Permutation Code Equivalence in Coding Theory
- Permutation Code Equivalence (PCE) is defined as the decision problem of determining if one linear code can be transformed into another via a coordinate permutation, using generator matrices and Grassmannian formulations.
- It leverages algebraic techniques such as Plücker coordinates and invariant theory to isolate permutation actions, enabling reductions to graph isomorphism and lattice isomorphism problems.
- PCE underpins key cryptographic assumptions for linear code equivalence and informs specialized treatments for cyclic, self-dual, and extended perfect codes, highlighting both computational challenges and structural benefits.
Permutation Code Equivalence (PCE) is the problem of deciding, for two linear codes , whether one is obtained from the other by a permutation of coordinates. In generator-matrix form, with full-rank , PCE asks whether there exist and a permutation matrix such that . Within the modern literature, PCE appears both as an autonomous equivalence problem and as the permutation-only core of broader monomial or linear code equivalence problems; it is also studied through quotient actions on Grassmannians, reductions to Graph Isomorphism and lattice isomorphism, and family-specific descriptions for cyclic, self-dual, and extended perfect codes (Alecci et al., 10 Mar 2026, Bardet et al., 2019, Cheraghchi et al., 11 Feb 2025, Dinh et al., 2011).
1. Formal problem and equivalent formulations
In the standard linear-code setting, a linear code over is a -dimensional subspace of . A permutation acts on coordinates via its permutation matrix 0, and the permuted code is 1. Two codes are permutation equivalent when 2 for some 3. If 4 generates 5 and 6 generates 7, then 8 is equivalent to the existence of 9 with 0; once 1 is known, 2 is recovered by linear algebra. The associated automorphism group is
3
so PCE is naturally both a search problem for a witness permutation and a decision problem about orbit membership under 4 (Dinh et al., 2011).
PCE is distinct from Linear Code Equivalence (LCE) and Signed Permutation Code Equivalence (SPCE). LCE allows an arbitrary monomial matrix 5, where 6 is diagonal with nonzero entries and 7 is a permutation matrix, so the defining relation is 8. SPCE restricts the diagonal part to signs 9. These variants satisfy 0, and recent reductions show that PCE admits polynomial-time Karp reductions to both LCE and SPCE; over prime fields, composition with a reduction from SPCE to the Lattice Isomorphism Problem yields a reduction from PCE to lattice isomorphism (Cheraghchi et al., 11 Feb 2025).
A second formulation, important for cryptographic work on LCE, passes from generator matrices to the Grassmannian 1 of 2-dimensional subspaces of 3. Writing 4 for the diagonal group acting by coordinatewise scalings, one studies the quotient 5. In that quotient, the monomial ambiguity is factored into a diagonal part and a permutation part, and PCE becomes: given representatives 6 and 7, find 8 such that 9. The paper on Plücker coordinates makes explicit that recovering a monomial 0 reduces to recovering only its permutation part 1, with diagonal scalings disappearing in the quotient formulation (Alecci et al., 10 Mar 2026).
2. Grassmannians, Plücker coordinates, and invariant-theoretic models
The algebraic-geometric treatment of PCE begins with the Plücker embedding of the Grassmannian. If 2 has generator matrix 3, then for each 4-subset 5, the Plücker coordinate is 6, where 7 is the 8 submatrix on columns indexed by 9. These coordinates define a point in 0 satisfying the quadratic Plücker relations. Monomial actions separate cleanly in these coordinates: if 1 with 2, then diagonal scaling sends 3 to 4, while permutations relabel indices by 5 (Alecci et al., 10 Mar 2026).
This separation permits an invariant-field construction for the diagonal action. Let 6 be the field of rational functions on the Grassmannian, and let 7 be the subfield fixed by 8. The key combinatorial device is the incidence matrix 9, whose 0-th row is the indicator vector of 1. For 2, the rational monomial
3
is 4-invariant exactly when 5 lies in the left kernel of 6. Since 7 for 8, the kernel has rank 9. The paper then uses a Jacobian/Kähler-differentials criterion to select algebraically independent generators, with
0
matching the geometric fact that diagonal scaling removes 1 generic degrees of freedom. A practically computable family of low-degree invariants is
2
whenever 3 as multisets, so the diagonal weights cancel (Alecci et al., 10 Mar 2026).
Given two equivalent codes generated by 4 and 5, every 6-invariant rational function 7 yields a polynomial constraint in an unknown matrix 8: 9 By construction, the true permutation matrix 0 satisfies 1. Because each Plücker coordinate 2 is a determinant of degree 3 in the entries of 4, the resulting polynomial has degree 5. These equations can be combined with the standard permutation constraints 6, row sums equal to 7, and column sums equal to 8. A second family of equations,
9
uses 0 to add constraints without introducing new variables (Alecci et al., 10 Mar 2026).
