[2][1=]linecolor=red,backgroundcolor=red!25,bordercolor=red,#1linecolor=red,backgroundcolor=red!25,bordercolor=red,#1todo: linecolor=red,backgroundcolor=red!25,bordercolor=red,#1#2 \newcommandx\change[2][1=]linecolor=blue,backgroundcolor=blue!25,bordercolor=blue,#1linecolor=blue,backgroundcolor=blue!25,bordercolor=blue,#1todo: linecolor=blue,backgroundcolor=blue!25,bordercolor=blue,#1#2 \newcommandx\info[2][1=]linecolor=OliveGreen,backgroundcolor=OliveGreen!25,bordercolor=OliveGreen,#1linecolor=OliveGreen,backgroundcolor=OliveGreen!25,bordercolor=OliveGreen,#1todo: linecolor=OliveGreen,backgroundcolor=OliveGreen!25,bordercolor=OliveGreen,#1#2 \newcommandx\improvement[2][1=]linecolor=Plum,backgroundcolor=Plum!25,bordercolor=Plum,#1linecolor=Plum,backgroundcolor=Plum!25,bordercolor=Plum,#1todo: linecolor=Plum,backgroundcolor=Plum!25,bordercolor=Plum,#1#2 \newcommandx\thiswillnotshow[2][1=]disable,#1disable,#1todo: disable,#1#2
More Efficient -wise Independent Permutations from Random Reversible Circuits via log-Sobolev Inequalities
Abstract
We prove that the permutation computed by a reversible circuit with random -bit gates is -approximately -wise independent. Our bound improves on currently known bounds in the regime when the approximation error is not too small. We obtain our results by analyzing the log-Sobolev constants of appropriate Markov chains rather than their spectral gaps.
Contents
1 Introduction
We consider the extent to which small random reversible circuits compute almost -wise independent permutations. The (almost) -wise independence of permutations was first considered by GowersΒ [Gow96] as a proxy for pseudorandomness properties of practical cryptosystems, such as block ciphers.
Definition 1 (Approximate -wise independent permutations).
A distribution on the symmetric group is said to be -approximate -wise independent if for all distinct , the distribution of for has total variation distance at most from the uniform distribution on distinct -tuples overΒ .
A commonly studied construction of approximate -wise independent permutations is a reversible circuit on wires in which each gate computes a randomly chosen width-2 (see DefinitionΒ 4) permutation on a random subset of wires. From here on, when referring to a random reversible circuit, we mean a random circuit whose gates are drawn randomly from a set of -bit gates. GowersΒ [Gow96] introduced this construction and proved that a random reversible circuit with gates computes an -approximate -wise independent permutation of the cube using the canonical paths technique from Markov chain mixingΒ [Jer03]. Since then, follow-up works by Hoory et al. and Brodsky and HooryΒ [HMMR05, BH05] improved on the analysis of Gowers and proved that if , then random reversible circuits with gates compute an -approximate -wise independent permutation using the comparison methodΒ [DSC93b, DSC93a]. Finally, using quantum-inspired techniques for proving spectral gaps, He and OβDonnellΒ [HO24] improved the number of gates needed to .
Random circuits have gained attention following the recent interest in random quantum circuits. The natural quantum analog of a (approximate) -wise independent permutation is that of a (approximate) unitary -design.111A (approximate) unitary -design is a distribution on the unitary group that (approximately) matches the Haar distribution up to moments. Unitary designs are widely studied in quantum computation and quantum physics as basic pseudorandom objects and models for equilibration in quantum many-body systemsΒ [BCHJ+21]. A line of work on unitary -designsΒ [BHH16, HHJ21] shows that for constant , a reversible circuit on wires with random 3-qubit quantum gates chosen from some finite gate set (a random quantum circuit) gives a construction of an -approximate unitary -design.
Recent worksΒ [MPSY24, CBB+24] obtain -designs with size linear in from classical -wise independent permutations whose size is also linear in . Even though we demonstrate that a linear-in- number of random width- gates suffices to -approximate -wise independence, we remark that our dependence on is not sufficiently tight for their -design construction. In particular, both works employ a theorem of Alon and LovettΒ [AL13] which requires an exponentially small to translate from approximate to exact -wise independent permutations. Plugging in such a small in our theorem would increase our size bound by polynomial factors in and .
