Gabidulin Codes Achieve List Decoding Capacity with an Order-Optimal Column-To-Row Ratio
Abstract
In this paper, we show that random Gabidulin codes of block length and rate achieve the (average-radius) list decoding capacity of radius in the rank metric with an order-optimal column-to-row ratio of . This extends the recent work of Guo, Xing, Yuan, and Zhang (FOCS 2024), improving their column-to-row ratio from to . For completeness, we also establish a matching lower bound on the column-to-row ratio for capacity-achieving Gabidulin codes in the rank metric.
Our proof techniques build on the work of Guo and Zhang (FOCS 2023), who showed that randomly punctured Reed–Solomon codes over fields of quadratic size attain the generalized Singleton bound of Shangguan and Tamo (STOC 2020) in the Hamming metric. The proof of our lower bound follows the method of Alrabiah, Guruswami, and Li (SODA 2024) for codes in the Hamming metric.
Keywords and phrases:
coding theory, error-correcting codes, Gabidulin codes, rank-metric codesCategory:
RANDOMFunding:
Zeyu Guo: Supported by NSF grant CCF-2440926.Copyright and License:
2012 ACM Subject Classification:
Mathematics of computing Coding theoryAcknowledgements:
The authors thank the anonymous RANDOM 2025 reviewers for their helpful comments.Editors:
Alina Ene and Eshan ChattopadhyaySeries and Publisher:
Leibniz International Proceedings in Informatics, Schloss Dagstuhl – Leibniz-Zentrum für Informatik
1 Introduction
Introduced by Delsarte [5], rank-metric codes have since developed into a field of study with applications and connections spanning network coding [16, 26, 17, 25], space-time coding [21, 20], cryptography [10, 9, 18, 19], and pseudorandomness [7, 6, 15, 14, 11].
A rank-metric code is a collection of matrices in with , where the distance between two matrices and is defined to be their rank distance . A rank-metric code of rate and relative minimum (rank) distance must satisfy that , which is called the Singleton bound. A rank-metric code attaining the Singleton bound is called a maximum rank distance (MRD) code. Gabidulin codes are an important class of MRD codes, which can be seen as the linearized version of Reed–Solomon codes. This analogy allows us to design efficient encoding and unique decoding algorithms for Gabidulin codes. However, when it comes to the list decoding regime, it is known that some Gabidulin codes are not list decodable beyond the unique decoding radius [22, 23]. Thus, it is impossible to design a list decoding algorithm for all Gabidulin codes. Moreover, it was not even clear if any Gabidulin codes were list decodable beyond the unique decoding radius until very recently. Guo, Xing, Yuan and Zhang [12] recently proved that random Gabidulin codes are not only list decodable beyond the unique decoding radius but also attain the optimal generalized Singleton bound (see Lemma 1) with high probability. This settles an open problem of whether there exist list decodable Gabidulin codes.
However, the construction in [12] requires , the number of rows of matrices, to be at least quadratic in , so the column-to-row ratio tends to zero as grows. This is analogous to a result of Brakensiek, Gopi, and Makam on Reed–Solomon codes [4], which states that any Reed–Solomon code exactly attaining the generalized Singleton bound must have an exponential field size. Suppose the list decoding radius is slightly off the generalized Singleton bound (with a gap of ). In that case, Guo and Zhang [13] proved that the field size of Reed–Solomon codes can be brought down to quadratic which was further brought down to linear in the follow-up work of Alrabiah, Guruswami, and Li [2].
Thus, this raises an open problem for rank-metric codes, already asked in [12]: Can we obtain a similar result for Gabidulin codes as well?
Open Problem 1.
Do there exist Gabidulin codes of constant column-to-row ratio that are list decodable in the rank metric?
In this paper, we provide a positive answer to this open problem. We show that if the list decoding radius is slightly off the generalized Singleton bound (with a gap of ), then a random Gabidulin code with is list decodable up to this bound with high probability. Moreover, we complement our positive result by proving an upper bound for any list decodable Gabidulin codes approaching the generalized Singleton bound with a gap of . One can find the details in the following subsection.
1.1 Main Results
In this paper, we mainly focus on the rank distance, which is defined to be the rank of the difference between two matrices i.e., . In what follows, refers to the rank distance. For , a code over an alphabet is said to be -list decodable if for any , it holds that
where denotes the distance between and . Here, is called the list decoding radius, and is called the list size. The stronger notion of -average-radius list decodability is defined in the same way, except that we replace the maximum of the distances by the average of these distances. The formal definition is given as follows.