The framework is theoretically precise but computationally prohibitive at cryptographic parameters. Determinants expand into 1 monomials, products of determinants amplify this growth, and the number of Plücker coordinates is 2, which is exponentially large in the worst regime. For parameters relevant to LESS, such as 3, the degree becomes 4. The paper therefore concludes that the polynomials are not practical for cryptographic parameter sets, even though the method constitutes the first application of Grassmannians, Plücker coordinates, and diagonal-invariant rational functions to LCE/PCE cryptanalysis. In the worked example 5, the invariant field has transcendence degree 6; the invariants
7
satisfy 8 via the Plücker relation, and the resulting polynomial 9 has degree 00 (Alecci et al., 10 Mar 2026).
3. Cyclic and constacyclic families
For cyclic codes, PCE can often be described explicitly in group-theoretic terms. If 01 is cyclic of length 02, then the full cycle 03 lies in 04, and the relevant equivalence permutations are controlled by the 05-Sylow subgroup 06 of 07 containing 08. The core criterion is
09
with the statement that two cyclic objects on 10 points are equivalent if and only if they are equivalent via an element of 11. When 12, one has 13 and 14, so equivalence reduces to affine permutations 15; when 16 and 17, one has 18 and equivalence lies in 19, a family of polynomial permutations
20
with 21. The operational procedure determines the relevant 22-Sylow size by testing specific permutations 23, using at most 24 checks, and then restricts the search accordingly (Guenda et al., 2012).
A closely related treatment for cyclic and quasi-cyclic codes describes the normalizer 25, generalized multipliers, and the polynomial 26-groups 27 and 28. For cyclic codes of length 29, it proves that equivalence testing can be restricted to 30, with 31 when the Sylow size is minimal and 32 when 33 in the range covered by the theorem. For quasi-cyclic codes, the analogous set 34 contains the normalizer of the 35-shift and, in particular, 36 (Guenda, 2010).
For cyclic codes over general finite fields, defining sets give a second explicit language for PCE. If 37 are defining sets of cyclic codes of length 38, then a multiplier 39 with 40 yields permutation equivalence. If 41, this multiplier description is complete for cyclic codes: two cyclic codes are permutation equivalent if and only if their defining sets are related by a multiplier. The 2022 work also isolates a necessary-and-sufficient criterion for monomial equivalence through a shift 42: one must have 43 and 44. Beyond multipliers and shifts, it introduces specific transformations 45, 46, and 47 that produce additional monomial or permutation equivalences in the cases 48 or 49 with 50 divisible by 51. For 52-constacyclic codes over 53, if 54, then all permutation equivalent constacyclic codes of length 55 are given by the action of multipliers with 56 (Dastbasteh et al., 2022).
4. Tractable subclasses, complete invariants, and the role of hulls
A major tractable class is formed by codes with trivial hull. Fixing a nondegenerate symmetric bilinear form on 57, the hull is 58. When 59, one has 60, and for any generator matrix 61 the Gram matrix 62 is invertible. The reduction to weighted Graph Isomorphism constructs the symmetric idempotent projection
63
If 64, then 65, and conversely this conjugacy implies 66. PCE on trivial-hull codes therefore reduces deterministically in polynomial time to weighted undirected graph isomorphism, with graph construction cost 67. The experiments reported for random binary codes with trivial hull show that permutation equivalence can be decided “in a few minutes” for lengths up to 68, with the 69-construction dominating the runtime (Bardet et al., 2019).
Self-dual binary codes illustrate a different phenomenon: large hull does not, by itself, force hard instances. A self-dual code 70 has hull dimension 71, but every such code admits a canonical decomposition
72
where 73, 74 is reduced with minimum distance at least 75, and the reduced length 76 is an invariant. The 77 summand is found in polynomial time by enumerating weight-2 codewords and puncturing their supports. Search PCE on self-dual binary codes then runs in
78
time by reducing the problem to the reduced part. If 79, the algorithm becomes polynomial-time. The same paper defines a “large shadow” regime through the minimum weight 80 of a characteristic vector and proves a polynomial-time consequence when 81 and 82; in particular, 83 yields a polynomial-time regime unconditionally because 84. This directly contradicts the common intuition that large hull should systematically make PCE difficult (Bennett et al., 17 Jun 2026).
For certain extended perfect propelinear codes 85, the Steiner quadruple system 86 of weight-4 supports is a complete invariant for permutation equivalence. The construction decomposes the design as 87, where 88 and 89 are affine blocks internal to each half and 90 is the cross-part determined by a permutation 91 of 92 fixing 93. In this family, 94, and 95 and 96 are permutation equivalent if and only if 97 and 98 are isomorphic. The isomorphism condition is explicit: 99 must equal either 00 or 01 with 02. Point transitivity is controlled by the criterion 03. This produces a design-theoretic route to PCE in a highly structured class (Mogilnykh et al., 2020).
