Abstract 1 Introduction 2 Preliminaries 3 Permutation Martingales and Permutation Measure 4 Elementary Properties of Random Permutations 5 Random Permutations for ๐—ก๐—ฃ โˆฉ ๐—ฐ๐—ผ๐—ก๐—ฃ 6 Random Permutations for ๐—ก๐—ฃ โˆฉ ๐—ฐ๐—ผ๐—ก๐—ฃ versus Quantum Computation 7 Random Oracles for ๐—ก๐—ฃ โˆฉ ๐—ฐ๐—ผ๐—ก๐—ฃ and 0-1 Laws for Measure in ๐—˜๐—ซ๐—ฃ 8 Conclusion References

Random Permutations in Computational Complexity

John M. Hitchcock ORCID Department of Electrical Engineering and Computer Science, University of Wyoming, Laramie, WY, USA Adewale Sekoni ORCID Department of Mathematics, Computer Science & Physics, Roanoke College, Salem, VA, USA Hadi Shafei ORCID Department of Computer Science, University of Huddersfield, UK
Abstract

Classical results of Bennett and Gill (1981) show that with probability 1, ๐–ฏAโ‰ ๐–ญ๐–ฏA relative to a random oracle A, and with probability 1, ๐–ฏฯ€โ‰ ๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€ relative to a random permutation ฯ€. Whether ๐–ฏA=๐–ญ๐–ฏAโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏA holds relative to a random oracle A remains open. While the random oracle separation has been extended to specific individually random oraclesโ€“such as Martin-Lรถf random or resource-bounded random oraclesโ€“no analogous result is known for individually random permutations.

We introduce a new resource-bounded measure framework for analyzing individually random permutations. We define permutation martingales and permutation betting games that characterize measure-zero sets in the space of permutations, enabling formal definitions of polynomial-time random permutations, polynomial-time betting-game random permutations, and polynomial-space random permutations.

Our main result shows that ๐–ฏฯ€โ‰ ๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€ for every polynomial-time betting-game random permutation ฯ€. This is the first separation result relative to individually random permutations, rather than an almost-everywhere separation. We also strengthen a quantum separation of Bennett, Bernstein, Brassard, and Vazirani (1997) by showing that ๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€โŠˆ๐–ก๐–ฐ๐–ฏฯ€ for every polynomial-space random permutation ฯ€.

We investigate the relationship between random permutations and random oracles. We prove that random oracles are polynomial-time reducible from random permutations. The converseโ€“whether every random permutation is reducible from a random oracleโ€“remains open. We show that if ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ is not a measurable subset of ๐–ค๐–ท๐–ฏ, then ๐–ฏAโ‰ ๐–ญ๐–ฏAโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏA holds with probability 1 relative to a random oracle A. Conversely, establishing this random oracle separation with time-bounded measure would imply ๐–ก๐–ฏ๐–ฏ is a measure 0 subset of ๐–ค๐–ท๐–ฏ.

Our framework builds a foundation for studying permutation-based complexity using resource-bounded measure, in direct analogy to classical work on random oracles. It raises natural questions about the power and limitations of random permutations, their relationship to random oracles, and whether individual randomness can yield new class separations.

Keywords and phrases:
resource-bounded measure, martingales, betting games, random permutations, random oracles
Funding:
John M. Hitchcock: This research was supported in part by NSF grant 2431657.
Copyright and License:
[Uncaptioned image]โ€‚ยฉย John M. Hitchcock, Adewale Sekoni, and Hadi Shafei; licensed under Creative Commons License CC-BY 4.0
2012 ACM Subject Classification:
Theory of computation โ†’ Complexity classes
; Theory of computation โ†’ Computational complexity and cryptography ; Theory of computation โ†’ Quantum complexity theory
Acknowledgements:
We thank Morgan Sinclaire and Saint Wesonga for helpful discussions.
Editors:
Paweล‚ Gawrychowski, Filip Mazowiecki, and Michaล‚ Skrzypczak

1 Introduction

The seminal work of Bennett and Gill [4] established two foundational separations in computational complexity theory:

  1. 1.

    ๐–ฏAโ‰ ๐–ญ๐–ฏA relative to a random oracle A with probability 1.

  2. 2.

    ๐–ฏฯ€โ‰ ๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€ relative to a random permutation ฯ€ with probability 1.

Subsequent research extended the first separation to hold for specific, individually random oracles, including algorithmically (Martin-Lรถf) random oracles [5], polynomial-space-bounded random oracles [16], and polynomial-time betting-game random oracles [12]. However, the second separation has not yet been strengthened in an analogous way. Whether ๐–ฏAโ‰ ๐–ญ๐–ฏAโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏA holds relative to a random oracle A remains an open question.

In this paper, we develop a novel framework for resource-bounded permutation measure and randomness, introducing permutation martingales and permutation betting games. These concepts generalize classical martingales and betting games to the space ฮ  of all length-preserving permutations ฯ€:{0,1}โˆ—โ†’{0,1}โˆ— where |ฯ€โข(x)|=|x| for all xโˆˆ{0,1}โˆ—.

1.1 Background

Bennett and Gill [4] initiated the study of random oracles in computational complexity, proving that ๐–ฏAโ‰ ๐–ญ๐–ฏA for a random oracle A with probability 1. Subsequent work extended this to individual random oracles. Book, Lutz, and Wagner [5] showed that ๐–ฏAโ‰ ๐–ญ๐–ฏA for every oracle A that is algorithmically random in the sense of Martin-Lรถf [17]. Lutz and Schmidt [16] improved this further to show ๐–ฏAโ‰ ๐–ญ๐–ฏA for every oracle A that is pspace-random in the sense of resource-bounded measure [14]. Hitchcock, Sekoni, and Shafei [12] extended this result to polynomial-time betting-game random oracles [6].

The complexity class ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ is particularly significant because it comprises problems that have both efficiently verifiable proofs of membership and non-membership. This class includes important problems such as integer factorization and discrete logarithm, which are widely believed to be outside ๐–ฏ but are not known to be ๐–ญ๐–ฏ-complete. These problems play a central role in cryptography, as the security of widely-used cryptosystems relies on their presumed intractability [22, 7]. Furthermore, under derandomization hypotheses, ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ has been shown to contain problems such as graph isomorphism [13], further underscoring its importance in complexity theory. Thus, understanding the relationship between ๐–ฏ and ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ relative to different notions of randomness could shed light on the structure of these classes and the limits of efficient computation.

1.2 Our Approach: Permutation Martingales and Permutation Measure

In this work, we develop a novel framework for resource-bounded permutation measure and randomness. We introduce permutation martingales and permutation betting games, extending classical notions of random permutations. Our theory captures essential properties of random permutations while enabling complexity separations. We prove that random oracles can be computed in polynomial time from a random permutation; however, the converse remains unresolved.

First, we recall the basics of resource-bounded measure. A martingale in Cantor space may be viewed as betting on the membership of strings in a language. The standard enumeration of {0,1}โˆ— is s0=ฮป,s1=0,s2=1,s3=00,s4=01,โ€ฆ. In the ith stage of the game, the martingale has seen the membership of the first i strings and bets on the membership of si in the language. The martingaleโ€™s value is updated based on the outcome of the bet. Formally, a classical martingale is a function d:{0,1}โˆ—โ†’[0,โˆž) satisfying the fairness condition

dโข(w)=dโข(wโข0)+dโข(wโข1)2

for all strings w. Intuitively, dโข(w) represents the capital that a gambler has after betting on the sequence of bits in w according to a particular strategy. The fairness condition ensures that the expected capital after the next bit is equal to the current capital. A martingale succeeds on a language AโІ{0,1}โˆ— if lim supnโ†’โˆždโข(Aโ†พn)=โˆž, where Aโ†พn is the length-n prefix of Aโ€™s characteristic sequence. The success set of d is Sโˆžโข[d], the set of all sequences that d succeeds on. Ville [25] proved that a set X has Lebesgue measure zero if and only if there is a martingale that succeeds on all elements of X. Lutz [14] defined resource-bounded measure by imposing computability and complexity constraints on the martingales in Villeโ€™s theorem.

We take a similar approach in developing resource-bounded permutation measure. Unlike a classical martingale betting on the bits of a languageโ€™s characteristic sequence, a permutation martingale bets on the function values of a permutation ฯ€. Instead of seeing the characteristic string of a language, a permutation martingale sees a list of permutation function values. More precisely, after iโ‰ฅ0 rounds of betting, a permutation martingale has seen a prefix partial permutation

g=[gโข(s0),โ€ฆ,gโข(siโˆ’1)]

where |gโข(si)|=|si| for all i. The permutation martingale will bet on the next function value gโข(si). The current betting length is lโข(g)=|si|, the length of the next string si in the standard enumeration. The set of free strings available for the next function value is

๐–ฟ๐—‹๐–พ๐–พโข(g)={xโˆˆ{0,1}lโข(g)|xโขย is not listed inย โขg}.

