Geometric Complexity Theory V: Efficient algorithms for Noether Normalization

Ketan D. Mulmuley

Introduction

Noether’s Normalization Lemma (NNL), proved by Hilbert , is the basis of a large number of foundational results in algebraic geometry, such as Hilbert’s Nullstellensatz. It also lies at the heart of the foundational classification problem of algebraic geometry. For any projective variety W⊆P(Kl)W\subseteq P(K^{l}), where KK is an algebraically closed field and P(Kl)P(K^{l}) is the projective space associated with KlK^{l}, the lemma says that any homogeneous, generic linear map ψ:Kl→Kk\psi:K^{l}\rightarrow K^{k}, for any k≥dim⁡(W)+1k\geq\dim(W)+1, induces a regular (well defined) map on WW (this means ψ\psi does not vanish identically on the line through the origin in KlK^{l} corresponding to any point in WW). Furthermore, for any such ψ\psi, (1) ψ(W)⊆P(Kk)\psi(W)\subseteq P(K^{k}), the image of WW, is closed in P(Kk)P(K^{k}), and (2) the fiber ψ−1(p)\psi^{-1}(p), for any point p∈ψ(W)p\in\psi(W), is a finite set. Accordingly, we call a homogeneous linear map ψ:Kl→Kk\psi:K^{l}\rightarrow K^{k}, k≥dim⁡(W)+1k\geq\dim(W)+1, that induces a regular map on WW a normalizing map for WW. In the context of the main results of this paper, ll here will be exponential in dim⁡(W)\dim(W), and kk will be polynomial in dim⁡(W)\dim(W). In this case, Noether’s Normalization Lemma expresses the variety WW, embedded in the ambient space P(Kl)P(K^{l}) of exponential dimension, as a finite cover of the variety ψ(W)\psi(W), embedded in the ambient space P(Kk)P(K^{k}) of polynomial dimension. This is its main significance from the complexity-theoretic perspective. We also refer to the problem of constructing a normalizing map ψ\psi, with k=\mboxpoly(dim⁡(W))k={\mbox{poly}}(\dim(W)), as NNL in short. This is the problem that is studied in this article for the varieties WW that are given explicitly in a sense that will be made precise. We do not require k=dim⁡(W)+1k=\dim(W)+1 here, and allow a polynomial slack, for the reasons explained in Section 1.2.

In algebraic geometry, the phrase “explicitly” is used informally. In this article, it is interpreted formally, from the complexity-theoretic perspective, to mean “using algebraic circuits that can be computed in deterministic polynomial time”. Thus, we formally introduce in this article the notion of an explicit family {Wn}\{W_{n}\} of varieties (Definition 5.1) of \mboxpoly(n){\mbox{poly}}(n) dimension that can be specified succinctly and uniformly by \mboxpoly(n){\mbox{poly}}(n)-time-computable algebraic circuits (cf. Section 2.1) of \mboxpoly(n){\mbox{poly}}(n) degree having a specification of \mboxpoly(n){\mbox{poly}}(n) bit-length, even though the dimension lnl_{n} of the ambient space containing WnW_{n} can be exponential in nn. If WnW_{n} is projective, we let lnl_{n} be one plus the dimension of the ambient space. If the family {Wn}\{W_{n}\} is explicit, we also say that the variety WnW_{n} is explicit, with the understanding that n→∞n\rightarrow\infty in all complexity bounds. It turns out that (cf. Section 5.1) a large class of varieties that arise in practice are explicit in this formal complexity-theoretic sense.

The problem NNL for such explicit varieties WnW_{n} (cf. Definition 5.6) is the problem of constructing a specific kind (cf. Sections 1.2 and 5.3) of a normalizing map ψn:Kln→Kkn\psi_{n}:K^{l_{n}}\rightarrow K^{k_{n}} for WnW_{n}, with kn=\mboxpoly(n)k_{n}={\mbox{poly}}(n), having a succinct specification of \mboxpoly(n){\mbox{poly}}(n) bit-length.

For general explicit varieties WnW_{n}, the standard algorithm for NNL (cf. Section 5.6), based on Gröbner basis theory , takes in the worst case work-space that is polynomial in lnl_{n}, and time that is exponential in lnl_{n}. In our context lnl_{n}, in general, is exponential in nn, and hence, this work-space bound is exponential in nn, i.e., O(2\mboxpoly(n))O(2^{{\mbox{poly}}(n)}), and the time bound is double exponential in nn. This shows that NNL for explicit varieties is in EXPSPACE. Assuming the Generalized Riemann Hypothesis, it can be shown to be in EXPH (cf. Section 5.6). Here EXPSPACE denotes the complexity class of problems that can be solved using exponential work-space in double exponential time, and EXPH denotes the exponential hierarchy . Informally, these stand for the classes of problems that are computationally highly intractable (far more intractable than the problems in the class NP, which can be solved in exponential time and polynomial space). Thus, on the basis of the existing literature in computational algebraic geometry, it may appear that NNL for explicit varieties is highly intractable, and perhaps, even inherently so.

The algorithmic results in this article indicate that this is not the case.

First, it is shown in this article (cf. Theorem 1.2) that NNL for any explicit variety WnW_{n} can be solved by a \mboxpoly(n){\mbox{poly}}(n)-time randomized Monte Carlo algorithm, whose output is correct with a high probability. This means, in practice, NNL for explicit varieties can be solved efficiently and correctly with a high probability. But this does not show that NNL for explicit varieties is in \mboxBPP⊆\mboxPSPACE\mbox{BPP}\subseteq\mbox{PSPACE}, for the reasons explained in Section 1.3. Hence, it does not affect the current EXPSPACE-status of NNL, or the EXPH status assuming the Generalized Riemann Hypothesis.

So we ask if NNL for any explicit variety can be solved deterministically in polynomial time, thereby bringing it down from EXPSPACE to P. We say that NNL for an explicit variety has an explicit solution, in the complexity-theoretic sense, if it can be solved in deterministic polynomial time. The motivation for such an explicit solution comes from the foundational classification problem of algebraic geometry (cf. Section 1.8 in ). Its goal is to classify a given algebraic variety by transforming it regularly into some canonical normal form. Without any relaxation, this goal may be infeasible, since it is not even known at present if the isomorphism problem for algebraic varieties is decidable . Hence, our goal is to do the best that we can from the complexity-theoretic perspective. As a first step in this direction, one would like an “explicit” normalizing map for an “explicitly” given variety. A random normalizing map is not enough in this context, since randomness is the opposite of canonicity. Solving NNL in deterministic polynomial time is this first step towards the classification problem of algebraic geometry, interpreted from the complexity-theoretic perspective. For the reasons explained in Section 11, this turns out to be far harder than solving NNL in randomized polynomial time by a Monte Carlo algorithm. We turn to this harder problem next.

It is shown in this article that, for some interesting cases of explicit varieties WnW_{n}, NNL can indeed be solved deterministically in quasi-\mboxpoly(n){\mbox{poly}}(n)-time, i.e., in O(2(log⁡n)c)O(2^{(\log n)^{c}}) time, for some constant c>1c>1. (Here it is assumed that the dimension knk_{n} of the target space of the constructed normalization map ψn:Kln→Kkn\psi_{n}:K^{l_{n}}\rightarrow K^{k_{n}} is also quasi-polynomial in nn.) Thus, for these explicit varieties, NNL can be brought down from EXPSPACE to quasi-P, the class of problems that can be solved deterministically in quasi-polynomial time.

The first such case of an explicit variety is the categorical quotient V/GV/G associated with any finite dimensional (rational) representation VV of G=SLmG=SL_{m}, with constant mm, in characteristic zero. (By a rational representation, we mean that the entries of the representation matrix are rational functions of the coordinates of GG. We will only be concerned with such representations in this article.) Here V/G=\mboxspec(K[V]G)V/G={\mbox{spec}}(K[V]^{G}) By abuse of notation, spec in this article really means max-spec; cf. (page 54). is the variety whose coordinate ring is K[V]G⊆K[V]K[V]^{G}\subseteq K[V], where K[V]K[V] denotes the coordinate ring of VV, and K[V]GK[V]^{G} its subring of GG-invariants. Explicitness of this variety is by itself a key result in this article. It means (cf. Theorem 1.5) that a succinct encoding, in the form of a symbolic determinant, of a set of (exponentially many) generators for this invariant ring can be constructed in \mboxpoly(n){\mbox{poly}}(n) time, where nn is the dimension of VV.

This succinct and efficient encoding of generators is in the spirit of the encodings that were used in the so-called symbolic method of classical invariant theory (cf. Chapter 8 A in ). For example, the First Fundamental Theorem for the ring of vector invariants proved by Weyl (cf. Theorem 2.6 A therein) implies such a polynomial-time-computable succinct encoding, in the form of a symbolic determinant, of a set of (exponentially many) generators for this invariant ring. The problem of proving similar First Fundamental Theorems for invariant rings has been studied intensively in the last century; cf. Section 9 in for a survey. This classical problem is interpreted in this article (cf. Definition 5.2 (d)), from the complexity-theoretic perspective, as the problem of constructing an explicit encoding, in the form of a symbolic determinant or a circuit, of a set of generators of the invariant ring, where explicit means polynomial-time-computable. Classical invariant theory did not specify formally what “explicit” means.

For the variety V/GV/G associated with any nn-dimensional representation VV of G=SLmG=SL_{m}, with constant mm, in characteristic zero, it is shown in this article that NNL can be solved deterministically in O(nO(log⁡log⁡n))O(n^{O(\log\log n)}) time; cf. Theorem 1.6.

Noether’s Normalization Lemma was, in fact, proved by Hilbert to give an algorithm for constructing a finite set of generators for the invariant ring K[V]GK[V]^{G} in this context. Hilbert did not prove any explicit upper bound on its running time, or on the degrees of the generators. Such a bound on the degrees was proved in Popov a century later, and improved significantly in Derksen . This improved analysis yields an exponential-time algorithm for computing a set of generators for the ring K[V]GK[V]^{G} of invariants for any finite dimensional representation VV of G=SLmG=SL_{m} and, in conjunction with Gröbner basis theory , an EXPSPACE-algorithm for NNL for this invariant ring. This algorithm for constructing a set of generators requires time that is exponential in the dimension of VV, and the algorithm for NNL requires exponential work-space and double exponential time, even when mm is constant. Hilbert’s paper focused mainly on the case when mm is three, since an algorithm to construct a finite set of generators was not known before even in this case; cf. Section 1.5.

Explicitness for constant mm of the categorical quotient associated with this invariant ring K[V]GK[V]^{G} (Theorem 1.5) implies that the problem of computing an encoding, in the form of a symbolic determinant, of a set of generators for this invariant ring is in P. Thus there has been a rather remarkable change in the status of this fundamental problem of invariant theory over the course of a century from a problem that was not even known to be computable before Hilbert to a problem that is now in P, as shown in this article; cf. Section 1.5.

The quasi-polynomial-time deterministic algorithm in this article for NNL for this invariant ring (cf. Theorem 1.6), for constant mm, brings the original instance of NNL in Hilbert’s paper in this case from EXPSPACE to quasi-P. Analogous results hold for any connected, reductive, algebraic group of constant dimension (cf. Theorem 9.9).

The second case of an explicit variety that we consider is the categorical quotient V/GV/G associated with the space V=Mm(K)rV=M_{m}(K)^{r} of rr-tuples of m×mm\times m matrices over KK, with the simultaneous conjugation-action of G=SLmG=SL_{m} (without any restriction on mm this time). It is shown in this article that this variety is explicit in characteristic zero, and is explicit in a relaxed sense in positive characteristic (cf. Theorem 1.3).

Furthermore (cf. Theorem 1.4), NNL for this variety can be solved deterministically in quasi-\mboxpoly(m,r){\mbox{poly}}(m,r) time in any characteristic p∉[2,⌊m/2⌋]p\not\in[2,{\lfloor m/2\rfloor}], thereby bringing NNL in this case too from EXPSPACE to quasi-P. This extends the same result in characteristic zero that is implied, as pointed out by Forbes and Shpilka , by a variant of a conditional result in the preliminary version of this article, in conjunction with their earlier work on arithmetic circuits; cf. Remark 1 in Section 1.7.

More generally (cf. Theorems 1.8, 5.11, and Section 10.5), NNL for any explicit variety in zero or large enough characteristic can be solved deterministically in quasi-polynomial time, thereby bringing it from EXPSPACE to quasi-P, assuming the hardness hypothesis for the permanent in geometric complexity theory. This hypothesis proposed in (or rather its stronger variant) is that the permanent of n×nn\times n matrices cannot be approximated infinitesimally closely by symbolic determinants over KK of O(2nϵ)O(2^{n^{\epsilon}}) size, for some constant ϵ>0\epsilon>0, as n→∞n\rightarrow\infty. It is an algebraic geometric strengthening of the fundamental \mboxVP≠\mboxVNP\mbox{VP}\not=\mbox{VNP} conjecture in the work of Valiant .

In Bürgisser , some other consequences of this hardness hypothesis have been derived, which also crucially rely on the fundamental result of Kaltofen , as in this paper. Consulting (and especially Section 9.3 in that explains in detail the precise relationship of the work in with the earlier work in ) may help the reader to understand this hypothesis better.

The results described above lead to the following geometric complexity theory approach to the basic algorithmic problems of algebraic geometry and invariant theory under consideration, namely, (1) the problem NNL, and (2) the problem of constructing a set of generators for the ring of invariants of a reductive group. Both these problems are motivated by Hilbert .

The goal of the approach in the context of the first problem is to show that it is in P for every explicit variety. The approach is to (1) first prove the hardness hypothesis for the permanent in geometric complexity theory (or its weaker form, cf. Theorem 1.9), then (2) use the results in this article to show that NNL for every explicit variety is in quasi-P, in zero or large enough characteristic (cf. Theorem 5.11 and Section 10.5), and (3) finally, remove the quasi-prefix and the characteristic restriction by proving a stronger form of the hardness hypothesis (cf. Sections 5.5 and 10.5). An approach to prove the required hardness hypothesis in geometric complexity theory will be given in the sequel to this article (the revised version of ).

(N.B. The current version of on the arxiv has become outdated in view of the recent result that the occurrence-based obstructions in , based on the vanishing of the rectangular Kronecker coefficients, cannot be used to prove superpolynomial lower bounds for the permanent. The approach in the revised version of will be based on the far more powerful multiplicity-based obstructions, to which this negative result does not apply.)

To put NNL in quasi-P, one does not need the hardness hypothesis in geometric complexity theory, or even its weaker form, in full strength for all explicit varieties. For explicit varieties of intermediate difficulty, such as explicit categorical quotients, one only needs weaker complexity-theoretic hypotheses for the classes of circuits depending on the varieties. Thus one can approach this goal step by step, increasing the hardness of the varieties in tandem with the strength of the circuits; cf. Sections 5 and 10.

If the goals for both the problems (1) and (2) are achieved in a stronger form, it would follow that NNL for every categorical quotient V/GV/G is in P, and moreover, that the closed GG-orbits in VV have an explicit (polynomial-time-computable) parametrization, for any finite dimensional representation VV of a reductive group GG in any characteristic; cf. Sections 9.6 and 10.3.

There is a fundamental difference between this approach to the basic algorithmic problems of algebraic geometry and invariant theory and the standard approaches in computational algebraic geometry and computational invariant theory . The difference lies in how the basic objects of algebraic geometry–namely, the varieties–are specified in the computer. Computational algebraic geometry, based on Gröbner basis theory and the theory of solving polynomial equations , and computational invariant theory use the standard specification of the varieties in terms of their defining equations. If one uses this standard specification, then the basic algorithmic problems of algebraic geometry and invariant theory are inherently intractable. For example, Gröbner basis computation is EXPSPACE-hard , solving polynomial equations (Hilbert’s Nullstellensatz) is NP-hard , NNL is NP-hard (cf. Section 3), the problem of constructing a finite set of generators for the ring K[V]GK[V]^{G} of invariants is inherently intractable, because the number of generators of this ring can be exponential in dim⁡(V)\dim(V) even when dim⁡(G)\dim(G) is constant (cf. the proof of Proposition 9.3), and hence, the standard parametrization of the closed GG-orbits in VV by the points of the categorical quotient V/GV/G is also inherently intractable.

But this article illustrates that a large class of algebraic varieties that arise in practice can be specified explicitly using circuits, the basic objects of complexity theory. If one uses instead this explicit complexity-theoretic specification of the basic geometric objects (varieties), as in the approach here, then the results in this article indicate that the basic algorithmic problems (1) and (2) in algebraic geometry and invariant theory, along with the basic problem in geometric invariant theory of parametrizing closed orbits in representations of reductive groups, which are inherently intractable in the standard specification, are tractable in the explicit specification. The formal notion of explicitness introduced in this article (Definition 5.1), which is thus the fundamental difference between the geometric complexity theory approach to these basic problems and the standard approaches, is the driving theme of this article.

This article belongs to a series of articles on geometric complexity theory. See for an overview of the earlier articles in this series, and for an overview of the mathematical issues therein. Preliminary versions of the results here were announced in .

We now state the main results of this article in more detail.

Notation: Till Section 10, KK will henceforth denote an algebraically closed base field of characteristic zero, unless mentioned otherwise. We use the standard notation for the complexity classes, such as P (the class of problems that can be solved in polynomial time), BPP (the class of decision problems that can be solved by polynomial time Monte Carlo algorithms), NC (the class of problems that can be solved in poly-logarithmic parallel time using polynomial number of processors), DET (the class of problems LOGSPACE-reducible to computation of the determinant of integer matrices), EXP (the class of problems that can be solved in exponential time), EXPSPACE (the class of problems that can be solved in exponential work-space), PSPACE (the class of problems that can be solved in polynomial work-space), AC0AC^{0} (the class of problems that can be solved by constant depth Boolean circuits of polynomial size), PH (the polynomial hierarchy), EXPH (the exponential hierarchy), and so on. See for their formal definitions.

2 The problem NNL

We now define the problem NNL for the explicit variety associated with the determinant in the first article in this series.

It has to be stressed here that Δ[det⁡,m]\Delta[\det,m] is not specified by giving its equations in the ambient space P(X)P({\cal X}). This is not even possible using \mboxpoly(m){\mbox{poly}}(m) bits, since the dimension of P(X)P({\cal X}) is exponential in mm. All complexity bounds for the results below for Δ[det⁡,m]\Delta[\det,m] are in terms of the O(\mboxpoly(m))O({\mbox{poly}}(m)) bit-length of its succinct specification. Thus an EXPSPACE-algorithm means an algorithm that takes work-space that is exponential in mm, a P-algorithm means an algorithm that takes time that is polynomial in mm, and so on.

Let Δ^[det⁡,m]⊆X\hat{\Delta}[\det,m]\subseteq{\cal X} denote the affine cone of Δ[det⁡,m]\Delta[\det,m]. This is defined to be the union of all lines through the origin in X{\cal X} that correspond to the points of Δ[det⁡,m]⊆P(X)\Delta[\det,m]\subseteq P({\cal X}). Let R(det⁡,m)R(\det,m) denote the homogeneous coordinate ring of Δ[det⁡,m]\Delta[\det,m]. This is the same as the coordinate ring of Δ^[det⁡,m]\hat{\Delta}[\det,m].

By Noether’s Normalization Lemma (Lemma 3.1), there exists a homogeneous linear map ψ:X→Kk\psi:{\cal X}\rightarrow K^{k}, for any k>dim⁡(Δ[det⁡,m])k>\dim(\Delta[\det,m]), such that ψ\psi does not vanish on any nonzero point in Δ^[det⁡,m]⊆X\hat{\Delta}[\det,m]\subseteq{\cal X}. Hence, ψ\psi yields a regular (well-defined) map from Δ[det⁡,m]\Delta[\det,m] to P(Kk)P(K^{k}), which we denote by ψ\psi again. We call such a ψ\psi a normalizing map (for Δ[det⁡,m]\Delta[\det,m]). Any generic ψ\psi for such kk is a normalizing map. But deterministic construction or even verification of a normalizing map, as we shall see below, is very difficult.

Let xix_{i}, 1≤i≤k1\leq i\leq k, denote the coordinates of KkK^{k}, and given a normalizing map ψ\psi, let ψ∗(xi):X→K\psi^{*}(x_{i}):{\cal X}\rightarrow K denote the pullback of xix_{i} via ψ\psi. We also denote its restriction to Δ^[det⁡,m]\hat{\Delta}[\det,m] by ψ∗(xi)\psi^{*}(x_{i}). If k=dim⁡(Δ[det⁡,m])+1k=\dim(\Delta[\det,m])+1, the minimum possible value, then we call the subset {ψ∗(xi) ∣ 1≤i≤k}⊆R(det⁡,m)\{\psi^{*}(x_{i})\ |\ 1\leq i\leq k\}\subseteq R(\det,m) an h.s.o.p. (homogeneous system of parameters) for Δ[det⁡,m]\Delta[\det,m]. Existence of such an h.s.o.p. is a classical fact that holds for any variety; cf. Section 3.

An h.s.o.p. for Δ[det⁡,m]\Delta[\det,m] can be constructed in work-space that is exponential in mm, and in time that is double exponential in mm (cf. Theorem 4.1), by first computing the equations of Δ[det⁡,m]\Delta[\det,m] as a subvariety of P(X)P({\cal X}) using Gröbner basis theory . This space requirement is exponential in mm, because the number of variables in the equations of Δ[det⁡,m]\Delta[\det,m] as a subvariety of P(X)P({\cal X}) is equal to the dimension of X{\cal X}, which is exponential in mm, and Gröbner basis computation takes work-space that is at least polynomial in the number of variables. If we insist on an h.s.o.p., then this is the best that can be done at present. However, if we do not insist on the optimal k=dim⁡(Δ[det⁡,m])+1≤m4k=\dim(\Delta[\det,m])+1\leq m^{4}, but allow a slack, and only require that kk be \mboxpoly(m){\mbox{poly}}(m), then we can do much better.

Accordingly, we define the problem NNL for Δ[det⁡,m]\Delta[\det,m] as the problem of constructing a normalizing map ψ\psi for k=\mboxpoly(m)k={\mbox{poly}}(m), not necessarily optimal, with a succinct specification of \mboxpoly(m){\mbox{poly}}(m) bit-length. Thus we let go of optimality but insist on succinctness. We have to now explain what we mean by succinct. Obviously, the standard specification of ψ\psi as a linear map from X→Kk{\cal X}\to K^{k} is not succinct, since the dimension of X{\cal X} is exponential in mm. Hence, we confine ourselves to normalizing maps which have a succinct specification as follows.

For any m×mm\times m matrix BB with rational entries, let ψB\psi_{B} denote the homogeneous, linear, evaluation map on X{\cal X}, which maps a polynomial p(X)∈Xp(X)\in{\cal X} to p(B)p(B). We denote its restriction to Δ^[det⁡,m]\hat{\Delta}[\det,m] by ψB\psi_{B} again. Given any set B={B1,…,Bk}{\cal B}=\{B_{1},\ldots,B_{k}\} of m×mm\times m matrices with rational entries, let ψB:X→Kk\psi_{{\cal B}}:{\cal X}\rightarrow K^{k} denote the homogeneous linear map that maps p=p(X)∈Xp=p(X)\in{\cal X} to (ψB1(p),…,ψBk(p))(\psi_{B_{1}}(p),\ldots,\psi_{B_{k}}(p)). Let S(B)={ψBi ∣ 1≤i≤k}⊆R(det⁡,m)S({\cal B})=\{\psi_{B_{i}}\ |\ 1\leq i\leq k\}\subseteq R(\det,m).

We call S(B)S({\cal B}) an s.s.o.p. (small system of parameters)Such an s.s.o.p. is later called a strict s.s.o.p., as per the terminology in Section 5.3, wherein we introduce a more general definition of an s.s.o.p. But we shall not worry about this issue in this section. for Δ[det⁡,m]\Delta[\det,m] if (1) the total bit-length of BiB_{i}’s is \mboxpoly(m){\mbox{poly}}(m), and (2) the homogeneous linear map ψB\psi_{{\cal B}} does not vanish on any non-zero point in Δ^[det⁡,m]⊆X\hat{\Delta}[\det,m]\subseteq{\cal X}. Hence, ψB\psi_{{\cal B}} yields a regular (well-defined) map from Δ[det⁡,m]\Delta[\det,m] to P(Kk)P(K^{k}), which we denote by ψB\psi_{{\cal B}} again. We specify the s.s.o.p. S(B)S({\cal B}) succinctly by giving the matrices in B{\cal B}. We call ψB\psi_{{\cal B}} the succinct normalizing map corresponding to this s.s.o.p.

