Papers
Topics
Authors
Recent
Search
2000 character limit reached

Permutation Code Equivalence in Coding Theory

Updated 6 July 2026
  • Permutation Code Equivalence (PCE) is defined as the decision problem of determining if one linear code can be transformed into another via a coordinate permutation, using generator matrices and Grassmannian formulations.
  • It leverages algebraic techniques such as Plücker coordinates and invariant theory to isolate permutation actions, enabling reductions to graph isomorphism and lattice isomorphism problems.
  • PCE underpins key cryptographic assumptions for linear code equivalence and informs specialized treatments for cyclic, self-dual, and extended perfect codes, highlighting both computational challenges and structural benefits.

Permutation Code Equivalence (PCE) is the problem of deciding, for two linear codes C,DFqnC,D \subseteq \mathbb{F}_q^n, whether one is obtained from the other by a permutation of coordinates. In generator-matrix form, with full-rank G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}, PCE asks whether there exist UGLk(Fq)U \in GL_k(\mathbb{F}_q) and a permutation matrix Π\Pi such that G2=UG1ΠG_2 = U G_1 \Pi. Within the modern literature, PCE appears both as an autonomous equivalence problem and as the permutation-only core of broader monomial or linear code equivalence problems; it is also studied through quotient actions on Grassmannians, reductions to Graph Isomorphism and lattice isomorphism, and family-specific descriptions for cyclic, self-dual, and extended perfect codes (Alecci et al., 10 Mar 2026, Bardet et al., 2019, Cheraghchi et al., 11 Feb 2025, Dinh et al., 2011).

1. Formal problem and equivalent formulations

In the standard linear-code setting, a linear [n,k][n,k] code over Fq\mathbb{F}_q is a kk-dimensional subspace of Fqn\mathbb{F}_q^n. A permutation πSn\pi \in S_n acts on coordinates via its permutation matrix G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}0, and the permuted code is G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}1. Two codes are permutation equivalent when G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}2 for some G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}3. If G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}4 generates G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}5 and G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}6 generates G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}7, then G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}8 is equivalent to the existence of G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}9 with UGLk(Fq)U \in GL_k(\mathbb{F}_q)0; once UGLk(Fq)U \in GL_k(\mathbb{F}_q)1 is known, UGLk(Fq)U \in GL_k(\mathbb{F}_q)2 is recovered by linear algebra. The associated automorphism group is

UGLk(Fq)U \in GL_k(\mathbb{F}_q)3

so PCE is naturally both a search problem for a witness permutation and a decision problem about orbit membership under UGLk(Fq)U \in GL_k(\mathbb{F}_q)4 (Dinh et al., 2011).

PCE is distinct from Linear Code Equivalence (LCE) and Signed Permutation Code Equivalence (SPCE). LCE allows an arbitrary monomial matrix UGLk(Fq)U \in GL_k(\mathbb{F}_q)5, where UGLk(Fq)U \in GL_k(\mathbb{F}_q)6 is diagonal with nonzero entries and UGLk(Fq)U \in GL_k(\mathbb{F}_q)7 is a permutation matrix, so the defining relation is UGLk(Fq)U \in GL_k(\mathbb{F}_q)8. SPCE restricts the diagonal part to signs UGLk(Fq)U \in GL_k(\mathbb{F}_q)9. These variants satisfy Π\Pi0, and recent reductions show that PCE admits polynomial-time Karp reductions to both LCE and SPCE; over prime fields, composition with a reduction from SPCE to the Lattice Isomorphism Problem yields a reduction from PCE to lattice isomorphism (Cheraghchi et al., 11 Feb 2025).

A second formulation, important for cryptographic work on LCE, passes from generator matrices to the Grassmannian Π\Pi1 of Π\Pi2-dimensional subspaces of Π\Pi3. Writing Π\Pi4 for the diagonal group acting by coordinatewise scalings, one studies the quotient Π\Pi5. In that quotient, the monomial ambiguity is factored into a diagonal part and a permutation part, and PCE becomes: given representatives Π\Pi6 and Π\Pi7, find Π\Pi8 such that Π\Pi9. The paper on Plücker coordinates makes explicit that recovering a monomial G2=UG1ΠG_2 = U G_1 \Pi0 reduces to recovering only its permutation part G2=UG1ΠG_2 = U G_1 \Pi1, with diagonal scalings disappearing in the quotient formulation (Alecci et al., 10 Mar 2026).