For any prefix partial permutation g, a permutation martingale d outputs a value dโข(g,x)โ‰ฅ0 for each xโˆˆ๐–ฟ๐—‹๐–พ๐–พโข(g). The values satisfy the averaging condition

dโข(g)=1|freeโข(g)|โขโˆ‘xโˆˆfreeโข(g)dโข(g,x).

Here g,x denotes appending the string x as the next function value in prefix partial permutation g.

Prefix partial permutations may be used as cylinders to define a measure in ฮ  that is equivalent to the natural product probability measure. We detail this in Section 3. Briefly, a class XโІฮ  has measure 0 if for every ฯต>0, there exists a sequence of cylinders {โŸฆgiโŸงโˆฃiโˆˆโ„•} that has total measure at most ฯต and covers X. This is difficult to work with computationally as the covers may be large and require exponential time to enumerate.

We prove an analogue of Villeโ€™s theorem [25], showing that permutation martingales characterize measure 0 sets in the permutation space ฮ : a class XโІฮ  has measure 0 if and only if there a permutation martingale d with XโІSโˆžโข[d]. This permutation martingale characterization allows us to impose computability and complexity constraints in the same way Lutz did for resource-bounded measure in Cantor spaceย [14]. In the following, let ฮ” be a resource bound such as ๐—‰, ๐—‰2, ๐—‰๐—Œ๐—‰๐–บ๐–ผ๐–พ, or ๐—‰2โข๐—Œ๐—‰๐–บ๐–ผ๐–พ (see Section 3.5 for more details).

Definition 1.1.

Let ฮ” be a resource bound. A class of permutations XโІฮ  has ฮ”-measure 0 if there is a ฮ”-computable permutation martingale that succeeds on X.

Betting games [6, 18] are a generalization of martingales that are allowed to bet on strings in an adaptive order rather than the standard order. We analogously introduce permutation betting games as a generalization of both permutation martingales and classical betting games by allowing the betting strategy to adaptively choose the order in which it bets on the permutationโ€™s values. We use these betting games to define resource-bounded permutation betting-game measure.

Definition 1.2.

Let ฮ” be a resource bound. A class of permutations XโІฮ  has ฮ”-betting game measure 0 if there is a ฮ”-computable permutation betting game that succeeds on X.

We also define individually random permutations.

Definition 1.3.

Let ฯ€โˆˆฮ  be a permutation and let ฮ” be a resource bound.

  1. 1.

    ฯ€ is ฮ”-random if no ฮ”-permutation martingale succeeds on ฯ€.

  2. 2.

    ฯ€ is ฮ”-betting game random if no ฮ”-permutation betting game succeeds on ฯ€.

1.3 Our Results

Our main result strengthens the Bennettโ€“Gill permutation separation by proving that ๐–ฏโ‰ ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ relative to every polynomial-time betting-game random permutation ฯ€. Formally, Theorem 5.1 establishes that

๐–ฏฯ€โ‰ ๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€

for every ๐—‰-betting-game random permutation ฯ€. In fact, we obtain even stronger separations in terms of bi-immunity [8, 2], a notion formalizing the absence of infinite, easily-decidable subsets (see Section 5 for more details). We show that for a ๐—‰-betting-game random permutation ฯ€, the class ๐–ญ๐–ซ๐–จ๐–ญฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ซ๐–จ๐–ญฯ€ contains languages that are bi-immune to ๐–ฃ๐–ณ๐–จ๐–ฌ๐–คฯ€โข(2kโขn) for all kโ‰ฅ1, where ๐–ญ๐–ซ๐–จ๐–ญ denotes nondeterministic linear time. Moreover, relative to a ๐—‰2-betting-game random permutation, we derive that ๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€ contains languages that are bi-immune to ๐–ฃ๐–ณ๐–จ๐–ฌ๐–คฯ€โข(2nk) for every kโ‰ฅ1.

Bennett et al. [3] showed that ๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€โŠˆ๐–ก๐–ฐ๐–ณ๐–จ๐–ฌ๐–คฯ€โข(oโข(2n/3)) relative to a random permutation ฯ€ with probability 1. We apply our resource-bounded permutation measure framework to improve this to individual space-bounded random oracles. Specifically, we show that relative to a ๐—‰2โข๐—Œ๐—‰๐–บ๐–ผ๐–พ-random permutation ฯ€,

๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€โŠˆ๐–ก๐–ฐ๐–ฏฯ€.

This illustrates the power of our framework for analyzing the interplay between randomness, classical complexity, and quantum complexity.

1.4 Random Oracles and Measure 0-1 Laws in ๐—˜๐—ซ๐—ฃ

Tardos [23] proved that if ๐– ๐–ฌโˆฉ๐–ผ๐—ˆ๐– ๐–ฌโ‰ ๐–ก๐–ฏ๐–ฏ, then ๐–ฏAโ‰ ๐–ญ๐–ฏAโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏA with probability 1 for a random oracle A. This is proved using ๐– ๐–ซ๐–ฌ๐–ฎ๐–ฒ๐–ณ complexity classes. For a relativizable complexity class ๐’ž, its ๐– ๐–ซ๐–ฌ๐–ฎ๐–ฒ๐–ณโข-โข๐’ž class consists of all languages that are in the class with probability 1 relative to a random oracle: ๐– ๐–ซ๐–ฌ๐–ฎ๐–ฒ๐–ณโข-โข๐’ž={Lโˆฃ๐–ฏ๐—‹โข[Lโˆˆ๐’žA]=1}. We have ๐– ๐–ซ๐–ฌ๐–ฎ๐–ฒ๐–ณโข-โข๐–ฏ=๐–ก๐–ฏ๐–ฏ [4] and ๐– ๐–ซ๐–ฌ๐–ฎ๐–ฒ๐–ณโข-โข๐–ญ๐–ฏ=๐– ๐–ฌ [20]. The condition ๐– ๐–ฌโˆฉ๐–ผ๐—ˆ๐– ๐–ฌโ‰ ๐–ก๐–ฏ๐–ฏ implies that there exist problems in ๐– ๐–ซ๐–ฌ๐–ฎ๐–ฒ๐–ณโข-โข๐–ญ๐–ฏโˆฉ๐– ๐–ซ๐–ฌ๐–ฎ๐–ฒ๐–ณโข-โข๐–ผ๐—ˆ๐–ญ๐–ฏ that are not in ๐– ๐–ซ๐–ฌ๐–ฎ๐–ฒ๐–ณโข-โข๐–ฏ. Since the intersection of measure 1 classes is measure 1, this implies ๐–ญ๐–ฏAโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏAโ‰ ๐–ฏA relative to a random oracle A with probability 1. Recent work of Ghosal et al. [9] shows that if ๐–ด๐–ฏโŠˆ๐–ฑ๐–ฏ, then ๐–ฏAโ‰ ๐–ญ๐–ฏAโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏA with probability 1 for a random oracle A. In Section 7 we pivot from permutation randomness to classical random oracles and show that resolving the long-standing question โ€œdoes ๐–ฏR=๐–ญ๐–ฏRโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏR with probability 1?โ€ is tightly linked to quantitative structure inside ๐–ค๐–ท๐–ฏ. Leveraging the conditional oracle separations of Tardos [23] and of Ghosal et al. [9], we prove that if ๐–ฏR=๐–ญ๐–ฏRโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏR holds almost surely, then several familiar subclasses of ๐–ค๐–ท๐–ฏ obey strong 0-1 laws: specifically, either ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ, ๐–ด๐–ฏโˆฉ๐–ผ๐—ˆ๐–ด๐–ฏ, (and, in a weaker form, ๐–ด๐–ฏ vs. ๐–ฅ๐–พ๐—๐–ฏ) each has ๐—‰-measure 0 or else fills all of ๐–ค๐–ท๐–ฏ. Consequently, non-measurability of any one of these classes immediately forces ๐–ฏRโ‰ ๐–ญ๐–ฏRโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏR with probability 1. We further show that placing the same oracle separation in ๐—‰2 measure would collapse BPP below EXP, thereby framing the random-oracle problem in terms of concrete measure-theoretic thresholds inside exponential time.

1.5 Organization

This paper is organized as follows: Section 2 contains preliminaries. Section 3 develops permutation martingales, resource-bounded permutation measure, and random permutations. Elementary properties of ๐—‰-random permutations are presented in Section 4. In Section 5, we prove our main results on random permutations for ๐–ฏ vs. ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ. Section 6 contains our results on ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ versus quantum computation relative to a random permutation. In Section 7 we present our results on random oracles and 0-1 laws. We conclude in Section 8 with some open questions.