It can be shown that an s.s.o.p. exists (Corollary 4.4). However, an s.s.o.p. with the optimal cardinality equal to dim⁡(Δ[det⁡,m])+1\dim(\Delta[\det,m])+1 may not exist. This is why we allowed the slack above.

A \mboxpoly(m){\mbox{poly}}(m)-time-constructible s.s.o.p. is called an e.s.o.p. (explicit system of parameters), where explicit means \mboxpoly(m){\mbox{poly}}(m)-time-constructible. Quasi-s.s.o.p. and quasi-e.s.o.p. are defined by replacing \mboxpoly(m){\mbox{poly}}(m) by \mboxquasi−poly(m):=2\mboxpolylog(m)\mbox{quasi-poly}(m):=2^{{\mbox{polylog}}(m)} throughout in the definitions.

The problem NNL for Δ[det⁡,m]\Delta[\det,m] is to construct an s.s.o.p. for Δ[det⁡,m]\Delta[\det,m], given the succinct specification of Δ[det⁡,m]\Delta[\det,m] in the form a circuit for computing det⁡(X)\det(X). We say that NNL for Δ[det⁡,m]\Delta[\det,m] has an explicit solution if Δ[det⁡,m]\Delta[\det,m] has an e.s.o.p.

The current best, unconditional, deterministic algorithm for constructing an s.s.o.p. for Δ[det⁡,m]\Delta[\det,m], based on Gröbner basis theory , also takes work-space that is exponential in mm, and time that is double exponential in mm (cf. Theorem 4.10), as in the case of an h.s.o.p., again because the dimension of the ambient space P(X)P({\cal X}) containing Δ[det⁡,m]\Delta[\det,m] is exponential in mm.

3 A Monte Carlo algorithm

The following result shows that, if we are satisfied with Monte Carlo algorithms, then an s.s.o.p. for Δ[det⁡,m]\Delta[\det,m] can be constructed efficiently and correctly, with a high probability.

An s.s.o.p. for Δ[det⁡,m]\Delta[\det,m] can be constructed by a \mboxpoly(m){\mbox{poly}}(m)-time randomized Monte Carlo algorithm, whose output is correct with a high probability.

Hilbert’s original paper itself gives a randomized Monte Carlo algorithm to construct a normalizing map for any variety. For Δ[det⁡,m]\Delta[\det,m], the algorithm is the following: Just choose a random, homogeneous, linear map from P(X)P({\cal X}) to P(Kk)P(K^{k}), with k>dim⁡(Δ[det⁡,m])k>\dim(\Delta[\det,m]). It can be shown using Gröbner basis theory (cf. the proof of Theorem 4.1) that it is a normalizing map with a high probability, if the entries of the matrix specifying this map are large enough randomly chosen integers of bit-length exponential in dim⁡(X)\dim({\cal X}). Since dim⁡(X)\dim({\cal X}) is exponential in mm in our context, the number of random bits used by this algorithm and its running time are thus double exponential in mm. In contrast, the randomized algorithm in Theorem 1.1 uses only \mboxpoly(m){\mbox{poly}}(m) random bits and \mboxpoly(m){\mbox{poly}}(m) time. This is possible because the normalizing map constructed by this algorithm has a succinct specification. Obviously, the usual matrix representation of a linear map from X{\cal X} to KkK^{k} is not succinct, since dim⁡(X)\dim({\cal X}) is exponential in mm.

The Monte Carlo algorithm in Theorem 1.1 is not a BPP-algorithm, since NNL is not a decision problem, but rather a construction problem, whose output is not uniquely defined. More importantly, BPP is known to be in \mboxPH⊆\mboxPSPACE\mbox{PH}\subseteq\mbox{PSPACE} . In contrast, Theorem 1.1 does not imply that NNL for Δ[det⁡,m]\Delta[\det,m] is in PSPACE. As already mentioned, at present we can only show unconditionally that it is in EXPSPACE. This is because the problem of verifying correctness of the output of the Monte Carlo algorithm in Theorem 1.1, a potential s.s.o.p., turns out to be very difficult. If the problem of verifying an s.s.o.p. were in PSPACE, then it would have followed from Theorem 1.1 that NNL for Δ[det⁡,m]\Delta[\det,m] is in PSPACE. But the current best algorithm for this verification requires exponential work-space (cf. Theorem 4.10).

Further results on NNL for Δ[det⁡,m]\Delta[\det,m] will be given in Section 1.6.

Theorem 1.1 holds with any explicit variety (cf. Definition 5.1) in place of Δ[det⁡,m]\Delta[\det,m].

Theorems 1.1 and 1.2 hold in arbitrary characteristic; cf. Section 10.5.

We next turn to some exceptional instances of explicit varieties for which NNL can be solved deterministically in quasi-polynomial time using the existing techniques.

4 The ring of matrix invariants

The first such instance is the categorical quotient associated with the ring of matrix invariants.

Let Mm(K)M_{m}(K) be the space of m×mm\times m matrices over KK. Let V=Mm(K)rV=M_{m}(K)^{r}, the direct sum of rr copies of Mm(K)M_{m}(K), with the adjoint (simultaneous conjugate) action of G=SLm(K)G=SL_{m}(K).

Let U=(U1,…,Ur)U=(U_{1},\ldots,U_{r}) be an rr-tuple of variable m×mm\times m matrices. The variable entries of UiU_{i}’s can be thought of as the coordinates of VV, and the coordinate ring K[V]K[V] of VV can be identified with the ring K[U1,…,Ur]K[U_{1},\ldots,U_{r}] generated by the variable entries of UiU_{i}’s. An invariant in K[V]K[V] is a polynomial f(U1,…,Ur)f(U_{1},\ldots,U_{r}) in the variable entries of UiU_{i}’s such that

for all P∈GP\in G. Let n=dim⁡(V)=rm2n=\dim(V)=rm^{2}. Let K[V]G⊆K[V]K[V]^{G}\subseteq K[V] be the subring of invariants. It is finitely generated . Hence, by a general construction of algebraic geometry, one can associate with it the variety V/G=\mboxspec(K[V]G)V/G={\mbox{spec}}(K[V]^{G}), called the categorical quotient .

We say that V/GV/G is strongly explicit if, given mm and rr, one can construct in \mboxpoly(n){\mbox{poly}}(n) time a symbolic matrix A(U,y)A(U,y) of \mboxpoly(n){\mbox{poly}}(n) size such that: (1) each entry of A(U,y)A(U,y) is a (possibly non-homogeneous) linear function, with rational coefficients, of the entries of UiU_{i}’s and auxiliary variables y=(y1,…,yk)y=(y_{1},\ldots,y_{k}), k=\mboxpoly(n)k={\mbox{poly}}(n), and (2) the coefficients of det⁡(A(U,y))\det(A(U,y)), considered as a polynomial in yy, belong to and generate K[V]GK[V]^{G}.

The categorical quotient V/GV/G is strongly explicit. It is strongly explicit in a relaxed sense (cf. Definition 5.2) if KK is an algebraically closed field of positive characteristic.

We specify V/GV/G and K[V]GK[V]^{G} succinctly by simply specifying VV and GG, which can be done by giving mm and rr in unary. This succinct specification is polynomial-time-equivalent to the succinct specification of V/GV/G as an explicit variety in terms of the circuit for det⁡(A(U,y))\det(A(U,y)), since, by Theorem 1.3, this circuit can be computed in \mboxpoly(n){\mbox{poly}}(n) time, given mm and rr. The pair (m,r)(m,r) in unary will thus be the input in all the problems for V/GV/G and K[V]GK[V]^{G} described below. The bit-length of this succinct specification of V/GV/G is O(m+r)=O(n)O(m+r)=O(n), even though the dimension of the ambient space containing V/GV/G (cf. Section 6.2) is exponential in mm. All space and time bounds for the algorithms below with this input will be in terms of nn.

By Noether’s Normalization Lemma (Lemma 3.2), there exists a set S⊆K[V]GS\subseteq K[V]^{G} of \mboxpoly(n){\mbox{poly}}(n) homogeneous invariants such that K[V]GK[V]^{G} is integral over the subring generated by SS.A ring RR is said to be integral over its subring TT if every r∈Rr\in R satisfies a monic polynomial equation of the form rl+bl−1rl−1+…+b1r+b0=0r^{l}+b_{l-1}r^{l-1}+\ldots+b_{1}r+b_{0}=0, where each bi∈Tb_{i}\in T. (This statement of Noether’s Normalization Lemma is equivalent to the one given in the beginning of this introduction.) In fact, there even exists such an SS of optimal cardinality equal to dim⁡(K[V]G)\dim(K[V]^{G}) (which is less than nn). It is known that any generically chosen SS of this cardinality has the required property. Such an SS of optimal cardinality is called an h.s.o.p. (homogeneous system of parameters) of K[V]GK[V]^{G}. (Existence of such an h.s.o.p. is again a classical fact, cf. Section 3, that holds for any finitely generated KK-algebra.) It is shown here (cf. Theorem 7.3) that the problem of constructing an h.s.o.p. for V/GV/G is in EXPH (the exponential hierarchy), assuming the Generalized Riemann Hypothesis. The hierarchy is exponential, and not polynomial, because the dimension of the ambient space containing V/GV/G is exponential in mm, and hence the current best PH-algorithm for Hilbert’s Nullstellensatz in Koiran becomes an EXPH-algorithm in our context. If we insist on an h.s.o.p., then this is the best that we can do at present. However, we can do much better if, as in Section 1.2, we relax the optimality constraint on the cardinality, but insist on succinctness of specification in exchange. We are thus led to the following notion of an s.s.o.p.

We call a set S⊆K[V]GS\subseteq K[V]^{G} an s.s.o.p. (small system of parameters) for K[V]GK[V]^{G} if (1) SS contains \mboxpoly(n){\mbox{poly}}(n) homogeneous invariants of \mboxpoly(n){\mbox{poly}}(n) degree, (2) K[V]GK[V]^{G} is integral over the subring generated by SS, and (3) each invariant s=s(U1,…,Ur)s=s(U_{1},\ldots,U_{r}) in SS can be expressed as a symbolic determinant of O(\mboxpoly(n))O({\mbox{poly}}(n)) size, i.e., as the determinant of a symbolic matrix MsM_{s} of O(\mboxpoly(n))O({\mbox{poly}}(n)) size, whose entries are linear (possibly non-homogeneous) functions, with rational coefficients, of the variable entries of UiU_{i}’s, and (4) for each s∈Ss\in S, the total bit-size of the specification of the symbolic matrix MsM_{s} (including the total bit-size of the constants therein) is O(\mboxpoly(n))O({\mbox{poly}}(n)).

We call SS an e.s.o.p.(explicit system of parameters) if, in addition, given mm and rr, the specification of SS, consisting of a symbolic matrix MsM_{s} as above for each s∈Ss\in S, can be computed in \mboxpoly(n){\mbox{poly}}(n) time. This is a specialization to V/GV/G of the general definition of an e.s.o.p. for strongly explicit varieties (Definition 5.6) given later. Quasi-s.s.o.p. and quasi-e.s.o.p. are defined by replacing \mboxpoly(n){\mbox{poly}}(n) by quasi-\mboxpoly(n){\mbox{poly}}(n) throughout in the definitions.

It can be shown that an s.s.o.p. exists (cf. Corollary 5.10).

By the problem NNL for K[V]GK[V]^{G} or V/GV/G, we mean the problem of constructing an s.s.o.p. for K[V]GK[V]^{G}, given the succinct specification of K[V]GK[V]^{G} in terms of the unary pair (m,r)(m,r). This definition of NNL is a specialization and simplification of the general definition of NNL for explicit varieties (Definition 5.6) given later. We say that NNL for K[V]GK[V]^{G} has an explicit solution if K[V]GK[V]^{G} has an e.s.o.p.

(For characteristic zero, see , , and Remark 1 in Section 1.7) Let V=Mm(K)rV=M_{m}(K)^{r}, and G=SLm(K)G=SL_{m}(K) as above. Then K[V]GK[V]^{G} has a quasi-e.s.o.p., assuming that KK is an algebraically closed field of characteristic p∉[2,⌊m/2⌋]p\not\in[2,{\lfloor m/2\rfloor}].

A stronger form of this result (Theorem 10.1) implies quasi-explicit (i.e., quasi-polynomial-time computable) parametrization of the closed GG-orbits in VV for any characteristic p∉[2,⌊m/2⌋]p\not\in[2,{\lfloor m/2\rfloor}]; cf. Theorem 10.15. Analogous results hold for the invariant ring associated with any quiver; cf. Theorem 10.8.

5 The general ring of invariants

We now describe another exceptional explicit variety for which NNL can be solved deterministically in quasi-polynomial time with the existing techniques. This is the categorical quotient associated with any invariant ring of SLm(K)SL_{m}(K), with constant mm, in characteristic zero.

Let VV be any finite dimensional representation of G=SLm(K)G=SL_{m}(K), with arbitrary mm for the moment. Since GG is reductive , VV can be decomposed as a direct sum of irreducible representations of GG:

Here λ:λ1≥…≥λl\lambda:\lambda_{1}\geq\ldots\geq\lambda_{l}, l<ml<m, is a partition, i.e., a non-increasing sequence of non-negative integers, Vλ(G)V_{\lambda}(G) is the irreducible representation of GG (Weyl module ) labelled by λ\lambda, and m(λ)m(\lambda) is its multiplicity. Fix the standard monomial basis for each Vλ(G)V_{\lambda}(G), and thus a standard monomial basis for VV. Let v=(v1,…,vn)v=(v_{1},\ldots,v_{n}), n=dim⁡(V)n=\dim(V), be the coordinates of VV in this basis. Let K[V]=K[v1,…,vn]K[V]=K[v_{1},\ldots,v_{n}] be the coordinate ring of VV. Let K[V]GK[V]^{G} be its subring of GG-invariants. We call a polynomial f(v)∈K[V]f(v)\in K[V] a GG-invariant if f(σ−1v)=f(v)f(\sigma^{-1}v)=f(v) for all σ∈G\sigma\in G. By Hilbert , K[V]GK[V]^{G} is finitely generated. Hence, one can associate with it the categorical quotient V/G=\mboxspec(K[V]G)V/G={\mbox{spec}}(K[V]^{G}). We specify V/GV/G and K[V]GK[V]^{G} succinctly by just giving the specification ⟨V,G⟩\langle V,G\rangle of VV and GG, consisting of nn and mm (in unary), and the multiplicities m(λ)m(\lambda)’s (in unary) for all λ\lambda’s that occur with nonzero multiplicity in the decomposition (1). The bit-length of this succinct specification is O(n+m)O(n+m), though the dimension of the ambient space containing V/GV/G is exponential in nn, even when mm is constant; cf. the proof of Proposition 9.3.

We call V/GV/G strongly explicit if, given ⟨V,G⟩\langle V,G\rangle, one can compute in \mboxpoly(n,m){\mbox{poly}}(n,m) time a symbolic matrix A(v,y)A(v,y) such that: (1) each entry in A(v,y)A(v,y) is a (possibly non-homogeneous) linear function, with rational coefficients, of the coordinates v=(v1,…,vn)v=(v_{1},\ldots,v_{n}) and auxiliary variables y=(y1,…,yk)y=(y_{1},\ldots,y_{k}), k=\mboxpoly(n,m)k={\mbox{poly}}(n,m), and (2) the coefficients of det⁡(A(v,y))\det(A(v,y)), considered as a polynomial in yy, belong to and generate K[V]GK[V]^{G}.

Let VV be a finite dimensional representation of G=SLm(K)G=SL_{m}(K), with constant mm, as above. Then V/GV/G is strongly explicit.

S.s.o.p., e.s.o.p., quasi-s.s.o.p., quasi-e.s.o.p. for strongly explicit V/GV/G are defined just as for the ring of matrix invariants in Section 1.4, except that we use the coordinates v1,…,vnv_{1},\ldots,v_{n} of VV in place of the coordinates for Mm(K)rM_{m}(K)^{r} used earlier, and the succinct specification ⟨V,G⟩\langle V,G\rangle of K[V]GK[V]^{G} in place of the succinct specification of the ring of matrix invariants by the pair (m,r)(m,r) earlier; cf. Definition 9.1 for details.

For constant mm, we define a near-e.s.o.p. for K[V]GK[V]^{G} by replacing \mboxpoly(n,m){\mbox{poly}}(n,m) in the definition of an e.s.o.p. by O(nO(log⁡log⁡n))O(n^{O(\log\log n)}) throughout.

By the problem NNL for K[V]GK[V]^{G} or V/GV/G, we mean the problem of constructing an s.s.o.p. for K[V]GK[V]^{G}, given ⟨V,G⟩\langle V,G\rangle as above. We say that NNL for K[V]GK[V]^{G} has an explicit solution if K[V]GK[V]^{G} has an e.s.o.p.

Let VV be a finite dimensional representation of G=SLm(K)G=SL_{m}(K), with constant mm, as above. Then K[V]GK[V]^{G} has a near-e.s.o.p.

Analogues of Theorems 1.5 and 1.6 hold for any connected, reductive, algebraic group of constant dimension (cf. Theorem 9.9).

By Theorems 9.7 and 2.1, the ring K[V]GK[V]^{G} has a quasi-e.s.o.p., without any restriction on mm, if (1) the permanent of an n×nn\times n variable matrix XX cannot be computed by symbolic determinants over XX of O(2nϵ)O(2^{n^{\epsilon}}) sizeHere the entries of the symbolic matrices are possibly non-homogeneous linear functions of XX., for some constant ϵ>0\epsilon>0, as n→∞n\rightarrow\infty (cf. Valiant ), and (2) V/GV/G is explicit (cf. Conjecture 5.3 and the remark thereafter). Analogous results hold for any reductive, algebraic group (possibly disconnected) in zero or large enough characteristic (cf. Sections 9.6 and 10.5).

Classical invariant theory mainly studied the invariant ring K[V]GK[V]^{G} for constant mm, as in Theorem 1.6, because of Gordan’s seminal work (cf. and Section 3.7 in ) that gave an algorithm for constructing a finite set of generators for the ring of invariants of binary forms. In this case, VV is the space of binary forms with the natural action of SL2(K)SL_{2}(K), and m=2m=2. In the modern terminology, Gordan showed that the problem of constructing finitely many generators for the ring invariants of binary forms is computable, though the formal notion of computability was developed much later. It was not known before Hilbert if this holds for general mm, or even for m=3m=3. It was not even known that finitely many generators exist when m=3m=3. This was shown by Hilbert in his first paper for any mm. But this proof was non-constructive. It was severely criticized by Gordan (cf. Section 3.7 in for this story), since it did not give an algorithm for constructing a set of generators. In the modern terminology, it did not yield a proof, as Gordan sought, for computability of the problem of constructing a set of generators for K[V]GK[V]^{G}. Such a proof was given by Hilbert in his second paper , as a response to Gordan’s criticism. For these reasons, the second paper mainly focused on the case when m=3m=3. Theorem 1.5, or rather its stronger form (Theorem 8.5), implies that the problem of constructing a set of generators for K[V]GK[V]^{G} for constant mm is, in fact, in \mboxDET⊆\mboxNC⊆\mboxP\mbox{DET}\subseteq\mbox{NC}\subseteq\mbox{P}, allowing encoding of the set by a symbolic determinant. Theorem 1.6 shows that the original instance of NNL in Hilbert , with constant mm, is in quasi-P.

6 Noether normalization vs. hardness

Next we ask if NNL for Δ[det⁡,m]\Delta[\det,m] can be solved deterministically in \mboxpoly(m){\mbox{poly}}(m) time. For the reasons explained later in Section 11, this turns out to be a much harder problem than the analogous problems for the special cases of explicit varieties addressed in Theorems 1.4 and 1.6. At present, we only have a conditional result:

The variety Δ[det⁡,m]\Delta[\det,m] has a quasi-e.s.o.p., if the permanent of an n×nn\times n variable matrix XX cannot be approximated infinitesimally closely by symbolic determinants over XX of size ≤2nϵ\leq 2^{n^{\epsilon}}, for some constant ϵ>0\epsilon>0, as n→∞n\rightarrow\infty.

The lower bound assumption for the permanent in the result above is a stronger form of the hardness hypothesis for the permanent in geometric complexity theory (cf. Conjecture 4.3 in ), with Ω(2nϵ)\Omega(2^{n^{\epsilon}}) lower bound in place of the superpolynomial lower bound.

Actually, we prove a stronger result (Theorem 4.7) that, under this lower bound assumption, NNL for Δ[det⁡,m]\Delta[\det,m] can even be solved fast in parallel.

Theorem 1.7 holds with any explicit variety (cf. Definition 5.1) in place of Δ[det⁡,m]\Delta[\det,m].

By these results, NNL for any explicit variety can be brought down from EXPSPACE to quasi-P, assuming the hardness hypothesis for the permanent in geometric complexity theory. The quasi-prefix can be removed under a stronger assumption (cf. Theorem 4.5).

Theorem 1.7 is a consequence of the following stronger result. It shows that solving NNL for Δ[det⁡,m]\Delta[\det,m] in deterministic polynomial time is in fact equivalent, ignoring a quasi-prefix, to proving a weaker implication of the hardness hypothesis in Theorem 1.7.

The variety Δ[det⁡,m]\Delta[\det,m] has an e.s.o.p. iff, ignoring a quasi-prefix, there exists a family {fn(x1,…,xn)}\{f_{n}(x_{1},\ldots,x_{n})\} of exponential-time-computable, integral, multi-linear polynomials such that fnf_{n} cannot be approximated infinitesimally closely by symbolic determinants over (x1,…,xn)(x_{1},\ldots,x_{n}) of size ≤2nϵ\leq 2^{n^{\epsilon}}, for some constant ϵ>0\epsilon>0, as n→∞n\rightarrow\infty.

By exponential-time-computable, we mean that the polynomial can be computed, given an integral input, in time that is exponential in the total bit-length of the input.

Theorems 1.7, 1.8, 1.9, and their analogues for explicit varieties also hold in large enough positive characteristics (cf. Section 10.5). Furthermore, the largeness restriction on the characteristic can be removed assuming a slight extension of the hardness hypothesis; cf. Remark 1 at the end of Section 10.

These results establish an essential equivalence between the problem NNL for explicit varieties and the weaker form of the hardness hypothesis in geometric complexity theory.

7 Proof technique

We now briefly explain how the main results in this article are proved.

The formal notion of explicitness introduced in this article (Definition 5.1) lies at the heart of the proofs, along with the fundamental work in algebraic geometry and geometric invariant theory, the fundamental work in algebraic complexity theory, and the fundamental work on a derandomization problem in complexity theory, called black-box polynomial identity testing. Derandomization means converting a randomized efficient algorithm into a deterministic efficient algorithm by removing random bits. Theorems 1.4 and Theorems 1.6–1.9 are proved by derandomizing the Monte Carlo algorithm in Theorem 1.2 for the explicit varieties under consideration, unconditionally or assuming a suitable hardness hypothesis. Derandomization of this Monte Carlo algorithm for a given explicit variety amounts to bringing NNL for that variety from EXPSPACE, where it is by the general result (Theorem 5.12), to P. This EXPSPACE vs. P gap in the complexity of NNL that needs to be bridged to derandomize this Monte Carlo algorithm for a given explicit variety is the basic difference between derandomization in this article and derandomization in the earlier articles in complexity theory, wherein such a gap is absent. The use of geometric invariant theory in derandomization, as in the proofs of Theorems 1.4 and 1.6, is another basic difference. In contrast, the earlier works on derandomization in complexity theory do not use any invariant theory.

The efficient Monte Carlo algorithm for NNL for explicit varieties in Theorems 1.1 and 1.2 is based on the classical results in algebraic geometry due to Hilbert and others, and the fundamental work in Heintz and Schnorr on black-box polynomial identity testing; cf. Section 4.2.

Theorem 1.3 on explicitness of the categorical quotient associated with the ring of matrix invariants is proved in characteristic zero using the First and Second Fundamental Theorems for matrix invariants due to Procesi and Razmyslov ; cf. Section 6.

The situation in positive characteristic turns out to be much harder. The analogous First Fundamental Theorem for matrix invariants in positive characteristic in Donkin is too weak for the proof of Theorem 1.3 in positive characteristic, since the only known upper bound for the degrees of the generators in is exponential in the size mm of the matrices. The crux of the proof of Theorem 1.3 in positive characteristic is the geometric First Fundamental Theorem (cf. Theorem 10.2) proved in this article, which provides a set of separating matrix-invariants of polynomial degree in arbitrary characteristic. This is proved here using the criterion for stability in arbitrary characteristic due to Hilbert , Mumford et al. , and King , and the fundamental Brauer-Nesbitt theorem in modular representation theory.