Definition 2 (Average-radius list decodability).
A code is average-radius list decodable if for any and distinct codewords , it holds that
In [24], Shangguan and Tamo proved the generalized Singleton bound for list decoding, generalizing the classical Singleton bound for unique decoding. For linear codes, this generalized Singleton bound states that if is an -linear code that is -list decodable in the Hamming metric, then it holds that . In [12], they noted that this generalized Singleton bound also holds for rank-metric codes.
Lemma 1 (Generalized Singleton bound for rank-metric codes [12, Lemma 2.1]).
Let be an -linear code that is -list decodable in the rank metric. Then it holds that
They further showed that this bound is tight for rank-metric codes by proving that random Gabidulin codes attain it with high probability. (This is a nontrivial task; in fact, even proving that random linear rank-metric codes attain the generalized Singleton bound is far from obvious.) However, the column-to-row ratio of these codes is quite small, which makes them less appealing for practical applications.
Theorem 3 ([12, Lemma 1.3]).
Let be uniformly distributed over the set of all vectors in whose coordinates are linearly independent over . Suppose , where is a large enough absolute constant. Then it holds with probability at least that the Gabidulin code 111See the definition of Gabidulin codes in 13. over is -list decodable for all in the rank metric.
In this paper, we prove that there exist Gabidulin codes with constant column-to-row ratio that are list decodable up to the radius .
Theorem 4.
Let and be positive integers with . Let and be positive integers such that , where is a sufficiently large absolute constant. Then with probability at least , a random Gabidulin code of rate and block length over is average-radius list decodable.
Complementing this result, we also show that the column-to-row ratio is at most for any rank-metric code that is average-radius list decodable up to the generalized Singleton bound. Thus, our results are essentially tight.
Theorem 5.
Let . For any , any rank-metric code of rate that is -average-radius list decodable must have .
1.2 Proof Overview
Our proof is inspired by [13]. To explain our proof, we first briefly review the techniques in [13]. In [13], they proposed the notion of a reduced intersection matrix, whose kernel corresponds to the list of codewords. Let be an linear code and be its generator matrix, which is a matrix. Given distinct codewords with that are close to a vector , where the coordinates and are in the alphabet , we define the intersection index set . For a subset , let (resp. ) be the submatrix (resp. subvector) of (resp. ) formed by the columns (resp. components) with indices in . Then, we have . If , then . This means that for each element in , we can establish a linear equation. Since these codewords are very close to , it is expected that we can obtain many equations of the form . By removing the linear dependence of these equations, we obtain a reduced intersection matrix such that , where is a shorthand for the tuple . On the other hand, if has full rank, then we cannot find distinct codewords that are close to a vector and thus is list decodable. Thus, the essence of their paper is to investigate the full rankness of .
In this paper, we investigate the list decodability of rank-metric codes, where distance is measured using the rank metric rather than the Hamming metric. Thus, we cannot construct the reduced intersection matrix row by row as in [13]. Instead, we present another construction of a reduced intersection matrix, which captures the property of the rank distance. Let us first represent the codeword of our rank-metric code as a vector where is the extension field of . This is done by fixing an -linear isomorphism . The rank distance between two codewords is the maximum number of -linear independent components in . One can find the precise definition in Section 2. Similar to Hamming codes, a linear rank-metric code has a generator matrix and each codeword can be encoded as . Given two vectors with rank distance , we can find a matrix over of full rank such that . The major difference between the rank metric and the Hamming metric is that for each vector that lies in the vector space spanned by the rows in , we always have . Thus, we cannot include all in our equations. Instead, we include as a whole.
With this observation in mind, we present our new reduced intersection matrix. Assume distinct codewords with are close to a vector . Assume that and there exists an matrix of full rank over such that . By replacing with and , we have and . Let where is the vector space spanned by the rows in .222In our analysis, we need to consider for . Here, we only consider for simplicity. Then, we construct a reduced intersection matrix to represent all these relations as which can be found in (9). If has full rank, which means that we cannot find such distinct codewords, then our rank-metric code is list decodable. Thus, it suffices to study the rank of . If our decoding radius is slightly off the generalized Singleton bound (with a gap of ), then is not square. This makes the full rank condition easier to meet.
