- The paper introduces an explicit algorithm for noisy k-XOR recovery that eliminates previous sample complexity overhead by matching the optimal noise bias threshold.
- It leverages hypergraph statistics, color coding, and dynamic programming to achieve a precise tradeoff between runtime and sample complexity.
- A corresponding low-degree lower bound confirms that any n^(O(D))-time algorithm requires Ω(n^(k/2)/(D^(k/2-1)δ^2)) samples, establishing the algorithm’s optimality.
Near-Optimal Algorithms for Noisy k-XOR under the Low-Degree Heuristic
Problem Statement and Context
The paper addresses the noisy k-XOR problem, equivalently known as sparse Learning Parity with Noise (LPN). Here, one observes m random k-XOR constraints—parity checks over exactly k variables—each presenting a noisy label: zα​=xα​ξα​, where the hidden Boolean vector x∈{±1}n is to be recovered, and ξα​ is a Rademacher noise with mean δ. The central computational task is either recovery (estimating x) or detection (distinguishing a planted assignment from pure noise), in a parameterized regime (number of samples k0, arity k1, noise bias k2).
Noisy k3-XOR is foundational in average-case complexity, learning theory, and cryptography (e.g., as a hardness assumption for various primitives). Prior work established the statistical threshold for detection at k4, but efficient recovery algorithms matching this were unattainable in the high-noise regime—there was a persistent overhead in sample complexity (especially in k5).
The paper studies this gap exhaustively, seeking to resolve the optimal tradeoff between sample complexity, running time, and noise bias for recovery (and thus, detection), within the low-degree paradigm.
Main Results
1. Algorithmic Upper Bound
The authors develop an explicit algorithm for noisy k6-XOR that, for any arity k7 and parameter k8, achieves runtime k9 and succeeds at recovery whenever
m0
where m1 is a constant depending only on m2. This eliminates the prior polylogarithmic factors and, crucially, is information-theoretically optimal in m3, matching the lower bound implied by channel capacity considerations.
Unlike existing algorithms (e.g., Basu et al.), this method closes the sample complexity gap in m4, unifying detection and recovery thresholds. The result also produces a tight computational-sample tradeoff: as m5 grows, runtime increases while the required number of samples decreases, interpolating all the way down to the statistical threshold.
2. Matching Low-Degree Lower Bound
Theoretical guarantees are established by analyzing the low-degree likelihood ratio, following the framework where the existence of low-degree distinguishing polynomials correlates with the existence of efficient algorithms. The paper proves that:
m6
is required for any degree-m7 polynomial (i.e., any m8-time algorithm) to distinguish or recover, thus conjecturally establishing optimality of the presented algorithm. The combinatorial enumeration of even m9-uniform hypergraphs is essential for the explicit form of these bounds.
3. Algorithmic Construction
The algorithm leverages:
- Hypergraph statistics: Aggregated sums over structured k0-uniform hypergraph patterns with specific regularity and connectivity constraints. Character sums are evaluated over families of degree-2 regular cycles and paths.
- Color coding and dynamic programming: Efficient enumeration of bounded-width hypergraph embeddings by introducing random coloring and DP recursion, with variance reduction via averaging—a blueprint adapted from recent advances in average-case inference (notably tensor PCA and planted CSPs).
- Clean-up (Rounding) Step: After a weak recovery step (recovering k1 up to a fixed error), a majority-vote postprocessing with fresh samples resolves all bits, exploiting independence to eliminate residual bias.
This modularity enables direct control over the runtime-sample tradeoff via the hypergraph gadget’s "width" (k2).
Numerical Guarantees and Tightness
The paper’s main theorems give precise, explicit constants and asymptotics: for arity k3 and every k4 (a multiple of k5) in a specified range,
Algorithmic Guarantee:
- Runtime: k6
- Sample Complexity: k7
- Success Probability: k8, approaching k9 as k0 or k1 grows
Low-Degree Barrier:
- No k2-time algorithm can succeed for k3
The dependence on k4 is strictly quadratic, which is provably optimal, while the scaling in k5 and k6 matches the precise combinatorial threshold predicted by the low-degree method.
Contrasts with Prior Work
The results strictly improve over Basu et al. (who incur an k7 or worse overhead), and show that earlier search-to-decision reductions for k8-XOR are suboptimal except in regimes where computational hardness is unconstrained.
Technical Contributions
Hypergraph-Based Mean-Variance Analysis
The detection statistic is a sum over hypergraph patterns with intricate regularity properties, selected so as to maximize signal under the planted model and minimize variance under the null model. Second-moment and combinatorial analyses guarantee separation in all relevant parameter regimes.
Color Coding and DP for Efficient Computation
The adoption of color coding (Alon et al.) transforms the inherently exponential pattern-matching task into a polynomial-time DP on bounded width forests, underpinning the runtime guarantees. Multiple colorings are averaged to mitigate additional variance without loss of bias.
Sample Model Equivalence and Statistical Reductions
Careful analysis shows that Bernoulli, fixed-with and fixed-without replacement versions of the model are asymptotically equivalent in the parameter regime, up to negligible additive differences. All technical results are formulated in the most convenient model for each argument.
Matching upper and lower bounds in the low-degree framework provide strong evidence that the computational barrier found is tight, at least for constant or slowly growing noise rates. The combinatorial enumeration of even degree-k9 hypergraphs is addressed explicitly.
Theoretical and Practical Implications
- Theoretically, the work precisely locates the onset of computational hardness for noisy zα​=xα​ξα​0-XOR, and specifies the optimal tradeoff attainable by any polynomial-time (or sub-exponential time) algorithm, aligning detection and recovery thresholds.
- Practically, these algorithms have potential application for cryptanalysis in cryptographic primitives based on sparse LPN assumptions, as they close possible gaps between decision and search hardness at high noise rates—the regime exploited in cryptography.
- The general technique—pattern statistics + color coding for average-case inference—serves as a model for advanced algorithmic design in high-dimensional, noisy combinatorial problems.
Future Directions
The analysis reveals that in the low-noise regime (zα​=xα​ξα​1), the standard low-degree heuristic may fail to capture all tractability phenomena, as certain algorithmic reductions (cf. Chen et al.) go beyond low-degree predictions. A precise conjectural framework interpolating constant- and vanishing-noise complexity remains open.
Further, extensions to more general planted CSPs, variants with additional combinatorial structure, and observation models with more general noise or sampling may admit similar hypergraph-based reductions and yield new algorithmic frontiers.
Conclusion
This work settles the optimal sample--runtime--noise tradeoff for recovery in the noisy zα​=xα​ξα​2-XOR problem, establishing that low-degree polynomial algorithms achieve the finest possible threshold predicted by current computational heuristics. The synthesis of hypergraph statistics, color coding, and low-degree analysis provides a robust framework expandable to a broad class of average-case high-dimensional inference problems.