The explicitness result in Theorem 1.3 lies at the heart of the proof of Theorem 1.4.

Theorem 1.3, in conjunction with Theorem 1.2 (which holds in arbitrary characteristic, cf. Section 10.5), implies that NNL for the ring of matrix invariants has a polynomial-time Monte Carlo algorithm in arbitrary characteristic.

Theorem 1.4 is proved by derandomizing this Monte Carlo algorithm, up to a quasi-prefix; cf. Sections 7 and 10.1. This is done in two steps.

The first crucial step (for the reasons that will become clear in Section 11) is to show that this Monte Carlo algorithm can be derandomized assuming the standard black-box derandomization hypothesis for symbolic determinant identity testing , which is recalled in Section 2.3 here. This is shown using the fundamental work in Hilbert and Mumford et al. ; cf. Theorem 5.13, Remark 3 thereafter, and Remark 2 in Section 10.5. This implies that NNL for the ring of matrix invariants has a deterministic polynomial-time algorithm assuming the standard black-box derandomization hypothesis for symbolic determinant identity testing.

Remark 1 (on the second step of derandomization): In the preliminary version of this article, only this conditional result was proved in characteristic zero. Subsequently it was pointed out by Forbes and Shpilka that the step in the proof of this result wherein symbolic determinant identity testing enters can be modified, as explained in Section 7.5 here, so as to use instead the polynomial identity testing for read-once oblivious algebraic branching programs (cf. Section 2.1). A quasi-polynomial-time deterministic black-box algorithm for this problem was already known from their earlier work . Thus this instance of NNL can be solved deterministically in quasi-polynomial time in characteristic zero using the existing techniques. This is contrary to what was suggested in the preliminary version of this article, because of the relationship of this problem with the wild (“impossible”) problem of classifying matrix tuples (though this instance of NNL itself is not wild).

This proof of Theorem 1.4 in characteristic zero can be extended to any characteristic p∉[2,⌊m/2⌋]p\not\in[2,{\lfloor m/2\rfloor}], using the refined form of the Geometric First Fundamental Theorem for matrix invariants (cf. Theorem 10.2) proved in this article, in place of the First Fundamental Theorem for matrix invariants due to Procesi and Razmyslov ; cf. Section 10.1.

Theorem 1.5 on explicitness of the categorical quotient associated with the general ring of invariants of SLmSL_{m}, for constant mm, is proved using the fundamental works in geometric invariant theory due to Hilbert , Mumford et al. , and Derksen and Kemper , in conjunction with standard monomial theory , and the fundamental works in algebraic complexity theory due to Strassen , Valiant , Malod and Portier , and others; cf. Section 8.

The explicitness result in Theorem 1.5 lies at the heart of the proof of Theorem 1.6.

Theorem 1.5, in conjunction with Theorem 1.2, implies that NNL for the general ring of invariants of SLmSL_{m}, for constant mm, has a polynomial-time Monte Carlo algorithm in characteristic zero.

Theorem 1.6 is proved by derandomizing this Monte Carlo algorithm, up to a quasi-prefix; cf. Section 9. This is again done in two steps.

The first crucial step is, again, to show that this Monte Carlo algorithm can be derandomized assuming the standard black-box derandomization hypothesis for symbolic determinant identity testing. This can be done (just as in the case of Theorem 1.4) using the work of Hilbert and Mumford et al. ; cf. Theorem 5.13 and Remark 3 thereafter. This implies that NNL for the general ring of invariants of SLmSL_{m}, for constant mm, has a deterministic polynomial-time algorithm in characteristic zero, assuming the standard black-box derandomization hypothesis (cf. Section 2.3) for symbolic determinant identity testing.

Using a refined form (Theorem 8.5) of Theorem 1.5 in the first step, it follows that NNL for the general ring of invariants of SLmSL_{m}, for constant mm, has a deterministic polynomial-time algorithm assuming a weaker black-box derandomization hypothesis for diagonal depth three circuits .

This hypothesis was already known to hold, up to a quasi-prefix, from the earlier work of Shpilka and Volkovich , and Agrawal, Saha, and Saxena . Thus it follows that NNL for V/GV/G as in Theorem 1.6 can be solved in quasi-polynomial time deterministically. This was the result that was stated in the preliminary version of this article. The stronger O(nO(log⁡log⁡n))O(n^{O(\log\log n)})-time bound stated in Theorem 1.6 follows in view of the recent result in Forbes, Saptharishi, and Shpilka , which gives an O(sO(log⁡log⁡s))O(s^{O(\log\log s)})-time-computable black-box derandomization of polynomial identity testing for diagonal depth three circuits of size ≤s\leq s.

Let us now turn to Theorem 1.9, Theorem 1.7 being its corollary.

The first step is to show that the Monte Carlo polynomial-time algorithm for NNL for Δ[det⁡,m]\Delta[\det,m] in Theorem 1.1 can be derandomized assuming a strengthened form, introduced in this article (cf. Section 2.5), of the standard black-box derandomization hypothesis for symbolic determinant identity testing; cf. Section 4.3.

By Kabanets and Impagliazzo , the standard hypothesis holds, up to a quasi-prefix, assuming a sub-exponential symbolic determinant lower bound for some family of exponential-time-computable, integral, multi-linear polynomials.

It is similarly shown in this article (cf. Theorem 2.4 and the remark thereafter) that the strengthened hypothesis holds, up to a quasi-prefix, if there exists a family {fn(x1,…,xn)}\{f_{n}(x_{1},\ldots,x_{n})\} of exponential-time-computable, integral, multi-linear polynomials such that fnf_{n} cannot be approximated infinitesimally closely by symbolic determinants of size sub-exponential in nn. This is proved using the fundamental work on black-box factorization of multivariate polynomials in Kaltofen and Trager , which lies at the heart of this proof, in conjunction with the fundamental hardness vs. randomness principle in Nisan and Wigderson , and Kabanets and Impagliazzo .

This implies the reduction from NNL to hardness stated in Theorem 1.9. The reduction in the other direction is easy (cf. Lemma 4.8 and Proposition 2.7).

Theorem 1.8 and the generalization of Theorem 1.9 for general explicit varieties (Theorem 5.14) follow by systematically extending the proofs of Theorems 1.7 and 1.9; cf. Section 5.

The proofs of these results can be extended to large enough positive characteristics using the standard techniques of algebraic geometry and algebraic complexity theory; cf. Section 10.5.

Conditional generalizations of Theorem 1.6 to explicit categorical quotients associated with representations of general reductive algebraic groups are given in Section 9.6. These can be proved by extending the proof for SLmSL_{m} using the standard techniques in geometric invariant theory and representation theory.

Organization of the paper

The rest of this paper is organized as follows.

Logical structure of the proofs: The proofs of the main results are presented in the following steps. (1) The variety under consideration is shown to be explicit. (2) An EXPSPACE-algorithm is given for constructing an h.s.o.p. for the variety. For the categorical quotient associated with the ring of matrix invariants, a more efficient EXPH-algorithm is given, assuming the Generalized Riemann Hypothesis. (3) An efficient Monte Carlo algorithm is given for constructing an s.s.o.p. for the variety. (4) This algorithm is derandomized using the strengthened or the standard form of the black-box derandomization hypothesis for an appropriate class of circuits. Which form is used depends on the closure properties of the variety. The class of circuits also depends on the variety. (5) If this class is sufficiently restricted, as happens for the categorical quotients associated with the ring of matrix invariants and the general ring of invariants of SLmSL_{m} with constant mm, then this black-box derandomization is carried out unconditionally, up to a quasi-prefix. (6) Otherwise, it is shown that the black-box derandomization hypothesis holds assuming an appropriate hardness hypothesis.

Organization of the sections: In Section 2, we introduce the strengthened form of the standard black-box derandomization hypothesis for polynomial identity testing, and prove the essential equivalence between strengthened black-box derandomization and sub-exponential algebraic circuit size lower bounds for infinitesimally close approximation. This is a key ingredient in the proofs of Theorems 1.7, 1.8, and 1.9. In Section 3, we recall Noether’s Normalization Lemma, and show that the problem of constructing an h.s.o.p. for a general variety, specified in the standard fashion by its defining equations, belongs to PH, assuming the Generalized Riemann Hypothesis. In Section 4, we study the basic prototype Δ[det⁡,m]\Delta[\det,m] of an explicit variety, and prove Theorems 1.1, 1.7, and 1.9. In Section 5, we formulate the general notion of an explicit variety motivated by its basic prototype Δ[det⁡,m]\Delta[\det,m], define the problem NNL for explicit varieties, and prove Theorems 1.2, 1.8, and the generalization of Theorem 1.9 for explicit varieties. In Section 6, we prove Theorem 1.3 in characteristic zero. Theorem 1.4 in characteristic zero is proved in Section 7. In Section 8, we prove Theorem 1.5. Theorem 1.6 is proved in Section 9. Theorems 1.3 and 1.4 in arbitrary characteristic, their generalizations to quivers, and extensions of Theorems 1.7, 1.8, and 1.9 to large enough positive characteristics are proved in Section 10. It is also explained in Section 10 how Theorems 1.1 and 1.2 can be extended to arbitrary characteristics. Furthermore, implications of the results in this article to explicit parametrization of closed orbits and explicit parametrization of semi-simple representations of finitely generated algebras are also given in Section 10. Finally, in Section 11, we discuss the difficulties that need to be overcome to improve the current best bound for NNL for Δ[det⁡,m]\Delta[\det,m] in Theorem 4.10.

Black-box polynomial identity testing

In this section, we introduce the strengthened black-box derandomization hypothesis for polynomial identity testing (cf. Section 2.5), and prove the essential equivalence between strengthened black-box derandomization and sub-exponential lower bounds for infinitesimally close approximation (cf. Theorem 2.4 and Proposition 2.7). This is a key ingredient in the proofs of Theorems 1.7, 1.8, and 1.9.

We begin by recalling the circuit classes for which we need these hypotheses.

We say that the circuit C=C(x1,…,xn)C=C(x_{1},\ldots,x_{n}) over the variables x1,…,xnx_{1},\ldots,x_{n} has low or small degree if the degree of the polynomial computed by it is O(sa)O(s^{a}), for some fixed constant a>0a>0, where ss is the size of CC.

By a weakly skew circuit, we mean a circuit whose each node vv labelled with ∗* has at least one child uu such that the sub-circuit rooted at uu is connected to the rest of the circuit by just the edge (u,v)(u,v).

By a symbolic determinant over x1,…,xnx_{1},\ldots,x_{n} of size mm, we mean the determinant of a symbolic m×mm\times m matrix, whose each entry is a linear combination (possibly non-homogeneous) over KK of of x1,…,xnx_{1},\ldots,x_{n}. Weakly skew circuits are polynomially equivalent to symbolic determinants.

Weakly skew circuits are also polynomially equivalent to algebraic branching programs . In this article we will only use a special class of such programs called read-once oblivious algebraic branching programs . Such a program can be specified, for some n,ln,l, and dd, by a tuple (M1,M2,…,Ml)(M_{1},M_{2},\ldots,M_{l}) of n×nn\times n matrices such that every entry of MiM_{i}, 1≤i≤l1\leq i\leq l, is a uni-variate polynomial of degree ≤d\leq d over KK in the distinct variable ziz_{i} associated with MiM_{i}. The uni-variate polynomials are specified by giving all their coefficients. The size of this program is O(n2ld)O(n^{2}ld). The polynomial computed by this program is defined to be \mboxtrace(∏iMi){\mbox{trace}}(\prod_{i}M_{i}). Clearly, this polynomial can also be computed by a weakly skew circuit of \mboxpoly(n,l,d){\mbox{poly}}(n,l,d) size. Hence, such programs can be viewed as restricted classes of weakly skew circuits, or equivalently, symbolic determinants.

A diagonal depth three circuit CC over the variables x1,…,xnx_{1},\ldots,x_{n} is a circuit that computes a sum ∑i=1kfiei\sum_{i=1}^{k}f_{i}^{e_{i}} of powers of linear functions, where each fif_{i} is a possibly non-homogeneous linear function of xix_{i}’s with coefficients in KK. Here kk is called the top fan-in of the circuit, and e=max⁡{ei}e=\max\{e_{i}\} its degree. The size of this circuit is O(nek)O(nek).

By a circuit with oracle gates for a function f(y1,…,yr)f(y_{1},\ldots,y_{r}), we mean a circuit in which some gates are labelled with ff. These gates have in-degree rr. The computation of ff at any such gate is assigned unit cost.

2 Polynomial identity testing

Next, we recall the standard black-box derandomization hypothesis for polynomial identity testing over the algebraically closed base field KK.

The polynomial identity testing problem over KK is the problem of deciding if a given circuit C(x)C(x), x=(x1,…,xr)x=(x_{1},\ldots,x_{r}), over KK computes an identically zero polynomial. By the polynomial identity testing problem for small degree circuits, or the low-degree polynomial identity testing problem, we mean the polynomial identity testing problem wherein the degree of the polynomial computed by C(x)C(x) is assumed to be O(sa)O(s^{a}), for some constant a>0a>0, where ss is the size of C(x)C(x).

There is a simple randomized polynomial-time algorithm for deciding if a given circuit with rational constants computes an identically zero polynomial: just substitute large enough random integer values for the variables, and test if the circuit evaluates to zero.

The white-box derandomization problem for polynomial identity testing is to find a deterministic polynomial time algorithm for deciding if a given circuit with rational constants computes an identically zero polynomial.

The standard black-box derandomization hypotheses for the restricted circuit classes in Section 2.1 are defined similarly.

3 Symbolic determinant identity testing

We now describe such a hypothesis for symbolic determinants (cf. Section 2.1) in more detail, since it plays a crucial role in this paper.

4 Black-box polynomial identity testing vs. hardness

The following result is a variant of Theorem 7.7 in . This is why polynomial identity testing is expected to have efficient black-box derandomization.

(cf. Theorem 7.7 in ) Suppose there exists a family {fm(x1,…,xm)}\{f_{m}(x_{1},\ldots,x_{m})\} of exponential-time-computable, multi-linear, integral polynomials such that fmf_{m} cannot be evaluated by a circuit over KK of O(2ma)O(2^{m^{a}}) size, for some constant a>0a>0, as m→∞m\rightarrow\infty. Then polynomial identity testing for small degree circuits over KK of size ≤s\leq s has O(2\mboxpolylog(s))O(2^{{\mbox{polylog}}(s)})-time-computable black-box derandomization.

Here by an exponential-time-computable, integral polynomial fm(x1,…,xm)f_{m}(x_{1},\ldots,x_{m}), we mean a polynomial such that, given an integral input a=(a1,…,am)a=(a_{1},\ldots,a_{m}), fm(a)f_{m}(a) can be computed in time that is exponential in the total bit-length of aa. Since fmf_{m} here is multi-linear, this is equivalent to saying that the coefficient vector of fmf_{m} can be computed in time exponential in mm.

The proof of Theorem 2.1 is similar to that of Theorem 7.7 in (which works in the black-box model). Since we are going to prove its stronger form (Theorem 2.4) later, we only point out here how to take care of the main difference between the setting in and the one here. The difference is that in the size of the circuit is defined to be the total number of edges in it plus the total bit-length of the constants, whereas here the size means the total number of edges. A key ingredient in the proof in is an efficient algorithm in for factoring multivariate polynomials (cf. Lemma 7.6. in ). In its place we use instead the following result in that does not depend on the bit-lengths of the constants in the circuit.

(cf. Corollary 6.2. in , Theorem 1 in , and Theorem 2.21 in Bürgisser )

Suppose {gn(x1,…,xn)}\{g_{n}(x_{1},\ldots,x_{n})\} is a pp-computable family of polynomials over KK. This means gng_{n} is a polynomial of \mboxpoly(n){\mbox{poly}}(n) degree that can be computed by a nonuniform circuit over KK of \mboxpoly(n){\mbox{poly}}(n) size. Then each factor of gng_{n} in K[x1,…,xn]K[x_{1},\ldots,x_{n}] can also be computed by a nonuniform circuit over KK of \mboxpoly(n){\mbox{poly}}(n) size.

More generally, given any families {gn(x1,…,xn)}\{g_{n}(x_{1},\ldots,x_{n})\}, {fn(x1,…,xn)}\{f_{n}(x_{1},\ldots,x_{n})\} of polynomials over KK, with fnf_{n} dividing gng_{n}, there exists for every nn a nonuniform circuit over KK of \mboxpoly(n,deg⁡(gn)){\mbox{poly}}(n,\deg(g_{n})) size, with oracle gates for gng_{n}, that computes fnf_{n}.

A simpler proof of the first statement in Theorem 2.2 can be found in Section 2.3 in Bürgisser (cf. Theorem 2.21 therein). Bürgisser also proves a stronger statement in (cf. Theorem 1.3 therein) concerning complexity of infinitesimally close approximation. For the converse of Theorem 2.1, see .

5 The strengthened black-box derandomization hypothesis

Next, we formulate the strengthened black-box derandomization hypothesis for polynomial identity testing.

Let x=(x1,…,xr)x=(x_{1},\ldots,x_{r}) be a tuple of rr variables. The strengthened black-box derandomization problem for small degree circuits is to construct in \mboxpoly(s){\mbox{poly}}(s) time a hitting set against all nonzero polynomials f(x)∈K[x]f(x)\in K[x] of degree ≤d=O(sa)\leq d=O(s^{a}), a>0a>0 a constant, that can be approximated infinitesimally closely by circuits over KK and xx of size ≤s\leq s, given r,sr,s, and dd in unary.

The following result implies that such a hitting set exists. For any positive integer uu, let [u]:={1,…,u}[u]:=\{1,\ldots,u\}.

(cf. Theorem 4.4 in and its proof) A randomly chosen subset B⊆[u]rB\subseteq[u]^{r}, u=2s(d+1)2u=2s(d+1)^{2}, of size q=6(s+1+r)2q=6(s+1+r)^{2} is with a high probability a hitting set against all non-zero polynomials that can be approximated infinitesimally closely by circuits over KK and rr variables of size ≤s\leq s and degree ≤d\leq d. Specifically, at least (1−u−q/6)(1-u^{-q/6})-th fraction of the sequences (b1,…,bq)(b_{1},\ldots,b_{q}), bi∈[u]rb_{i}\in[u]^{r}, are hitting.

The strengthened black-box-derandomization hypothesis for polynomial identity testing for small degree circuits is that there exists a \mboxpoly(s){\mbox{poly}}(s)-time-computable hitting set Sr,sS_{r,s}. We call such a hitting set explicit. More generally, if a hitting set is computable in O(T(s))O(T(s)) time, we say that the polynomial identity testing for small degree circuits of size ≤s\leq s has O(T(s))O(T(s))-time-computable strengthened black-box derandomization. The strengthened black-box derandomization hypothesis for general polynomial identity testing without any degree restrictions is defined similarly.

The similar strengthened black-box derandomization hypothesis for symbolic determinant identity testing is that, given nn and mm, one can construct in \mboxpoly(n,m){\mbox{poly}}(n,m) time a hitting set against all nonzero homogeneous polynomials h(x1,…,xn)h(x_{1},\ldots,x_{n})’s over KK of degree mm that can be approximated infinitesimally closely by symbolic determinants (cf. Section 2.3) of size mm over x1,…,xnx_{1},\ldots,x_{n}.

The strengthened black-box derandomization hypothesis is counter-intuitive unlike the standard hypothesis in Section 2.2. Conjecturally (cf. Section 11), there exist integral polynomials of small degree that can be approximated infinitesimally closely by small circuits over KK but cannot be computed exactly by such circuits. Hence, a priori, there is no reason why there should exist easy-to-compute hitting sets against such hard-to-compute polynomials.

6 Equivalence between strengthened black-box derandomization and lower bounds for infinitesimally close approximation

The following strengthening of Theorem 2.1 says that one can still compute efficiently in quasi-polynomial time a hitting set against such polynomials, assuming a sub-exponential lower bound for infinitesimally close approximation for a family {pm}\{p_{m}\} of exponential-time-computable, multi-linear, integral polynomials. A good candidate for pmp_{m} is the permanent. It cannot be approximated infinitesimally closely by small algebraic circuits as per the hardness hypothesis of geometric complexity theory. The result below is the main reason why the strengthened black-box derandomization hypothesis is expected to hold.

Suppose there exists a family {pm(x1,…,xm)}\{p_{m}(x_{1},\ldots,x_{m})\} of exponential-time-computable, multi-linear, integral polynomials such that pmp_{m} cannot be approximated infinitesimally closely by circuits over KK of O(2mϵ)O(2^{m^{\epsilon}}) size, for some constant ϵ>0\epsilon>0, as m→∞m\rightarrow\infty. Then polynomial identity testing for small degree circuits over KK with size ≤s\leq s and n≤sn\leq s variables has O(2\mboxpolylog(s))O(2^{{\mbox{polylog}}(s)})-time-computable strengthened black-box derandomization.

This result also holds if we use symbolic determinants instead of circuits in the lower bound hypothesis; cf. the proof of Theorem 4.6.

Proof: We extend the proof of Theorem 7.7 in Kabanets and Impagliazzo using Theorem 2.2, which lies at the heart of this proof.

We want to construct in quasi-\mboxpoly(s){\mbox{poly}}(s) time a hitting set for strengthened black-box derandomization of polynomial identity testing for small degree circuits with size ≤s\leq s and n≤sn\leq s variables.

Let m=(log⁡s)em=(\log s)^{e}, for a large enough constant ee to be fixed later. Construct an NWNW-design for this nn (the number of variables) with this choice of mm. By the NW-design, we mean a family of sets R1,…,Rn⊆[l]R_{1},\ldots,R_{n}\subseteq[l], l≤m2=(log⁡s)2el\leq m^{2}=(\log s)^{2e}, each of cardinality mm, such that ∣Ri∩Rj∣≤log⁡n|R_{i}\cap R_{j}|\leq\log n, for all i≠ji\not=j. By (cf. Lemma 2.23 in ), such a set system can be constructed in \mboxpoly(n,2l)=O(2\mboxpolylog(s)){\mbox{poly}}(n,2^{l})=O(2^{{\mbox{polylog}}(s)}) time.

This set system and the given hard multi-linear polynomial p(x1,…,xm)p(x_{1},\ldots,x_{m}) together yield an arithmetic NW-generator NWpNW^{p}. By this we mean the function

where x∣Rx|_{R} denotes the tuple of the elements in xx indexed by RR.

The set H={NWp(a) ∣ a∈[D]l}H=\{NW^{p}(a)\ |\ a\in[D]^{l}\}, D=dm+1D=dm+1, is a hitting set against every nonzero polynomial f(y)f(y), y=(y1,…,yn)y=(y_{1},\ldots,y_{n}), of degree ≤d=O(st)\leq d=O(s^{t}), t>0t>0 a constant, that can be approximated infinitesimally closely by circuits over KK and y=(y1,…,yn)y=(y_{1},\ldots,y_{n}) of size ≤s\leq s (assuming that the constant ee above is chosen to be large enough).

Since pp is exponential-time-computable, HH is O(2\mboxpolylog(s))O(2^{{\mbox{polylog}}(s)})-time computable. So it remains to prove the claim.

Proof of the claim: Suppose to the contrary that f(b)=0f(b)=0, for every b∈Hb\in H, for some nonzero polynomial f(y)f(y) of degree ≤d\leq d that can be approximated infinitesimally closely by circuits over KK of size ≤s\leq s.

Then g(x1,…,xm,y)g(x_{1},\ldots,x_{m},y) is a non-zero polynomial with degree ≤dm\leq dm, but g(x1,…,xm,p(x1,…,xm))g(x_{1},\ldots,x_{m},p(x_{1},\ldots,x_{m})) is identically zero. By Gauss’s Lemma, h(x1,…,xm,y)=p(x1,…,xm)−yh(x_{1},\ldots,x_{m},y)=p(x_{1},\ldots,x_{m})-y is a factor of g(x1,…,xm,y)g(x_{1},\ldots,x_{m},y). By Theorem 2.2, h(x1,…,xm,y)h(x_{1},\ldots,x_{m},y) has a circuit over KK of \mboxpoly(m,deg⁡(g))=\mboxpoly(s){\mbox{poly}}(m,\deg(g))={\mbox{poly}}(s) size, with oracles gates for gg. Setting y=0y=0 in this circuit, we get a circuit for p(x1,…,xm)p(x_{1},\ldots,x_{m}) of \mboxpoly(s){\mbox{poly}}(s) size with oracle gates for gg.