Another line of work, motivated by the design of practical cryptosystems (such as block ciphers), studies the computational pseudorandomness properties of random reversible circuits. He and OβDonnellΒ [HO24] consider the computational hardness of inverting the permutation computed by short reversible circuits with -bit gates. Another line of work by Canetti et al.Β [CCMR24] proposed more advanced cryptographic primitives based on the cryptographic properties of random reversible circuits. In particular, using the assumption that random reversible circuits achieve computational pseudorandomness after a modest number of rounds (much less than the super-polynomial number of rounds required to reach statistical pseudorandomness), they suggest candidate obfuscation schemes along with possible ways to prove their computational security. Their approach is inspired by thermalizing processes of statistical mechanics.
In this paper, we revisit the problem of random circuits with reversible -bit gates and show that a random reversible circuit with gates gives an -approximate -wise independent permutation. The following is our main theorem, which we prove in SectionΒ 6.
Theorem 2.
For any and , a random reversible circuit with width- gates (a subset of -bit gates) computes an -approximate -wise independent permutation, where the hides factors.
We note here that for applications of approximate -wise independent permutation distributionsΒ in derandomization, one is generally concerned with the number of truly random βseedβ bits needed to generate a draw fromΒ . See, for exampleΒ [MOP20]. By using techniques such as derandomized squaring (seeΒ [KNR09]), one can often reduce the seed length to for any construction. This is true for the results in our paper, and we donβt discuss the seed length any further, as we are generally focused on the circuit complexity of our permutations.
1.1 Proof overview
We use the comparison method in a similar way asΒ [BH05]. In particular, we bound the log-Sobolev constant of the natural Markov chain associated with the computation of a random reversible circuit, by comparing it to the log-Sobolev constant of the -clique -coloring Markov chain. By working with the log-Sobolev constant rather than the spectral gap of this random walk asΒ [BH05, HO24] do, we obtain an improved mixing time since the log-Sobolev constant gives a mixing time bound that depends doubly logarithmically on the smallest probability of the stationary distribution. In contrast, the spectral gap gives bounds that depend logarithmically on this quantity.
While it is generally more difficult to bound the log-Sobolev constant of a Markov chain, recent work of SalezΒ [Sal20] has used the martingale method of Lee and YauΒ [LY98] to obtain sharp estimates for the log-Sobolev constant of a natural random walk on the multislice. Using this method, we estimate the log-Sobolev constant of a variant of -clique -coloring chain, which we call the uniform -clique -coloring chain. The log-Sobolev constant for the standard -clique -coloring chain is then obtained via a simple application of the comparison method.
In more detail, our starting point is the work of Salez which bounds the log-Sobolev of the multislice. The multislice corresponds to the random walk over the set of colorings of items, where each step of the walk swaps the colors of any two items chosen uniformly at random. The colorings are comprised of colors, where the first colors appear once and the last color appears in the remaining items. The first observation is that this random walk captures the -wise independence of a random walk with transpositions. Unfortunately, the log-Sobolev constant of this walk is too small: . In contrast, we would expect a random set of transpositions to mix to a -wise independent permutation within a time that is dependent on .
The reason that the log-Sobolev constant of the multislice chain is independent of is because it applies a random transposition from the entire set of transpositions. In the case when is much smaller than , a random transposition will most likely exchange the colors of two of the items that have color . Thus, with high probability, roughly , the multislice chain will not move to a new state. To avoid this artificial slowdown, we study the uniform -clique -coloring chain, which requires that every step applies one transposition with an element that doesnβt have color . Equivalently, one may think of the uniform -clique -coloring chain as a random walk on the multislice that takes steps per time step and thus would hope that the log-Sobolev constant scales down by a factor of . Indeed, we employ the martingale method and prove that the log-Sobolev constant of the uniform -clique -coloring chain is as expected.