2 Preliminaries

The binary alphabet is ฮฃ={0,1}, the set of all binary strings is ฮฃโˆ—, the set of all binary strings of length n is ฮฃn, and the set of all infinite binary sequences is ฮฃโˆž. The empty string is denoted by ฮป. We use the standard enumeration of strings, s0=ฮป,s1=0,s2=1,s3=00,s4=01,โ€ฆ. The characteristic sequence of a language A is the sequence ฯ‡Aโˆˆฮฃโˆž, where ฯ‡Aโข[n]=1โ‡”snโˆˆA. We refer to ฯ‡Aโข[sn]=ฯ‡Aโข[n] as the characteristic bit of sn in A. A language A can alternatively be seen as a subset of ฮฃโˆ—, or as an element of ฮฃโˆž via identification with its characteristic sequence ฯ‡A. Given strings x,y we denote by [x,y] the set of all strings z such that xโ‰คzโ‰คy. For any string sn and natural number k, sn+k is the string sn+k; e.g. ฮป+4=01. Similarly we denote by Aโข[x,y] the substring of the characteristic sequence ฯ‡A that corresponds to the characteristic bits of the strings in [x,y]. We use parentheses for intervals that do not include the endpoints. We write Aโ†พn for the length n prefix of A. A statement ๐’ฎn holds infinitely often (written i.o.) if it holds for infinitely many n, and it holds almost everywhere (written a.e.) if it holds for all but finitely many n.

3 Permutation Martingales and Permutation Measure

3.1 Permutation Measure Space

Resource-bounded measure is typically defined in the Cantor Space ๐–ข={0,1}โˆž=2โ„• of all infinite binary sequences. For measure in ๐–ข, we use the open balls or cylinders ๐–ขw=wโ‹…๐–ข that have measure ฮผโข(๐–ขw)=2โˆ’|w| for each wโˆˆฮฃโˆ—. Let ๐’ž be the ฯƒ-algebra generated by {๐–ขwโˆฃwโˆˆ{0,1}โˆ—}. Resource-bounded measure and algorithmic randomness typically work in the probability space (๐–ข,๐’ž,ฮผ).

We only consider permutations in ฮ , the set of permutations on {0,1}โˆ— that preserve string lengths. Given a permutation ฯ€โˆˆฮ , we denote by ฯ€n the permutation ฯ€ restricted to {0,1}n i.e., ฯ€n is a permutation on {0,1}n. Similarly, ฮ n denotes the set of permutations in ฮ  restricted to {0,1}n. Bennett and Gill [4] considered random permutations by placing the uniform measure on each ฮ n and taking the product measure to get a measure on ฮ . We now define this measure space more formally so we may place martingales on it.

Standard resource-bounded measure identifies a language AโІ{0,1}โˆ— with its infinite binary characteristic sequence ฯ‡Aโˆˆ๐–ข. For permutations, we analogously use the value sequence consisting of all function values.

Definition 3.1.

The value sequence of a permutation fโˆˆฮ  is the sequence

ฮฝf=[fโข(s0),fโข(s1),fโข(s2),โ€ฆ]

of function values where s0,s1,s2,โ€ฆ is the standard enumeration of {0,1}โˆ—.

We identify a permutation fโˆˆฮ  with its value sequence ฮฝf. Initial segments of permutations are called prefix partial permutations.

Definition 3.2.

A prefix partial permutation is a list g=[gโข(s0),โ€ฆ,gโข(sNโˆ’1)] of function values for some Nโ‰ฅ0 where no value is repeated and |gโข(si)|=|si| for all 0โ‰คi<N. We let ๐–ฏ๐–ฏโขฮ  denote the class of all prefix partial permutations.

We write each gโˆˆ๐–ฏ๐–ฏโขฮ  as a list g=[gโข(s0),โ€ฆ,gโข(sNโˆ’1)]. The length of g is N, the number of function values assigned, and is denoted |g|. We use [] to denote the empty list, the list of length 0. We write fโ†พN for the length N prefix partial permutation of fโˆˆฮ .

Definition 3.3.

For each g=[gโข(s0),โ€ฆ,gโข(sNโˆ’1)]โˆˆ๐–ฏ๐–ฏโขฮ , the cylinder of all permutations in ฮ  that extend g is

โŸฆgโŸง={hโˆˆฮ โˆฃh(s0)=g(s0),โ€ฆ,h(sNโˆ’1)=g(sNโˆ’1)}.

For measure in ฮ , we are taking the uniform distribution on the set of all ฮ n of length-preserving permutations for all n. Our basic open sets are {โŸฆgโŸงโˆฃgโˆˆ๐–ฏ๐–ฏฮ }. Suppose gโˆˆ๐–ฏ๐–ฏโขฮ  has |g|=2nโˆ’1 for some nโ‰ฅ0. Then, following Bennett and Gill [4], the measure

ฮผ(โŸฆgโŸง)=โˆk=0nโˆ’11(2k)!

is easy to define because the distribution is uniform over the (2k)! permutations at each length. If 2nโˆ’1โ‰ค|g|<2n+1โˆ’1, let m=|g|โˆ’2n+1 and then

ฮผ(โŸฆgโŸง)=(โˆk=0nโˆ’11(2k)!)(2nโˆ’m)!(2n)!=(โˆk=0nโˆ’11(2k)!)1Pโข(2n,m),

where Pโข(n,k)=n!(nโˆ’k)! denotes the number of k-permutations on n elements. For convenience, we commonly write ฮผ(g)=ฮผ(โŸฆgโŸง).

Let โ„ฑฮ =ฯƒโข(๐–ฏ๐–ฏโขฮ ) be the ฯƒ-algebra generated by the collection of all โŸฆgโŸง where gโˆˆ๐–ฏ๐–ฏโขฮ . By Carathรฉodoryโ€™s extension theorem, ฮผ extends uniquely to โ„ฑฮ , yielding the probability space (ฮ ,โ„ฑฮ ,ฮผ). We will work in this probability space. Because ฮผ is outer regular, we have the typical open cover characterization of measure zero:

Theorem 3.4.

A class XโІฮ  has measure 0 if and only if for every ฯต>0, there is an open covering G={g0,g1,โ€ฆ,}โІ๐–ฏ๐–ฏฮ  such that

โˆ‘i=0โˆžฮผ(gi)<ฯตandXโІโ‹ƒi=0โˆžโŸฆgiโŸง.

3.2 Permutation Martingales

In resource-bounded measure in Cantor Space, a martingale is a function d:ฮฃโˆ—โ†’[0,โˆž) such that for all wโˆˆฮฃโˆ—, we have the following averaging condition:

dโข(w)=dโข(wโข0)+dโข(wโข1)2.

A martingale in Cantor space may be viewed as betting on the membership of strings in a language. The standard enumeration of {0,1}โˆ— is s0=ฮป,s1=0,s2=1,s3=00,s4=01,โ€ฆ. In the ith stage of the game, the martingale has seen the membership of the first i strings and bets on the membership of si in the language. The martingaleโ€™s value is updated based on the outcome of the bet. For further background on resource-bounded measure, we refer to [14, 15, 1, 6, 10].

A permutation martingale operates similarly, but instead of betting on the membership of a string in a language it bets on the next function value of the permutation. Instead of seeing the characteristic string of a language, a permutation martingale sees a prefix partial permutation, which is a list of permutation function values g=[gโข(s0),โ€ฆ,gโข(siโˆ’1)] satisfying |gโข(si)|=|si| for all i. The permutation martingale will bet on the next function value gโข(si). The current betting length is the length of the next string s|g| in the standard enumeration: lโข(g)=|s|g||. The set of free strings available for the next function value is

๐–ฟ๐—‹๐–พ๐–พโข(g)={xโˆˆ{0,1}lโข(g)โˆฃxโขย is not inย โขg}.

For example, ๐–ฟ๐—‹๐–พ๐–พโข([ฮป])={0,1}, ๐–ฟ๐—‹๐–พ๐–พโข([ฮป,1,0,11])={00,01,10}, and ๐–ฟ๐—‹๐–พ๐–พโข([ฮป,1,0,11,00,01])={10}.

We now introduce our main conceptual contribution, permutation martingales.

Definition 3.5.

A permutation martingale is a function d:๐–ฏ๐–ฏโขฮ โ†’[0,โˆž) such that for every prefix partial permutation gโˆˆ๐–ฏ๐–ฏโขฮ ,

dโข(g)=1|๐–ฟ๐—‹๐–พ๐–พโข(g)|โขโˆ‘xโˆˆ๐–ฟ๐—‹๐–พ๐–พโข(g)dโข(g,x),

where (g,x) is the result of appending x to g.

Success is defined for permutation martingales analogously to success for classical martingales.

Definition 3.6.

Let d be a permutation martingale. We say d succeeds on fโˆˆฮ  if

lim supNโ†’โˆždโข(fโ†พN)=โˆž.

The success set of d is

Sโˆžโข[d]={fโˆˆฮ โˆฃdโขย succeeds onย โขf}

and the unitary success set of d is the set

S1โข[d]={fโˆˆฮ โˆฃ(โˆƒn)โขdโข(fโ†พn)โ‰ฅ1}.

We establish the analogue of Villeโ€™s theorem [25] for measure in ฮ  and permutation martingales:

Theorem 3.7.