5. Reductions, complexity-theoretic placement, and quantum formulations
Several reductions place PCE among isomorphism-type problems. On the one hand, PCE with trivial hulls is not harder than weighted Graph Isomorphism, by the projection-matrix reduction just described (Bardet et al., 2019). On the other hand, the 2025 reduction paper states that Graph Isomorphism reduces to PCE, cites Petrank–Roth for that direction, and notes that PCE is not NP-complete unless the polynomial hierarchy collapses; it also cites Babai’s quasi-polynomial-time algorithm as evidence that GI, and hence PCE, is likely outside the usual NP-complete paradigm. The same paper gives deterministic polynomial-time Karp reductions 04 and 05 by an explicit block construction 06, and then obtains 07 through the Bennett–Win reduction from SPCE to the Lattice Isomorphism Problem (Cheraghchi et al., 11 Feb 2025).
PCE also admits a nonabelian Hidden Subgroup Problem formulation over 08. If 09 generates a code 10, one considers a canonicalization map and defines 11. When 12 generates an equivalent code, the hidden subgroup is 13, and the unknown coset encodes the desired permutation. This makes PCE formally parallel to the HSP formulation of Graph Isomorphism. However, the 2011 paper proves an HSP-hardness criterion: if a 14-ary 15 code 16 satisfies 17, 18, and the minimal degree of 19 is 20, then any single-coset-state measurement, including strong Fourier sampling, reveals negligible information about the hidden permutation. Reed–Muller codes 21 with 22 satisfy this condition for large 23, because 24 has size 25 and minimal degree 26. The paper states that Goppa codes fall in the same broad regime. This places Fourier-sampling quantum attacks out of reach for those instances, at least within current HSP methods (Dinh et al., 2011).
The same work emphasizes that quantum difficulty does not imply classical resistance in the known-code model. Sendrier’s Support Splitting Algorithm (SSA) canonically labels coordinates using invariants derived from punctured hulls and succeeds on many structured families, including Goppa codes, thereby breaking known-private-code McEliece instances classically. Reed–Muller codes behave differently: SSA fails or becomes impractical because the codes are self-dual and the relevant hull weight enumerators are exponentially large, but low-rate instances of the Sidelnikov system are still attacked classically by the quasipolynomial-time algorithm of Minder and Shokrollahi (Dinh et al., 2011).
6. Cryptographic role, limitations, and open directions
The cryptographic importance of PCE is clearest through LCE. The assumed hardness of LCE lies at the core of the security of the LESS signature scheme and other signature schemes with advanced functionalities, and the Plücker-coordinate framework is explicitly motivated by isolating the permutation component inside the quotient action of 27 on 28. The same paper also notes that, although LCE is treated as a one-way group action in the single-sample setting, the multi-sample assumptions needed for advanced functionalities are subtle: the textbook action on generator matrices is not multiple one-way, and similar caveats apply to the canonical action on 29. This suggests that the exact form of the action—generator matrices, canonical forms, or quotient orbits—matters materially for security arguments (Alecci et al., 10 Mar 2026).
The main practical limitation of the invariant-theoretic approach is combinatorial blow-up. In the Plücker model, degree-30 equations are already large for moderate 31, and the number of Plücker coordinates is 32. Even one invariant may yield a massive polynomial, and evaluating many invariants exacerbates the monomial explosion. In structured families, explicit group-theoretic descriptions can be much sharper: cyclic and constacyclic codes admit multiplier, affine, or polynomial-permutation descriptions; self-dual binary codes may collapse to reduced instances of size 33; and some extended perfect codes are completely classified by their Steiner quadruple systems (Alecci et al., 10 Mar 2026, Guenda et al., 2012, Bennett et al., 17 Jun 2026, Mogilnykh et al., 2020).
Several open directions recur across the literature. The algebraic-geometric work explicitly asks for lower-degree or sparser invariant constraints, structured parameter regimes where the Plücker machinery becomes feasible, and a better understanding of whether the quotient action 34 has the multiple one-wayness, weak pseudorandomness, or unpredictability properties needed by advanced cryptographic constructions (Alecci et al., 10 Mar 2026). The self-dual-code work asks whether the decomposition and shadow bounds extend beyond binary self-dual codes, whether there is a threshold in the shadow parameter separating easy from hard instances, and whether 35 can be controlled uniformly through Elkies-type finiteness results (Bennett et al., 17 Jun 2026). The reduction paper leaves open whether SPCE-to-lattice-isomorphism techniques can be extended beyond prime fields and whether any converse reduction from general LIP to code-equivalence variants exists (Cheraghchi et al., 11 Feb 2025). For cyclic and constacyclic codes, the natural unresolved question is a fuller classification of non-multiplier equivalences beyond the special transformations already identified (Dastbasteh et al., 2022).
Across these directions, PCE appears less as a single uniform problem than as a family of orbit problems whose behavior depends sharply on algebraic structure. In some settings it reduces cleanly to graph isomorphism, to small reduced cores, or to explicit permutation groups; in others it is embedded in monomial equivalence and admits only high-degree algebraic encodings. The current literature therefore supports a differentiated view: PCE is simultaneously a foundational equivalence notion in coding theory, a cryptographic hardness assumption, and a testbed for invariant theory, group actions, and isomorphism algorithms.