One can compute the log-Sobolev constant of the uniform -clique -coloring chain by using Salezβs result as a black box and viewing the multislice chain as a lazy version of the uniform -clique -coloring chain. We instead present an alternative proof by adapting the martingale method used by Salez.
The next step is to transfer our log-Sobolev bound from the uniform -clique -coloring chain to the -clique -coloring chain, which has slightly different transition probabilities than its uniform counterpart. We give a randomized paths construction with only a constant amount of congestion. The comparison method implies that the log-Sobolev constant of the -clique -coloring chain is also .
Finally, we obtain an estimate for the log-Sobolev constant of the random reversible circuits Markov chain by employing the comparison with the -clique -coloring chain fromΒ [BH05]. More specifically, Brodsky and Hoory give a randomized paths construction with a comparison constant of . This concludes our bound for the log-Sobolev constant of the reversible circuits Markov chain.
To improve our bound on the mixing time of the reversible circuits Markov chain, we use another argument fromΒ [BH05]. The observation is that after a short random walk of steps, the state of the reversible circuits Markov chain is very likely to be in a generic state. Thus it suffices to bound the mixing time of the Markov chain when restricted to generic states. We do this by bounding its log-Sobolev constant, using the log-Sobolev inequality of the clique coloring chain, which we proved earlier. This allows us to bring down the mixing time of the reversible circuits Markov chain to .
2 Preliminaries
Notation.
In this paper we will use the symbols to compare two quantities in the asymptotic sense, in particular, these symbols hide constant factors. For example, . When is a tuple, we use the notation whenever for some and otherwise, we write .
Definition 3 (Tuples with distinct elements).
Let be a set. We define the set of -tuples with distinct elements from as follows:
We frequently write in the place of .
We recall the definition of width- simple permutations fromΒ [BH05].
Definition 4 (Width- simple permutations).
The set of width- simple permutations is the following set of permutations on
The permutation maps to .
In words, a width- permutation chooses random indices from : and . It further samples a random Boolean function on bits. Then it XORs the value of on the bit of the input.
2.1 Log-Sobolev constant and mixing time
We recall some background on Markov chains from [SC97]. Let be the transition matrix of an ergodic Markov chain over finite state space , and let denote its stationary distribution. We identify a Markov chain with its transition matrix, so we will often say that is both the transition matrix for a Markov chain and also the Markov chain itself. We let denote the probability distribution of , starting at state , at timestep .
Definition 5 (Mixing time).
The -mixing time of an ergodic Markov chain is defined as:
When the subscript is dropped, we mean .
Throughout this paper, we deal only with reversible Markov chains.
Definition 6 (Reversible Markov chain).
We say that a Markov chain is reversible if for all ,
One powerful way of bounding the mixing time of Markov chains is by functional inequalities using the Dirichlet form.
Definition 7 (Dirichlet form).
For function , the Dirichlet form of with respect to is
Intuitively, the Dirichlet form measures the βlocal variationβ of with respect to the (weighted) graph underlying a Markov chain .
Definition 8 (Entropy).
For a function , we define its entropy
where .
The ratio of these two quantities defines the log-Sobolev constant of the Markov chain.
Definition 9 (Log-Sobolev constant of Markov chain).
The log-Sobolev constant of is defined by
The log-Sobolev constant of a Markov chain bounds the mixing time of the chain according to the following theorem. Note the doubly-logarithmic dependence on , which is the conceptual advantage of using log-Sobolev inequalities over a spectral gap analysis, whenever is not exponentially small.
Theorem 10 ([DSC96], Theorem 3.7).
Let be the transition matrix of a reversible Markov chain whose stationary distribution is , and to be the smallest stationary probability. For , the -mixing time is bounded by
In fact, the log-Sobolev constant bounds the mixing time, which gives pointwise distance bounds.
Theorem 11 ([DSC96], Corollary 3.8).
For reversible , and for all
when .