We restrict to a subspace by defining to be the column space of where the columns of span . This can be seen as a generalization of puncturing in the Hamming metric. By introducing a subspace , we obtain a submatrix of by restricting to . Using results from [12], we show that if is a symbolic Gabidulin code (see Definition 15), then the submatrix is invertible and has the same rank as when the dimension of is not too small, i.e., , where is a small parameter depending on . This means if each variable of this symbolic Gabidulin code is chosen uniformly at random, with high probability, has full rank. To show that a Gabidulin code is list decodable, we need to enumerate all possible -tuples for and take a union bound over all these tuples. Thus, we need to show that is of full rank with high probability for each . To do this, we borrow the idea of [13] to bound the failure probability.
Let us briefly review the idea of our algorithm. Let be a standard basis of . We first fix a non-singular maximal square submatrix of . The reason we need a square submatrix is that it is easy to calculate the determinant of to bound the failure probability that is non-singular. Initially, since is the generator matrix of a symbolic Gabidulin code, is a nonsingular matrix. If remains non-singular with the assignment , we are done. Otherwise, we face the situation where is non-singular under the partial assignment but becomes singular under . In this case, we call a faulty index and remove the corresponding columns from the generator matrix . Then, we come to the submatrix for some subspace . Note that we have already shown that has full rank if has large dimension. Then, we find a new maximal square submatrix of and continue the argument. We show that, with high probability, there are not too many faulty indices, which implies that we can finally find a maximal square submatrix that has full rank under the assignment. This means has full rank, completing the proof.
Complementing our positive result, we also show that a capacity-achieving list decodable rank-metric code must satisfy . Our proof generalizes the proof in [1] in the rank-metric case. In particular, we first fix a subspace of dimension and let be a complement of . Then, we construct a collection of subspaces of dimension in , where is the rate of our rank-metric code. For any two subspaces , . We manage to show that has a large size. Using a probabilistic argument, we find a codeword in the rank-metric code such that for most subspaces , there is a corresponding codeword in satisfying the condition that the kernel of contains . Since the number of such subspaces is greater than , by the pigeonhole principle, we can find distinct codewords such that the kernel of also contains . Then, we show that these codewords are contained in a ball of small radius in the rank metric. This implies an upper bound on the list decoding radius, thus completing the proof.
Remark.
It is interesting to note that we require only the ideas from [13] to improve the column-to-row ratio to , without relying on the more refined techniques from [2]. This is likely due to the significantly larger alphabet size of rank-metric codes. While the techniques in [2] might further improve lower-order factors, such as the dependence on , we do not pursue this direction here in order to keep the presentation simple.
2 Preliminaries
In this paper, vectors are considered row vectors unless stated otherwise. Define . Let be a finite field with elements and be a (finite or infinite) extension of .
2.1 Vector Spaces
is a vector space of dimension over . We denote by a row vector in and a column vector. Let be the standard basis of . Given a matrix , we denote by the subspace spanned by the column vectors in . For a -tuple and , define .
Definition 6 (Dual space).
Let be a linear subspace. The dual space of is denoted as . It is clear that is well-defined, and .
Linear codes
Let be a field. An linear code (or code for short) is simply a subspace of of dimension . The dual code of an code is the code which is the dual space of .
For an code , a matrix is said to be a generator matrix of if , and a matrix is said to be a parity-check matrix of if . A generator matrix of is also a parity-check matrix of the dual code . Similarly, a parity-check matrix of is also a generator matrix of .
Definition 7 (Dimension of a collection of vector spaces).
For a -tuple of subspaces and , the dimension of is defined as
We need the following simple lemmas, whose proofs are omitted.
Lemma 2.
Let . Let be a matrix of full rank over . Then there exist matrices , , and of full rank such that and .
Lemma 3.
Let . Then
| (1) |
Lemma 4.
Let be a subspace in and be a subspace of . Then, there exists a matrix with such that there exists a submatrix of with .
Lemma 5.
Let with . Given a subspace of dimension , the number of with and is at most .
Proof.
Let and we write and . Since
we conclude that and . To construct , it suffices to construct and separately. The number of subspaces equals the number of ways of picking a -dimensional subspace from , which is at most . On the other hand, the number of equals the number of ways of picking a -dimensional subspace that , which is
Thus, for fixed , the total number of is at most subject to and . And we have
The number of possible is at most . The claim follows by taking the union bound over all possible .
Corollary 8.
Let . There exists a collection of -dimensional subspaces in of size at least such that for any , .
Proof.