But gg has a circuit of size O(n2log⁡n)O(n^{2}\log n) with one oracle gate for ff. This is because ∣Rj∩Ri+1∣|R_{j}\cap R_{i+1}|, j≤ij\leq i, is at most log⁡n\log n, by the property of the NWNW-design. Hence, after the specialization of the variables yi+2,…,yny_{i+2},\ldots,y_{n} and xjx_{j}, j∉Ri+1j\not\in R_{i+1}, as above, each p(x∣Rj)p(x|_{R_{j}}), j≤ij\leq i, gets restricted to a multi-linear polynomial in at most log⁡n\log n variables. This restricted polynomial can be computed brute-force by a circuit CjC_{j} of size at most O(log⁡n2log⁡n)=O(nlog⁡n)O(\log n2^{\log n})=O(n\log n) size. We get a circuit for gg, as desired, by connecting the inputs y1,…,yiy_{1},\ldots,y_{i} of the oracle for ff to the outputs of C1,…,CiC_{1},\ldots,C_{i}, respectively, and specializing the variables yi+2,…,yny_{i+2},\ldots,y_{n} to their integer values chosen above.

It follows that p(x1,…,xm)p(x_{1},\ldots,x_{m}) can be computed by a circuit CC over KK of size O(sc)O(s^{c}) with oracle gates for ff, for some constant c>0c>0 independent of ee. Given any circuit DδD_{\delta} of size ≤s\leq s for approximating ff within precision δ>0\delta>0, let CδC_{\delta} denote the circuit obtained from CC by substituting DδD_{\delta} for ff. Since ff can be approximated infinitesimally closely by circuits of size ≤s\leq s, by choosing δ\delta small enough, CδC_{\delta} can approximate p(x1,…,xm)p(x_{1},\ldots,x_{m}) to any precision. The size of CδC_{\delta} is O(sc+1)O(s^{c+1}). Choosing ee large enough, the size of CδC_{\delta} can be made ≤2mϵ\leq 2^{m^{\epsilon}} for any ϵ>0\epsilon>0. This contradicts hardness of infinitesimally close approximation of pp. Q.E.D.

If the polynomial pp in Theorem 2.4 is the permanent, the following stronger result holds.

Suppose the permanent of k×kk\times k matrices cannot be approximated infinitesimally closely by circuits over KK of O(2kϵ)O(2^{k^{\epsilon}}) size, for some constant ϵ>0\epsilon>0, as k→∞k\rightarrow\infty. Then a hitting set for strengthened black-box derandomization of small-degree circuits over KK of size ≤s\leq s can be constructed in O(\mboxpolylog(s))O({\mbox{polylog}}(s)) parallel time using O(2\mboxpolylog(s))O(2^{{\mbox{polylog}}(s)}) processors.

Proof: The proof is like that of Theorem 2.4, letting m=k2m=k^{2} and pm(x)=\mboxperm(x)p_{m}(x)={\mbox{perm}}(x), and thinking of x=(x1,…,xm)x=(x_{1},\ldots,x_{m}) as a k×kk\times k matrix. We follow the same notation as in the proof of Theorem 2.4. We only need to explain why the construction of a hitting set can be efficiently parallelized.

The arithmetic NW-generator, cf. (2), based on the permanent is the function

where x∣Rx|_{R} denotes the tuple of the elements in xx indexed by RR with cardinality m=k2m=k^{2}.

Since n≤sn\leq s, we can compute each \mboxperm(xRj){\mbox{perm}}(x_{R_{j}}) in parallel. Thus, it suffices to explain why each \mboxperm(xRj){\mbox{perm}}(x_{R_{j}}) can be computed fast in parallel. Fix one RjR_{j}. Without of loss generality, assume that the elements in RjR_{j} are x=(x1,…,xm)x=(x_{1},\ldots,x_{m}). Think of xx as a k×kk\times k matrix. Then perm(x)=∑σ∏ixiσ(i)perm(x)=\sum_{\sigma}\prod_{i}x_{i\sigma(i)}, where σ\sigma ranges over all permutations of kk letters. Since m=\mboxpolylog(s)m={\mbox{polylog}}(s), the number of terms in this expansion is O(2\mboxpolylog(s))O(2^{{\mbox{polylog}}(s)}). So we can assign a processor to each monomial in the expansion. The processor can compute that monomial in \mboxpoly(m)=\mboxpolylog(s){\mbox{poly}}(m)={\mbox{polylog}}(s) time.

It follows that NW\mboxpermNW^{{\mbox{perm}}} can be computed in O(\mboxpolylog(s))O({\mbox{polylog}}(s)) parallel time using O(2\mboxpolylog(s))O(2^{{\mbox{polylog}}(s)}) processors. Q.E.D.

Remark 1: The crucial fact used in the proof of Theorem 2.6 is that the permanent of k×kk\times k matrices can be computed in O(\mboxpolylog(s))O({\mbox{polylog}}(s)) parallel time using O(2\mboxpolylog(s))O(2^{{\mbox{polylog}}(s)}) processors, if k=O(\mboxpolylog(s))k=O({\mbox{polylog}}(s)). This need not hold, in general, for the exponential-time-computable pmp_{m} in the statement of Theorem 2.4.

Remark 2: Theorem 2.6 also holds, with a similar proof, if we replace the permanent in its statement by any PSPACE-computable, integral, multi-linear polynomial satisfying a similar lower bound assumption.

The following result is the easy converse of Theorem 2.4, ignoring the quasi-prefix.

Suppose the strengthened black-box derandomization hypothesis for polynomial identity testing for small degree circuits over KK holds. Then there exists a family {pm(x1,…,xm)}\{p_{m}(x_{1},\ldots,x_{m})\} of exponential-time-computable, multi-linear, integral polynomials such that pmp_{m} cannot be approximated infinitesimally closely by circuits over KK of O(2m/a)O(2^{m/a}) size, for some constant a>0a>0, as m→∞m\rightarrow\infty.

Proof: The proof is similar that of Theorem 51 in .

Choose s=2m/as=2^{m/a}, where a>0a>0 is a large enough constant to be chosen later. Suppose there exists an O(sb)O(s^{b})-time-computable, integral hitting set TT of size ≤sb\leq s^{b} against all nonzero multi-linear polynomials in mm variables that can be approximated infinitesimally closely by circuits over KK of size ≤s\leq s.

Let pm(x)p_{m}(x), x=(x1,…,xm)x=(x_{1},\ldots,x_{m}), be a multi-linear polynomial such that

Each condition here is a linear constraint on 2m2^{m} coefficients of pm(x)p_{m}(x). The number of these constraints is ∣T∣≤sb=2mb/a<2m|T|\leq s^{b}=2^{mb/a}<2^{m} if a>ba>b. Hence, as m→∞m\rightarrow\infty, there is a non-zero integral pm(x)p_{m}(x) satisfying these constraints. One such pm(x)p_{m}(x) can be computed in 2O(m)2^{O(m)} time by solving the linear system (4). By (4), this exponential-time computable pm(x)p_{m}(x) cannot be approximated infinitesimally closely by circuits over KK of size ≤s\leq s, since TT is a hitting set. Q.E.D.

By Theorem 2.4 and Proposition 2.7, strengthened black-box derandomization and sub-exponential lower bounds for infinitesimally close approximation of exponential-time-computable, multi-linear, integral polynomials are essentially equivalent notions.

7 The EXPSPACE-bound for strengthened black-box derandomization

The following is the currently best unconditional deterministic upper bound for strengthened black-box derandomization.

The strengthened black-box derandomization problem for general polynomial identity testing belongs to EXPSPACE. It belongs to EXPH (the exponential hierarchy) assuming the Generalized Riemann Hypothesis.

The standard black-box derandomization problem for polynomial identity testing over KK belongs to PSPACE unconditionally, and to PH assuming the Generalized Riemann Hypothesis.

This proposition can be proved using Theorem 2.3 and the following result.

The problem Hilbert’s Nullstellensatz of deciding if a given system of multi-variate integral polynomials, specified as circuits, has a complex solution is in PSPACE unconditionally, and in AM⊆RPNP⊆Π2AM\subseteq RP^{NP}\subseteq\Pi_{2} assuming the Generalized Riemann Hypothesis. The same also holds for the homogeneous variant of Hilbert’s Nullstellensatz, namely, the problem of deciding if a given system of homogeneous, multi-variate, integral polynomials has a nontrivial complex solution.

Proof of Theorem 2.8: For simplicity, we only prove the result for symbolic determinant identity testing. The proof for general polynomial identity testing is similar, using the universal circuit polynomial H(Y)H(Y) introduced in (and recalled in Section 5.1.3 here) in place of the symbolic determinant.

We want to construct a hitting set against all non-zero homogeneous polynomials of degree mm that can be approximated infinitesimally closely by symbolic determinants of size mm on rr variables. Without loss of generality, we can assume that r=m2r=m^{2} (by adding more variables or increasing the size of the determinant). We can identify these m2m^{2} variables with the entries of a variable m×mm\times m matrix XX. Then all such nonzero polynomials correspond to the nonzero points of the variety Δ^[det⁡,m]⊆X\hat{\Delta}[\det,m]\subseteq{\cal X} constructed in Section 1.2, since the closure in the Zariski topology coincides with the closure in the complex topology; cf. Theorem 2.33 in . We now follow the same terminology as in Section 1.2.

A symbolic determinant of size mm over m2m^{2} variables can be computed by a circuit of size s=O(\mboxpoly(m))s=O({\mbox{poly}}(m)). Hence, by Theorem 2.3, there exists a subset of [u]m2[u]^{m^{2}}, u=2s(m+1)2u=2s(m+1)^{2}, of size q=6(s+1+m2)2q=6(s+1+m^{2})^{2} that is a hitting set against all non-zero polynomials that can be approximated infinitesimally closely by symbolic determinants of size mm over the m2m^{2} variable entries of XX.

We can enumerate all subsets of [u]m2[u]^{m^{2}} of size qq, and for each enumerated subset B⊆[u]m2B\subseteq[u]^{m^{2}} of size qq, check if it is a hitting set. The enumeration can be done using \mboxpoly(m){\mbox{poly}}(m) work-space.

However, checking if a given B⊆[u]m2B\subseteq[u]^{m^{2}} of polynomial size qq is a hitting set turns out to be much more difficult for the reasons that will be explained in more detail in Section 11. This is the main difficulty, since finally we have to output a correct BB of polynomial size. This check can be done using exponential space as follows.

As in Section 1.2, for any m×mm\times m rational matrix bb, let ψb\psi_{b} be the homogeneous linear evaluation function on X{\cal X}, which maps p(X)∈Xp(X)\in{\cal X} to p(b)p(b). Let H(b)H(b) denote the hyperplane that is the zero set of ψb\psi_{b}. Then BB is a hitting set iff Δ^[det⁡,m]∩⋂b∈BH(b)={0}\hat{\Delta}[\det,m]\cap\bigcap_{b\in B}H(b)=\{0\}. To carry out this test, we first compute the defining equations of Δ^[det⁡,m]⊆X\hat{\Delta}[\det,m]\subseteq{\cal X}. Using Gröbner basis theory (cf. Theorem 1 in ), this can be done in work-space that is polynomial in the dimension of X{\cal X} and exponential in the dimension of Δ[det⁡,m]\Delta[\det,m]. This work-space requirement is exponential in mm. The total bit-length of the specification of the resulting defining equations of Δ^[det⁡,m]\hat{\Delta}[\det,m] is at most exponential in the work-space requirement, and thus, at most double exponential in mm. After this, we again use Gröbner basis theory (cf. Theorem 1 in ) to carry out the test. This takes work-space that is polynomial in the dimension of X{\cal X}, exponential in the dimension of Δ[det⁡,m]\Delta[\det,m], and poly-logarithmic in the total bit-length of the specification of the defining equations. This space requirement is again exponential in mm, i.e., O(2\mboxpoly(m))O(2^{{\mbox{poly}}(m)}). Overall, this is an EXPSPACE-algorithm.

Assuming the Generalized Riemann Hypothesis, this gives an EXPH-algorithm for the verification of a hitting set, and hence, an EXPH-algorithm for strengthened black-box derandomization. Q.E.D.

Noether’s Normalization Lemma

In this section we recall Noether’s Normalization Lemma and show that the problem of constructing an h.s.o.p. for a general variety, given by the standard specification (defined below) in terms of its defining equations, belongs to PH.

(Cf. page 36 in ) Let X⊆P(Kk)X\subseteq P(K^{k}) be a projective variety of dimension nn. Let ψ:Kk→Km\psi:K^{k}\rightarrow K^{m}, m≥n+1m\geq n+1, be a homogeneous linear map that does not vanish on any line through the origin in KkK^{k} corresponding to any point of XX. This means ψ\psi induces a regular (well defined) linear map from XX to P(Km)P(K^{m}), which we denote by ψ\psi again. Then the homogeneous coordinate ring R(X)R(X) of XX is integral over the subring generated by the pullbacks ψ∗(xi)\psi^{*}(x_{i})’s of the coordinate functions xix_{i}’s, 1≤i≤m1\leq i\leq m, on KmK^{m}. This implies that (1) ψ(X)⊆P(Km)\psi(X)\subseteq P(K^{m}), the image of XX, is closed in P(Km)P(K^{m}), and (2) the fiber ψ−1(p)\psi^{-1}(p), for any point p∈ψ(X)p\in\psi(X), is a finite set.

Conversely, if R(X)R(X) is integral over the subring generated by ψ∗(xi)\psi^{*}(x_{i})’s, then ψ\psi is regular on XX.

Any ψ\psi chosen uniformly at random has the regularity property stated above if m≥n+1m\geq n+1.

The following graded version of Noether’s Normalization Lemma is implicit in its proof.

(cf. Theorem 13.3. in , Corollary 2.29 in , and also the proof of Theorem 1.5.17 in ) Let RR be any positively graded, finitely generated KK-algebra. Let f1,…,ftf_{1},\ldots,f_{t} be any non-constant, homogeneous generators of RR, and H⊆RH\subseteq R any set of homogeneous elements such that, letting I(H)I(H) denote the ideal generated by HH, fiei∈I(H)f_{i}^{e_{i}}\in I(H) for some positive integer eie_{i}, for every ii. Then RR is integral over the subring generated by HH.

Let RR be any positively graded, finitely generated KK-algebra. A set HH of homogeneous invariants of cardinality equal to dim⁡(R)\dim(R) such that RR is integral over the subring generated by HH is called an h.s.o.p. (homogeneous system of parameters) of RR.

Thus ψ∗(xi)\psi^{*}(x_{i})’s, 1≤i≤m1\leq i\leq m, in Lemma 3.1 form an h.s.o.p. of the homogeneous coordinate ring R(X)R(X) of XX, if m=n+1m=n+1.

Let Z⊆KtZ\subseteq K^{t} be a variety consisting of the common zeroes of a set of homogeneous integral polynomials f1(z),f2(z),…f_{1}(z),f_{2}(z),\ldots, z=(z1,…,zt)z=(z_{1},\ldots,z_{t}). Assume that ZZ is specified by giving circuits for fif_{i}’s, and that the constants in these circuits are rational. We call such a specification of ZZ standard. Its bit-length is defined to be the total bit-length of the specification of the circuits for fif_{i}’s.

The following result shows that for general varieties over KK, given by the standard specification as above, the problem of constructing an h.s.o.p. is in PH assuming the Generalized Riemann Hypothesis. The succinct specification of Δ[det⁡,m]\Delta[\det,m] (cf. Section 1.2) in terms of a small circuit for computing the determinant is not standard, since it does not specify defining equations for the variety. Hence the following result does not apply to Δ[det⁡,m]\Delta[\det,m] given in the succinct specification. The current best EXPSPACE-bound for Δ[det⁡,m]\Delta[\det,m] given in the succinct specification will be proved later (cf. Theorem 4.1).

The problem of constructing an h.s.o.p. for a general variety over KK, given by the standard specification in terms of circuits for the defining equations, belongs to PH assuming the Generalized Riemann Hypothesis, and to PSPACE unconditionally.

Here by PH, we really mean its functional analogue, since the problem under consideration is a construction problem, not a decision problem. The PSPACE-bound holds in arbitrary characteristic.

Proof: Let Z⊆KtZ\subseteq K^{t} be a variety consisting of the common zeroes of a set of homogeneous integral polynomials f1(z),f2(z),…f_{1}(z),f_{2}(z),\ldots, z=(z1,…,zt)z=(z_{1},\ldots,z_{t}), specified in the standard fashion by the circuits for fif_{i}’s with rational constants. Let NN be the total bit-length of this specification.

Testing if dim⁡(Z)=0\dim(Z)=0 is the complement of the homogeneous Hilbert’s Nullstellensatz problem in Theorem 2.10. Hence, by Theorem 2.10, we can test if dim⁡(Z)=0\dim(Z)=0 by a PSPACE-algorithm, and also by a Σ2\Sigma_{2}-algorithm assuming the Generalized Riemann Hypothesis. If dim⁡(Z)=0\dim(Z)=0, then h.s.o.p. for ZZ is empty, and we are done.

Let s≤dim⁡(Z)s\leq\dim(Z) be any positive integer. Consider random linear forms Lr(z)=∑kbk,rzkL_{r}(z)=\sum_{k}b_{k,r}z_{k}, 1≤r≤s1\leq r\leq s, where bk,rb_{k,r}’s are random integers of large enough \mboxpoly(N){\mbox{poly}}(N) bit-length. Let Hr⊆KtH_{r}\subseteq K^{t} be the hyperplane defined by Lr(z)=0L_{r}(z)=0.

We claim that, if s=dim⁡(Z)s=\dim(Z), then Z∩⋂rHr={0}Z\cap\bigcap_{r}H_{r}=\{0\} with a high probability. If s<dim⁡(Z)s<\dim(Z), then clearly Z∩⋂rHr≠{0}Z\cap\bigcap_{r}H_{r}\not=\{0\}, since it has non-zero dimension.

By Hilbert’s Nullstellensatz and Lemma 3.2, it the follows that, if s=dim⁡(Z)s=\dim(Z), then the homogeneous coordinate ring of ZZ is integral over the subring generated by Lr(z)L_{r}(z)’s, and hence {Lr(Z)}\{L_{r}(Z)\} is an h.s.o.p. for ZZ.

So, let us first prove the claim. Accordingly, assume that s=dim⁡(Z)s=\dim(Z). Let d=max⁡{deg⁡(fi)}d=\max\{\deg(f_{i})\}. Clearly, d≤2Md\leq 2^{M}, where MM denotes the maximum number of multiplication gates in the circuit for any fif_{i}. Since M≤NM\leq N, it follows that d≤2Nd\leq 2^{N}. By raising fif_{i}’s to appropriate powers, we can assume that all of them have the same degree D≤2N2D\leq 2^{N^{2}}. Consider generic linear combinations of fif_{i}’s and generic linear forms

where yi,jy_{i,j}’s and wk,rw_{k,r}’s are indeterminates. Let RR denote the multi-variate resultant of FjF_{j}’s and LrL_{r}’s. It is a polynomial in yi,jy_{i,j}’s and wk,rw_{k,r}’s of degree ≤Dt\leq D^{t}. By Noether’s Normalization Lemma (cf. Lemma 3.1 and the remark thereafter), the system of equations (5) has only {0}\{0\} as its solution for some rational values for yi,jy_{i,j}’s and wk,rw_{k,r}’s. Hence RR is not identically zero as a polynomial in yi,jy_{i,j}’s and wk,rw_{k,r}’s. By the Schwarz-Zippel lemma , we can specialize yi,jy_{i,j}’s randomly to some integers of O(log⁡(Dt))=\mboxpoly(N)O(\log(D^{t}))={\mbox{poly}}(N) bit-length so that the resulting specialization R′R^{\prime} of RR is not identically zero. Then R′R^{\prime} is a nonzero polynomial in wk,rw_{k,r}’s of degree ≤Dt\leq D^{t}. By the Schwarz-Zippel lemma again, R′R^{\prime} does not vanish identically if we let wk,r=bk,rw_{k,r}=b_{k,r} for randomly chosen integers of O(log⁡(Dt))=\mboxpoly(N)O(\log(D^{t}))={\mbox{poly}}(N) bit-length. For such bk,rb_{k,r}’s, Z∩⋂rHr={0}Z\cap\bigcap_{r}H_{r}=\{0\}. This proves the claim.

Next, we show that dim⁡(Z)\dim(Z) and a specification of Lr(z)L_{r}(z)’s, 1≤r≤dim⁡(Z)1\leq r\leq\dim(Z), such that Z∩⋂rHr={0}Z\cap\bigcap_{r}H_{r}=\{0\} can be computed in \mboxpoly(N){\mbox{poly}}(N) work-space.

We begin by letting s=1s=1, the first guess for dim⁡(Z)\dim(Z). With this choice of ss, choose bk,rb_{k,r}’s as above randomly of large enough \mboxpoly(N){\mbox{poly}}(N) bit-length and test if Z∩⋂rHr={0}Z\cap\bigcap_{r}H_{r}=\{0\}. The latter test can be carried out in PSPACE unconditionally (cf. Theorem 2.10). If the test fails, we increase ss by one and repeat the test. The test succeeds with a high probability when Z∩⋂rHr={0}Z\cap\bigcap_{r}H_{r}=\{0\} and s=dim⁡(Z)s=\dim(Z). Randomization in this algorithm can be removed, since \mboxRPSPACE=\mboxNPSPACE=\mboxPSPACE\mbox{RPSPACE}=\mbox{NPSPACE}=\mbox{PSPACE}. This yields a PSPACE-algorithm for computing dim⁡(Z)\dim(Z) and Lr(z)L_{r}(z)’s, 1≤r≤dim⁡(Z)1\leq r\leq\dim(Z), such that Z∩⋂rHr={0}Z\cap\bigcap_{r}H_{r}=\{0\}, as desired.

Assuming the Generalized Riemann Hypothesis, whether Z∩⋂rHr={0}Z\cap\bigcap_{r}H_{r}=\{0\} can be tested by a Σ2\Sigma_{2}-algorithm, by Theorem 2.10. This gives a Σ2\Sigma_{2}-algorithm for testing if there exist Lr(z)L_{r}(z)’s, for the given choice of ss, such that Z∩⋂rHr={0}Z\cap\bigcap_{r}H_{r}=\{0\}: guess yi,jy_{i,j}’s and wk,rw_{k,r}’s, and test if Z∩⋂rHr={0}Z\cap\bigcap_{r}H_{r}=\{0\} using the Σ2\Sigma_{2}-algorithm (Theorem 2.10).

Using this Σ2\Sigma_{2}-algorithm for testing the existence of Lr(z)L_{r}(z)’s in place of the PSPACE-algorithm before, we get a PH-algorithm for computing dim⁡(Z)\dim(Z) and Lr(z)L_{r}(z)’s, 1≤r≤dim⁡(Z)1\leq r\leq\dim(Z), such that Z∩⋂rHr={0}Z\cap\bigcap_{r}H_{r}=\{0\}. Q.E.D.

The proof of Theorem 3.4 shows that the problem of constructing an h.s.o.p. for general varieties specified by their equations is Turing-reducible in randomized polynomial time to the complement of the homogeneous Hilbert’s Nullstellensatz problem in Theorem 2.10. Conversely, the complement of the homogeneous Hilbert’s Nullstellensatz problem can be reduced to the problem of constructing an h.s.o.p. for general varieties (since a projective variety XX is empty iff its h.s.o.p. is empty). Since the Hilbert’s Nullstellensatz problem in Theorem 2.10 is NP-hard , it follows that the problem of constructing an h.s.o.p. for general varieties is co-NP-hard. In analogy with the problem NNL for Δ[det⁡,m]\Delta[\det,m] in Section 1.2, we can define the problem NNL for general varieties XX, specified in the standard fashion by their equations, as the problem of constructing a small homogeneous set S⊆R(X)S\subseteq R(X) of cardinality polynomial in the dimension of XX (but not necessarily of optimal cardinality equal to dim⁡(X)+1\dim(X)+1) such that R(X)R(X) is integral over the subring generated by SS. Even this problem is co-NP-hard.

In contrast, we shall prove in the next two sections that the problem NNL of constructing an s.s.o.p. for Δ[det⁡,m]\Delta[\det,m], with a succinct specification, and more generally, the problem NNL for any explicit variety can be solved in quasi-polynomial time, assuming a lower bound for infinitesimally close approximation.

NNL for Δ​[det,m]Δ𝑚\Delta[\det,m]

In this section we prove Theorems 1.1, 1.7, and 1.9. We follow the same notation as in Section 1.2.