2.2 The comparison method
We bound the log-Sobolev constant of a reversible circuits Markov chain by repeated application of the comparison methodΒ [DSC93b, WLP09] which we introduce below. The comparison method is used to estimate the Dirichlet form of a target Markov chain with transition matrix by relating it to the Dirichlet form of a reference Markov chain with transition matrix , for which we have previously-known estimates. This relation between Dirichlet forms can be trivially extended to an inequality between log-Sobolev constants when and are over the same state space and have the same stationary distribution .
The comparison is achieved by βsimulatingβ the transition probabilities of the Markov chain using paths from . Formally, for each we assign a random path
where the βs are random elements of that satisfy and . The quantity is a random non-negative integer equal to the length of the path . The congestion of these paths (which is captured by the comparison constant ) provides a lower bound of with respect to as shown formally inΒ LemmaΒ 12.
Without loss of generality, we assume that the paths are simple, since one can remove all loops without affecting the endpoints of a path and without increasing the congestion.
Lemma 12 ([WLP09], Corollary 13.23).
Let and be transition matrices for two ergodic Markov chains on the same state space . Assume that for each there exists a random path
Then we have for any that
where the comparison constant of is defined to be
Here and are the (unique) stationary distributions for and , respectively, and is the indicator variable which captures whether the edge appears in the sequence .
3 The Markov chains
We now set up the Markov chains we use in the proof of TheoremΒ 2. Throughout this section (and the rest of the paper) fix positive integers , , and (which will typically be equal to ). Our Markov chains all have domains isomorphic to for some set :
Definition 13 (Reversible circuit Markov chain).
The chain on the state space of distinct -bit strings is given by the following distribution on . Given the current state , to draw the next state , draw a uniformly random width-2 permutation and set
Let be the transition matrix of this Markov chain.
This Markov chain exactly captures the evolution of inputs to a random reversible circuit whose gates are uniformly drawn from the set of width- permutations . Thus the statement ofΒ TheoremΒ 2 that a random reversible circuit with width- gates is an -approximate -wise independent permutation is implied by the statement that . We typically write and omit the parameters and whenever they are clear from the context or not important.
FollowingΒ [BH05], we prove that this Markov chain mixes fast by comparing it to the -clique -coloring Markov chain. In this paper we deal with two clique coloring chains, thus we will refer to this chain as the standard clique coloring, or simply the clique coloring chain. (Note that this chain is slightly different than the )
Definition 14 (Standard -clique -coloring Markov chain).
Let be the number of colors and be the number of clique vertices. The -clique -coloring chain on the set of colorings is given by the following distribution on . To sample given the current state , uniformly sample and and set
Let be the transition matrix for this Markov chain.
In other words, the clique coloring chain samples a uniformly random coloring of the -clique with colors, by randomly choosing a vertex and randomly assigning it one of the available colors (including its current color).
We directly bound the log-Sobolev constant of a related Markov chain, which we call the uniform clique coloring chain.
Definition 15 (Uniform -clique -coloring Markov chain).
Let be the number of colors and be the number of clique vertices. The uniform -clique -coloring chain on the set of colorings is given by the following distribution on . To sample given the current state uniformly sample and and set
Let be the transition matrix for this Markov chain.
We call this the uniform clique coloring chain, since at every step a random vertex is re-colored with a uniformly random color from the entire set . If this color is already taken by another vertex , the two vertices swap colors. This additional symmetry allows us to obtain a bound on the log-Sobolev constant of this chain by adapting the martingale method of Lee and YauΒ [LY98]. Moreover, it is not hard to relate the log-Sobolev constants of the uniform and standard clique coloring chains using the comparison method.
With all of our Markov chains defined, we now state the sequence of inequalities that will allow us to conclude TheoremΒ 2, deferring the proofs of the auxiliary results to later sections.
Theorem 16.
Let be the transition matrix corresponding to the random walk from DefinitionΒ 13. Then
Proof.
We will show the following sequence of inequalities (recall that hides constant factors):
TheoremΒ 16 immediately gives a mixing time of for the reversible circuits chain by TheoremΒ 10; in SectionΒ 6 we improve the mixing time to by applying ideas of [BH05], thus proving TheoremΒ 2.
