Swastik Kopparty

Swastik Kopparty, Itzhak Tamo

Expander (Tanner) codes combine sparse graphs with local constraints, enabling linear-time decoding and asymptotically good distance--rate tradeoffs. A standard constraint-counting argument yields the global-rate lower bound $R\ge 2r-1$ for a Tanner code with local rate $r$, which gives no positive-rate guarantee in the low-rate regime $r\le 1/2$. This regime is nonetheless important in applications that require algebraic local constraints (e.g., Reed--Solomon locality and the Schur-product/multiplication property). We introduce \emph{Algebraic Expander Codes}, an explicit algebraic family of Tanner-type codes whose local constraints are Reed--Solomon and whose global rate remains bounded away from $0$ for every fixed $r\in(0,1)$ (in particular, for $r\le 1/2$), while achieving constant relative distance. Our codes are defined by evaluating a structured subspace of polynomials on an orbit of a non-commutative subgroup of $\mathrm{AGL}(1,\mathbb{F})$ generated by translations and scalings. The resulting sparse coset geometry forms a strong spectral expander, proved via additive character-sum estimates, while the rate analysis uses a new notion of polynomial degree and a polytope-volume/dimension-counting argument.

Eli Ben-Sasson, Lior Goldberg, Swastik Kopparty et al.

Motivated by the quest for scalable and succinct zero knowledge arguments, we revisit worst-case-to-average-case reductions for linear spaces, raised by [Rothblum, Vadhan, Wigderson, STOC 2013]. We first show a sharp quantitative form of a theorem which says that if an affine space $U$ is $δ$-far in relative Hamming distance from a linear code $V$ - this is the worst-case assumption - then most elements of $U$ are almost $δ$-far from $V$ - this is the average case. This leads to an optimal analysis of the soundness of the FRI protocol of [Ben-Sasson, et.al., eprint 2018] for proving proximity to Reed-Solomon codes. To further improve soundness, we sample outside the box. We suggest a new protocol which asks a prover for values of a polynomial at points outside the domain of evaluation of the Reed-Solomon code. We call this technique Domain Extending for Eliminating Pretenders (DEEP). We use the DEEP technique to devise two new protocols: (1) An Interactive Oracle Proof of Proximity (IOPP) for RS codes, called DEEP-FRI. This soundness of the protocol improves upon that of the FRI protocol while retaining linear arithmetic proving complexity and logarithmic verifier arithmetic complexity. (2) An Interactive Oracle Proof (IOP) for the Algebraic Linking IOP (ALI) protocol used to construct zero knowledge scalable transparent arguments of knowledge (ZK-STARKs) in [Ben-Sasson et al., eprint 2018]. The new protocol, called DEEP-ALI, improves soundness of this crucial step from a small constant $< 1/8$ to a constant arbitrarily close to $1$.