The following statements are equivalent for every XโІฮ :

  1. 1.

    X has measure 0.

  2. 2.

    For every ฯต>0, there is a permutation martingale d with dโข(ฮป)<ฯต and XโІS1โข[d].

  3. 3.

    There is a permutation martingale d with XโІSโˆžโข[d].

3.3 A Permutation Martingale Example

We construct a permutation martingale d that succeeds on any length-preserving permutation whose restriction to lengthย n is a cycle permutation for all but finitely many n. We partition the initial capital into infinitely many shares ai=1/i2. For each i, the share ai is used to bet on the event that, for all nโ‰ฅi, the length-n restriction of the permutation is a cycle permutation.

The betting strategy is simple: when moving from length nโˆ’1 to n, the martingale wagers all relevant capital on the image of the n-bit string 1nโˆ’1โข0. In the final step of forming a cycle of length 2n, there are exactly two choices for the image of 1nโˆ’1โข0. One choice yields a cycle of length 2n; the other does not. Since it is a binary choice, the martingale places its entire stake ai (for all iโ‰คn) on the cycle outcome, thereby doubling its capital whenever the cycle is formed.

Hence, on any permutation whose restriction to lengthย n is a cycle permutation for all but finitely many n, infinitely many of these bets succeed. Consequently, each of those corresponding shares ai grows without bound, and so the overall martingale d succeeds on all such permutations.

3.4 Permutation Martingales as Random Variables

Hitchcock and Lutz [11] showed how the martingales used in computational complexity are a special case of martingales used in probability theory. We explain how this extends to permutation martingales. Given a martingale d:{0,1}โˆ—โ†’[0,โˆž), Hitchcock and Lutz define the random variable ฮพd,n:๐–ขโ†’[0,โˆž) by ฮพd,nโข(S)=dโข(Sโ†พn) for each nโ‰ฅ0. Let โ„ณn=ฯƒโข({๐–ขwโˆฃwโˆˆ{0,1}n}) be the ฯƒ-algebra generated by the cylinders of length n. Then the sequence (ฮพd,nโˆฃnโ‰ฅ0) is a martingale in the probability theory sense with respect to the filtration (โ„ณnโˆฃnโ‰ฅ0): for all nโ‰ฅ0, Eโข[ฮพd,n+1โˆฃโ„ณn]=ฮพd,n.

Similarly, given a permutation martingale d:๐–ฏ๐–ฏโขฮ โ†’[0,โˆž), for each N we can define the random variable Xd,N:ฮ โ†’[0,โˆž) by Xd,Nโข(f)=dโข(fโ†พN) for each Nโ‰ฅ0. Let

๐’ขN=ฯƒ({โŸฆgโŸงโˆฃgโˆˆ๐–ฏ๐–ฏฮ ย andย |g|=N})

be the ฯƒ-algebra generated by the cylinders in ๐–ฏ๐–ฏโขฮ  of length N. Then (Xd,NโˆฃNโ‰ฅ0) is a martingale in the probability theory sense with respect to the filtration (๐’ขNโˆฃNโ‰ฅ0): for all Nโ‰ฅ0, Eโข[Xd,N+1โˆฃ๐’ขN]=Xd,N.

3.5 Resource-Bounded Permutation Measure

We follow the standard notion of computability for real-valued functions [14] to define resource-bounded permutation martingales.

Definition 3.8.

Let d:๐–ฏ๐–ฏโขฮ โ†’[0,โˆž) be a permutation martingale.

  1. 1.

    d is computable in time tโข(n) if there is an exactly computable d^:๐–ฏ๐–ฏโขฮ ร—โ„•โ†’โ„š such that for all fโˆˆ๐–ฏ๐–ฏโขฮ  and rโˆˆโ„•, |dโข(f)โˆ’d^โข(f,r)|โ‰ค2โˆ’r and d^โข(f,r) is computable in time tโข(|f|+r).

  2. 2.

    d is computable in space sโข(n) if there is an exactly computable d^:๐–ฏ๐–ฏโขฮ ร—โ„•โ†’โ„š such that for alll fโˆˆ๐–ฏ๐–ฏโขฮ  and rโˆˆโ„•, |dโข(f)โˆ’d^โข(f,r)|โ‰ค2โˆ’r and d^โข(f,r) is computable in space sโข(|f|+r).

  3. 3.

    If d is computable in polynomial time, then d is a ๐—‰-permutation martingale.

  4. 4.

    If d is computable in quasipolynomial time, then d is a ๐—‰2-permutation martingale.

  5. 5.

    If d is computable in polynomial space, then d is a ๐—‰๐—Œ๐—‰๐–บ๐–ผ๐–พ-permutation martingale.

  6. 6.

    If d is computable in quasipolynomial space, then d is a ๐—‰2โข๐—Œ๐—‰๐–บ๐–ผ๐–พ-permutation martingale.

We are now ready to define resource-bounded permutation measure.

Definition 3.9.

Let ฮ”โˆˆ{๐—‰,๐—‰2,๐—‰๐—Œ๐—‰๐–บ๐–ผ๐–พ,๐—‰2โข๐—Œ๐—‰๐–บ๐–ผ๐–พ}. Let XโІฮ  and Xc=ฮ โˆ’X be the complement of X within ฮ .

  1. 1.

    X has ฮ”-measure 0, written ฮผฮ”โข(X)=0, if there is a ฮ”-computable permutation martingale d with XโІSโˆžโข[d].

  2. 2.

    X has ฮ”-measure 1, written ฮผฮ”โข(X)=1, if ฮผฮ”โข(Xc)=0

Definition 3.10.

Let ฮ”โˆˆ{๐—‰,๐—‰2,๐—‰๐—Œ๐—‰๐–บ๐–ผ๐–พ,๐—‰2โข๐—Œ๐—‰๐–บ๐–ผ๐–พ}. A permutation ฯ€โˆˆฮ  is ฮ”-random if ฯ€ is not contained in any ฮ”-measure 0 set.

Equivalently, ฯ€ is ฮ”-random if no ฮ”-martingale succeeds on ฯ€.

3.6 Permutation Betting Games

Originated in the field of algorithmic information theory, betting games are a generalization of martingales [19, 18], which were introduced to computational complexity by Buhrman et al.ย [6]. Similar to martingales, betting games can be thought of as strategies for betting on a binary sequence, except that with betting games we have the additional capability of selecting which position in a sequence to bet on next. In other words, a betting game is permitted to select strings in a nonmonotone order, with the important restriction that it may not bet on the same string more than once (see Buhrman et al. [6] for more details).

A permutation betting game is a generalization of a permutation martingale, implemented by an oracle Turing machine, where it is allowed to select strings in nonmonotone order. Prefixes of permutation betting games can be represented as ordered partial permutations defined below.

Definition 3.11.

An ordered partial permutation is a list g=[(x1,y1),โ€ฆ,(xn,yn)] of pairs of strings for some nโ‰ฅ0 where for all 1โ‰คi<jโ‰คn, xiโ‰ xj and yiโ‰ yj, and |xi|=|yi| for all 1โ‰คiโ‰คn. We let ๐–ฎ๐–ฏโขฮ  denote the class of all ordered partial permutations.

For a permutation betting game, the averaging condition takes into consideration the length of the next string to be queried as follows. Let wโˆˆ๐–ฎ๐–ฏโขฮ  be the list of queried strings paired with their images, and aโˆˆ{0,1}n be the next string the betting game will query. Define free(w,n) to be the set of length-n strings that are available for the next function value, i.e., length-n strings that are not the function value of any of the queried strings. Then the following averaging condition over free strings of length n must hold for the permutation betting game d:๐–ฎ๐–ฏโขฮ โ†’[0,โˆž)

dโข(w)=โˆ‘bโˆˆ๐–ฟ๐—‹๐–พ๐–พโข(w,n)dโข(wโข[a,b])|๐–ฟ๐—‹๐–พ๐–พโข(w,n)|

where wโข[a,b] is the list w appended with the pair (a,b).

Definition 3.12.

A betting game is a tโข(n)-time betting game if for all n, all strings of length n have been queried by time tโข(2n).

We define betting game measure 0 and betting game randomness analogously.

Definition 3.13.

Let ฮ”โˆˆ{๐—‰,๐—‰2,๐—‰๐—Œ๐—‰๐–บ๐–ผ๐–พ,๐—‰2โข๐—Œ๐—‰๐–บ๐–ผ๐–พ}.

  1. 1.

    A class XโІฮ  has ฮ”-betting-game measure 0 if there is a ฮ”-computable permutation betting game d with XโІSโˆžโข[d].

  2. 2.

    A permutation ฯ€โˆˆฮ  is ฮ”-betting game random if no ฮ”-betting game succeeds on ฯ€.