2. Grassmannians, Plücker coordinates, and invariant-theoretic models

The algebraic-geometric treatment of PCE begins with the Plücker embedding of the Grassmannian. If G2=UG1ΠG_2 = U G_1 \Pi2 has generator matrix G2=UG1ΠG_2 = U G_1 \Pi3, then for each G2=UG1ΠG_2 = U G_1 \Pi4-subset G2=UG1ΠG_2 = U G_1 \Pi5, the Plücker coordinate is G2=UG1ΠG_2 = U G_1 \Pi6, where G2=UG1ΠG_2 = U G_1 \Pi7 is the G2=UG1ΠG_2 = U G_1 \Pi8 submatrix on columns indexed by G2=UG1ΠG_2 = U G_1 \Pi9. These coordinates define a point in [n,k][n,k]0 satisfying the quadratic Plücker relations. Monomial actions separate cleanly in these coordinates: if [n,k][n,k]1 with [n,k][n,k]2, then diagonal scaling sends [n,k][n,k]3 to [n,k][n,k]4, while permutations relabel indices by [n,k][n,k]5 (Alecci et al., 10 Mar 2026).

This separation permits an invariant-field construction for the diagonal action. Let [n,k][n,k]6 be the field of rational functions on the Grassmannian, and let [n,k][n,k]7 be the subfield fixed by [n,k][n,k]8. The key combinatorial device is the incidence matrix [n,k][n,k]9, whose Fq\mathbb{F}_q0-th row is the indicator vector of Fq\mathbb{F}_q1. For Fq\mathbb{F}_q2, the rational monomial

Fq\mathbb{F}_q3

is Fq\mathbb{F}_q4-invariant exactly when Fq\mathbb{F}_q5 lies in the left kernel of Fq\mathbb{F}_q6. Since Fq\mathbb{F}_q7 for Fq\mathbb{F}_q8, the kernel has rank Fq\mathbb{F}_q9. The paper then uses a Jacobian/Kähler-differentials criterion to select algebraically independent generators, with

kk0

matching the geometric fact that diagonal scaling removes kk1 generic degrees of freedom. A practically computable family of low-degree invariants is

kk2

whenever kk3 as multisets, so the diagonal weights cancel (Alecci et al., 10 Mar 2026).

Given two equivalent codes generated by kk4 and kk5, every kk6-invariant rational function kk7 yields a polynomial constraint in an unknown matrix kk8: kk9 By construction, the true permutation matrix Fqn\mathbb{F}_q^n0 satisfies Fqn\mathbb{F}_q^n1. Because each Plücker coordinate Fqn\mathbb{F}_q^n2 is a determinant of degree Fqn\mathbb{F}_q^n3 in the entries of Fqn\mathbb{F}_q^n4, the resulting polynomial has degree Fqn\mathbb{F}_q^n5. These equations can be combined with the standard permutation constraints Fqn\mathbb{F}_q^n6, row sums equal to Fqn\mathbb{F}_q^n7, and column sums equal to Fqn\mathbb{F}_q^n8. A second family of equations,

Fqn\mathbb{F}_q^n9

uses πSn\pi \in S_n0 to add constraints without introducing new variables (Alecci et al., 10 Mar 2026).

The framework is theoretically precise but computationally prohibitive at cryptographic parameters. Determinants expand into πSn\pi \in S_n1 monomials, products of determinants amplify this growth, and the number of Plücker coordinates is πSn\pi \in S_n2, which is exponentially large in the worst regime. For parameters relevant to LESS, such as πSn\pi \in S_n3, the degree becomes πSn\pi \in S_n4. The paper therefore concludes that the polynomials are not practical for cryptographic parameter sets, even though the method constitutes the first application of Grassmannians, Plücker coordinates, and diagonal-invariant rational functions to LCE/PCE cryptanalysis. In the worked example πSn\pi \in S_n5, the invariant field has transcendence degree πSn\pi \in S_n6; the invariants

πSn\pi \in S_n7

satisfy πSn\pi \in S_n8 via the Plücker relation, and the resulting polynomial πSn\pi \in S_n9 has degree G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}00 (Alecci et al., 10 Mar 2026).