The variety Δ[det⁡,m]\Delta[\det,m], defined in Section 1.2, can alternatively be defined as follows. Let XX be a variable m×mm\times m matrix. Let X{\cal X} be the vector space over KK of homogeneous polynomials of degree mm in the variable entries of XX, and P(X)P({\cal X}) the projective space associated with X{\cal X}. Thus g=det⁡(X)g=\det(X) is an element of X{\cal X}. Furthermore, X{\cal X} is a representation of G=GLm2(K)G=GL_{m^{2}}(K), where σ∈GLm2(K)\sigma\in GL_{m^{2}}(K) maps h(X)∈Xh(X)\in{\cal X} to h(σ−1X)h(\sigma^{-1}X), thinking of XX as an m2m^{2}-vector. Then Δ[det⁡,m]⊆P(X)\Delta[\det,m]\subseteq P({\cal X}) is the Zariski-closure of the orbit Gg⊆P(X)Gg\subseteq P({\cal X}), thinking of gg as also a point in P(X)P({\cal X}). (We can also use SLm2(K)SL_{m^{2}}(K) here instead of GLm2(K)GL_{m^{2}}(K), since that does not change Δ[det⁡,m]\Delta[\det,m].) As in Section 1.2, let Δ^[det⁡,m]⊆X\hat{\Delta}[\det,m]\subseteq{\cal X} be the affine cone of Δ[det⁡,m]\Delta[\det,m], and R(det⁡,m)R(\det,m) the homogeneous coordinate ring of Δ[det⁡,m]\Delta[\det,m].

We assume that Δ[det⁡,m]\Delta[\det,m] is specified succinctly as in Section 1.2. This can be done either by giving a small uniform circuit of \mboxpoly(m){\mbox{poly}}(m) bit-length for computing det⁡(X)\det(X), or alternatively, by just giving mm in unary (from which a circuit for the determinant can be computed in \mboxpoly(m){\mbox{poly}}(m) time). The bit-length of this succinct specification is \mboxpoly(m){\mbox{poly}}(m). All complexity bounds in this section will be in terms of this bit-length, or equivalently, in terms of mm.

The problem NNL for Δ[det⁡,m]\Delta[\det,m], given in this succinct specification, is to construct an s.s.o.p. of the form S(B)S({\cal B}), as defined in Section 1.2, for some set B{\cal B} of m×mm\times m rational matrices of \mboxpoly(m){\mbox{poly}}(m) total bit-length.

Remark: Later (cf. Definition 5.6) we define a more general s.s.o.p., which need not be of the form S(B)S({\cal B}). But s.s.o.p.’s of this form are most natural. They are called strict s.s.o.p. in Definition 5.7. In this section, we assume, as in Section 1.2, that an s.s.o.p. for Δ[det⁡,m]\Delta[\det,m] is always of the form S(B)S({\cal B}). Thus NNL here is strict NNL as per the terminology in Section 5.3.

We call an s.s.o.p. S(B)S({\cal B}) separating if, for any two distinct points p,q∈Δ^[det⁡,m]p,q\in\hat{\Delta}[\det,m], ψB(p)≠ψB(q)\psi_{{\cal B}}(p)\not=\psi_{{\cal B}}(q), with ψB\psi_{{\cal B}} as in Section 1.2. Thus a separating s.s.o.p. denotes a dimension-reducing map, with a succinct specification, from X{\cal X} to KkK^{k}, k=\mboxpoly(m)k={\mbox{poly}}(m), that is injective on Δ^[det⁡,m]\hat{\Delta}[\det,m]. By the strong form of NNL for Δ[det⁡,m]\Delta[\det,m], we mean the problem of constructing a separating s.s.o.p. for Δ[det⁡,m]\Delta[\det,m]. A \mboxpoly(m){\mbox{poly}}(m)-time-constructible, separating s.s.o.p. is called a separating e.s.o.p. (explicit system of parameters). Separating quasi-s.s.o.p. and quasi-e.s.o.p. are defined by replacing \mboxpoly(m){\mbox{poly}}(m) by 2\mboxpolylog(m)2^{{\mbox{polylog}}(m)}.

Before we turn to the construction of an s.s.o.p., we address the construction of an h.s.o.p. for Δ[det⁡,m]\Delta[\det,m] (cf. Section 1.2). By Theorem 3.4, the problem of constructing an h.s.o.p. for a general variety, given by the standard specification in terms of defining equations, is in PSPACE. This does not imply that the same problem for Δ[det⁡,m]\Delta[\det,m] is in PSPACE, since Δ[det⁡,m]\Delta[\det,m] is not specified in the standard fashion by its defining equations, but rather succinctly by a small uniform circuit for the determinant. The current best algorithm based on Gröbner basis theory for converting the succinct specification of Δ[det⁡,m]\Delta[\det,m] to its standard specification takes space that is exponential in mm. Hence, we only get the following EXPSPACE-bound for the succinct specification.

The problem of constructing an h.s.o.p. for Δ[det⁡,m]\Delta[\det,m], specified succinctly, belongs to EXPSPACE. (This means it can be solved in work-space that is exponential in mm). Assuming the Generalized Riemann Hypothesis, it belongs to EXPH, if Δ[det⁡,m]⊆P(X)\Delta[\det,m]\subseteq P({\cal X}) has defining equations that can be computed in time that is exponential in mm.

Proof: Given the succinct specification of Δ[det⁡,m]\Delta[\det,m], we first compute the equations defining it as a subvariety of P(X)P({\cal X}), using Gröbner basis theory as in the proof of Theorem 2.8, in work-space that is exponential in mm. The total degree and the bit-length of the specification of these equations is at most double-exponential in mm.

We apply Gröbner basis theory (cf. Theorem 1 in ) again to compute an h.s.o.p. for Δ[det⁡,m]\Delta[\det,m], using these defining equations. This takes work-space that is polynomial in dim⁡(X)\dim({\cal X}), exponential in dim⁡(Δ[det⁡,m])\dim(\Delta[\det,m]), and poly-logarithmic in the total bit-length of the specification of the defining equations. This work-space requirement is single-exponential in mm, i.e., O(2\mboxpoly(m))O(2^{{\mbox{poly}}(m)}). The total running time as well as the bit-length of the output h.s.o.p. is double exponential in mm. This gives an EXPSPACE algorithm for computing an h.s.o.p. for Δ[det⁡,m]\Delta[\det,m].

If Δ[det⁡,m]\Delta[\det,m] has defining equations that can be computed in exponential time, then we can skip the first step above of computing defining equations, and use these equations instead. After this, we can use the PH-algorithm for general varieties in Theorem 3.4 for computing an h.s.o.p., assuming the Generalized Riemann Hypothesis. Since the dimension of X{\cal X} is exponential in mm, this PH-algorithm becomes an EXPH-algorithm in our context. Q.E.D.

The bit-length of the specification of the h.s.o.p. constructed in Theorem 4.1 is double-exponential in mm. If we insist on an h.s.o.p. then Theorem 4.1 is the best that we can do at present. However, if we are willing to settle for an s.s.o.p. (which need not have the optimal cardinality like an h.s.o.p.), then Theorem 1.9, proved in this section (cf. Theorem 4.9), says that the double exponential time bound in Theorem 4.1 can be brought down to quasi-polynomial, assuming that there exists a family {fn(x1,…,xn)}\{f_{n}(x_{1},\dots,x_{n})\} of exponential-time-computable, integral, multi-linear polynomials such that fnf_{n} cannot be approximated infinitesimally closely by symbolic determinants over KK of sub-exponential size.

2 A Monte Carlo algorithm

We begin by proving the following stronger form of Theorem 1.1.

A separating s.s.o.p. for Δ[det⁡,m]\Delta[\det,m] can be constructed by a \mboxpoly(m){\mbox{poly}}(m)-time Monte-Carlo algorithm that is correct with a high probability.

Since the determinant has a small circuit, it now follows from Heintz and Schnorr (Theorem 2.3) that one can compute by a \mboxpoly(m){\mbox{poly}}(m)-time Monte Carlo algorithm a hitting set B={B1,…,Bk}{\cal B}=\{B_{1},\ldots,B_{k}\}, k=\mboxpoly(m)k={\mbox{poly}}(m), of integral m×mm\times m matrices, with \mboxpoly(m){\mbox{poly}}(m) total bit-length, such that, with a high probability, (1) for every non-zero polynomial p(X)∈Δ^[det⁡,m]p(X)\in\hat{\Delta}[\det,m], there exists a matrix Bi∈BB_{i}\in{\cal B} such that p(Bi)p(B_{i}) is not zero, and (2) more generally, given any two distinct polynomials p1(X),p2(X)∈Δ^[det⁡,m]p_{1}(X),p_{2}(X)\in\hat{\Delta}[\det,m], there exists a matrix Bi∈BB_{i}\in{\cal B} such that p1(Bi)≠p2(Bi)p_{1}(B_{i})\not=p_{2}(B_{i}).

We assume that B{\cal B} constructed above is a hitting set with this property. Let S(B)={ψBi}S({\cal B})=\{\psi_{B_{i}}\} be the associated subset of the homogeneous coordinate ring of Δ[det⁡,m]\Delta[\det,m], as defined in Section 1.2.

The set S(B)S({\cal B}) is a separating s.s.o.p. for Δ[det⁡,m]\Delta[\det,m].

Proof of the claim: First, we prove that the set S(B)S({\cal B}) is an s.s.o.p. (as defined in Section 1.2) for Δ[det⁡,m]\Delta[\det,m].

Let ψB:X→Kk\psi_{{\cal B}}:{\cal X}\rightarrow K^{k} be the homogeneous linear map associated with B{\cal B} as in Section 1.2. The total bit-length of BiB_{i}’s is \mboxpoly(m){\mbox{poly}}(m). So it suffices to show that ψB\psi_{{\cal B}} does not vanish on any non-zero point in Δ^[det⁡,m]\hat{\Delta}[\det,m]. By Noether’s Normalization Lemma (Lemma 3.1), it then follows that the homogeneous coordinate ring of Δ[det⁡,m]\Delta[\det,m] is integral over the subring generated by S(B)S({\cal B}).

Suppose to the contrary that ψB\psi_{{\cal B}} does vanish on some non-zero polynomial p=p(X)∈Δ^[det⁡,m]p=p(X)\in\hat{\Delta}[\det,m]. Then p(Bi)=0p(B_{i})=0 for all i≤ki\leq k. Since p(X)p(X) can be approximated infinitesimally closely by symbolic determinants over XX of size mm and B{\cal B} is a hitting set, this implies that p(X)p(X) is identically zero; a contradiction.

It remains to show that S(B)S({\cal B}) is separating. Consider any two distinct polynomials p1(X),p2(X)∈Δ^[det⁡,m]p_{1}(X),p_{2}(X)\in\hat{\Delta}[\det,m]. By our assumption about the hitting set B{\cal B}, p1(Bi)≠p2(Bi)p_{1}(B_{i})\not=p_{2}(B_{i}) for some ii. This means ψB(p1)≠ψB(p2)\psi_{\cal B}(p_{1})\not=\psi_{\cal B}(p_{2}). It follows that S(B)S({\cal B}) is separating. Q.E.D.

A separating s.s.o.p. for Δ[det⁡,m]\Delta[\det,m] exists.

Proof: This follows from Theorem 4.2. Q.E.D.

3 Reduction of NNL to strengthened black-box derandomization

The Monte Carlo algorithm in Theorem 4.2 can be derandomized assuming a suitable derandomization hypothesis.

The variety Δ[det⁡,m]\Delta[\det,m] has a separating e.s.o.p., assuming the strengthened black-box derandomization hypothesis for symbolic determinant identity testing.

4 Reduction of NNL to a lower bound hypothesis

The strengthened black-box derandomization hypothesis in Theorem 4.5 can be traded with a lower bound hypothesis as in the following result.

The variety Δ[det⁡,m]\Delta[\det,m] has a separating quasi-e.s.o.p., assuming that there exists a family {fn(x1,…,xn)}\{f_{n}(x_{1},\ldots,x_{n})\} of exponential-time-computable, integral, multi-linear polynomials such that fnf_{n} cannot be approximated infinitesimally closely by circuits over KK of O(2nϵ)O(2^{n^{\epsilon}}) size, for some constant ϵ>0\epsilon>0, as n→∞n\rightarrow\infty. Alternatively, we can assume that fnf_{n} cannot be approximated infinitesimally closely by symbolic determinants over KK of O(2nϵ′)O(2^{n^{\epsilon^{\prime}}}) size, for some constant ϵ′>0\epsilon^{\prime}>0, as n→∞n\rightarrow\infty.

Proof: The first statement follows from the proof of Theorem 4.5 and Theorem 2.4, since symbolic determinant identity testing is a special case of low-degree polynomial identity testing. By , any circuit over KK of degree dd and size ss can be simulated by a circuit over KK of O(log⁡d(logd+log⁡s))O(\log d(logd+\log s)) depth, and hence , by a symbolic determinant over KK of O(2O(log⁡d(log⁡d+log⁡s))O(2^{O(\log d(\log d+\log s)}) size. The second statement follows from the first statement, in conjunction with this fact, letting d=nd=n, s=2nϵs=2^{n^{\epsilon}}, and ϵ′=2ϵ\epsilon^{\prime}=2\epsilon. Q.E.D.

Assuming a lower bound for the permanent, we get the following stronger result. This proves a stronger form of Theorem 1.7.

A separating s.s.o.p. for Δ[det⁡,m]\Delta[\det,m] can be constructed in O(\mboxpolylog(m))O({\mbox{polylog}}(m)) parallel time using O(2\mboxpolylog(m))O(2^{{\mbox{polylog}}(m)}) processors, assuming that the permanent of n×nn\times n matrices cannot be approximated infinitesimally closely by symbolic determinants over KK of O(2nϵ)O(2^{n^{\epsilon}}) size, for some constant ϵ>0\epsilon>0, as n→∞n\rightarrow\infty.

Proof: This follows from Theorem 4.5 and Theorem 2.6, since low-degree algebraic circuits of sub-exponential size are equivalent to symbolic determinants of sub-exponential size; cf. the proof of Theorem 4.6. Q.E.D.

Define the variety Δ[\mboxperm,n,m]\Delta[{\mbox{perm}},n,m], just as we defined Δ[det⁡,m]\Delta[\det,m] at the beginning of this section, replacing det⁡(X)\det(X) by zm−n\mboxperm(Y)z^{m-n}{\mbox{perm}}(Y), where YY is some n×nn\times n sub-matrix of XX, and zz is a variable entry in XX outside YY. Then the lower bound assumption in Theorem 4.7 in the terminology of is that Δ[\mboxperm,n,m]⊈Δ[det⁡,m]\Delta[{\mbox{perm}},n,m]\not\subseteq\Delta[\det,m], if m=O(2nϵ)m=O(2^{n^{\epsilon}}), for some small enough constant ϵ>0\epsilon>0. This is a stronger form of Conjecture 4.3 in . If we assume instead (as in Conjecture 4.3 in ) that Δ[\mboxperm,n,m]⊈Δ[det⁡,m]\Delta[{\mbox{perm}},n,m]\not\subseteq\Delta[\det,m], if m=O(\mboxpoly(n))m=O({\mbox{poly}}(n)), then it can be proved similarly that NNL for Δ[det⁡,m]\Delta[\det,m] can be solved in O(2nϵ)O(2^{n^{\epsilon}})-time (after replacing \mboxpoly(n){\mbox{poly}}(n) by 2nϵ2^{n^{\epsilon}} in the definition of an s.s.o.p.), for every constant ϵ>0\epsilon>0.

The following result implies the easy converse to Theorem 4.5.

Proof: By the definition of Δ[det⁡,m]\Delta[\det,m], every non-zero polynomial p(X)p(X) of degree mm that can be approximated infinitesimally closely by symbolic determinants over XX of size mm corresponds to a non-zero point in Δ^[det⁡,m]\hat{\Delta}[\det,m]. Since S(B)S({\cal B}) is an s.s.o.p., it follows that ψB\psi_{\cal B} (as defined in Section 1.2) does not vanish on any non-zero point in Δ^[det⁡,m]\hat{\Delta}[\det,m]. This implies that B{\cal B} is a hitting set against all non-zero polynomials of degree mm that can be approximated infinitesimally closely by symbolic determinants of size mm over the m2m^{2} entries of XX.

In symbolic determinant identity testing, we can assume, without loss of generality, that the number of variables is at most quadratic in the size of the matrix, increasing the size otherwise. Hence the last statement follows. Q.E.D.

(a)The strengthened black box derandomization hypothesis for symbolic determinant identity testing holds iff Δ[det⁡,m]\Delta[\det,m] has an e.s.o.p.

(b) A sub-exponential lower bound for a family of exponential-time-computable, integral, multi-linear polynomials as in Theorem 4.6 holds iff, ignoring quasi-prefixes, Δ[det⁡,m]\Delta[\det,m] has an e.s.o.p.

Proof: (a) This follows from Theorem 4.5 and Lemma 4.8.

(b) This follows from (a), Theorem 2.4, and Proposition 2.7. Q.E.D.

5 The current best unconditional deterministic upper bound for NNL

The following result gives the current best unconditional deterministic bound for NNL for Δ[det⁡,m]\Delta[\det,m]. It does not follow from Theorem 4.1, since an h.s.o.p. constructed there need not have a succinct specification of \mboxpoly(m){\mbox{poly}}(m) bit-length.

The problem of constructing or verifying an s.s.o.p. for Δ[det⁡,m]\Delta[\det,m] belongs to EXPSPACE unconditionally. It belongs to EXPH assuming the Generalized Riemann Hypothesis.

Proof: The statement for construction follows from Theorem 2.8 and Theorem 4.9 (a). The proof for verification is implicit in the proof for construction. Q.E.D.

Explicit algebraic varieties

In this section we formulate a general notion of an explicit algebraic variety, motivated by the concrete example of Δ[det⁡,m]\Delta[\det,m] studied in the preceding section, and define the problem NNL in this context (cf. Section 5.3). We then generalize the results for Δ[det⁡,m]\Delta[\det,m] in the preceding section systematically to general explicit varieties.

(a) A family {Wn}\{W_{n}\}, n→∞n\rightarrow\infty, of affine varieties is called explicit if there exist families of positive integers {rn}\{r_{n}\}, {mn}\{m_{n}\}, a family {ψn}\{\psi_{n}\} of maps ψn:Krn→Kmn\psi_{n}:K^{r_{n}}\rightarrow K^{m_{n}}:

with rn=\mboxpoly(n)r_{n}={\mbox{poly}}(n), mn=nΩ(1)m_{n}=n^{\Omega(1)}, log⁡mn=O(\mboxpoly(n))\log m_{n}=O({\mbox{poly}}(n)), and each fjf_{j} a homogeneous polynomial of \mboxpoly(n){\mbox{poly}}(n) degree, and there also exist homogeneous polynomials gj(x)g_{j}(x), x=(x1,…,xn)x=(x_{1},\ldots,x_{n}), 1≤j≤mn1\leq j\leq m_{n}, of \mboxpoly(n){\mbox{poly}}(n) degree, such that:

WnW_{n} is the Zariski-closure of the image \mboxIm(ψn)\mbox{Im}(\psi_{n}) of ψn\psi_{n}. This means Wn≅\mboxspec(R)W_{n}\cong{\mbox{spec}}(R), where RR is the subring of K[v1,…,vrn]K[v_{1},\ldots,v_{r_{n}}] generated by f1(v),…,fmn(v)f_{1}(v),\ldots,f_{m_{n}}(v).

The polynomial Fn(v,x)=∑jfj(v)gj(x)F_{n}(v,x)=\sum_{j}f_{j}(v)g_{j}(x) is uniformly pp-computable . This means one can compute in \mboxpoly(n){\mbox{poly}}(n) time a circuit CnC_{n}, with rational constants, over the variables v=(v1,…,vrn)v=(v_{1},\ldots,v_{r_{n}}) and x=(x1,…,xn)x=(x_{1},\ldots,x_{n}) of \mboxpoly(n){\mbox{poly}}(n) total bit-size, including the bit-sizes of the constants, that computes Fn(v,x)F_{n}(v,x), and the total degree deg⁡(Fn)\deg(F_{n}) of FnF_{n} is \mboxpoly(n){\mbox{poly}}(n).

The polynomials gj(x)g_{j}(x)’s are linearly independent.

We call ψn\psi_{n} the map defining WnW_{n}, and FnF_{n} the polynomial defining WnW_{n}. We specify WnW_{n} succinctly by the circuit CnC_{n}. Alternatively, we can specify WnW_{n} by the circuits Cn,cC_{n,c}’s, 1≤c≤deg⁡(Fn)1\leq c\leq\deg(F_{n}), where Cn,cC_{n,c} computes the degree cc-component in vv of FnF_{n}. The total bit-length of this succinct specification of WnW_{n} is \mboxpoly(n){\mbox{poly}}(n).

We say that {Wn}\{W_{n}\} is strongly explicit if the circuit CnC_{n} is weakly skew (cf. Section 2.1).

(b) A family of projective varieties is called explicit (strongly explicit) if the family of the affine cones of these varieties is explicit (respectively, strongly explicit).

(c) An explicit family of affine or projective varieties without degree restrictions is defined just as in (a) and (b), but without putting any restriction on the degrees of fj,gjf_{j},g_{j}, and FnF_{n}.

(d) Quasi-explicit families are defined by replacing \mboxpoly(n){\mbox{poly}}(n) by 2\mboxpolylog(n)2^{{\mbox{polylog}}(n)}.

We denote the coordinate ring of WnW_{n} by K[Wn]K[W_{n}]. If {Wn}\{W_{n}\} is explicit, by abuse of terminology, we also say that the variety WnW_{n} is explicit.

We now give a few examples of explicit varieties.

The orbit-closure Δ[det⁡,m]⊆P(X)\Delta[\det,m]\subseteq P({\cal X}) studied in Section 4 is explicit. Specifically, following the same notation as in Section 4, the affine cone Δ^[det⁡,m]\hat{\Delta}[\det,m] of Δ[det⁡,m]\Delta[\det,m] is explicit, with the defining map ϕ:Mm2(K)→X\phi:M_{m^{2}}(K)\rightarrow{\cal X} that maps v∈Mm2(K)v\in M_{m^{2}}(K) to det⁡(vX)\det(vX), thinking of XX as an m2m^{2}-vector. The polynomial F=F(v,X)F=F(v,X) defining Δ[det⁡,m]\Delta[\det,m] is det⁡(vX)\det(vX). The monomials in the entries of XX of degree mm play the role of gjg_{j}’s in Definition 5.1, and fjf_{j}’s are the coefficients of det⁡(vX)\det(vX) considered as a polynomial in XX.

1.2 Explicit varieties associated with depth three circuits

Let SndS^{d}_{n} be the space of homogeneous forms in nn variables of degree dd, and P(Snd)P(S^{d}_{n}) the associated projective space. Let Y(d,k,n)⊆P(Snd)Y(d,k,n)\subseteq P(S^{d}_{n}) be the projective closure of the set of polynomials that can be expressed as sum of kk terms, each term a dd-th power of a linear form in the nn variables. It is the variety associated with the class of diagonal depth three circuits (cf. Section 2.1) on nn variables with degree dd and top-fan-in kk, and is known in algebraic geometry as the kk-th secant variety of the Veronese variety . It is explicit, the defining polynomial being the polynomial computed by the generic, homogeneous, diagonal depth three circuit (with indeterminate constants) on nn variables with degree dd and top fan-in kk. Specifically, this defining polynomial is ∑i=1k(∑j=1nyi,jxj)d\sum_{i=1}^{k}(\sum_{j=1}^{n}y_{i,j}x_{j})^{d}, where xjx_{j}’s are the variables in the circuit, and yi,jy_{i,j}’s are the indeterminate constants.

Let X(d,k,n)⊆P(Snd)X(d,k,n)\subseteq P(S^{d}_{n}) be the projective closure of the set of polynomials that can be expressed as sum of kk terms, each term a product of dd linear forms in the nn variables. It is the variety associated with the class of depth three circuits on nn variables with degree dd and top-fan-in kk, and is known in algebraic geometry as the kk-th secant variety of the Chow variety . It is explicit, the defining polynomial being the polynomial computed by the generic, homogeneous, depth three circuit (with indeterminate constants) on nn variables with degree dd and top fan-in kk. Specifically, this defining polynomial is ∑i=1k∏r=1d(∑j=1nyi,r,jxj)\sum_{i=1}^{k}\prod_{r=1}^{d}(\sum_{j=1}^{n}y_{i,r,j}x_{j}), where xjx_{j}’s are the variables in the circuit, and yi,r,jy_{i,r,j}’s are the indeterminate constants.