3.7 Measure Conservation

Lutzโ€™s Measure Conservation Theorem implies that resource-bounded measure gives nontrivial notions of measure within exponential-time complexity classes: ฮผ๐—‰โข(๐–ค)โ‰ 0 and ฮผ๐—‰2โข(๐–ค๐–ท๐–ฏ)โ‰ 0. Let ๐–ฏ๐–พ๐—‹๐—†๐–ค be the class of length-preserving permutations that can be computed in 2Oโข(n) time and ๐–ฏ๐–พ๐—‹๐—†๐–ค๐–ท๐–ฏ be the class of length-preserving permutations that can be computed in 2nOโข(1) time. We show that our notions of permutation measure have conservation theorems within these classes of exponential-time computable permutations.

Lemma 3.14.

For any tโข(2n)-time permutation martingale D, we can construct a permutation in time Oโข(22โขnโขtโข(2n)) that is not covered by D.

The following theorem follows from Lemma 3.14.

Theorem 3.15.
  1. 1.

    ๐–ฏ๐–พ๐—‹๐—†๐–ค does not have ๐—‰-permutation measure 0.

  2. 2.

    ๐–ฏ๐–พ๐—‹๐—†๐–ค๐–ท๐–ฏ does not have ๐—‰2-permutation measure 0.

Proving similar results for betting games turns out to be more challenging, given that they are allowed to bet on strings in an adaptive order. To address this, we define the following class of honest betting games.

Definition 3.16.

A logโก(tโข(2n))-honest tโข(n)-permutation betting game is a tโข(n)-time permutation betting game such that for all languages A, for all n, all non-zero bets by time tโข(2n) are for strings of length at most logโก(tโข(2n)).

We use this definition in the following Lemma:

Lemma 3.17.

For any logโก(tโข(2n))-honest tโข(2n)-permutation betting game G, we can construct a permutation in Oโข(2nโขtโข(2n)2) time that is not covered by G.

Theorem 3.18.
  1. 1.

    ๐–ฏ๐–พ๐—‹๐—†๐–ค does not have Oโข(n)-honest ๐—‰-permutation betting game measure 0.

  2. 2.

    ๐–ฏ๐–พ๐—‹๐—†๐–ค๐–ท๐–ฏ does not have Oโข(nk)-honest ๐—‰2-permutation betting game measure 0.

Since ๐—‰๐—Œ๐—‰๐–บ๐–ผ๐–พ-permutation martingales can simulate Oโข(n)-honest ๐—‰-betting-games, and ๐—‰2โข๐—Œ๐—‰๐–บ๐–ผ๐–พ-permutation martingales can simulate Oโข(nk)-honest ๐—‰2-betting-games, we have the following:

Proposition 3.19.

Let ฯ€ be a permutation.

  1. 1.

    If ฯ€ is a ๐—‰๐—Œ๐—‰๐–บ๐–ผ๐–พ-random permutation, then ฯ€ is Oโข(n)-honest ๐—‰-betting game random.

  2. 2.

    If ฯ€ is a ๐—‰2โข๐—Œ๐—‰๐–บ๐–ผ๐–พ-random permutation, then ฯ€ is Oโข(nk)-honest ๐—‰2-betting game random.

4 Elementary Properties of Random Permutations

In this section, we explore fundamental properties of random permutations that provide insights into how permutation martingales and betting games operate. Understanding these properties is crucial for applying permutation randomness in computational complexity. We show that random permutations are computationally difficult to compute and to invert. We then investigate the relationship between random permutations and random oracles, showing how random permutations can generate random oracles.

4.1 Intractability of Random Permutations

Definition 4.1.

A permutation ฯ€โˆˆฮ  is noticeably polynomial time if there are polynomials p,q and ๐–ณ๐–ฌ M such that for infinitely many n, M computes ฯ€ on at least 2n/pโข(n) strings of length n in qโข(n) time for each string.

Theorem 4.2.

The set X={ฯ€โˆˆฮ โˆฃฯ€nโขย is noticeably polynomial time} has ๐—‰-permutation measure 0.

The proof uses a simple averaging argument: we partition the set of length-n strings into 2n/nlgโกn subintervals, each of size nlgโกn. By the noticeably-polynomial-time property of the permutations in X, at least one subinterval contains superpolynomially many strings whose images are computable. The martingale then identifies a sufficiently small subset of these strings and makes correct predictions often enough to succeed.

Corollary 4.3.

If ฯ€โˆˆฮ  is ๐—‰-random, then any polynomial-time ๐–ณ๐–ฌ will be able to compute ฯ€ on at most a 1/๐—‰๐—ˆ๐—…๐—’ fraction for all sufficiently large n.

Similarly, we can show that random permutations are hard to invert on a noticeable subset infinitely often. The main difference is that we search for TMs inverting the permutation rather than TMs that compute the permutation.

Definition 4.4.

A permutation ฯ€โˆˆฮ  is noticeably invertible if there is a polynomial-time ๐–ณ๐–ฌ M and a polynomial p such that for infinitely many n, |{xโˆˆ{0,1}nโˆฃMโข(ฯ€โข(x))=x}|โ‰ฅ2n/pโข(n).

Theorem 4.5.

The set X={ฯ€โˆˆฮ โˆฃฯ€nโขย is noticeably invertible} has ๐—‰-permutation measure 0.

4.2 Random Permutations versus Random Oracles

Bennett and Gill used random permutations, rather than random languages, to separate ๐–ฏ from ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ. It is still unknown whether random oracles separate ๐–ฏ from ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ. In this section, we examine how random permutations yield random languages. We show that a ๐—‰-random permutation can be used to generate a ๐—‰-random language. All of the results in this section are stated for ๐—‰-randomness. They also hold for ๐—‰2-randomness.

Given a permutation ฯ€โˆˆฮ , we define the language

Lฯ€={xโˆฃย the first bit ofย โขฯ€โข(02โข|x|โขx)โขย is 1}.

For a set of permutations XโІฮ , we define the set of languages

LX={Lฯ€โˆฃฯ€โˆˆX}.
Lemma 4.6.

For any set of permutations XโІฮ , if a ๐—‰-computable martingale d succeeds on the set of languages LX={Lฯ€โˆฃฯ€โˆˆX}, then there is a ๐—‰-computable permutation martingale that succeeds on X.

Corollary 4.7.

If ฯ€ is a ๐—‰-random permutation, then Lฯ€ is a ๐—‰-random language.

We now extend the previous lemma to honest ๐—‰-permutation betting games. By Lemma 3.17, honest ๐—‰-permutation betting games do not cover ๐–ฏ๐–พ๐—‹๐—†๐–ค and honest ๐—‰2-permutation betting games do not cover ๐–ฏ๐–พ๐—‹๐—†๐–ค๐–ท๐–ฏ.

Lemma 4.8.

For any set of permutations XโІฮ , if an honest ๐—‰-betting game g succeeds on the set of languages LX={Lฯ€โˆฃฯ€โˆˆX}, then there is an honest ๐—‰-permutation betting game that succeeds on X.

Definition 4.9.

Give a language L, we define ฮ L to be set of permutations

ฮ L={ฯ€โˆˆฮ |ย for allย โขn>0โขย andย โขxโˆˆ{0,1}n,ฯ€โข(02โขnโขx)=bโขyโขย for someย โขyโˆˆ{0,1}3โขnโˆ’1ย if and only ifย โขLโข[x]=b}.

Given a set of languages X, we define ฮ X as the set of permutations ฮ X=โ‹ƒLโˆˆXฮ L.

Lemma 4.10.

For any set of languages XโІ{0,1}โˆž, if a ๐—‰-computable permutation martingale d succeeds on the set of permutations ฮ X, then there is a ๐—‰-computable martingale that succeeds on X.

Corollary 4.11.

If ฯ€ is a ๐—‰-betting game random permutation, then Lฯ€ is a ๐—‰-betting game random language.

5 Random Permutations for ๐—ก๐—ฃ โˆฉ ๐—ฐ๐—ผ๐—ก๐—ฃ

Bennett and Gill [4] studied the power of random oracles in separating complexity classes. In particular, they showed that ๐–ฏAโ‰ ๐–ญ๐–ฏA relative to a random oracle with probability 1. However, they were not able to separate ๐–ฏ from ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ relative to a random oracle. They also made the observation that if ๐–ฏA=๐–ญ๐–ฏAโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏA for a random oracle A, then ๐–ฏA must include seemingly computationally hard problems such as factorization. They also proved that any non-oracle-dependent language that belongs to ๐–ฏA with probability 1, also belongs to ๐–ก๐–ฏ๐–ฏ. As a result, if ๐–ฏA=๐–ญ๐–ฏAโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏA for a random oracle A with probability 1, then these difficult problems in ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ would be solvable in probabilistic polynomial time (๐–ก๐–ฏ๐–ฏ). To achieve a separation between ๐–ฏA and ๐–ญ๐–ฏAโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏA, they considered length-preserving permutations on {0,1}โˆ— and showed that ๐–ฏฯ€โ‰ ๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€ for every random permutationย ฯ€.