There are at least -dimensional subspaces in . For each such subspace , by Lemma 5, we remove at most subspaces in such that . Thus, by a greedy algorithm (i.e., iteratively adding subspaces that have not been selected or removed to ), we can find of size at least
The last inequality is due to . The proof is completed. The size of family will be used in the lower bound argument in Appendix A.
2.2 Rank-Metric Codes
We first review some basic facts and results about rank-metric codes. The rank distance between two matrices is defined to be the rank of , i.e., . Indeed, this defines a distance [8]. A rank-metric code is a subset of whose rate and minimum distance are given by
Without loss of generality, we always assume that , since otherwise we can exchange and . It is convenient to treat an matrix over as a vector by identifying with (by fixing a basis of ) and viewing each column of as an element in . Then, we have . In this way, a rank-metric code may be viewed as a subset of , and we can study linear rank-metric codes, i.e, codes that are -subspaces.
Linear rank-metric codes over a general field
It is convenient for us to consider a general notion of linear rank-metric codes over a field that can even be infinite. To properly define this notion, we first define the -rank and the kernel subspace of a vector .
Definition 9 (-rank).
Let be an extension field of . For , define
called the -rank of .
Definition 10 (Kernel subspace).
For , define the -kernel subspace (or simply the kernel subspace) of to be
The following lemma can be seen as an alternative definition of the -rank.
Lemma 6.
.
Proof.
Consider the -linear map sending to . The image of this map is , whose dimension is by definition. The kernel of this map is . So .
We can now define the notion of a linear rank-metric code over a field .
Definition 11 (Linear rank-metric code).
Let be an extension field of . An linear rank-metric code is simply an code equipped with the distance function defined by . The minimum distance of is
Analogous to the classical setting, one can prove the following Singleton bound for linear rank-metric codes. While this may be well known, we include a proof for completeness.
Theorem 12 (Singleton bound).
Let be an rank-metric code. Then .333We remark that when , there exists a Singleton bound, , that also applies to nonlinear rank-metric codes [8]. However, this bound is given in terms of the size of the code, not the dimension, making it inapplicable when is infinite.
Proof.
There exists a nonzero codeword whose first coordinates are zero. So . A rank-metric code meeting the Singleton bound is called maximum rank distance (MRD) code.
Lemma 7 ([12, Lemma 2.11]).
Let be an code. If is , then is also .
Lemma 8.
Let be a generator matrix of an code and be a parity-check matrix of code . Then the following are all equivalent:
-
1.
is .
-
2.
For any of full rank, the matrix also has full rank.
-
3.
For any of full rank, the matrix also has full rank.
Proof.
Gabidulin codes
The most famous MRD codes are Gabidulin codes, which are defined by using the evaluation of linearized polynomials. We briefly review the construction of Gabidulin codes [8] and extend it to a general field .
Definition 13 (Gabidulin code over ).
Let be integers. Let be an extension field of such that . Let be linearly independent over . Define the rank-metric code
where is said to be -linearized if it only contains monomials whose degrees are -powers, and we define if .
For a nonzero codeword , using the fact that is -linearized, we have
whose dimension over is bounded by since are linearly independent over and has at most roots. So by Lemma 6. This shows that Gabidulin codes are MRD codes.
The dual code of a Gabidulin code is also a Gabidulin code, which can be seen as an analogy of a Reed–Solomon code.
Theorem 14 (Duality of Gabidulin codes).
Let be an extension field of , and let be linearly independent over . Then there exists such that
| (2) |
The choice of satisfying (2) is unique up to a scalar in . Moreover, are linearly independent over , and is a parity-check matrix of , i.e.,
A proof can be found in [3, Lemma 2.7.2]. We present this proof for completeness.
Proof of Theorem 14.
This holds for any extension field no matter if is finite or infinite. Let be the unique solution up to the scalar such that
| (3) |
The uniqueness is due to the fact that is a Moore matrix of rank if are -linearly independent. Then, for , we have
This is due to (3) and the fact that .
Definition 15 (Symbolic Gabidulin code).
Let . Let , where are transcendental and algebraically independent elements over . A symbolic Gabidulin code is a -linear code with generator matrix , i.e.,
2.3 Known Results on the List Decoding of Gabidulin Codes
For over an extension field , , and , define to be the column space of . The following results on the list decoding of symbolic Gabidulin codes can be found (implicitly) in [12].
Theorem 16 (Implicit in Theorem 1.16, [12]).