3. Cyclic and constacyclic families

For cyclic codes, PCE can often be described explicitly in group-theoretic terms. If G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}01 is cyclic of length G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}02, then the full cycle G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}03 lies in G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}04, and the relevant equivalence permutations are controlled by the G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}05-Sylow subgroup G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}06 of G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}07 containing G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}08. The core criterion is

G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}09

with the statement that two cyclic objects on G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}10 points are equivalent if and only if they are equivalent via an element of G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}11. When G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}12, one has G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}13 and G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}14, so equivalence reduces to affine permutations G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}15; when G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}16 and G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}17, one has G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}18 and equivalence lies in G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}19, a family of polynomial permutations

G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}20

with G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}21. The operational procedure determines the relevant G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}22-Sylow size by testing specific permutations G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}23, using at most G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}24 checks, and then restricts the search accordingly (Guenda et al., 2012).

A closely related treatment for cyclic and quasi-cyclic codes describes the normalizer G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}25, generalized multipliers, and the polynomial G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}26-groups G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}27 and G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}28. For cyclic codes of length G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}29, it proves that equivalence testing can be restricted to G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}30, with G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}31 when the Sylow size is minimal and G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}32 when G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}33 in the range covered by the theorem. For quasi-cyclic codes, the analogous set G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}34 contains the normalizer of the G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}35-shift and, in particular, G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}36 (Guenda, 2010).

For cyclic codes over general finite fields, defining sets give a second explicit language for PCE. If G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}37 are defining sets of cyclic codes of length G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}38, then a multiplier G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}39 with G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}40 yields permutation equivalence. If G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}41, this multiplier description is complete for cyclic codes: two cyclic codes are permutation equivalent if and only if their defining sets are related by a multiplier. The 2022 work also isolates a necessary-and-sufficient criterion for monomial equivalence through a shift G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}42: one must have G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}43 and G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}44. Beyond multipliers and shifts, it introduces specific transformations G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}45, G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}46, and G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}47 that produce additional monomial or permutation equivalences in the cases G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}48 or G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}49 with G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}50 divisible by G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}51. For G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}52-constacyclic codes over G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}53, if G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}54, then all permutation equivalent constacyclic codes of length G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}55 are given by the action of multipliers with G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}56 (Dastbasteh et al., 2022).

4. Tractable subclasses, complete invariants, and the role of hulls

A major tractable class is formed by codes with trivial hull. Fixing a nondegenerate symmetric bilinear form on G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}57, the hull is G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}58. When G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}59, one has G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}60, and for any generator matrix G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}61 the Gram matrix G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}62 is invertible. The reduction to weighted Graph Isomorphism constructs the symmetric idempotent projection

G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}63

If G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}64, then G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}65, and conversely this conjugacy implies G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}66. PCE on trivial-hull codes therefore reduces deterministically in polynomial time to weighted undirected graph isomorphism, with graph construction cost G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}67. The experiments reported for random binary codes with trivial hull show that permutation equivalence can be decided “in a few minutes” for lengths up to G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}68, with the G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}69-construction dominating the runtime (Bardet et al., 2019).

Self-dual binary codes illustrate a different phenomenon: large hull does not, by itself, force hard instances. A self-dual code G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}70 has hull dimension G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}71, but every such code admits a canonical decomposition

G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}72

where G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}73, G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}74 is reduced with minimum distance at least G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}75, and the reduced length G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}76 is an invariant. The G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}77 summand is found in polynomial time by enumerating weight-2 codewords and puncturing their supports. Search PCE on self-dual binary codes then runs in

G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}78

time by reducing the problem to the reduced part. If G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}79, the algorithm becomes polynomial-time. The same paper defines a “large shadow” regime through the minimum weight G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}80 of a characteristic vector and proves a polynomial-time consequence when G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}81 and G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}82; in particular, G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}83 yields a polynomial-time regime unconditionally because G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}84. This directly contradicts the common intuition that large hull should systematically make PCE difficult (Bennett et al., 17 Jun 2026).