Using resource-bounded permutation betting games on the set of all length preserving permutations of {0,1}โ‹†, we strengthen the Bennett-Gill permutation separation, proving that ๐–ฏฯ€โ‰ ๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€ for any ๐—‰-betting-game random permutations ฯ€. More generally, we show that the set of permutations ฯ€ such that, ๐–ญ๐–ฏฯ€ is not ๐–ฃ๐–ณ๐–จ๐–ฌ๐–คฯ€โข(2kโขn)-bi-immune has ๐—‰-permutation-betting-game measure 0. Recall that a language L is bi-immune to a complexity class C if no infinite subset of L or its complement is decidable in C [8, 2].

The following is our main theorem where its first part states that relative to a ๐—‰-betting-game random permutation ฯ€, there is a language L in ๐–ญ๐–ซ๐–จ๐–ญฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ซ๐–จ๐–ญฯ€ such that no infinite subset of L or its complement is ๐–ฃ๐–ณ๐–จ๐–ฌ๐–คฯ€โข(2kโขn)-decidable.

Theorem 5.1.
  1. 1.

    If ฯ€ is a ๐—‰-betting-game random permutation, then ๐–ญ๐–ซ๐–จ๐–ญฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ซ๐–จ๐–ญฯ€ contains a ๐–ฃ๐–ณ๐–จ๐–ฌ๐–คฯ€โข(2kโขn)-bi-immune language for all kโ‰ฅ1.

  2. 2.

    If ฯ€ is a ๐—‰2-betting-game random permutation, then ๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€ contains a ๐–ฃ๐–ณ๐–จ๐–ฌ๐–คฯ€โข(2nk)-bi-immune language for all kโ‰ฅ1.

Our headline result is a corollary of Theorem 5.1.

Corollary 5.2.

If ฯ€ is a ๐—‰-betting-game random permutation, then ๐–ฏฯ€โ‰ ๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€.

To prove Theorem 5.1, we first define the following test languages. For each kโ‰ฅ1, define the โ€œhalf rangeโ€ test languages

๐–ง๐–ฑ๐–ญ๐–ฆkฯ€ ={x|โˆƒyโˆˆ{0,1}kโข|x|โˆ’1,ฯ€โข(0โขy)=xk}
={x|โˆ€yโˆˆ{0,1}kโข|x|โˆ’1,ฯ€โข(1โขy)โ‰ xk},

and

๐–ฏ๐–ฎ๐–ซ๐–ธ๐–ง๐–ฑ๐–ญ๐–ฆkฯ€ ={x|โˆƒyโˆˆ{0,1}|x|kโˆ’1,ฯ€โข(0โขy)=x|x|kโˆ’1}
={x|โˆ€yโˆˆ{0,1}|x|kโˆ’1,ฯ€โข(1โขy)โ‰ x|x|kโˆ’1}.

A string xโˆˆ{0,1}n belongs to ๐–ง๐–ฑ๐–ญ๐–ฆkฯ€ if the preimage of xk (k copies of x) in {0,1}kโขn begins with 0. If x does not belong to ๐–ง๐–ฑ๐–ญ๐–ฆkฯ€, then the preimage of xk begins with 1. In either case, the preimage serves as a witness for x. The language ๐–ฏ๐–ฎ๐–ซ๐–ธ๐–ง๐–ฑ๐–ญ๐–ฆkฯ€ is similar, but we are looking for a preimage in {0,1}nk of xnkโˆ’1 (nkโˆ’1 copies of x). It follows that

๐–ง๐–ฑ๐–ญ๐–ฆkฯ€โˆˆ๐–ญ๐–ซ๐–จ๐–ญฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ซ๐–จ๐–ญฯ€

and

๐–ง๐–ฑ๐–ญ๐–ฆkฯ€โˆˆ๐–ญ๐–ณ๐–จ๐–ฌ๐–คฯ€โข(nk)โˆฉ๐–ผ๐—ˆ๐–ญ๐–ณ๐–จ๐–ฌ๐–คฯ€โข(nk)

for all kโ‰ฅ1.

The following lemma implies Theorem 5.1.

Lemma 5.3.

Let kโ‰ฅ0.

  1. 1.

    The set X={ฯ€โˆˆฮ โˆฃ๐–ง๐–ฑ๐–ญ๐–ฆk+3ฯ€โขisโขnotโข๐–ฃ๐–ณ๐–จ๐–ฌ๐–คโข(2kโขn)ฯ€โˆ’immune} has Oโข(n)-honest ๐—‰-permutation-betting-game measure 0.

  2. 2.

    The set X={ฯ€โˆˆฮ โˆฃ๐–ฏ๐–ฎ๐–ซ๐–ธ๐–ง๐–ฑ๐–ญ๐–ฆk+1Aโขisโขnotโข๐–ฃ๐–ณ๐–จ๐–ฌ๐–คโข(2nk)ฯ€โˆ’immune} has Oโข(nk)-honest ๐—‰2-permutation-betting-game measure 0.

By symmetry of ๐–ญ๐–ซ๐–จ๐–ญฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ซ๐–จ๐–ญฯ€ and ๐–ญ๐–ณ๐–จ๐–ฌ๐–คฯ€โข(nk)โˆฉ๐–ผ๐—ˆ๐–ญ๐–ณ๐–จ๐–ฌ๐–คฯ€โข(nk), Lemma 5.3 also applies to the complement of ๐–ง๐–ฑ๐–ญ๐–ฆk+3ฯ€ and ๐–ฏ๐–ฎ๐–ซ๐–ธ๐–ง๐–ฑ๐–ญ๐–ฆk+1ฯ€. Therefore, both languages are bi-immune and Theorem 5.1 follows.

Combining Lemma 5.3 with Proposition 3.19 also gives the following corollary. In the next section we will prove more results about ๐—‰๐—Œ๐—‰๐–บ๐–ผ๐–พ-random permutations.

Corollary 5.4.
  1. 1.

    If ฯ€ is a ๐—‰๐—Œ๐—‰๐–บ๐–ผ๐–พ-random permutation, then ๐–ญ๐–ซ๐–จ๐–ญฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ซ๐–จ๐–ญฯ€ contains a ๐–ฃ๐–ณ๐–จ๐–ฌ๐–คฯ€โข(2kโขn)-bi-immune language for all kโ‰ฅ1.

  2. 2.

    If ฯ€ is a ๐—‰2โข๐—Œ๐—‰๐–บ๐–ผ๐–พ-random permutation, then ๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€ contains a ๐–ฃ๐–ณ๐–จ๐–ฌ๐–คฯ€โข(2nk)-bi-immune language for all kโ‰ฅ1.

6 Random Permutations for ๐—ก๐—ฃ โˆฉ ๐—ฐ๐—ผ๐—ก๐—ฃ versus Quantum Computation

Bennett, Bernstein, Brassard, and Vazirani [3] showed that ๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€โŠˆ๐–ก๐–ฐ๐–ณ๐–จ๐–ฌ๐–คฯ€โข(oโข(2n/3)) relative to a random permutation ฯ€ with probability 1. In this section we investigate how much of their result holds relative to individual random oracles at the space-bounded level.

We begin with a general lemma about test languages and ๐–ฐ๐–ณ๐–ฌs. We write ๐–ฏ๐–ฏโขฮ โ‰คn={gโˆˆ๐–ฏ๐–ฏโขฮ โˆฃ|g|โ‰ค2n+1โˆ’1} for all prefix partial permutations defined on strings in {0,1}โ‰คn. For a string si in the standard enumeration, we write gโ†พsi for the length i prefix of g. In other words, gโ†พsi=[gโข(s0),โ€ฆ,gโข(siโˆ’1)].

Lemma 6.1.

Let ฯ€ be a permutation with an associated test language Lฯ€ and let pโข(n) and qโข(n) be polynomials. If for some oracle ๐–ฐ๐–ณ๐–ฌ M and some function lโข(n) the following conditions hold, then ฯ€ is not a ๐—‰๐—Œ๐—‰๐–บ๐–ผ๐–พ-random permutation.

  1. 1.

    The membership of 0n in Lฯ€ depends on the membership of the strings of length at most pโข(n).

  2. 2.

    Mฯ€ decides Lฯ€ with error probability ฮด, for some constant 0<ฮด<1, and queries only strings of length at most lโข(n).

  3. 3.

    For any partial prefix permutation ฯโˆˆ๐–ฏ๐–ฏโขฮ โ‰คlโข(n), the conditional probability

    ๐–ฏ๐—‹|ฯˆ|=lโข(n)[Mฯˆ(0n)=Lฯˆ(0n)|ฯโŠ‘ฯˆ]

    is computable in (|ฯ|+2n)Oโข(1) space.

  4. 4.

    For some constant 1>ฯต>ฮด and for all but finitely many n,

    ๐–ฏ๐—‹|ฯˆ|=lโข(n)[Mฯˆ(0n)=Lฯˆ(0n)|ฯ€โ†พ0nโŠ‘ฯˆ]<1โˆ’ฯต.