Let be an integer. Let be a symbolic Gabidulin code with generator matrix and parity-check matrix . Let be subspaces of , each of dimension at most . Then,
| (4) |
where the maximum is taken over all possible partitions of . Let be subspaces of , each of dimension at most . Then,
| (5) |
Lemma 9 (Lemma 6.1, [12]).
Let be an extension field of and let . For , let be a subspace of and let such that . Then, and
| (6) |
where we define the matrix .
3 Characterization of the List Decodable Property
Let be the extension field of . Let be a code with generator matrix and parity-check matrix . Assume are codewords close to a vector , i.e.,
| (7) |
By replacing with and with for , we may assume . Thus, (7) is equivalent to:
| (8) |
Let be a vector space and such that . It follows that and . Since ,
| (9) |
Let the matrix above be denoted as where . Since , is a matrix.
Lemma 10.
Let , , and be a positive integer. Let be an -linear code over a finite field with generator matrix . Suppose is not average-radius list decodable in the rank metric and . Then, there exist and -linear subspaces such that
-
1.
.
-
2.
-
3.
for some non-empty set .
Proof.
As is not average-radius list decodable in the rank metric, there exists a vector and codewords such that Let and we have . This implies that
Thus, we can choose a minimal set of size at least such that . By permuting the codewords , we may assume that . By the definition of , for any subset of size . Then, for any subset , Item 3 holds due to the minimality of . It remains to show that Item 1 holds. To see this, we first notice that for some . Let such that . Since , we have . Let and for . Then . This completes the proof.
Definition 17 (Reduced Matrix).
Let , where each is a linear subspace of . Let be a linear subspace and be the intersection of and . The reduced matrix is defined as
| (10) |
where of full rank with . If for some , we shorthand if no ambiguity occurs.
Let with . Since the column vectors in lie in , we may write where of full rank. Using the above notation, we have the following results.
Lemma 11.
Let and for . Let . Assume , i.e., there is no nonzero solution to
| (11) |
Then .
Proof.
Assume that there exists a solution . Let . Then, is a solution to (11) by observing
4 Connection to the Parity-Check Matrix
Definition 18.
Let be the extension field of . Let be the parity-check matrix of a code . Let be a tuple of subspaces of . Assume that such that for . Define the following matrix
| (12) |
Since each is an matrix over , is a matrix over .
The following theorem connects the matrices and . See Appendix B for its proof.
Theorem 19.
Let be an extension field of . Let and be the generator and parity-check matrix of a MRD code , respectively. Let and . Then, there is an injective -linear map .
We note that the matrix is not a square matrix as . This means that if has full rank, there exists a reduced submatrix of that has the same rank as . The following theorem proves this claim provided that the dimension of is not too small. See Appendix C for its proof.
Theorem 20.
Let where are transcendental and algebraically independent elements over . Let be the generator matrix of a symbolic Gabidulin code. Let and . Assume that satisfies that and for all nonempty . Let be a linear space with . Then, .
5 Random Assignment to Achieve the Capacity
5.1 Random Puncturing
Let be the standard basis of . Theorem 20 states that for any subspace of dimension at least , and satisfying Item 2 and Item 3, we have . In this section, we focus on the subspace of the form for some subset . Recall that we shorthand as . By focusing on the subset , we are able to mimic the technique in [13] to bound the probability that is not of full rank when selecting the value of uniformly at random. The connection between and can be found in the following lemma.
Proof.
From Lemma 4, we can find and its submatrix such that , . This implies that is a submatrix of . In view of the expression of and , we conclude that is a submatrix of .
Next, we define the faulty index which was first proposed in [13].
Definition 21 (Faulty index).
Assume . Let be a matrix such that and the entries of are in . For , we say is the faulty index of (with respect to ) if has full (column) rank but does not.
Lemma 13.
Let and let be an integer. Let such that and for all nonempty . Let be a positive integer with . Then, for all , running Algorithm 1 on the input , , and yields the following two possible scenarios:
-
1.
Algorithm 1 outputs “Success”. In this case, has full rank.
-
2.
Algorithm 1 outputs an -tuple . In this case, for each , is the faulty index of for .
Proof.
Assume the algorithm reaches the -th round of the loop. At the beginning, we have . Then by Lemma 11 and the fact that is the generator matrix of a symbolic Gabidulin code, has full rank and thus the algorithm never outputs “Fail”. Suppose that the algorithm outputs “Success” and halts in the -th round. This means that the faulty index of does not exist in this round. This implies that has full rank. It remains to consider the case where the algorithm outputs a -tuple . For , the index is chosen to be the faulty index of , where . The distinctness of is due to the fact that if , then does not contain .