It may then seem that TheoremΒ 16 is strictly weaker than TheoremΒ 2. However, the proof of TheoremΒ 2 does not yield a good log-Sobolev inequality for the reversible circuits Markov chain. Thus we cannot use that proof to conclude results about pointwise convergence as we can from log-Sobolev bounds using TheoremΒ 11, such as the following result:
Corollary 17.
Let be the distribution over after steps of . For all
4 The Log-Sobolev Constant of the Uniform Clique Coloring Chain
The goal of this section is to lower bound the log-Sobolev constant of the uniform clique coloring Markov chain.
Recall that the uniform -clique -coloring Markov chain has state space of size . Given some , the action of choosing vertex and coloring it with color (where this color can already exist in the clique, as perΒ DefinitionΒ 15) will be denoted by . Namely
Let be a function on the state space of this chain. Since the stationary distribution is the uniform, the expectation of over its state space is
Moreover, the Dirichlet form of this chain can be written as
With this notation in mind, we now prove that this Markov chain has a large log-Sobolev constant.
Lemma 18.
The log-Sobolev constant of the uniform -clique -coloring Markov chain satisfies
when .
Proof.
Our starting point is the recursive structure of the uniform clique coloring problem, which allows us to apply the martingale method of [LY98]. In particular, let be uniformly distributed over the state space . Then if we condition on the vertex having color , the distribution of the colors of the remaining vertices is isomorphic to the uniform distribution over , the state space of the uniform -clique -coloring Markov chain.
For any vertex and color define the conditional function
to be simply the restriction of to this domain: for all with . Since is isomorphic to , by a slight abuse of notation we also regard .
Moreover, for every vertex , define the marginal function by defining for every color
The chain rule of conditional entropy ([Sal20], Equation 13) implies that for any ,
(1) |
By summing over all vertices , we get
(2) |
We bound the two summations of the right-hand side separately inΒ 19 andΒ 20 and conclude that
This gives us a recurrence relation for the log-Sobolev constant of the uniform clique coloring chain. For every and , we have
(3) |
We proceed to solve this recurrence via induction. For fixed integers and , we will prove that for all ,
For the base case of , we observe that uniform -clique -coloring has transition probabilities that correspond to the complete graph over vertices. We use known results for the log-Sobolev constant of the complete graph ([DSC96], Corollary A.4) to deduce that
Now let and assume that the claim holds for all . Then using EquationΒ 3 we find
In the above calculation, we used the fact that , and that is at least some fixed constant. This finishes the inductive proof, and by setting we obtain the desired bound. β
It remains to prove the two claims used in the proof of LemmaΒ 18.
Claim 19.
For any we have
Proof.
Recall that when we condition on vertex having color , its domain is isomorphic to the state space of the uniform -clique -coloring chain. The log-Sobolev constant of this smaller restricted chain implies that
Our goal is to relate the Dirichlet form of to the Dirichlet form of . We start by expanding the right-hand side while keeping in mind that has fixed the color of vertex to .
Let us take the expectation now over all values of . We note that the log-Sobolev of is not dependent on the value of due to symmetry, thus we factor it outside the summation.
Summing over all yields the following
Notice that each tuple is counted times in the summation of the right-hand side, one time for each that satisfies . Then each term appears at most times, since out of the times that appears, one of them satisfies , and thus it does not contribute to the sum.
This implies that the sum above is at most times the summation that corresponds to the Dirichlet form of .
β
Claim 20.
Let be a function, and for all , is the marginal function of that maps color to . Then it holds that
Proof.
Consider the random walk on the set of colors where at every step we move to a uniformly random color (including the color we are currently in). The transition matrix of this walk is the complete graph over vertices and we denote it by . Let us apply the log-Sobolev inequality of to the function :
(4) |
We would like to rewrite the Dirichlet form of in terms of . We start by expanding the definition of
Observe that sampling a random such that , is equivalent to sampling a random with , and then outputting :
Since the function on the right-hand side is convex, Jensenβs inequality implies that
Plugging in the above inequality toΒ EquationΒ 4 we get
We sum over all to get
The right-hand side now contains all terms that appear in exactly once. Thus we can substitute this Dirichlet form (and adjust its scaling). Moreover, the log-Sobolev constant of the complete graph over vertices is well-studied and satisfies ([DSC96], Corollary A.4). We conclude that
5 The Log-Sobolev Constant of the Standard Clique Coloring Chain
The goal of this section is to translate the log-Sobolev bound from the uniform clique coloring chainΒ LemmaΒ 18 to the standard clique coloring chain. Since the two chains are very similar, applying the comparison method is a natural approach.