In the following Theorem, we use Lemma 6.1 to extend the result by Bennett, Bernstein, Brassard, and Vazirani [3] to ๐—‰๐—Œ๐—‰๐–บ๐–ผ๐–พ-random permutations.

Theorem 6.2.

If ฯ€ is a ๐—‰๐—Œ๐—‰๐–บ๐–ผ๐–พ-random permutation, then ๐–ญ๐–ซ๐–จ๐–ญฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ซ๐–จ๐–ญฯ€ is not contained in ๐–ก๐–ฐ๐–ฏฯ€.

We now refine the previous result by considering more restricted quantum machines that only query strings of Oโข(n) length. This restriction allows us to extend the result to machines with running time oโข(2n/3), analogous to the result of Bennett et al. [3]. Whether this extension holds without the restriction on query length remains an open problem.

Theorem 6.3.

If ฯ€ is a ๐—‰๐—Œ๐—‰๐–บ๐–ผ๐–พ-random permutation and Tโข(n)=oโข(2n/3), then ๐–ญ๐–ซ๐–จ๐–ญฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ซ๐–จ๐–ญฯ€ is not contained ๐–ก๐–ฐ๐–ณ๐–จ๐–ฌ๐–คฯ€,Oโข(n)โข-โข๐—๐—ˆ๐—‡๐–พ๐—Œ๐—โข(Tโข(n)).

Together, these theorems extend the classical separation of Bennett et al. [3] to individual ๐—‰๐—Œ๐—‰๐–บ๐–ผ๐–พ-random permutations, both in the general and the honest-query setting.

7 Random Oracles for ๐—ก๐—ฃ โˆฉ ๐—ฐ๐—ผ๐—ก๐—ฃ and 0-1 Laws for Measure in ๐—˜๐—ซ๐—ฃ

Tardos [23] used the characterizations

๐–ก๐–ฏ๐–ฏ=๐– ๐–ซ๐–ฌ๐–ฎ๐–ฒ๐–ณโข-โข๐–ฏ={A|๐–ฏ๐—‹Rโข[Aโˆˆ๐–ฏR]=1}โข[4]

and

๐– ๐–ฌ=๐– ๐–ซ๐–ฌ๐–ฎ๐–ฒ๐–ณโข-โข๐–ญ๐–ฏ={A|๐–ฏ๐—‹Rโข[Aโˆˆ๐–ญ๐–ฏR]=1}โข[20]

to prove the following conditional theorem separating ๐–ฏ from ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ relative to a random oracle.

Theorem 7.1 (Tardos [23]).

If ๐– ๐–ฌโˆฉ๐–ผ๐—ˆ๐– ๐–ฌโ‰ ๐–ก๐–ฏ๐–ฏ, then ๐–ฏRโ‰ ๐–ญ๐–ฏRโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏR for a random oracle R with probability 1.

Recently, Ghosal et al. [9] used non-interactive zero-knowledge (NIZK) proofs to prove a similar conditional theorem.

Theorem 7.2 (Ghosal et al. [9]).

If ๐–ด๐–ฏโŠˆ๐–ฑ๐–ฏ, then ๐–ฏRโ‰ ๐–ญ๐–ฏRโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏR for a random oracle R with probability 1.

In this section we use Theorems 7.1 andย 7.2 to connect the open problem of ๐–ฏ versus ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ relative to a random oracle to open questions about the resource-bounded measure of complexity classes within ๐–ค๐–ท๐–ฏ. In particular, we relate the problem to measure 0-1 laws and measurability in ๐–ค๐–ท๐–ฏ. First, we need the following derandomization lemma. The first two parts follow from previous work, while the third part of the lemma is a new observation as far as we know, though its proof uses the techniques from the proofs of the first two parts.

Lemma 7.3.
  1. 1.

    If ฮผ๐—‰โข(๐–ญ๐–ฏ)โ‰ 0, then ๐–ก๐–ฏ๐–ฏโІ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ=๐– ๐–ฌโˆฉ๐–ผ๐—ˆ๐– ๐–ฌ.

  2. 2.

    If ฮผ๐—‰โข(๐–ด๐–ฏโˆฉ๐–ผ๐—ˆ๐–ด๐–ฏ)โ‰ 0, then ๐–ก๐–ฏ๐–ฏโІ๐–ด๐–ฏโˆฉ๐–ผ๐—ˆ๐–ด๐–ฏ.

  3. 3.

    If ฮผ๐—‰โข(๐–ฅ๐–พ๐—๐–ฏ)โ‰ 0, then ๐–ก๐–ฏ๐–ฏโІ๐–ฅ๐–พ๐—๐–ฏโˆฉ๐–ผ๐—ˆ๐–ฅ๐–พ๐—๐–ฏ.

In the following theorem, we have three hypotheses where a complexity class X is assumed to be not equal to ๐–ค๐–ท๐–ฏ and the ๐—‰-measure of a subclass of X is concluded to be 0.

Theorem 7.4.

Suppose that ๐–ฏR=๐–ญ๐–ฏRโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏR for a random oracle R with probability 1. Then all of the following hold:

  1. 1.

    ๐–ญ๐–ฏโ‰ ๐–ค๐–ท๐–ฏโ‡’ฮผ๐—‰โข(๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ)=0.

  2. 2.

    ๐–ด๐–ฏโ‰ ๐–ค๐–ท๐–ฏโ‡’ฮผ๐—‰โข(๐–ด๐–ฏโˆฉ๐–ผ๐—ˆ๐–ด๐–ฏ)=0.

  3. 3.

    ๐–ฅ๐–พ๐—๐–ฏโ‰ ๐–ค๐–ท๐–ฏโ‡’ฮผ๐—‰โข(๐–ด๐–ฏ)=0.

Theorem 7.4 has the following corollary about measure 0-1 laws in ๐–ค๐–ท๐–ฏ. We recall the definitions ฮผโข(Xโˆฃ๐–ค๐–ท๐–ฏ)=0 if ฮผ๐—‰2โข(Xโˆฉ๐–ค๐–ท๐–ฏ)=0 and ฮผโข(Xโˆฃ๐–ค๐–ท๐–ฏ)=1 if ฮผ๐—‰2โข(Xcโˆฃ๐–ค๐–ท๐–ฏ)=0 [14].

Corollary 7.5.

Suppose that ๐–ฏR=๐–ญ๐–ฏRโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏR for a random oracle R with probability 1. Then all of the following hold:

  1. 1.

    ฮผโข(๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏโˆฃ๐–ค๐–ท๐–ฏ)โˆˆ{0,1}.

  2. 2.

    ฮผโข(๐–ด๐–ฏโˆฉ๐–ผ๐—ˆ๐–ด๐–ฏโˆฃ๐–ค๐–ท๐–ฏ)โˆˆ{0,1}.

  3. 3.

    ฮผโข(๐–ด๐–ฏโˆฃ๐–ค๐–ท๐–ฏ)=0 or ฮผโข(๐–ฅ๐–พ๐—๐–ฏโˆฃ๐–ค๐–ท๐–ฏ)=1.

In the third case of Corollary 7.5, we almost have a 0-1 law for ๐–ด๐–ฏ. Can a full 0-1 law be obtained?

The contrapositives of the implications in Corollary 7.5 show that the random oracle question for ๐–ฏ versus ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ is resolved under nonmeasurability hypotheses. A complexity class X is defined to be not measurable in ๐–ค๐–ท๐–ฏ if ฮผโข(Xโˆฃ๐–ค๐–ท๐–ฏ)โ‰ 0 and ฮผโข(Xโˆฃ๐–ค๐–ท๐–ฏ)โ‰ 1 [15, 21].

Corollary 7.6.
  1. 1.

    If ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ is not measurable in ๐–ค๐–ท๐–ฏ, then ๐–ฏRโ‰ ๐–ญ๐–ฏRโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏR for a random oracle R with probability 1.

  2. 2.

    If ๐–ด๐–ฏโˆฉ๐–ผ๐—ˆ๐–ด๐–ฏ is not measurable in ๐–ค๐–ท๐–ฏ, then ๐–ฏRโ‰ ๐–ญ๐–ฏRโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏR for a random oracle R with probability 1.

  3. 3.

    If ๐–ด๐–ฏ and ๐–ฅ๐–พ๐—๐–ฏ are both not measurable in ๐–ค๐–ท๐–ฏ, then ๐–ฏRโ‰ ๐–ญ๐–ฏRโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏR for a random oracle R with probability 1.

On the other hand, if the consequence of Corollary 7.6 can be proved with measure in ๐–ค๐–ท๐–ฏ, then we would have ๐–ก๐–ฏ๐–ฏโ‰ ๐–ค๐–ท๐–ฏ, which implies ฮผโข(๐–ก๐–ฏ๐–ฏโˆฃ๐–ค๐–ท๐–ฏ)=0 by the 0-1 law for ๐–ก๐–ฏ๐–ฏ [24].

Theorem 7.7.