Lemma 14.
Suppose and are chosen uniformly at random in . Then, for any -tuple and , the probability that Algorithm 1 outputs given the input and is at most .
Proof.
For , define the following:
-
1.
.
-
2.
Let be the smallest nonsingular maximal minor of in the lexicographic order. The same argument in Lemma 13 implies that for , has full rank and hence exists.
-
3.
Let be the event that but is zero.
Note that if is output by the algorithm, then occurs. So it suffices to prove that .
Let be a permutation of such that , i.e., is the -th smallest index among for . For , define , where we let be the event that always occurs. Then . If then we are done. So assume . By definition, if occurs and , then also occurs. So for all . Note
So it suffices to prove that for .
Fix and let . Let be the set of all such that , where is a shorthand for . Note that for , the event is simply since depends only on and is bound to happen conditioned on . We then have
Fix . We just need to prove that . Let
If , then never occurs conditioned on and we are done. So assume . View as a polynomial in over the ring , and let be the coefficient of a nonzero term of . Then conditioned on , the event occurs only if is a root of . Note that , which is bounded by from the expression of . Also note that conditioned on , the random variable is uniformly distributed over . It follows that .
Corollary 22.
Under the notations and conditions in Lemma 14, suppose and is chosen uniformly at random, then
Proof.
Take a union bound over sequences , by Lemma 14, the probability that Algorithm 1 outputs a faulty sequence on the input and is at most . If this doesn’t happen, by Lemma 13, .
5.2 Application to List Decoding
We are ready to prove our main results.
Theorem 23.
Let and be positive integers with and . Then with probability at least , a randomly punctured Gabidulin code with rate is average-radius list decodable.
Proof.
Let . By Lemma 10, if with generator matrix is not average-radius list decodable in the rank metric, then, there exist and -linear subspaces such that
-
1.
.
-
2.
-
3.
for some non-empty set .
Choose uniformly at random. The probability that are -linearly dependent is at most . Let . To prove this theorem,it suffices to show that Items 1–3 simultaneously hold with probability at most . We fix and satisfying Item 2 and Item 3. Let . Observe that where . By Corollary 22, the probability that holds is at most , where we use the fact that . The number of -tuples , where ranges over , is bounded by . By the union bound, the probability that Items 1–3 hold for some and is at most as for some .
References
- [1] Omar Alrabiah, Venkatesan Guruswami, and Ray Li. AG codes have no list-decoding friends: Approaching the generalized Singleton bound requires exponential alphabets. In Proceedings of the 2024 Annual ACM-SIAM Symposium on Discrete Algorithms (SODA), pages 1367–1378. SIAM, 2024. doi:10.1137/1.9781611977912.55.
- [2] Omar Alrabiah, Venkatesan Guruswami, and Ray Li. Randomly punctured Reed–Solomon codes achieve list-decoding capacity over linear-sized fields. In Proceedings of the 56th Annual ACM Symposium on Theory of Computing, pages 1458–1469, 2024. doi:10.1145/3618260.3649634.
- [3] Hannes Bartz, Lukas Holzbaur, Hedongliang Liu, Sven Puchinger, Julian Renner, Antonia Wachter-Zeh, et al. Rank-metric codes and their applications. Foundations and Trends® in Communications and Information Theory, 19(3):390–546, 2022. doi:10.1561/0100000119.
- [4] Joshua Brakensiek, Sivakanth Gopi, and Visu Makam. Lower bounds for maximally recoverable tensor codes and higher order MDS codes. IEEE Transactions on Information Theory, 68(11):7125–7140, 2022. doi:10.1109/TIT.2022.3187366.
- [5] Philippe Delsarte. Bilinear forms over a finite field, with applications to coding theory. J. Comb. Theory, Ser. A, 25(3):226–241, 1978. doi:10.1016/0097-3165(78)90015-8.
- [6] Michael A. Forbes and Venkatesan Guruswami. Dimension Expanders via Rank Condensers. In Approximation, Randomization, and Combinatorial Optimization. Algorithms and Techniques (APPROX/RANDOM 2015), pages 800–814, 2015. doi:10.4230/LIPIcs.APPROX-RANDOM.2015.800.
- [7] Michael A Forbes and Amir Shpilka. On identity testing of tensors, low-rank recovery and compressed sensing. In Proceedings of the forty-fourth annual ACM symposium on Theory of computing, pages 163–172, 2012. doi:10.1145/2213977.2213995.