1.3 The explicit variety associated with the universal circuit

Following , we now define an explicit variety without any degree restrictions, which plays the same role in the study of general polynomial identity testing that Δ[det⁡,m]\Delta[\det,m] plays in the study of symbolic determinant identity testing.

First, we define a universal circuit over KK of depth kk and width mm. Let SiS_{i}, 0≤i≤k0\leq i\leq k, denote the set of nodes in this circuit with level ii. We assume that S0S_{0} contains just one node, called the root, and for all i>0i>0, ∣Si∣=m|S_{i}|=m. For all levels 0≤i≤k−10\leq i\leq k-1, we introduce indeterminates yv,wuy_{v,w}^{u}’s for each u∈Siu\in S_{i} and distinct v,w∈Si+1v,w\in S_{i+1}. For the kk-th level, we introduce indeterminates yuy^{u}’s, u∈Sku\in S_{k}. Let YY be the tuple of all these indeterminates together. Beginning at the level kk, for each element uu in SiS_{i}, we recursively define the form h(u)h(u) in the indeterminates YY as follows. For u∈Sku\in S_{k}, let h(u)=yuh(u)=y^{u}. For u∈Siu\in S_{i}, with i<ki<k, let h(u)=∑v,wyv,wuh(v)h(w)h(u)=\sum_{v,w}y^{u}_{v,w}h(v)h(w), where the sum ranges over all distinct v,w∈Si+1v,w\in S_{i+1}. The form H(Y)=Hk,m(Y)H(Y)=H_{k,m}(Y) computed by this universal circuit is the form h(u)h(u), where u∈S0u\in S_{0} is the root.

Any circuit over KK of size ss can can be obtained by specializing this universal circuit with k=O(s)k=O(s) and m=O(s)m=O(s); cf. .

Let X{\cal X} be the space of homogeneous forms in YY of total degree d:=deg⁡(H(Y))d:=\deg(H(Y)) over the field KK. Let ll denote the number of variables in YY. Then X{\cal X} has a natural action of G=GLl(K)G=GL_{l}(K), similar to the action in Section 1.2. Let Δ[H(Y),k,m]⊆P(X)\Delta[H(Y),k,m]\subseteq P({\cal X}) denote the closure of the GG-orbit of H(Y)H(Y) in P(X)P({\cal X}). This is an explicit variety without any degree restrictions (cf. Definition 5.1 (c)).

We also define an explicit variety (with the usual low-degree restrictions), which plays the same role in the study of low-degree polynomial identity testing that Δ[det⁡,m]\Delta[\det,m] plays in the study of symbolic determinant identity testing.

Given any positive integer cc, let H(Y)cH(Y)_{c} denote the homogeneous degree cc part of H(Y)H(Y). If c=\mboxpoly(k,m)c={\mbox{poly}}(k,m), then H(Y)cH(Y)_{c} can be computed by a circuit of \mboxpoly(k,m){\mbox{poly}}(k,m) size, and furthermore, the family {H(Y)m}\{H(Y)_{m}\}, with k=c=mk=c=m, is VP-complete; cf. Section 5.6 in . Now let X{\cal X} be the space of homogeneous forms in YY of total degree mm over the field KK. Define Δ[H(Y)m,k,m]\Delta[H(Y)_{m},k,m] just as we defined Δ[H(Y),k,m]\Delta[H(Y),k,m] above, with H(Y)mH(Y)_{m} in place of H(Y)H(Y). This is an explicit variety, with the usual low-degree restrictions (cf. Definition 5.1).

1.4 The categorical quotients

Let VV be a representation of G=SLm(K)G=SL_{m}(K) of dimension nn. Then the invariant ring K[V]GK[V]^{G} is finitely generated . So we can consider the variety V/G=\mboxspec(K[V]G)V/G={\mbox{spec}}(K[V]^{G}), called the categorical quotient . It can be constructed concretely as follows.

Fix any set F={f1,…,ft}F=\{f_{1},\ldots,f_{t}\} of non-constant homogeneous generators of K[V]GK[V]^{G}. Consider the morphism πV/G\pi_{V/G} from VV to KtK^{t} given by

Then V/GV/G can be identified with the closure of the image of this morphism. As we shall see below, this image is already closed (cf. Theorem 5.4). Let z=(z1,…,zt)z=(z_{1},\ldots,z_{t}) be the coordinates of KtK^{t}, II the ideal of V/GV/G under this embedding, and K[V/G]K[V/G] its coordinate ring. Then K[V/G]=K[z]/IK[V/G]=K[z]/I, and we have the comorphism πV/G∗:K[V/G]→K[V]\pi_{V/G}^{*}:K[V/G]\rightarrow K[V] given by

Since fif_{i}’s are homogeneous, K[V/G]K[V/G] is a graded ring, with the grading given by deg⁡(zi)=deg⁡(fi)\deg(z_{i})=\deg(f_{i}). Furthermore, πV/G∗\pi_{V/G}^{*} gives an isomorphism between K[V/G]K[V/G] and K[V]GK[V]^{G}. Thus, we have πV/G∗(K[V/G])=K[V]G\pi_{V/G}^{*}(K[V/G])=K[V]^{G}.

The general definition of explicit varieties (Definition 5.1) specializes, when applied to the map πV/G\pi_{V/G} in (7), to the following definition. Let v1,…,vnv_{1},\ldots,v_{n} denote the standard monomial basis of VV as in Section 1.5.

with homogeneous fj,cf_{j,c}’s ∈K[V]G\in K[V]^{G} and gj,cg_{j,c}’s, so that K[V]GK[V]^{G} is generated by fj,c(v)f_{j,c}(v)’s, and gj,c(x)g_{j,c}(x)’s are linearly independent.

(b) It is called explicit without any degree restrictions if the degree requirement on C[V,m,c](x,v)C[V,m,c](x,v)’s is dropped.

(c) It is called strongly explicit if, in addition to all the properties in (a), the circuits C[V,m,c]C[V,m,c]’s are weakly skew (cf. Section 2.1).

(d) If V/GV/G is explicit, we say that an explicit First Fundamental Theorem holds for K[V]GK[V]^{G}, with the circuits C[V,m,c]C[V,m,c]’s constituting an explicit (polynomial-time-computable) encoding of a set of generators for K[V]GK[V]^{G}.

If V/GV/G is strongly explicit, we say that a strongly explicit First Fundamental Theorem holds for K[V]GK[V]^{G}.

(e) The notions in (a)–(d) are defined in the relaxed sense by requiring that fj,c(v)f_{j,c}(v)’s in (9) only form a set of separating invariants (cf. also Section 7 here) of K[V]GK[V]^{G}, rather than a set of generators.

We are abusing the terminology a bit here. Formally, instead of saying that V/GV/G is explicit, we should really be saying that the family {W⟨V,G⟩}\{W_{\langle V,G\rangle}\}, indexed by the specification ⟨V,G⟩\langle V,G\rangle, where W⟨V,G⟩:=V/GW_{\langle V,G\rangle}:=V/G, is explicit.

The categorical quotient V/GV/G is explicit, without any degree restrictions in general.

It may be conjectured that V/GV/G is explicit (with the usual low-degree restrictions), if K[V]GK[V]^{G} has a set of generators of \mboxpoly(n,m){\mbox{poly}}(n,m) degree.

For all the applications in this article and in geometric complexity theory (cf. Remark 2 after Theorem 9.7), a weaker form of this conjecture stipulating explicitness of V/GV/G only in the relaxed sense (cf. Definition 5.2 (e)) suffices.

Conjecture 5.3 is proved in this article for V=Mm(K)rV=M_{m}(K)^{r} with the adjoint action of GG (cf. Theorem 6.1), and for arbitrary VV when mm is constant (cf. Theorem 8.1). The relaxed form of the conjecture in positive characteristic is also proved for the ring of matrix invariants (cf. Theorem 10.7).

For constant mm, we shall construct a C[V,m,c]C[V,m,c] with depth four; cf. Theorem 8.1. The degrees of the generators encoded by C[V,m,c]C[V,m,c] are at most exponential in its depth. Comparing this bound with the degree bound in Derksen (cf. Theorem 8.2), one may expect C[V,m,c]C[V,m,c] in Conjecture 5.3 to have O(\mboxpoly(m,log⁡n))O({\mbox{poly}}(m,\log n)) depth in general.

The simplest instance of the conjecture that the reader can check is the following. Let G=SLm(K)G=SL_{m}(K), and V=Km⊕⋯KmV=K^{m}\oplus\cdots K^{m} (rr times), with the action of GG from the left. The coordinate ring K[V]K[V] can be identified with the ring K[U]K[U] generated by the entries of an m×rm\times r variable matrix UU. By the First Fundamental Theorem of invariant theory , the invariant ring K[V]GK[V]^{G} in this case is generated by the r×rr\times r minors of UU. The corresponding map (7) in this case is the well-known Plücker map U→(…,mα(U),…)U\rightarrow(\ldots,m_{\alpha}(U),\ldots), where mα(U)m_{\alpha}(U) ranges over all r×rr\times r minors of UU. The categorical quotient V/GV/G in this case is the Grassmanian. It can be checked that the Grassmanian is strongly explicit, with the defining map being the Plücker map.

For explicit varieties in general, the image of the map ψn\psi_{n} in (6) need not be closed. In contrast, for categorical quotients we have:

(cf. Theorem 1.1 in and Theorem 4.6 and 4.7 in )

(a) The image of πV/G\pi_{V/G} in (7) is closed. Hence, the map πV/G:V→V/G\pi_{V/G}:V\rightarrow V/G is surjective.

(b) For any x∈V/Gx\in V/G, πV/G−1(x)\pi_{V/G}^{-1}(x) contains a unique closed GG-orbit.

(c) For any GG-invariant (closed) subvariety W⊆VW\subseteq V, πV/G(W)\pi_{V/G}(W) is a closed subvariety of V/GV/G.

(d) Given v,w∈Vv,w\in V, the closures of the GG-orbits of vv and ww intersect iff r(v)=r(w)r(v)=r(w) for all r∈K[V]Gr\in K[V]^{G}.

These additional properties of V/GV/G play a crucial role in this article; cf. Remark 3 after Theorem 5.13.

1.5 Explicit variety associated with p𝑝p-computable polynomials

Let pn(v,x)=∑μfμ(v)μ(x)p_{n}(v,x)=\sum_{\mu}f_{\mu}(v)\mu(x), where μ\mu ranges over all monomials in xx of degree ≤deg⁡(pn)=\mboxpoly(n)\leq\deg(p_{n})={\mbox{poly}}(n). Let m=mnm=m_{n} be the number of such monomials. Let ψ=ψn\psi=\psi_{n} be the map

Then {Wn=Im(ψn)‾}\{W_{n}=\overline{Im(\psi_{n})}\} is an explicit family of varieties, with the defining map ψn\psi_{n} and the defining polynomial pnp_{n}.

1.6 Explicit toric variety

Let {pn(x)}\{p_{n}(x)\}, x=(x1,…,xn)x=(x_{1},\ldots,x_{n}), be a uniform pp-computable family of homogeneous polynomials over xx and KK. Let pn(x)=∑μaμμ(x)p_{n}(x)=\sum_{\mu}a_{\mu}\mu(x), where aμ∈Ka_{\mu}\in K, and μ\mu ranges over all monomials in xx of total degree =deg⁡(pn)=\mboxpoly(n)=\deg(p_{n})={\mbox{poly}}(n). Let m=mnm=m_{n} be the number of such monomials. Consider the monomial map ψn\psi_{n}:

Let Wn=Im(ψn)‾W_{n}=\overline{Im(\psi_{n})}, and P(Wn)P(W_{n}) its projectivization. Then {P(Wn)}\{P(W_{n})\} is an explicit family of toric varieties, with the defining polynomial

This polynomial is pp-computable and uniform, since a circuit for computing it can be obtained from the one for pnp_{n} by replacing each xix_{i} with vixiv_{i}x_{i}.

The main difference between the explicit toric variety here and the more general explicit variety in Section 5.1.5 is that μ(v)\mu(v) here is a monomial, whereas fμ(v)f_{\mu}(v) in Section 5.1.5 can be any homogeneous polynomial.

2 Unconditional upper bound for the problem of constructing an h.s.o.p.

We now study the problem of constructing an h.s.o.p. for an explicit variety. The following generalization of Theorem 4.1 gives the currently best upper bound for this problem.

The problem of constructing an h.s.o.p. for an explicit variety WnW_{n} (cf. Definition 5.1) belongs to EXPSPACE. (This means it can be solved in work-space that is exponential in nn.)

Assuming the Generalized Riemann Hypothesis, it belongs to EXPH (the exponential hierarchy), if WnW_{n} has defining equations that can be computed in time that is exponential in nn.

Proof: The proof is similar to that of Theorem 4.1, with WnW_{n} in place of Δ[det⁡,m]\Delta[\det,m]. Q.E.D.

3 The problem NNL for explicit varieties

If we insist on an h.s.o.p., then Theorem 5.5 is the best that we can do at present. However, if we are willing to settle for a small homogeneous set S⊆K[Wn]S\subseteq K[W_{n}] of \mboxpoly(n){\mbox{poly}}(n) size, but not necessarily of the optimal size, such that K[Wn]K[W_{n}] is integral over the subring generated by SS, then Theorem 5.11 proved below says that we can do much better. Relaxing the optimality constraint on cardinality, but insisting on succinctness of specification in exchange, we are thus led to the following notion of an s.s.o.p. It generalizes the notion of an s.s.o.p for Δ[det⁡,m]\Delta[\det,m] (cf. Section 1.2) to arbitrary explicit varieties.

Let {Wn}\{W_{n}\} be an explicit family of varieties as in Definition 5.1, z1,…,zmnz_{1},\ldots,z_{m_{n}} the coordinates of the ambient space KmnK^{m_{n}} containing WnW_{n}, and ψn∗\psi_{n}^{*} the comorphism of ψn:Krn→Kmn\psi_{n}:K^{r_{n}}\rightarrow K^{m_{n}} in (6). Note that K[Wn]K[W_{n}] is graded, with deg⁡(zj)=deg⁡(fj)\deg(z_{j})=\deg(f_{j}).

(b) We say that a set S⊆K[Wn]S\subseteq K[W_{n}] is a small system of parameters (s.s.o.p.) for K[Wn]K[W_{n}] (and WnW_{n}) if (1) each element s∈Ss\in S has a short specification as in (a) and is homogeneous of \mboxpoly(n){\mbox{poly}}(n) degree, (2) K[Wn]K[W_{n}] is integral over its subring generated by SS, and (3) the size of SS is \mboxpoly(n){\mbox{poly}}(n).

We say that SS is an explicit system of parameters (e.s.o.p.) if, in addition, the specification of SS, consisting of a circuit for ψn∗(s)\psi_{n}^{*}(s) for each s∈Ss\in S as in (a), can be computed in \mboxpoly(n){\mbox{poly}}(n) time.

If WnW_{n} is strongly explicit then, by convention, we assume that the short specification as in (a) for each element of s∈Ss\in S is a weakly skew circuit (cf. Section 2.1).

(c) S.s.o.p. and e.s.o.p. without any degree restrictions are defined by dropping the degree requirement in (b) (1). Quasi-e.s.o.p. and quasi-s.s.o.p. are defined by replacing \mboxpoly(n){\mbox{poly}}(n) by 2\mboxpolylog(n)2^{{\mbox{polylog}}(n)}.

(d) We call SS separating if, for any two distinct points u,v∈Wnu,v\in W_{n}, there exists an s∈Ss\in S such that s(u)≠s(v)s(u)\not=s(v).

We say that an s.s.o.p. or an e.s.o.p. SS is strict if each s∈Ss\in S is strict. It can then be specified by the set of pairs (b,Cn,c)(b,C_{n,c})’s, or just by the set of bb’s if Cn,cC_{n,c}’s are implicit. Strict quasi-s.s.o.p. and quasi-e.s.o.p. are defined by replacing \mboxpoly(n){\mbox{poly}}(n) by 2\mboxpolylog(n)2^{{\mbox{polylog}}(n)}.

Thus a strict s.s.o.p. has a short specification (cf. Definition 5.6 (a)) based on the circuit CnC_{n} defining the variety WnW_{n} itself. As such strictness is a natural way to ensure succinctness. We shall prove later (cf. Corollary 5.10) that a strict s.s.o.p. exists.

By NNL for WnW_{n}, we mean the problem of constructing an s.s.o.p. for K[Wn]K[W_{n}]. By NNL in a strong form for WnW_{n}, we mean the problem of constructing a separating s.s.o.p. for K[Wn]K[W_{n}]. By NNL in a strict and strong form for WnW_{n}, we mean the problem of constructing a strict, separating s.s.o.p. for K[Wn]K[W_{n}]. We say that NNL for WnW_{n} has an explicit solution, if K[Wn]K[W_{n}] has an e.s.o.p.

As the reader can check, an s.s.o.p. for Δ[det⁡,m]\Delta[\det,m] defined in Section 1.2 is a specialization of the general definition of a strict s.s.o.p. given above. The variety WnW_{n} here is the variety Δ[det⁡,m]\Delta[\det,m] there, the map ψn\psi_{n} here is the map ϕ:Mm2(K)→X\phi:M_{m^{2}}(K)\rightarrow{\cal X} in Section 5.1.1, and a strict s.s.o.p. SS specified by a set of bb’s here is S(B)S({\cal B}) specified by a set B{\cal B} of m×mm\times m matrices in Section 1.2.

Strictness is used in the proof of Theorem 4.9 to derive a lower bound from NNL; cf. the proof of Lemma 4.8. It is open if similar lower bounds can be derived from non-strict NNLs. The s.s.o.p.’s constructed in all the main results of this article stated in Section 1 are strict.

For simplicity, in what follows, we often keep nn implicit and denote WnW_{n} by WW, mnm_{n} by mm, rnr_{n} by rr, ψn\psi_{n} by ψ\psi, and so on.

4 Monte Carlo algorithm

The following generalization of Theorem 4.2 proves a stronger form of Theorem 1.2.

Let {Wn}\{W_{n}\} be an explicit family of varieties. Then there is a \mboxpoly(n){\mbox{poly}}(n)-time Monte Carlo algorithm to construct a separating, strict s.s.o.p. for K[Wn]K[W_{n}], which is correct with a high probability.

Proof: Let W=Wn⊆KmW=W_{n}\subseteq K^{m}, m=mnm=m_{n}, be an explicit variety as in Definition 5.1, and CnC_{n} the circuit computing Fn(v,x)F_{n}(v,x), v=(v1,…,vr)v=(v_{1},\ldots,v_{r}), r=rnr=r_{n}, and x=(x1,…,xn)x=(x_{1},\ldots,x_{n}), as there. Let s=\mboxpoly(n)s={\mbox{poly}}(n) be its size, and d=\mboxpoly(n)d={\mbox{poly}}(n) its degree. Let u=2s(d+1)2u=2s(d+1)^{2}.

Choose T⊆[u]nT\subseteq[u]^{n} of size 6(s+1+n)26(s+1+n)^{2} randomly. By Theorem 2.3, it is a hitting set with a high probability against all nonzero polynomials h(x)h(x) of degree ≤d\leq d that can be approximated infinitesimally closely by circuits over KK and xx of size ≤s\leq s. More strongly, replacing ss by 2s+12s+1, we can also assume that, given any two distinct polynomials h1(x)h_{1}(x) and h2(x)h_{2}(x) of degree ≤d\leq d that can be approximated infinitesimally closely by circuits over KK and xx of size ≤s\leq s, there exists b∈Tb\in T such that h1(b)≠h2(b)h_{1}(b)\not=h_{2}(b).

This probabilistic construction of TT takes \mboxpoly(s)=\mboxpoly(n){\mbox{poly}}(s)={\mbox{poly}}(n) time. In what follows, we assume that TT is such a hitting set.

For each b∈Tb\in T and 0<c≤deg⁡(Fn)0<c\leq\deg(F_{n}), define hb,c(z):=∑jzjgj(b)∈K[Wn]h_{b,c}(z):=\sum_{j}z_{j}g_{j}(b)\in K[W_{n}], where jj ranges over all indices such that deg⁡(fj)=c\deg(f_{j})=c, and z=(z1,…,zm)z=(z_{1},\ldots,z_{m}) denote the coordinates of the ambient space KmK^{m} containing W=WnW=W_{n}. Then deg⁡(hb,c)=c\deg(h_{b,c})=c, since deg⁡(zj)=deg⁡(fj)\deg(z_{j})=\deg(f_{j}), as per the grading on K[Wn]K[W_{n}]. Let

It now follows from Lemma 5.9 (c) and (d) below that SS is a separating, strict s.s.o.p. Q.E.D.

Suppose W=WnW=W_{n} is an explicit variety. Let SS and TT be as in (10). Then:

(a) W∩Z(S)={0}W\cap Z(S)=\{0\}, where Z(S)⊆KmZ(S)\subseteq K^{m} is the zero set of SS, and denotes the origin in KmK^{m}.

(b) The coordinate ring K[W]K[W] is integral over the subring generated by SS.

Proof: Let ψ=ψn\psi=\psi_{n}, fjf_{j}, gjg_{j}, and F=Fn(v,x)F=F_{n}(v,x) be as in Definition 5.1.

Since W=\mboxIm(ψ)‾W=\overline{\mbox{Im}(\psi)}, and the closure in the Zariski topology coincides with the closure in the complex topology (cf. Theorem 2.33 in ), there exists, for any δ>0\delta>0, pδ∈Krp_{\delta}\in K^{r}, r=rnr=r_{n}, such that ∣∣ψ(pδ)−w∣∣2≤δ/(mA)||\psi(p_{\delta})-w||_{2}\leq\delta/(mA), where A=max⁡{∣∣gj∣∣2}A=\max\{||g_{j}||_{2}\} and, for any polynomial ee, ∣∣e∣∣2||e||_{2} denotes the L2L_{2}-norm of the coefficient vector of ee. Since w≠0w\not=0, taking δ\delta to be small enough, we can assume that ψ(pδ)≠0\psi(p_{\delta})\not=0. Since ψ(pδ)=(f1(pδ),…,fm(pδ))\psi(p_{\delta})=(f_{1}(p_{\delta}),\ldots,f_{m}(p_{\delta})), and gj(x)g_{j}(x)’s are linearly independent, Fn(pδ,x)=∑jfj(pδ)gj(x)F_{n}(p_{\delta},x)=\sum_{j}f_{j}(p_{\delta})g_{j}(x) is not an identically zero polynomial in xx. Let CnC_{n} be the circuit computing Fn(v,x)F_{n}(v,x) as in Definition 5.1. Let Cn,δC_{n,\delta} be the circuit obtained from CnC_{n} by specializing vv to pδp_{\delta}. Then the size of Cn,δC_{n,\delta} is s=\mboxsize(Cn)=\mboxpoly(n)s=\mbox{size}(C_{n})={\mbox{poly}}(n), and the degree is d=\mboxdeg(Cn)=\mboxpoly(n)d=\mbox{deg}(C_{n})={\mbox{poly}}(n). Furthermore,

Since δ\delta can be made arbitrarily small, it follows that Fw(x)F_{w}(x) can be approximated infinitesimally closely by circuits of degree ≤d\leq d and size ≤s\leq s. Since TT is a hitting set, and Fw(x)F_{w}(x) is not identically zero as a polynomial in xx, there exists b∈Tb\in T such that Fw(b)≠0F_{w}(b)\not=0. Hence Fw(b)c≠0F_{w}(b)_{c}\not=0 for some c≤deg⁡(Fn)c\leq\deg(F_{n}). This proves (a).

(b) By (a) and Hilbert’s Nullstellensatz, it follows that, given any t∈K[W]t\in K[W], tlt^{l} belongs to the ideal (S)(S) in K[W]K[W] generated by SS, for some large enough positive integer ll. Since K[W]K[W] is graded, it now follows from the graded Noether’s normalization lemma (Lemma 3.2) that K[W]K[W] is integral over its subring generated by SS. This proves (b).

(c) SS is clearly strict by its definition. So it remains to verify the properties (1)-(3) in Definition 5.6 (b).

(2) By (b), K[W]K[W] is integral over the subring generated by SS.

(3) Since the size of TT is \mboxpoly(s)=\mboxpoly(n){\mbox{poly}}(s)={\mbox{poly}}(n), and deg⁡(Fn)\deg(F_{n}) is \mboxpoly(n){\mbox{poly}}(n), the size of SS is \mboxpoly(n){\mbox{poly}}(n).

