPT italic_p end_POSTSUPERSCRIPT )

IV-C Selection of vj(i)superscriptsubscript𝑣𝑗𝑖v_{j}^{(i)}italic_v start_POSTSUBSCRIPT italic_j end_POSTSUBSCRIPT start_POSTSUPERSCRIPT ( italic_i ) end_POSTSUPERSCRIPT

V Comparison of encoding/decoding complexity

VI Conclusion

References

IV-B Preprocessing in the Ring $\mathbb{F}_{2}[x]/(1+x^{p})$

IV-C Selection of $v_{j}^{(i)}$