- [8] Ernst Gabidulin. Theory of codes with maximum rank distance (translation). Problems of Information Transmission, 21:1–12, January 1985.
- [9] J. K. Gibson. Severely denting the Gabidulin version of the Mceliece public key cryptosystem. Designs, Codes and Cryptography, pages 37–45, 1995. doi:10.1007/BF01390769.
- [10] J. K. Gibson. The security of the Gabidulin public-key cryptosystem. In Advances in Cryptology – EUROCRYPT’96, LNCS 1070,. Springer, 1996.
- [11] Zeyu Guo, Ben Lee Volk, Akhil Jalan, and David Zuckerman. Extractors for images of varieties. In Proceedings of the 55th Annual ACM Symposium on Theory of Computing, pages 46–59, 2023. doi:10.1145/3564246.3585109.
- [12] Zeyu Guo, Chaoping Xing, Chen Yuan, and Zihan Zhang. Random gabidulin codes achieve list decoding capacity in the rank metric. In 65th IEEE Annual Symposium on Foundations of Computer Science, FOCS 2024, Chicago, IL, USA, October 27-30, 2024, pages 1846–1873. IEEE, 2024. doi:10.1109/FOCS61266.2024.00111.
- [13] Zeyu Guo and Zihan Zhang. Randomly punctured Reed-Solomon codes achieve the list decoding capacity over polynomial-size alphabets. In 2023 IEEE 64th Annual Symposium on Foundations of Computer Science (FOCS), pages 164–176, 2023. doi:10.1109/FOCS57990.2023.00019.
- [14] Venkatesan Guruswami, Nicolas Resch, and Chaoping Xing. Lossless dimension expanders via linearized polynomials and subspace designs. Comb., 41(4):545–579, 2021. doi:10.1007/s00493-020-4360-1.
- [15] Venkatesan Guruswami, Carol Wang, and Chaoping Xing. Explicit list-decodable rank-metric and subspace codes via subspace designs. IEEE Trans. Inf. Theory, 62(5):2707–2718, 2016. doi:10.1109/TIT.2016.2544347.
- [16] R. Koetter and F. R. Kschischang. Coding for errors and erasures in random network coding. In IEEE International Symposium on Information Theory (ISIT 2007), pages 791–795. IEEE, 2007. doi:10.1109/ISIT.2007.4557321.
- [17] Ralf Koetter and Frank R. Kschischang. Coding for errors and erasures in random network coding. IEEE Trans. Inf. Theory, 54(8):3579–3591, 2008. doi:10.1109/TIT.2008.926449.
- [18] Pierre Loidreau. Designing a rank metric based mceliece cryptosystem. In Post-Quantum Cryptography: Third International Workshop, PQCrypto 2010, Darmstadt, Germany, May 25-28, 2010. Proceedings 3, pages 142–152. Springer, 2010. doi:10.1007/978-3-642-12929-2_11.
- [19] Pierre Loidreau. A new rank metric codes based encryption scheme. In Post-Quantum Cryptography: 8th International Workshop, PQCrypto 2017, Utrecht, The Netherlands, June 26-28, 2017, Proceedings 8, pages 3–17. Springer, 2017. doi:10.1007/978-3-319-59879-6_1.
- [20] Hsiao-feng Lu and P Vijay Kumar. A unified construction of space-time codes with optimal rate-diversity tradeoff. IEEE Transactions on Information Theory, 51(5):1709–1730, 2005. doi:10.1109/TIT.2005.846403.
- [21] Paul Lusina, Ernst Gabidulin, and Martin Bossert. Maximum rank distance codes as space-time codes. IEEE Transactions on Information Theory, 49(10):2757–2760, 2003. doi:10.1109/TIT.2003.818023.
- [22] Netanel Raviv and Antonia Wachter-Zeh. Some Gabidulin codes cannot be list decoded efficiently at any radius. IEEE Transactions on Information Theory, 62(4):1605–1615, 2016. doi:10.1109/TIT.2016.2532343.
- [23] Netanel Raviv and Antonia Wachter-Zeh. A correction to “some Gabidulin codes cannot be list decoded efficiently at any radius”. IEEE Transactions on Information Theory, 63(4):2623–2624, 2017. doi:10.1109/TIT.2017.2659766.
- [24] Chong Shangguan and Itzhak Tamo. Combinatorial list-decoding of Reed-Solomon codes beyond the Johnson radius. In Proceedings of the 52nd Annual ACM SIGACT Symposium on Theory of Computing, pages 538–551, 2020. doi:10.1145/3357713.3384295.