Lemma 21.
The log-Sobolev constant of the -clique -coloring Markov chain satisfies
Proof.
Define the following (randomized) map that maps edges of to paths in . Each edge of that connects and is determined by a vertex and the pair . We assign to this edge a path in drawn according to the following distribution:
Here the symbol ββ denotes the concatenation of edges to make a path. Intuitively, the path assigned to edge is either itself (whenever is also an edge of ), or a sequence of three edges that swap the colors and by using a random unused color .
Now we bound the comparison constant .
The stationary distributions of both chains are the uniform over , and thus the stationary probabilities cancel.
Our goal will be to bound the sum of expectations. First, let us partition the paths into the ones with length and length . To do that, we observe that the length of each path is deterministic and only depends on and .
We can now easily bound the first term. For a path with a single edge to include , it must hold that . Thus the first term is at most . To bound the second term, we consider the location where appears in . We write if appears as the edge of the path. Formally,
Observe now that once we fix the edge to be , there are only possible -edge paths. This is because our map performs three transpositions between the elements . The edge specifies two of the elements, and the third element is one of the remaining elements of the tuples at the endpoints of . Once this third element is specified, the edge and its respective path is fully determined.
Each -edge path has a probability of to appear, since it depends on the random choice of from the set . Thus we bound the expectation above to be at most
We conclude that the comparison constant of is
Our log-Sobolev bound for the standard clique-coloring chain now follows directly from LemmaΒ 18 and LemmaΒ 21.
Corollary 22.
The log-Sobolev constant of the -clique -coloring Markov chain satisfies
5.1 Clique-Coloring Walk to Random Circuits Walk
We would like to transfer our log-Sobolev constant bound of the -clique -coloring Markov chain fromΒ CorollaryΒ 22, to the random circuits Markov chain. This is done via the randomized paths construction of Brodsky and Hoory to compare this walk to clique coloring.
Lemma 23 ([BH05]).
When there exists a randomized map that takes as input an edge of and outputs a sequence of edges in connecting and such that the comparison constant satisfies
Corollary 24.
If then
6 Even Faster Mixing of the Random Circuits Walk via Generic States
We can improve the dependence on of the mixing time of the random reversible circuits Markov chain from cubic to linear using an idea ofΒ [BH05]. The main observation is that after steps of , the chain is very likely to be in a generic state, that is a state where no two of the bit-strings agree on many bits. Generic states happen with good probability and are nicer to work with, thus when we restrict our Markov chain to generic states we apply the comparison theorem with a better (logarithmic) comparison constant.
Definition 25 (Generic states,Β [BH05]).
Let . Let be a partition of such that for , and . A state is generic if for , and are distinct when restricted to a part (but not ). Let denote the set of generic states.
In other words, we divide the bits of the input into two subsets and of roughly equal size. Then we further divide the first subset into equal-length blocks that hold a logarithmic number of bits. A state is generic if no two distinct elements are equal in any of the parts. Since we now deal with -bit strings, we will extend our notation and write to denote the bit of the element of the state .
We define below the generic state reversible circuit Markov chain to be the restriction of to generic states.
Definition 26 (Generic state reversible circuit Markov chain).
The matrix is the transition matrix of the Markov chain on such that for any ,
Lemma 27 ([BH05], Equation (3)).
There exists a constant such that if , and , then
We bound the mixing time of the Markov chain by bounding its log-Sobolev constant. We use the comparison ofΒ [BH05] as stated inΒ LemmaΒ 32 to relate its log-Sobolev constant to the log-Sobolev constant of a related product chain on generic states, . We get our final estimate by bounding the log-Sobolev constant of the Markov chain inΒ LemmaΒ 31 using results for product chains fromΒ [DSC96].