(d) Consider any two distinct points w=(w1,…,wm),w′=(w1′,…,wm′)∈W⊆Kmw=(w_{1},\ldots,w_{m}),w^{\prime}=(w_{1}^{\prime},\ldots,w^{\prime}_{m})\in W\subseteq K^{m}. Let Fw(x)=∑jwjgj(x)F_{w}(x)=\sum_{j}w_{j}g_{j}(x), and Fw′(x)=∑jwj′gj(x)F_{w^{\prime}}(x)=\sum_{j}w^{\prime}_{j}g_{j}(x). These are distinct polynomials, since ww and w′w^{\prime} are distinct and gjg_{j}’s are linearly independent. It also follows as in the proof of (a) that Fw(x)F_{w}(x) and Fw′(x)F_{w^{\prime}}(x) can be approximated infinitesimally closely by circuits of degree ≤d\leq d and size ≤s\leq s. Hence, by the stronger assumed property of the hitting set TT, there exists b∈Tb\in T such that Fw(b)≠Fw′(b)F_{w}(b)\not=F_{w^{\prime}}(b). Hence, Fw(b)c≠Fw′(b)cF_{w}(b)_{c}\not=F_{w^{\prime}}(b)_{c}, for some c≤deg⁡(Fn)c\leq\deg(F_{n}). This means hb,c(w)≠hb,c(w′)h_{b,c}(w)\not=h_{b,c}(w^{\prime}). Hence SS is separating. Q.E.D.

The following is a corollary of Theorem 5.8.

A separating, strict s.s.o.p. exists for the coordinate ring K[Wn]K[W_{n}] of any explicit variety WnW_{n}.

5 Conditional derandomization

We now derandomize the Monte Carlo algorithm in Theorem 5.8 using an appropriate black-box-derandomization or hardness hypothesis.

The following result proves the analogues of Theorems 4.5 and 4.6 for any explicit variety.

Let {Wn}\{W_{n}\} be an explicit family of varieties as in Definition 5.1. Then:

(a) The variety WnW_{n} has a separating, strict e.s.o.p., assuming the strengthened black-box derandomization hypothesis for polynomial identity testing for small degree circuits over KK.

(b) The variety WnW_{n} has a separating, strict quasi-e.s.o.p., assuming that there exists a family {hn(x1,…,xn)}\{h_{n}(x_{1},\ldots,x_{n})\} of exponential-time-computable, multi-linear, integral polynomials such that hnh_{n} cannot be approximated infinitesimally closely by circuits over KK of O(2nϵ)O(2^{n^{\epsilon}}) size, for some constant ϵ>0\epsilon>0, as n→∞n\rightarrow\infty.

(a) We have to show that a separating, strict s.s.o.p. for an explicit variety WnW_{n} can be constructed in \mboxpoly(n){\mbox{poly}}(n) time, assuming the strengthened black-box derandomization hypothesis for polynomial identity testing for small degree circuits over KK.

This follows if, instead of the randomly chosen hitting set TT in the proof of Theorem 5.8, we use an explicit (\mboxpoly(n){\mbox{poly}}(n)-time computable) hitting set TT provided by the strengthened black-box derandomization hypothesis.

(b) This follows from (a) and Theorem 2.4. Q.E.D.

Remark 1: If the multi-linear polynomial in (b) is the permanent, then, as for Δ[det⁡,m]\Delta[\det,m] (cf. Theorem 4.7), a separating, strict s.s.o.p. for WnW_{n} can be constructed fast in parallel.

Remark 2: If in (b) we assume instead that there exists a family {hn(x1,…,xn)}\{h_{n}(x_{1},\ldots,x_{n})\} of exponential-time-computable, multi-linear, integral polynomials such that hnh_{n} cannot be approximated infinitesimally closely by circuits over KK of O(na)O(n^{a}) size, for any constant a>0a>0, as n→∞n\rightarrow\infty, then it can be proved similarly that the strict form of NNL for WnW_{n} can be solved in O(2nϵ)O(2^{n^{\epsilon}})-time (assuming that \mboxpoly(n){\mbox{poly}}(n) is replaced by 2nϵ2^{n^{\epsilon}} in Definition 5.6), for any constant ϵ>0\epsilon>0.

Remark 3: The statement (b), in conjunction with , implies that an explicit WnW_{n} has a separating, strict quasi-e.s.o.p., assuming that there exists a family {hn(x1,…,xn)}\{h_{n}(x_{1},\ldots,x_{n})\} of exponential-time-computable, multi-linear, integral polynomials such that hnh_{n} cannot be approximated infinitesimally closely by depth three circuits over KK of O(2n12+ϵ)O(2^{n^{{\frac{1}{2}}+\epsilon}}) size, for some constant ϵ>0\epsilon>0, as n→∞n\rightarrow\infty. A similar result also holds for homogeneous depth four circuits. The known Ω(2n1/2log⁡n)\Omega(2^{n^{1/2}\log n}) lower bounds for the restricted versions of these circuits do not imply any nontrivial result for NNL for explicit varieties. Thus there is a sharp phase transition in the difficulty of the lower bound problem in this model at the exponent 1/21/2.

Remark 4: The statement (a) also holds for explicit varieties without any degree restrictions, with the general (strengthened) polynomial identity testing without any degree restrictions in place of the (strengthened) polynomial identity testing for small degree circuits.

Remark 5: If WnW_{n} is strongly explicit (cf. Definition 5.1), then the (strengthened) polynomial identity testing for small degree circuits in the statement (a) can be replaced with (strengthened) symbolic determinant identity testing. In this case it can also be shown that NNL for WnW_{n} belongs to DET, assuming that the strengthened black-box derandomization problem for symbolic determinant identity testing belongs to DET (as may be conjectured).

Remark 6: If WnW_{n} is strongly explicit, then it can be assumed that s.s.o.p.’s and e.s.o.p.’s in Theorems 5.8, 5.11 and Corollary 5.10 consist of weakly skew circuits (cf. Definition 5.6).

Remark 7: The derandomization hypothesis in the statement (a) is only needed for the class of circuits used in the definition of WnW_{n} (cf. Definition 5.1).

6 An unconditional EXPSPACE-algorithm

The following result gives the current best, unconditional, deterministic upper bound for NNL for explicit varieties.

Let {Wn}\{W_{n}\} be an explicit family of varieties. Then the problem of constructing or verifying a strict s.s.o.p. for K[Wn]K[W_{n}] belongs to EXPSPACE. This means it can be solved in O(2\mboxpoly(n))O(2^{{\mbox{poly}}(n)}) work-space. It belongs to EXPH, assuming the Generalized Riemann Hypothesis.

Proof: For construction, this follows from Theorem 5.11 (a) and Theorem 2.8. The proof for verification is implicit in the proof for construction. Q.E.D.

7 NNL for explicit varieties with closed defining maps

Theorem 5.11 (a) can be improved as follows if the image of the defining map ψn\psi_{n} in (6) is closed.

Let {Wn}\{W_{n}\} be an explicit family of varieties such that the image of the map ψn\psi_{n} in (6) is closed. Then the coordinate ring K[Wn]K[W_{n}] of WnW_{n} has a separating, strict e.s.o.p., assuming the standard (instead of the strengthened) black-box derandomization hypothesis for polynomial identity testing for small degree circuits over KK.

Proof: The only reason we needed the strengthened black-box derandomization hypothesis in the proof of Theorem 5.11 (a) is because the image of ψn\psi_{n} need not be closed, in general. If it is closed, then we can use the standard black-box derandomization hypothesis instead. Q.E.D.

Remark 1: Theorem 5.13, in conjunction with the PSPACE-bound for the standard black-box derandomization (Proposition 2.9), implies that NNL for WnW_{n} belongs to PSPACE unconditionally if the image of ψn\psi_{n} is closed.

Remark 2: Theorem 5.13, in conjunction with Theorem 2.1, implies that WnW_{n} has a strict quasi-e.s.o.p., assuming that there exists a family {hn(x1,…,xn)}\{h_{n}(x_{1},\ldots,x_{n})\} of exponential-time-computable, integral, multi-linear polynomials such that hnh_{n} cannot be computed by circuits over KK of size sub-exponential in nn. This improves Theorem 5.11 (b) when the image of ψn\psi_{n} is closed.

Remark 3: If WW is strongly explicit (cf. Definition 5.1), then the low-degree polynomial identity testing in Theorem 5.13 can be replaced by symbolic determinant identity testing. This result, in conjunction with Theorem 5.4 (a), implies that if WnW_{n} is a strongly explicit categorical quotient, then an e.s.o.p. for WnW_{n} exists, assuming the standard (instead of the strengthened) black-box derandomization hypothesis for symbolic determinant identity testing. This fact will play a crucial role in the proofs of Theorems 1.4 and 1.6.

Remark 4: We only need the derandomization hypothesis in Theorem 5.13 for the class of circuits used in the definition of WnW_{n} (cf. Definition 5.1).

8 Equivalence

The following is the analogue of Theorem 4.9 for general polynomial identity testing.

(a) The strengthened black-box derandomization hypothesis for general polynomial identity testing over KK, without any degree restrictions, holds iff the orbit closure Δ[H(Y),k,m]\Delta[H(Y),k,m] (cf. Section 5.1.3), with k=mk=m, has a strict e.s.o.p.

(b) The strengthened black-box derandomization hypothesis for low-degree polynomial identity testing over KK holds iff the orbit closure Δ[H(Y)m,k,m]\Delta[H(Y)_{m},k,m] (cf. Section 5.1.3), with k=mk=m, has a strict e.s.o.p.

(c) Ignoring a quasi prefix, a sub-exponential lower bound for a family of exponential-time-computable, integral, multi-linear polynomials as in Theorem 2.4 holds iff the orbit closure Δ[H(Y)m,k,m]\Delta[H(Y)_{m},k,m] (cf. Section 5.1.3), with k=mk=m, has a strict e.s.o.p.

(a) The polynomial H(Y)H(Y) corresponds to a universal circuit (cf. Section 5.1.3), just as the determinant corresponds to a universal weakly skew circuit. The polynomials corresponding to the points in Δ[H(Y),k,m]\Delta[H(Y),k,m] can be approximated infinitesimally closely by circuits over KK of size \mboxpoly(k,m){\mbox{poly}}(k,m) and degree =deg⁡(H(Y))=\deg(H(Y)). Though deg⁡(H(Y))\deg(H(Y)) is exponential in kk, Theorem 2.3 still implies existence of a small hitting set, with O(\mboxpoly(k,m))O({\mbox{poly}}(k,m)) bit-length of specification, against such polynomials. The rest of the proof is similar to that of Theorem 4.9 (a), with Δ[H(Y),k,m]\Delta[H(Y),k,m], with k=mk=m, in place of Δ[det⁡,m]\Delta[\det,m].

(b) The proof is similar to that of (a), with Δ[H(Y)m,k,m]\Delta[H(Y)_{m},k,m], with k=mk=m, in place of Δ[H(Y),k,m]\Delta[H(Y),k,m].

(c) This follows from (b), Theorem 2.4, and Proposition 2.7. Q.E.D.

Remark: It can be shown similarly that the strengthened black-box derandomization hypothesis for polynomial identity testing for depth three circuits over KK and nn variables with degree ≤d\leq d and top fan-in ≤k\leq k holds iff the kk-th secant variety X(d,k,n)X(d,k,n) of the Chow variety (cf. Section 5.1.2) has a strict e.s.o.p.

9 The NNL for the orbit closure of the permanent

Analogue of Theorem 4.6 also holds for the orbit closure Δ[\mboxperm,n,m]\Delta[{\mbox{perm}},n,m] of the permanent defined in Section 4.4, though this variety is not explicit. So let us call it weakly explicit.

The variety Δ[\mboxperm,n,m]\Delta[{\mbox{perm}},n,m] has a strict quasi-e.s.o.p., assuming that there exists a family {pk(x1,…,xk)}\{p_{k}(x_{1},\ldots,x_{k})\} of exponential-time-computable, multi-linear, integral polynomials such that pkp_{k} cannot be approximated infinitesimally closely by permanents of symbolic matrices over KK of O(2kϵ)O(2^{k^{\epsilon}}) size, for some constant ϵ>0\epsilon>0, as k→∞k\rightarrow\infty.

Proof: By inserting the oracle for the permanent in appropriate places in the proof of Theorem 2.4, it follows that strengthened polynomial identity testing for small degree circuits over KK of size ≤s\leq s, with oracle gates for the permanent, has O(2\mboxpolylog(s))O(2^{{\mbox{polylog}}(s)})-time-computable hitting set (defined in the obvious way), assuming that there exists a family {pk(x1,…,xk)}\{p_{k}(x_{1},\ldots,x_{k})\} of exponential-time-computable, multi-linear, integral polynomials such that pkp_{k} cannot be approximated infinitesimally closely by circuits over KK, with oracle gates for the permanent, of O(2kϵ)O(2^{k^{\epsilon}}) size, for some constant ϵ>0\epsilon>0, as k→∞k\rightarrow\infty. It easily follows from Valiant that a low-degree circuit of size ss, with oracle gates for the permanent, can be simulated by the permanent of a symbolic matrix of \mboxpoly(s){\mbox{poly}}(s) size. Hence, the same conclusion holds assuming instead that pkp_{k} cannot be approximated infinitesimally closely by permanents of symbolic matrices over KK of O(2kϵ)O(2^{k^{\epsilon}}) size, for some constant ϵ>0\epsilon>0, as k→∞k\rightarrow\infty. The proof is now similar to that of Theorem 4.6, using this fact in place of Theorem 2.4. Q.E.D.

Explicitness of V/G𝑉𝐺V/G for the ring of matrix invariants

In this section we prove Theorem 1.3, assuming that the base field KK has characteristic zero.

Let V=Mm(K)rV=M_{m}(K)^{r}, with the adjoint action of G=SLm(K)G=SL_{m}(K), be as in Section 1.4. Given σ∈G\sigma\in G, the adjoint action maps (A1,…,Ar)∈V(A_{1},\ldots,A_{r})\in V to (σA1σ−1,…,σArσ−1)(\sigma A_{1}\sigma^{-1},\ldots,\sigma A_{r}\sigma^{-1}). Let n=dim⁡(V)=rm2n=\dim(V)=rm^{2}. Let U1,…,UrU_{1},\ldots,U_{r} be variable m×mm\times m matrices, and let U=(U1,…,Ur)U=(U_{1},\ldots,U_{r}). Identify the coordinate ring K[V]K[V] of VV with the ring K[U1,…,Ur]K[U_{1},\ldots,U_{r}] generated by the variable entries of UiU_{i}’s. Let K[V]G⊆K[V]K[V]^{G}\subseteq K[V] be the ring of invariants with respect to the adjoint action of GG. Let V/G=\mboxspec(K[V]G)V/G={\mbox{spec}}(K[V]^{G}).

Call two words in [r]∗[r]^{*} equivalent if one can be obtained from the other by a circular rotation. Recall that (cf. Section 2.5) [r][r] denotes {1,…,r}\{1,\ldots,r\}.

The following is a restatement of Theorem 1.3 in characteristic zero for convenience.

The categorical quotient V/GV/G is strongly explicit (cf. Definition 5.2), or in other words, a strongly explicit First Fundamental Theorem holds for K[V]GK[V]^{G}.

where [α]=[α1⋯αl][\alpha]=[\alpha_{1}\cdots\alpha_{l}] ranges over the equivalence classes of all words of length ll with each αj∈[r]\alpha_{j}\in[r], (2) g[α],l(X)g_{[\alpha],l}(X)’s are linearly independent homogeneous polynomials in the entries of XiX_{i}’s, and (3) f[α],l(U)f_{[\alpha],l}(U)’s are homogeneous invariants that generate K[V]GK[V]^{G}.

Before proving Theorem 6.1, we recall some results in geometric invariant theory that are needed for its proof.

(The First Fundamental Theorem for matrix invariants; cf. Theorems 6 and 10 in ) The ring K[V]GK[V]^{G} is generated by the traces of the form \mboxtrace(Ui1⋯Uil){\mbox{trace}}(U_{i_{1}}\cdots U_{i_{l}}), l≤m2l\leq m^{2}, i1,…,il∈[r]i_{1},\ldots,i_{l}\in[r].

Let K[Sr]K[S_{r}] be the group algebra of the symmetric group SrS_{r} on rr letters. Write any σ∈Sr\sigma\in S_{r} as a product of disjoint cycles:

where 11-cycles are included, so that each of the numbers 1,…,r1,\ldots,r occurs exactly once. Define

The following result is a consequence of the Second Fundamental Theorem for matrix invariants due to Procesi and Razmyslov .

(cf. Theorem 1 in ) Define the KK-linear map ϕ:K[Sr]→K[V]G\phi:K[S_{r}]\rightarrow K[V]^{G} by

Then \mboxKer(ϕ)={0}\mbox{Ker}(\phi)=\{0\} if r≤mr\leq m.

Let X1,…,XrX_{1},\ldots,X_{r} be k×kk\times k variable matrices. For any word α=i1,…,il\alpha=i_{1},\ldots,i_{l}, ij∈[r]i_{j}\in[r], let

where X=(X1,…,Xr)X=(X_{1},\ldots,X_{r}). Let T[α](X)=Tα(X)T_{[\alpha]}(X)=T_{\alpha}(X), where [α][\alpha] denotes the equivalence class of words equivalent to α\alpha under circular rotation. The choice of α\alpha in [α][\alpha] does not matter.

The traces {T[α](X)}\{T_{[\alpha]}(X)\}, where [α][\alpha] ranges over all equivalence classes of words of length l≤kl\leq k, are linearly independent.

Proof: Suppose to the contrary that there is a linear dependence

Without loss of generality, we can assume that this relation is homogeneous in every XiX_{i}. We can also assume that it is multi-linear in XiX_{i}’s. Otherwise, we can multi-linearize it by (1) substituting

in the l.h.s. of (14), where did_{i} is the (homogeneous) degree of XiX_{i} in the relation, ti,jt_{i,j}’s are new variables, and Xi,jX_{i,j}’s are new variable k×kk\times k matrices, and then (2) equating the coefficient of ∏i∏j=1diti,j\prod_{i}\prod_{j=1}^{d_{i}}t_{i,j} to zero.

So assume that the dependence (14) is multi-linear and homogeneous. Without of loss of generality, assume that the variables occurring in this dependence are X1,…,XlX_{1},\ldots,X_{l}, l≤kl\leq k. Then each [α][\alpha] in (14) corresponds to a cyclic permutation (i1,…,il)∈Sl(i_{1},\ldots,i_{l})\in S_{l}, which we denote by α^\hat{\alpha}. Hence, the l.h.s. of (14) equals ϕ(∑α^b[α]α^)\phi(\sum_{\hat{\alpha}}b_{[\alpha]}\hat{\alpha}), where ϕ:K[Sl]→K[Mk(K)l]SLk(K)\phi:K[S_{l}]\rightarrow K[M_{k}(K)^{l}]^{SL_{k}(K)} is the map (cf. Theorem 6.3) that takes ∑σaσσ∈K[Sl]\sum_{\sigma}a_{\sigma}\sigma\in K[S_{l}] to ∑σaσTσ(X1,…,Xl)\sum_{\sigma}a_{\sigma}T_{\sigma}(X_{1},\ldots,X_{l}). Since l≤kl\leq k, it follows from (14) and Theorem 6.3 that all b[α]b_{[\alpha]}’s are zero. Q.E.D.

Remark: The proof above also shows that the monomials in T[α](X)T_{[\alpha]}(X)’s of total degree l≤kl\leq k in XiX_{i}’s are linearly independent.

2 Proof of Theorem 6.1

For any word α=i1,…,il\alpha=i_{1},\ldots,i_{l}, l≤m2l\leq m^{2}, ij∈[r]i_{j}\in[r], cf. (13), let

where [α][\alpha] ranges over the equivalence classes (for circular rotation) of all words in 1,…,r1,\ldots,r of length ≤m2\leq m^{2}. Then FF generates K[V]GK[V]^{G} by Theorem 6.2.

Consider the map πV/G\pi_{V/G} from Mm(K)rM_{m}(K)^{r} to KtK^{t}, t=∣F∣t=|F|, defined as

where Ai∈Mm(K)A_{i}\in M_{m}(K) for all ii. By Theorem 5.4 (a), its image is closed, and can be identified with V/GV/G.

where XiX_{i}’s are new k×kk\times k variable matrices, X=(X1,…,Xr)X=(X_{1},\ldots,X_{r}), U=(U1,…,Ur)U=(U_{1},\ldots,U_{r}), and ⊗\otimes denotes the Kronecker product of matrices. Thus each Xi⊗UiX_{i}\otimes U_{i} is an m′×m′m^{\prime}\times m^{\prime} matrix, where m′=km=m3m^{\prime}=km=m^{3}. We have

where [α]=[α1⋯αl][\alpha]=[\alpha_{1}\cdots\alpha_{l}] ranges over the equivalence classes of all words of length ll with each αj∈[r]\alpha_{j}\in[r], ∣[α]∣|[\alpha]| denotes the cardinality of the equivalence class [α][\alpha] of the word α\alpha, and Tα(U)T_{\alpha}(U) and Tα(X)T_{\alpha}(X) are as in (15) and (13).

Clearly Tl(X,U)T_{l}(X,U), cf. (18), can be computed by an explicit (\mboxpoly(n){\mbox{poly}}(n)-time computable) weakly skew circuit (Section 2.1). Fix such an explicit circuit ClC_{l} computing Tl(X,U)T_{l}(X,U). Then Cl(X,U)=Tl(X,U)C_{l}(X,U)=T_{l}(X,U). Let g[α],l(X)=∣[α]∣T[α](X)g_{[\alpha],l}(X)=|[\alpha]|T_{[\alpha]}(X), and f[α],l(U)=T[α](U)f_{[\alpha],l}(U)=T_{[\alpha]}(U). Then (11) holds by (19). Furthermore, g[α],l(X)g_{[\alpha],l}(X)’s are linearly independent by Corollary 6.4, and f[α],l(U)f_{[\alpha],l}(U)’s generate K[V]GK[V]^{G} by Theorem 6.2.

NNL for the ring of matrix invariants

In this section, Theorem 1.4 is proved, assuming that the base field KK has characteristic zero.

Let V=Mm(K)rV=M_{m}(K)^{r}, n=dim⁡(V)=rm2n=\dim(V)=rm^{2}, G=SLm(K)G=SL_{m}(K), K[V]GK[V]^{G}, and V/GV/G be as in Section 6. By Theorem 6.1, V/GV/G is strongly explicit. Hence, we can specify V/GV/G succinctly, as per the general definition of an explicit variety (cf. Definition 5.1), by the circuits Cl(X,U)C_{l}(X,U)’s in Theorem 6.1. Instead, we shall specify V/GV/G and K[V]GK[V]^{G} succinctly by just giving the pair (m,r)(m,r) in unary. This is sufficient and also equivalent, since, given (m,r)(m,r), we can compute the circuits Cl(X,U)C_{l}(X,U)’s in Theorem 6.1 in \mboxpoly(m,r){\mbox{poly}}(m,r) time.

An s.s.o.p. or an e.s.o.p. for K[V]GK[V]^{G} is defined as in Section 1.4. The symbolic determinants that were used in the definition of an s.s.o.p. in Section 1.4 are equivalent to weakly skew circuits (cf. Section 2.1). Quasi-s.s.o.p. and quasi-e.s.o.p. are defined, as before, by replacing \mboxpoly(n){\mbox{poly}}(n) by 2\mboxpolylog(n)2^{{\mbox{polylog}}(n)}.

Following Derksen and Kemper , we call S⊆K[V]GS\subseteq K[V]^{G} separating if, for any two distinct v,w∈Vv,w\in V such that r(v)≠r(w)r(v)\not=r(w) for some r∈K[V]Gr\in K[V]^{G}, there exists an s∈Ss\in S such that s(v)≠s(w)s(v)\not=s(w). This is a general notion that applies to any finite dimensional representation of a reductive group.

By the problem NNL for K[V]GK[V]^{G}, we mean, as in Section 1.4, the problem of constructing an s.s.o.p., given (m,r)(m,r) in unary. By the strong form of NNL, we mean the problem of constructing a separating s.s.o.p.

The reader should check that these definitions are specializations of the general Definition 5.6 for strongly explicit varieties. We can also define strict s.s.o.p. and e.s.o.p. for V/GV/G (cf. Definition 5.7) using the circuits Cl(X,U)C_{l}(X,U)’s in Theorem 6.1. All s.s.o.p.’s constructed in this section are strict. However, strictness is not as important for V/GV/G as it is for Δ[det⁡,m]\Delta[\det,m], since existence of a strict e.s.o.p. for V/GV/G does not imply any lower bound. Hence, we shall not worry about strictness in this section.