For certain extended perfect propelinear codes G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}85, the Steiner quadruple system G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}86 of weight-4 supports is a complete invariant for permutation equivalence. The construction decomposes the design as G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}87, where G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}88 and G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}89 are affine blocks internal to each half and G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}90 is the cross-part determined by a permutation G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}91 of G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}92 fixing G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}93. In this family, G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}94, and G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}95 and G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}96 are permutation equivalent if and only if G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}97 and G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}98 are isomorphic. The isomorphism condition is explicit: G1,G2Fqk×nG_1,G_2 \in \mathbb{F}_q^{k \times n}99 must equal either UGLk(Fq)U \in GL_k(\mathbb{F}_q)00 or UGLk(Fq)U \in GL_k(\mathbb{F}_q)01 with UGLk(Fq)U \in GL_k(\mathbb{F}_q)02. Point transitivity is controlled by the criterion UGLk(Fq)U \in GL_k(\mathbb{F}_q)03. This produces a design-theoretic route to PCE in a highly structured class (Mogilnykh et al., 2020).

5. Reductions, complexity-theoretic placement, and quantum formulations

Several reductions place PCE among isomorphism-type problems. On the one hand, PCE with trivial hulls is not harder than weighted Graph Isomorphism, by the projection-matrix reduction just described (Bardet et al., 2019). On the other hand, the 2025 reduction paper states that Graph Isomorphism reduces to PCE, cites Petrank–Roth for that direction, and notes that PCE is not NP-complete unless the polynomial hierarchy collapses; it also cites Babai’s quasi-polynomial-time algorithm as evidence that GI, and hence PCE, is likely outside the usual NP-complete paradigm. The same paper gives deterministic polynomial-time Karp reductions UGLk(Fq)U \in GL_k(\mathbb{F}_q)04 and UGLk(Fq)U \in GL_k(\mathbb{F}_q)05 by an explicit block construction UGLk(Fq)U \in GL_k(\mathbb{F}_q)06, and then obtains UGLk(Fq)U \in GL_k(\mathbb{F}_q)07 through the Bennett–Win reduction from SPCE to the Lattice Isomorphism Problem (Cheraghchi et al., 11 Feb 2025).

PCE also admits a nonabelian Hidden Subgroup Problem formulation over UGLk(Fq)U \in GL_k(\mathbb{F}_q)08. If UGLk(Fq)U \in GL_k(\mathbb{F}_q)09 generates a code UGLk(Fq)U \in GL_k(\mathbb{F}_q)10, one considers a canonicalization map and defines UGLk(Fq)U \in GL_k(\mathbb{F}_q)11. When UGLk(Fq)U \in GL_k(\mathbb{F}_q)12 generates an equivalent code, the hidden subgroup is UGLk(Fq)U \in GL_k(\mathbb{F}_q)13, and the unknown coset encodes the desired permutation. This makes PCE formally parallel to the HSP formulation of Graph Isomorphism. However, the 2011 paper proves an HSP-hardness criterion: if a UGLk(Fq)U \in GL_k(\mathbb{F}_q)14-ary UGLk(Fq)U \in GL_k(\mathbb{F}_q)15 code UGLk(Fq)U \in GL_k(\mathbb{F}_q)16 satisfies UGLk(Fq)U \in GL_k(\mathbb{F}_q)17, UGLk(Fq)U \in GL_k(\mathbb{F}_q)18, and the minimal degree of UGLk(Fq)U \in GL_k(\mathbb{F}_q)19 is UGLk(Fq)U \in GL_k(\mathbb{F}_q)20, then any single-coset-state measurement, including strong Fourier sampling, reveals negligible information about the hidden permutation. Reed–Muller codes UGLk(Fq)U \in GL_k(\mathbb{F}_q)21 with UGLk(Fq)U \in GL_k(\mathbb{F}_q)22 satisfy this condition for large UGLk(Fq)U \in GL_k(\mathbb{F}_q)23, because UGLk(Fq)U \in GL_k(\mathbb{F}_q)24 has size UGLk(Fq)U \in GL_k(\mathbb{F}_q)25 and minimal degree UGLk(Fq)U \in GL_k(\mathbb{F}_q)26. The paper states that Goppa codes fall in the same broad regime. This places Fourier-sampling quantum attacks out of reach for those instances, at least within current HSP methods (Dinh et al., 2011).