Below we introduce the Markov chain.
Definition 28 (Product chain on generic states).
Let be the Markov chain on state space , where to sample the next state given the current state we do the following:
-
β’
With probability , toss a fair coin.
-
β
If the coin has landed heads, set .
-
β
Else, sample uniformly at random and set for all and
-
β
-
β’
With probability , sample uniformly at random and a random string such that for any . Set
Informally, given the current state , one step of this Markov chain performs a change in exactly one of the two subsets of bits ( or ) with equal probability. In the first case, it either flips the bit from the subset of a random element with probability , or it does nothing. In the second case, it samples a uniformly random subset of bits and replaces that subset with a new bit string for a random element . All of the operations above are performed such that the resulting state remains generic.
It is not hard to observe that is a product chain, that is it acts βindependentlyβ on different parts of its state space. This means that we can compute its log-Sobolev constant by breaking it down into smaller chains.
Definition 29 (Product Markov chain).
Consider Markov chains with state spaces respectively. We define the product Markov chain over the state space to be the Markov chain with transition matrix
We will refer to the βs as the factors of .
Lemma 30 (Log-Sobolev constant of product chain, Lemma 3.2 ofΒ [DSC96]).
The log-Sobolev constant of the product chain is related to the log-Sobolev constant of its factors as follows:
Using LemmaΒ 30 we obtain the following bound by decomposing into factor chains whose log-Sobolev constants are known.
Lemma 31.
The following bound on the log-Sobolev constant of holds:
Proof.
We first write the state space in the form of a product
Then decompose as the product of two Markov chains . The first chain corresponds to performing a change in the subset of the bits, and the second chain corresponds to operating in the subset of the bits.
The chain .
The state space of this chain is . We further decompose333We donβt directly decompose into all of its factors because to use LemmaΒ 30 we need each factor of the product chain to have equal weight. this chain as , where corresponds to performing an operation on the subset of the bits. Thus the chain has state space , since it corresponds to the size- subset . To sample the next state from the current state , we choose a random and a random and set for each
Notice that the transition matrix of this chain is equal to the transition matrix of the standard -clique -coloring chain. Therefore, by CorollaryΒ 22, we have for all that
Applying LemmaΒ 30, we have
(5) |
The chain .
We will βflattenβ the bits from the subset of the elements into a sequence of bits. Then the Markov chain corresponds to the random walk on the hypercube where to sample the next state from the current state we sample uniformly at random and flip the bit with probability . This chain is the product chain of chains on the space with transition probabilities to each state. We can write the transition matrix of as the product
where each is the matrix with βs. Equivalently, it corresponds to the transition matrix of the complete graph on two states. It is easy to see (e.g.Β [DSC96], Corollary A.4) that for all . Therefore, by LemmaΒ 30 we have
(6) |
Applying LemmaΒ 30 with EquationΒ 5 and EquationΒ 6 yields
Armed with the log-Sobolev constant of , we employ the comparison method ofΒ [BH05] to bound the log-Sobolev constant of .
Lemma 32 ([BH05], Lemma 16).
There exists a randomized map that takes as input an edge of and outputs a sequence of edges in connecting and with congestion . Consequently,
Corollary 33.
It holds that
Using now the well-known relation between the log-Sobolev constant and the mixing time of a Markov chain in total variation distance, we conclude:
See 2
Proof.
Combining LemmaΒ 31 and LemmaΒ 32 we find that . This implies that for the constant referenced in LemmaΒ 27, we have . Then applying LemmaΒ 27 we have
Finally, we can decrease the total variation distance down to an arbitrary by increasing the length of the walk by a multiplicative factor of , and the statement follows. β
Acknowledgments
We thank Thiago Bergamaschi, Tianren Liu, Stefano Tessaro, Vinod Vaikuntanathan, Alistair Sinclair, and Ryan OβDonnell for very helpful and insightful discussions.
References
- [AL13] Noga Alon and Shachar Lovett. Almost -wise vs. -wise independent permutations, and uniformity for general group actions. Theory of Computing, 9(15):559β577, 2013.