- [25] D. Silva and F. R. Kschischang. Fast encoding and decoding of Gabidulin codes. In IEEE International Symposium on Information Theory (ISIT 2009). IEEE, 2009.
- [26] D. Silva, F.R. Kschischang, and R. Koetter. A rank-metric approach to error control in random network coding. IEEE Transactions on Information Theory, 54(9):3951–3967, 2008. doi:10.1109/TIT.2008.928291.
Appendix A Field Size Lower Bound for Capacity-Achieving Rank-Metric Codes
We prove a lower bound on the field size of capacity achieving rank-metric codes by adapting the argument in [1]. We first prove a lower bound for rank-metric codes with large distance in Theorem 24. Then, we remove this distance requirement in Corollary 25.
Theorem 24.
Let . For any , any rank-metric code of rate and minimum distance at least that is -avearge-radius list decodable must have .
Proof.
Fix a subspace of dimension . Choose a subspace such that . Let and . Let be the collection of subspaces of dimension such that for any pair of vector spaces , . By Corollary 8, the size of can be at least . It suffices to prove that , as this would imply .
Assume to the contrary that . Let be uniformly distributed from . For a fixed subspace , let such that . Let be the event that there exists a codeword different from such that , i.e., . If does not hold, then is uniquely determined by . As the number of possible values of is at most and , we have
Therefore, over random , the expected number of such that happens is . Then, we can fix a codeword such that the size of the set
is at least .
Let such that . By the definition of , for each , there exists a codeword such that the kernel subspace of contains . Since for any codeword and , by the pigeonhole principle, there exists distinct such that . Moreover, by the definition of , for , there exists with such that .
Assume for some . Then and . Let such that . As the columns of are in , we have , i.e., is contained in the kernel subspace of . Since and are in code of minimum distance at least , we have . This implies that the kernel subspace of is at most . So . However, as and thus , which yields a contradiction. Thus, we conclude that are all distinct.
Since , there exists such that and has full rank. Let such that and . This can be achieved by choosing .
For , we have since , , , and . And for , we know , which implies
Since for , we have and hence
as . As , we have . It follows that
as . This contradicts the claim that is -avearge-radius list decodable.
We now show how to remove the minimum distance requirement in Theorem 24.
Corollary 25.
Let . For any , any rank-metric code of rate that is -avearge-radius list decodable must have .
Proof.
Compared to Theorem 24, this statement only remove the minimum distance requirement. Thus, if we find a subcode of with minimum distance and the same rate , then we can apply the argument in Theorem 24 directly to obtain the desired result. To achieve this goal, we prove the claim that for any , there are at most codewords in that is within minimum distance at most from . Assume not and we find such that . Let be the center and we claim that
Thus, is not -avearge-radius list decodable code and a contradiction happens. Therefore, we can find a subcode of size at least such that the minimum distance of is at least . We can apply the same argument in Theorem 24 to obtain the desired result.
Appendix B Proof of Theorem 19
Proof.
For , let such that . By Lemma 2, there exist full-rank matrices , , and such that and . Define the linear map such that it sends a row vector to
Since is an matrix over , is a vector of length which is exactly the number of columns of . Next, we show that belongs to . To see this, we observe that . Also,
and
This implies that for , and thus belongs to .
It remains to show that is an injection. It suffices to show that implies as is a linear map. As , we know that implies . Similarly, as , we know that implies for . So implies .
Appendix C Proof of Theorem 20
Proof.
Let . Let such that . Let be given in Lemma 11 and we have . Note that
| (13) |
and
| (14) |
for any nonempty set .
By Lemma 11, to prove , it suffices to show that for . Here is also a generator matrix of a symbolic Gabidulin code by letting . Moreover, by replacing with and identifying view as a subspace of , we may assume .
It follows from (13) and (14) that . So . Let be the parity-check matrix of , i.e., . Define . Then, by Definition 18, we have
| (15) |
where with . By Theorem 16, we have
| (16) |
We proceed to compute the RHS of (16). For and , as , we conclude
| (17) |
For and nonempty sets that forms a partition of , we have
| (18) | ||||
Combining (16), (17), and (18), we conclude that . Now, by Lemma 9, this implies
The last equality holds since by Lemma 8, the rank of equals , as is of full rank and . Since the number of columns in is which is equal to its rank, the only solution in is . The proof is completed.