The same work emphasizes that quantum difficulty does not imply classical resistance in the known-code model. Sendrier’s Support Splitting Algorithm (SSA) canonically labels coordinates using invariants derived from punctured hulls and succeeds on many structured families, including Goppa codes, thereby breaking known-private-code McEliece instances classically. Reed–Muller codes behave differently: SSA fails or becomes impractical because the codes are self-dual and the relevant hull weight enumerators are exponentially large, but low-rate instances of the Sidelnikov system are still attacked classically by the quasipolynomial-time algorithm of Minder and Shokrollahi (Dinh et al., 2011).

6. Cryptographic role, limitations, and open directions

The cryptographic importance of PCE is clearest through LCE. The assumed hardness of LCE lies at the core of the security of the LESS signature scheme and other signature schemes with advanced functionalities, and the Plücker-coordinate framework is explicitly motivated by isolating the permutation component inside the quotient action of UGLk(Fq)U \in GL_k(\mathbb{F}_q)27 on UGLk(Fq)U \in GL_k(\mathbb{F}_q)28. The same paper also notes that, although LCE is treated as a one-way group action in the single-sample setting, the multi-sample assumptions needed for advanced functionalities are subtle: the textbook action on generator matrices is not multiple one-way, and similar caveats apply to the canonical action on UGLk(Fq)U \in GL_k(\mathbb{F}_q)29. This suggests that the exact form of the action—generator matrices, canonical forms, or quotient orbits—matters materially for security arguments (Alecci et al., 10 Mar 2026).

The main practical limitation of the invariant-theoretic approach is combinatorial blow-up. In the Plücker model, degree-UGLk(Fq)U \in GL_k(\mathbb{F}_q)30 equations are already large for moderate UGLk(Fq)U \in GL_k(\mathbb{F}_q)31, and the number of Plücker coordinates is UGLk(Fq)U \in GL_k(\mathbb{F}_q)32. Even one invariant may yield a massive polynomial, and evaluating many invariants exacerbates the monomial explosion. In structured families, explicit group-theoretic descriptions can be much sharper: cyclic and constacyclic codes admit multiplier, affine, or polynomial-permutation descriptions; self-dual binary codes may collapse to reduced instances of size UGLk(Fq)U \in GL_k(\mathbb{F}_q)33; and some extended perfect codes are completely classified by their Steiner quadruple systems (Alecci et al., 10 Mar 2026, Guenda et al., 2012, Bennett et al., 17 Jun 2026, Mogilnykh et al., 2020).

Several open directions recur across the literature. The algebraic-geometric work explicitly asks for lower-degree or sparser invariant constraints, structured parameter regimes where the Plücker machinery becomes feasible, and a better understanding of whether the quotient action UGLk(Fq)U \in GL_k(\mathbb{F}_q)34 has the multiple one-wayness, weak pseudorandomness, or unpredictability properties needed by advanced cryptographic constructions (Alecci et al., 10 Mar 2026). The self-dual-code work asks whether the decomposition and shadow bounds extend beyond binary self-dual codes, whether there is a threshold in the shadow parameter separating easy from hard instances, and whether UGLk(Fq)U \in GL_k(\mathbb{F}_q)35 can be controlled uniformly through Elkies-type finiteness results (Bennett et al., 17 Jun 2026). The reduction paper leaves open whether SPCE-to-lattice-isomorphism techniques can be extended beyond prime fields and whether any converse reduction from general LIP to code-equivalence variants exists (Cheraghchi et al., 11 Feb 2025). For cyclic and constacyclic codes, the natural unresolved question is a fuller classification of non-multiplier equivalences beyond the special transformations already identified (Dastbasteh et al., 2022).

Across these directions, PCE appears less as a single uniform problem than as a family of orbit problems whose behavior depends sharply on algebraic structure. In some settings it reduces cleanly to graph isomorphism, to small reduced cores, or to explicit permutation groups; in others it is embedded in monomial equivalence and admits only high-degree algebraic encodings. The current literature therefore supports a differentiated view: PCE is simultaneously a foundational equivalence notion in coding theory, a cryptographic hardness assumption, and a testbed for invariant theory, group actions, and isomorphism algorithms.

Topic to Video (Beta)

No one has generated a video about this topic yet.

Whiteboard

No one has generated a whiteboard explanation for this topic yet.

Follow Topic

Get notified by email when new papers are published related to Permutation Code Equivalence (PCE).