- [BCHJ+21] FernandoΒ G.S.L. BrandΓ£o, Wissam Chemissany, Nicholas Hunter-Jones, Richard Kueng, and John Preskill. Models of quantum complexity growth. PRX Quantum, 2(3), July 2021.
- [BH05] Alex Brodsky and Shlomo Hoory. Simple permutations mix even better, 2005.
- [BHH16] FernandoΒ GSL Brandao, AramΒ W Harrow, and MichaΕ Horodecki. Local random quantum circuits are approximate polynomial-designs. Communications in Mathematical Physics, 346:397β434, 2016.
- [CBB+24] Chi-Fang Chen, Adam Bouland, Fernando G. S.Β L. BrandΓ£o, Jordan Docter, Patrick Hayden, and Michelle Xu. Efficient unitary designs and pseudorandom unitaries from permutations, 2024.
- [CCMR24] Ran Canetti, Claudio Chamon, Eduardo Mucciolo, and Andrei Ruckenstein. Towards general-purpose program obfuscation via local mixing. Cryptology ePrint Archive, Paper 2024/006, 2024. https://eprint.iacr.org/2024/006.
- [DSC93a] Persi Diaconis and Laurent Saloff-Coste. Comparison Techniques for Random Walk on Finite Groups. The Annals of Probability, 21(4):2131 β 2156, 1993.
- [DSC93b] Persi Diaconis and Laurent Saloff-Coste. Comparison Theorems for Reversible Markov Chains. The Annals of Applied Probability, 3(3):696 β 730, 1993.
- [DSC96] P.Β Diaconis and L.Β Saloff-Coste. Logarithmic Sobolev inequalities for finite Markov chains. The Annals of Applied Probability, 6(3):695 β 750, 1996.
- [Gow96] WΒ Timothy Gowers. An almost m-wise independent random permutation of the cube. Combinatorics, Probability and Computing, 5(2):119β130, 1996.
- [HHJ21] Jonas Haferkamp and Nicholas Hunter-Jones. Improved spectral gaps for random quantum circuits: large local dimensions and all-to-all interactions. Physical Review A, 104(2):022417, 2021.
- [HMMR05] Shlomo Hoory, Avner Magen, Steven Myers, and Charles Rackoff. Simple permutations mix well. Theoretical Computer Science, 348(2):251β261, 2005. Automata, Languages and Programming: Algorithms and Complexity (ICALP-A 2004).
- [HO24] William He and Ryan OβDonnell. Pseudorandom permutations from random reversible circuits. arXiv preprint arXiv:2404.14648, 2024.
- [Jer03] Mark Jerrum. Counting, sampling and integrating: algorithms and complexity. Springer Science & Business Media, 2003.
- [KNR09] Eyal Kaplan, Moni Naor, and Omer Reingold. Derandomized constructions of k-wise (almost) independent permutations. Algorithmica, 55(1):113β133, 2009.
- [LY98] Tzong-Yow Lee and Horng-Tzer Yau. Logarithmic sobolev inequality for some models of random walks. The Annals of Probability, 26(4):1855β1873, 1998.
- [MOP20] Sidhanth Mohanty, Ryan OβDonnell, and Pedro Paredes. Explicit near-ramanujan graphs of every degree. In Proceedings of the 52nd Annual ACM SIGACT Symposium on Theory of Computing, pages 510β523, 2020.
- [MPSY24] Tony Metger, Alexander Poremba, Makrand Sinha, and Henry Yuen. Simple constructions of linear-depth t-designs and pseudorandom unitaries, 2024.
- [Sal20] Justin Salez. A sharp log-sobolev inequality for the multislice, 2020.
- [SC97] Laurent Saloff-Coste. Lectures on finite Markov chains, pages 301β413. Springer Berlin Heidelberg, Berlin, Heidelberg, 1997.
- [WLP09] ELΒ Wilmer, DavidΒ A Levin, and Yuval Peres. Markov chains and mixing times. American Mathematical Soc., Providence, 2009.