If {Aโˆฃ๐–ฏA=๐–ญ๐–ฏAโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏA} has measure 0 in ๐–ค๐–ท๐–ฏ, then ฮผโข(๐–ก๐–ฏ๐–ฏโˆฃ๐–ค๐–ท๐–ฏ)=0.

These results suggest that resolving whether ๐–ฏR=๐–ญ๐–ฏRโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏR relative to a random oracle requires a deeper understanding of the resource-bounded measurability within ๐–ค๐–ท๐–ฏ of fundamental subclasses such as ๐–ก๐–ฏ๐–ฏ, ๐–ญ๐–ฏ, ๐–ด๐–ฏ, and ๐–ฅ๐–พ๐—๐–ฏ.

8 Conclusion

We have introduced resource-bounded random permutations and shown that ๐–ฏฯ€โ‰ ๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€ for all ๐—‰-betting-game random permutations. We remark that all of the results in Sections 5 andย 6 about ๐–ญ๐–ซ๐–จ๐–ญโˆฉ๐–ผ๐—ˆ๐–ญ๐–ซ๐–จ๐–ญ and ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ hold for their unambiguous versions ๐–ด๐–ซ๐–จ๐–ญโˆฉ๐–ผ๐—ˆ๐–ด๐–ซ๐–จ๐–ญ and ๐–ด๐–ฏโˆฉ๐–ผ๐—ˆ๐–ด๐–ฏ, respectively. An interesting open problem is whether our main theorem can be improved from betting-game random permutations to random permutations.

Question 8.1.

Does ๐–ฏฯ€โ‰ ๐–ญ๐–ฏฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏฯ€ for a ๐—‰-random permutation ฯ€?

More generally, the relative power of permutation martingales versus betting games should be investigated.

Question 8.2.

Are polynomial-time permutation martingales and permutation betting games equivalent?

We proved two restricted versions of the Bennett et al. [3] random permutation separation. Does the full version hold relative to individual random permutations?

Question 8.3.

If ฯ€ is a ๐—‰๐—Œ๐—‰๐–บ๐–ผ๐–พ-random permutation and Tโข(n)=oโข(2n/3), is ๐–ญ๐–ซ๐–จ๐–ญฯ€โˆฉ๐–ผ๐—ˆ๐–ญ๐–ซ๐–จ๐–ญฯ€ not contained in ๐–ก๐–ฐ๐–ณ๐–จ๐–ฌ๐–คฯ€โข(Tโข(n))?

References

  • [1] K.ย Ambos-Spies and E.ย Mayordomo. Resource-bounded measure and randomness. In A.ย Sorbi, editor, Complexity, Logic and Recursion Theory, Lecture Notes in Pure and Applied Mathematics, pages 1โ€“47. Marcel Dekker, New York, N.Y., 1997. doi:10.1201/9780429187490-1.
  • [2] J.ย L. Balcรกzar and U.ย Schรถning. Bi-immune sets for complexity classes. Mathematical Systems Theory, 18:1โ€“10, 1985. doi:10.1007/bf01699457.
  • [3] C.ย H. Bennett, E.ย Bernstein, G.ย Brassard, and U.ย V. Vazirani. Strengths and weaknesses of quantum computing. SIAM Journal on Computing, 26(5):1510โ€“1523, 1997. doi:10.1137/s0097539796300933.
  • [4] C.ย H. Bennett and J.ย Gill. Relative to a random oracle A, PAโ‰ NPAโ‰ co-NPA with probability 1. SIAM Journal on Computing, 10:96โ€“113, 1981. doi:10.1137/0210008.
  • [5] R.ย V. Book, J.ย H. Lutz, and K.ย W. Wagner. An observation on probability versus randomness with applications to complexity classes. Mathematical Systems Theory, 27:201โ€“209, 1994. doi:10.1007/bf01578842.
  • [6] H.ย Buhrman, D.ย van Melkebeek, K.ย W. Regan, D.ย Sivakumar, and M.ย Strauss. A generalization of resource-bounded measure, with application to the BPP vs. EXP problem. SIAM Journal on Computing, 30(2):576โ€“601, 2001. doi:10.1137/S0097539798343891.
  • [7] W.ย Diffie and M.ย Hellman. New directions in cryptography. IEEE Transactions on Information Theory, 22(6):644โ€“654, 1976. doi:10.1109/TIT.1976.1055638.
  • [8] P.ย Flajolet and J.ย Steyaert. On sets having only hard subsets. In Proc. 2nd Colloq. on Automata, Languages, and Programming, Lecture Notes in Computer Science, volumeย 14, pages 446โ€“457. Springer-Verlag, Berlin, 1974. doi:10.1007/978-3-662-21545-6_34.
  • [9] Riddhi Ghosal, Yuval Ishai, Alexis Korb, Eyal Kushilevitz, Paul Lou, and Amit Sahai. Hard languages in ๐–ญ๐–ฏโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏ and NIZK proofs from unstructured hardness. In Proceedings of the 55th Annual ACM Symposium on Theory of Computing, STOC 2023, pages 1243โ€“1256, New York, NY, USA, 2023. Association for Computing Machinery. doi:10.1145/3564246.3585119.
  • [10] R.ย C. Harkins and J.ย M. Hitchcock. Exact learning algorithms, betting games, and circuit lower bounds. ACM Transactions on Computation Theory, 5(4):article 18, 2013. doi:10.1145/2539126.2539130.
  • [11] J.ย M. Hitchcock and J.ย H. Lutz. Why computational complexity requires stricter martingales. Theory of Computing Systems, 39(2):277โ€“296, 2006. doi:10.1007/s00224-005-1135-4.
  • [12] J.ย M. Hitchcock, A.ย Sekoni, and H.ย Shafei. Polynomial-time random oracles and separating complexity classes. ACM Transactions on Computation Theory, 13(1), 2021. doi:10.1145/3434389.
  • [13] A.ย Klivans and D.ย van Melkebeek. Graph nonisomorphism has subexponential size proofs unless the polynomial-time hierarchy collapses. SIAM Journal on Computing, 31(5):1501โ€“1526, 2002. doi:10.1137/s0097539700389652.
  • [14] J.ย H. Lutz. Almost everywhere high nonuniform complexity. Journal of Computer and System Sciences, 44(2):220โ€“258, 1992. doi:10.1016/0022-0000(92)90020-j.
  • [15] J.ย H. Lutz. The quantitative structure of exponential time. In L.ย A. Hemaspaandra and A.ย L. Selman, editors, Complexity Theory Retrospective II, pages 225โ€“254. Springer-Verlag, 1997. doi:10.1007/978-1-4612-1872-2_10.
  • [16] J.ย H. Lutz and W.ย J. Schmidt. Circuit size relative to pseudorandom oracles. Theoretical Computer Science, 107(1):95โ€“120, March 1993. doi:10.1016/0304-3975(93)90256-s.
  • [17] P.ย Martin-Lรถf. The definition of random sequences. Information and Control, 9:602โ€“619, 1966. doi:10.1016/s0019-9958(66)80018-9.
  • [18] W.ย Merkle, J.ย S. Miller, A.ย Nies, J.ย Reimann, and F.ย Stephan. Kolmogorov-Loveland randomness and stochasticity. Annals of Pure and Applied Logic, 138(1โ€“3):183โ€“210, 2006. doi:10.1016/j.apal.2005.06.011.
  • [19] A.ย A. Muchnik, A.ย L. Semenov, and V.ย A. Uspensky. Mathematical metaphysics of randomness. Theoretical Computer Science, 207(2):263โ€“317, 1998. doi:10.1016/S0304-3975(98)00069-3.
  • [20] N.ย Nisan and A.ย Wigderson. Hardness vs randomness. Journal of Computer and System Sciences, 49(2):149โ€“167, 1994. doi:10.1016/s0022-0000(05)80043-1.
  • [21] K.ย W. Regan, D.ย Sivakumar, and J.ย Cai. Pseudorandom generators, measure theory, and natural proofs. In Proceedings of the 36th Symposium on Foundations of Computer Science, pages 26โ€“35. IEEE Computer Society, 1995. doi:10.1109/SFCS.1995.492459.
  • [22] R.ย L. Rivest, A.ย Shamir, and L.ย Adleman. A method for obtaining digital signatures and public-key cryptosystems. Communications of the ACM, 21(2):120โ€“126, February 1978. doi:10.1145/359340.359342.
  • [23] G.ย Tardos. Query complexity, or why is it difficult to separate ๐–ญ๐–ฏAโˆฉ๐–ผ๐—ˆ๐–ญ๐–ฏA from PA by random oracles A? Combinatorica, 9(4):385โ€“392, 1989. doi:10.1007/BF02125350.
  • [24] D.ย van Melkebeek. The zero-one law holds for BPP. Theoretical Computer Science, 244(1โ€“2):283โ€“288, 2000. doi:10.1016/s0304-3975(00)00191-2.
  • [25] J.ย Ville. ร‰tude Critique de la Notion de Collectif. Gauthierโ€“Villars, Paris, 1939.