We prove in this section the following stronger form of Theorem 1.4 in characteristic zero.

The ring K[V]GK[V]^{G} has a separating e.s.o.p, assuming the standard black-box derandomization hypothesis for symbolic determinant identity testing. It has a separating quasi-e.s.o.p. unconditionally.

The following will turn out to be a corollary of the proof of this result.

The problem of deciding if the GG-orbit-closures of two rational points in VV intersect belongs to DET ⊆\subseteq NC.

Before we prove Theorem 7.1, we study the problem of constructing an h.s.o.p. (homogeneous system of parameters) for K[V]GK[V]^{G} (cf. Definition 3.3). The following result gives the currently best upper bound for this problem.

The problem of constructing an h.s.o.p. for K[V]GK[V]^{G} belongs to EXPH, assuming the Generalized Riemann Hypothesis.

For the proof, we need the following result.

Recall that the trace function TσT_{\sigma} defined in (12) satisfies the fundamental trace identity

(The Second Fundamental Theorem for matrix invariants) (cf. Theorem 4.5 in ) The ideal of all relations among the trace monomial generators of K[V]GK[V]^{G} given by Theorem 6.2 is generated by the elements of the form F(M1,…,Mm+1)F(M_{1},\ldots,M_{m+1}), where MiM_{i}’s range over all possible monomials in UjU_{j}’s so that the total length of MiM_{i}’s is ≤m2\leq m^{2}.

This follows from the proof of Theorem 4.5 in .

Proof of Theorem 7.3: The defining equations for V/GV/G given in Theorem 7.4 can clearly be computed in time exponential in nn. Hence the result follows from Theorem 5.5. Q.E.D.

If we insist on an h.s.o.p., then Theorem 7.3 is the best that we can do at present. But if we only require a small homogeneous SS of \mboxpoly(n){\mbox{poly}}(n) cardinality such that K[V]GK[V]^{G} is integral over the subring generated by SS, and do not insist on optimality of ∣S∣|S|, then Theorem 7.1 says that the double exponential time bound in Theorem 7.3 can be brought down to quasi-polynomial. (Theorem 7.3 only implies a double-exponential time bound for the problem of constructing an h.s.o.p., since conjecturally EXPH ⊈\not\subseteq EXP.)

We now turn towards the proof of Theorem 7.1.

2 A Monte Carlo algorithm

The first step is an efficient Monte Carlo algorithm to construct an s.s.o.p.

A separating s.s.o.p. for K[V]GK[V]^{G} can be constructed by a \mboxpoly(n){\mbox{poly}}(n)-time Monte Carlo algorithm that is correct with a high probability.

In particular, a separating s.s.o.p. for K[V]GK[V]^{G} exists.

Proof: By Theorem 6.1, V/GV/G is explicit. Hence the result follows from Theorem 5.8. Q.E.D.

3 Reduction of NNL to black-box symbolic determinant identity testing

The next step is to derandomize the Monte Carlo algorithm in Theorem 7.5 assuming a suitable derandomization hypothesis. The first statement in Theorem 7.1 following from the following result.

Assume that the standard black-box derandomization hypothesis for symbolic determinant identity testing over KK holds. Then K[V]GK[V]^{G} has a separating e.s.o.p.

Proof: Since V/GV/G is strongly explicit (cf. Theorem 6.1), and the image of πV/G\pi_{V/G} in (17) is closed by Theorem 5.4 (a), it follows from Theorem 5.13 and Remark 3 thereafter that the Monte Carlo algorithm in Theorem 7.5 can be derandomized assuming the standard black-box derandomization hypothesis for symbolic determinant identity testing. Q.E.D.

We now give a second more refined proof of this result, since it is needed for the proof of the second unconditional statement in Theorem 7.1. For this proof, we need the following result from geometric invariant theory. We state in a more general form than what is needed here, since it will be needed in such generality in Sections 8 and 9.

(cf. Theorem 2.3.12 in ) Let WW be a finite dimensional representation of any algebraic reductive group HH over KK. Let S⊆K[W]HS\subseteq K[W]^{H} be a finite separating set (cf. Section 2.3.2 in , and the beginning of this section) of homogeneous invariants. Then K[W]HK[W]^{H} is integral over the subring generated by SS.

In this section, we shall use this result with W=VW=V and H=GH=G.

We follow the same notation as in Section 6.2.

Let Tl(X,U)T_{l}(X,U) be as in (18). Let U′=(U1′,…,Ur′)U^{\prime}=(U_{1}^{\prime},\ldots,U_{r}^{\prime}) be another tuple of variable m×mm\times m matrices, in addition to UU. For each l≤k=m2l\leq k=m^{2}, define the symbolic trace difference

Every element of SS is clearly homogeneous of \mboxpoly(n){\mbox{poly}}(n) degree. By Theorem 7.7, it follows that K[V]GK[V]^{G} is integral over the subring generated by SS.

Since the hitting set BB is explicit, and matrix powering, Kronecker product, and trace have explicit weakly-skew circuits (cf. Section 2.1 and ), it follows from (18) that the specification of SS consisting of a weakly skew circuit for its every element can be computed in \mboxpoly(n){\mbox{poly}}(n) time. Hence SS is a separating e.s.o.p.

Remark 1: The e.s.o.p. constructed in Theorem 7.6 is also strict (cf. Definition 5.7) with respect to the defining polynomials Cl(X,U)C_{l}(X,U)’s in Theorem 6.1 for V/GV/G.

Remark 2: Assuming a stronger parallel black-box derandomization hypothesis for symbolic determinant identity testing over KK, the problem of constructing a separating s.s.o.p. for K[V]GK[V]^{G} can be shown to belong to \mboxDET⊆\mboxNC2⊆\mboxP\mbox{DET}\subseteq\mbox{NC}^{2}\subseteq\mbox{P}. This hypothesis is that the problem of constructing, given mm in unary, a hitting set against non-zero symbolic determinants of size mm over (say) m2m^{2} variables belongs to DET.

4 Deciding if two orbit-closures intersect

The following is a consequence of the above proof in conjunction with the standard geometric invariant theory.

The problem of deciding if the closures of the GG-orbits of two rational points in VV intersect, and finding some invariant in K[V]GK[V]^{G} that separates the two if they do not, belongs to co-RDET ⊆\subseteq co-RNC.

The complexity class co-RDET here is the randomized version of co-DET (the complement of DET) .

5 Replacing symbolic determinants by read-once oblivious algebraic branching programs

In this section we describe how the symbolic determinant identity testing in Theorem 7.6 can be replaced by polynomial identity testing for read-once oblivious algebraic branching programs (cf. Section 2.1), as pointed out by Forbes and Shpilka . In conjunction with their earlier quasi-derandomization of polynomial identity testing for such programs in , this implies existence of a quasi-e.s.o.p. for K[V]GK[V]^{G}, as stated in Theorem 7.1, unconditionally.

where α=α1α2⋯\alpha=\alpha_{1}\alpha_{2}\cdots ranges over all words of length ll, with each αj∈[r]\alpha_{j}\in[r], and Yα=∏jyjαjY_{\alpha}=\prod_{j}y_{j}^{\alpha_{j}}.

Proof: The r.h.s. of (22) equals (\mboxtrace(∏j=1l(∑i=1ryjiUi)))−(\mboxtrace(∏j=1l(∑i=1ryjiUi′)))({\mbox{trace}}(\prod_{j=1}^{l}(\sum_{i=1}^{r}y_{j}^{i}U_{i})))-({\mbox{trace}}(\prod_{j=1}^{l}(\sum_{i=1}^{r}y_{j}^{i}U^{\prime}_{i}))), which can clearly be computed by a read-once oblivious algebraic branching program with the specification of \mboxpoly(l,m,r){\mbox{poly}}(l,m,r) bit-size. Q.E.D.

Since the monomials YαY_{\alpha}’s are linearly independent, we can replace Tl(X,U,U′)T_{l}(X,U,U^{\prime}) by Pl(Y,U,U′)P_{l}(Y,U,U^{\prime}) in the refined proof of Theorem 7.6. This implies that Theorem 7.6 also holds after replacing the symbolic determinant identity testing in its statement by polynomial identity testing for read-once oblivious algebraic branching programs (cf. Section 2.1). The existence of a separating quasi-e.s.o.p. as in Theorem 7.1 (and even a quasi-NC algorithm for the strong form of NNL in this case) follows in view of the quasi-NC black-box algorithm for polynomial identity testing for read-once oblivious algebraic branching programs in . This replacement also derandomizes the co-RDET-algorithm in Theorem 7.8 in view of the white-box (cf. Section 2.2) DET-algorithm for polynomial identity testing for read-once oblivious algebraic branching programs in Raz and Shpilka and Arvind et al. . This proves Theorem 7.2. (Unlike the co-RDET algorithm in Theorem 7.8, this algorithm does not return a separating invariant if the two orbit closures do not intersect.)

Explicitness of V/G𝑉𝐺V/G when G𝐺G has constant dimension

Let VV be a rational representation of G=SLm(K)G=SL_{m}(K) of dimension nn. The following is a restatement of Theorem 1.5 for convenience.

The categorical quotient V/G=\mboxspec(K[V]G)V/G={\mbox{spec}}(K[V]^{G}) is strongly explicit (Definition 5.2), i.e., a strongly explicit First Fundamental Theorem holds for K[V]GK[V]^{G}, if mm is constant.

We begin by recalling some results from invariant theory and standard monomial theory that are needed to prove this result, and then we prove some complexity-theoretic lemmas.

First, we recall from Derksen a degree bound for a set of generators for K[V]GK[V]^{G}.

Since GG is reductive , VV can be decomposed as a direct sum of irreducibles:

where λ:λ1≥⋯λr>0\lambda:\lambda_{1}\geq\cdots\lambda_{r}>0, r<mr<m, is a partition, i.e., a non-increasing sequence of positive integers, Vλ(G)V_{\lambda}(G) is the irreducible Weyl module of GG labelled by λ\lambda, and m(λ)m(\lambda) is its multiplicity. We assume that VV and GG are specified by the tuple

which gives nn and mm in unary, and the multiplicity m(λj)m(\lambda^{j}) in unary for each Weyl module Vλj(G)V_{\lambda^{j}}(G) that occurs in the decomposition (23) with nonzero multiplicity. The bit-length of this specification is O(n+m)O(n+m).

The degree dd of VV is defined to be the maximum of ∣λ∣=∑iλi|\lambda|=\sum_{i}\lambda_{i} over the λ\lambda’s that occur in this decomposition with nonzero multiplicity. For each copy of Vλ(G)V_{\lambda}(G) that occurs in this decomposition, fix the standard monomial basis of Vλ(G)V_{\lambda}(G) as defined in . It will be reviewed in Section 8.2 below. This yields a basis B(V)B(V) of VV, which we call the standard monomial basis of VV. Let v1,…,vnv_{1},\ldots,v_{n} be the coordinates of VV in this basis. In what follows, we use these concrete coordinates of VV throughout. So the elements of K[V]K[V] are regarded as polynomials in v1,…,vnv_{1},\ldots,v_{n}.

(cf. Theorem 1.1, Proposition 1.2 and Example 2.1 in ) The invariant ring K[V]GK[V]^{G} is generated by homogeneous invariants of degree ≤l=nm2d2m2\leq l=nm^{2}d^{2m^{2}}.

This bound is \mboxpoly(n){\mbox{poly}}(n), when mm is constant, since d≤nd\leq n by the following result.

Let VV be as in (23). Then (a) dim⁡(V)=n≥d\dim(V)=n\geq d, and (b) n=Ω(2Ω(m))n=\Omega(2^{\Omega(m)}), if d=Ω(m2)d=\Omega(m^{2}).

This can be shown using the fact that the dimension of Vλ(G)V_{\lambda}(G) is equal to the number of semi-standard tableau of shape λ\lambda. See the preliminary version for the details. The fact (b) will be needed later for the proof of Theorem 8.10.

Theorem 8.2 allows the following concrete realization of V/GV/G.

Let ll be as in Theorem 8.2. Let K[V]lG⊆K[V]GK[V]^{G}_{l}\subseteq K[V]^{G} be the subspace of homogeneous invariants of degree ll, and K[V]≤lGK[V]^{G}_{\leq l} the subspace of non-constant invariants of degree ≤l\leq l. The spaces K[V]lK[V]_{l} and K[V]≤lK[V]_{\leq l} are defined similarly. The dimension tt of K[V]≤lGK[V]^{G}_{\leq l} is bounded by dim⁡(K[V]≤l)=∑c≤l(c+n−1n−1)\dim(K[V]_{\leq l})=\sum_{c\leq l}{c+n-1\choose n-1}. This bound is exponential in nn, even when mm is constant. This worst case upper bound on tt is not tight. But we cannot expect a significantly better bound, since the function h(l)=dim⁡(K[V]lG)h(l)=\dim(K[V]^{G}_{l}) is a quasi-polynomial This means there exist polynomials h1(l),…,hk(l)h_{1}(l),\ldots,h_{k}(l) such that h(l)=hj(l)h(l)=h_{j}(l) if l=jl=j (mod kk). The degree of hh is the maximum degree of hjh_{j}’s. of degree dim⁡(V/G)≥dim⁡(V)−dim⁡(G)=n−m2\dim(V/G)\geq\dim(V)-\dim(G)=n-m^{2}. This follows from since the singularities of V/GV/G are rational . To prove Theorem 8.1, we have to show that some spanning set of K[V]≤lGK[V]^{G}_{\leq l} of cardinality exponential in nn can still be encoded by a small uniform circuit.

Let F={f1,…,ft}F=\{f_{1},\ldots,f_{t}\} be a set of non-constant homogeneous invariants that span K[V]≤lGK[V]^{G}_{\leq l}. By Theorem 8.2, FF generates K[V]GK[V]^{G}. Consider the morphism πV/G\pi_{V/G} from VV to KtK^{t} given by

By Theorem 5.4 (a), the image of this morphism is closed, and V/GV/G can be identified with this closed image. Let z=(z1,…,zt)z=(z_{1},\ldots,z_{t}) be the coordinates of KtK^{t}, II the ideal of V/GV/G under this embedding, and K[V/G]K[V/G] its coordinate ring. Then K[V/G]=K[z]/IK[V/G]=K[z]/I, and we have the comorphism πV/G∗:K[V/G]→K[V]\pi_{V/G}^{*}:K[V/G]\rightarrow K[V] given by

Since fif_{i}’s are homogeneous, K[V/G]K[V/G] is a graded ring, with the grading given by deg⁡(zi)=deg⁡(fi)\deg(z_{i})=\deg(f_{i}). Furthermore, πV/G∗\pi_{V/G}^{*} gives the isomorphism between K[V/G]K[V/G] and K[V]GK[V]^{G}:

2 The standard monomial basis of V𝑉V

We now define the standard monomial basis of VV mentioned above following , and prove some lemmas concerning its complexity-theoretic properties.

Let Gˉ=GLm(K)\bar{G}=GL_{m}(K). Let ZZ be an m×mm\times m variable matrix. Let K[Z]K[Z] be the ring generated by the variable entries of ZZ. Let K[Z]dK[Z]_{d} denote the degree dd part of K[Z]K[Z]. It has commuting left and right actions of Gˉ\bar{G}, where (σ,σ′)∈Gˉ×Gˉ(\sigma,\sigma^{\prime})\in\bar{G}\times\bar{G} maps h(Z)∈K[Z]dh(Z)\in K[Z]_{d} to h(σtZσ′)h(\sigma^{t}Z\sigma^{\prime}). For each partition λ:λ1≥⋯λq>0\lambda:\lambda_{1}\geq\cdots\lambda_{q}>0, q≤mq\leq m, the Weyl module Vλ(Gˉ)V_{\lambda}(\bar{G}) labelled by λ\lambda can be embedded in K[Z]dK[Z]_{d}, d=∣λ∣=∑iλid=|\lambda|=\sum_{i}\lambda_{i}, as follows.

Let (A,B)(A,B) be a bi-tableau of shape λ\lambda. This means both AA and BB are Young tableau of shape λ\lambda such that (1) each box of AA or BB contains a number in [m]={1,…,m}[m]=\{1,\ldots,m\}, (2) all columns of AA and BB are strictly increasing, and (2) all rows are non-decreasing. Let AiA_{i} and BiB_{i} denote the ii-th column of AA and BB, respectively. With any pair (Ai,Bi)(A_{i},B_{i}) of columns, we associate the minor Z(Ai,Bi)Z(A_{i},B_{i}) of ZZ indexed by the row numbers occurring in AiA_{i} and the column numbers occurring in BiB_{i}. With each bi-tableau (A,B)(A,B), we associate the monomial in the minors of ZZ defined by Z(A,B):=Z(A1,B1)Z(A2,B2)Z(A3,B3)⋯Z(A,B):=Z(A_{1},B_{1})Z(A_{2},B_{2})Z(A_{3},B_{3})\cdots. We call such a monomial standard of shape λ\lambda and degree d=∣λ∣d=|\lambda|. We call a monomial in the minors of ZZ non-standard if it is not standard. It is shown in Doubillet, Rota, and Stein that the standard monomials of degree dd form a basis of K[Z]dK[Z]_{d}. We denote this basis of K[Z]dK[Z]_{d} by B(Z)dB(Z)_{d}.

A standard monomial Z(A,B)Z(A,B) is called canonical if the column BiB_{i}, for each ii, just consists of the entries 1,2,3,…1,2,3,\ldots in the increasing order. It is known that, for each partition λ\lambda, the subspace of K[Z]K[Z] spanned by the canonical monomials of shape λ\lambda is a representation of GG under its left action on K[Z]K[Z]. It is also known that this representation is isomorphic to the Weyl module Vλ(Gˉ)V_{\lambda}(\bar{G}) of Gˉ\bar{G}, and that the set of canonical monomials of shape λ\lambda form its basis. We refer to it as the standard monomial basis of Vλ(Gˉ)V_{\lambda}(\bar{G}), and denote it by Bλ=Bλ(Gˉ)B_{\lambda}=B_{\lambda}(\bar{G}). Each Weyl module Vλ(G)V_{\lambda}(G) of G=SLm(K)G=SL_{m}(K) is also a Weyl module of Gˉ\bar{G} in a natural way. Hence this also specifies the standard monomial basis BλB_{\lambda} of Vλ(G)V_{\lambda}(G).

Fix the standard monomial basis BλB_{\lambda} in each copy of Vλ(G)V_{\lambda}(G) in the complete decomposition of VV as in (23). This yields a basis B(V)B(V) of VV, which we call its standard monomial basis. It depends on the choice of the decomposition of VV (if the multiplicities are greater than one). But this choice does not matter in what follows.

(a) Given any nonstandard monomial μ\mu of degree dd in the minors of ZZ, the coefficients of μ\mu in the basis B(Z)dB(Z)_{d} can be computed in \mboxpoly(dm2){\mbox{poly}}(d^{m^{2}}) time. More strongly, they can be computed by a uniform \mboxAC0\mbox{AC}^{0}-circuit of \mboxpoly(dm2){\mbox{poly}}(d^{m^{2}}) bit-size with oracle access to DET (the determinant function).

When mm is constant, the \mboxpoly(dm2){\mbox{poly}}(d^{m^{2}}) bound becomes \mboxpoly(d)=O(\mboxpoly(n)){\mbox{poly}}(d)=O({\mbox{poly}}(n)).

(a) Let B′(Z)dB^{\prime}(Z)_{d} denote the usual monomial basis of K[Z]dK[Z]_{d} consisting of the monomials in the entries zijz_{ij} of ZZ of total degree dd. The cardinality of B′(Z)dB^{\prime}(Z)_{d} is equal to the number of monomials of degree dd in the m2m^{2} variables zijz_{ij}’s. This number is (d+m2−1m2−1)=O(\mboxpoly(dm2)){d+m^{2}-1\choose m^{2}-1}=O({\mbox{poly}}(d^{m^{2}})). The cardinality of B(Z)dB(Z)_{d} is the same. Let Ad{\cal A}_{d} be the matrix for the change of basis so that:

The matrix Ad{\cal A}_{d} can be computed in \mboxpoly(dm2){\mbox{poly}}(d^{m^{2}}) time. For this, observe that each row of Ad{\cal A}_{d} corresponds to the expansion of a standard monomial b∈B(Z)db\in B(Z)_{d} in the usual monomial basis B′(Z)dB^{\prime}(Z)_{d}. Since the number of monomials of degree ≤d\leq d in the m2m^{2} variable entries of ZZ is O(\mboxpoly(dm2))O({\mbox{poly}}(d^{m^{2}})) and the degree of bb is dd, this expansion can be computed by a uniform weakly skew (Section 2.1) circuit of \mboxpoly(dm2){\mbox{poly}}(d^{m^{2}}) bit-size (constructed by induction on dd). It follows that it can also be computed fast in parallel by a uniform \mboxAC0\mbox{AC}^{0}-circuit of \mboxpoly(dm2){\mbox{poly}}(d^{m^{2}}) bit-size with oracle access to DET. This yields the representation of bb in the basis B′(Z)dB^{\prime}(Z)_{d}. Thus Ad{\cal A}_{d} can be computed by a uniform \mboxAC0\mbox{AC}^{0}-circuit of \mboxpoly(dm2){\mbox{poly}}(d^{m^{2}}) bit-size with oracle access to DET.

Once Ad{\cal A}_{d} has been computed, Ad−1{\cal A}_{d}^{-1} can also be computed fast in parallel by a uniform \mboxAC0\mbox{AC}^{0}-circuit of \mboxpoly(dm2){\mbox{poly}}(d^{m^{2}}) bit-size with oracle access to DET.

The standard representation in the basis B(Z)dB(Z)_{d} of any nonstandard monomial μ∈K[Z]d\mu\in K[Z]_{d} in the minors of ZZ can now be computed fast in parallel as follows. Let b(μ)b(\mu) and b′(μ)b^{\prime}(\mu) be the row vectors of the coefficients of μ\mu in the bases B(Z)dB(Z)_{d} and B′(Z)dB^{\prime}(Z)_{d}, respectively. Clearly b(μ)=b′(μ)Ad−1b(\mu)=b^{\prime}(\mu){\cal A}_{d}^{-1}. Expand μ\mu fast in parallel (as we expanded bb above) to get its representation b′(μ)b^{\prime}(\mu). Multiply this on the right by Ad−1{\cal A}_{d}^{-1} fast in parallel to get b(μ)b(\mu).

(b) First, we expand g⋅bg\cdot b fast in parallel (as above) to get its representation in the usual monomial basis B′(Z)dB^{\prime}(Z)_{d}. The representation in B(Z)dB(Z)_{d} can now be computed fast in parallel by multiplication on the right by Ad−1{\cal A}^{-1}_{d}.

(c) This follows from (b), using the concrete realization of Vλ(G)V_{\lambda}(G) described before, as the GG-submodule of K[Z]dK[Z]_{d}, d=∣λ∣d=|\lambda|, spanned by the canonical monomials of shape λ\lambda. Q.E.D.

We shall deduce Theorem 8.1 from a stronger result (Theorem 8.5) described below, which shows how to encode a set of generators of K[V]GK[V]^{G} by a depth four circuit. To state it we need a few definitions.

Let v=(v1,…,vn)v=(v_{1},\ldots,v_{n}) be the coordinates of VV in the standard monomial basis B(V)B(V) of VV as above. Let x=(x1,…,xn)x=(x_{1},\ldots,x_{n}) be new variables. Let

be a generic affine combination of viv_{i}’s. Here K[V;x]K[V;x] denotes the ring obtained by adjoining x1,…,xnx_{1},\ldots,x_{n} to K[V]=K[v1,…,vn]K[V]=K[v_{1},\ldots,v_{n}]. Then, for any c>0c>0,

Here (ca1,…,an){c\choose a_{1},\ldots,a_{n}} denotes the multinomial coefficient, and the monomials (∏i≥1viai)(\prod_{i\geq 1}v_{i}^{a_{i}}) occurring in this expression form a basis of the subspace K[V]c⊆K[V]K[V]_{c}\subseteq K[V] of polynomials on VV of degree cc.

Let R=RG:K[V]→K[V]GR=R_{G}:K[V]\rightarrow K[V]^{G} denote the Reynolds’ operator for GG (cf. Section 2.2.1 in ). We denote the induced map from K[V;x]K[V;x] to K[V]G[x]K[V]^{G}[x] by RR as well. Here K[V]G[x]K[V]^{G}[x] denotes the ring obtained by adjoining x1,…,xnx_{1},\ldots,x_{n} to K[V]GK[V]^{G}. Now consider a generic invariant

Since the monomials (∏i≥1viai)(\prod_{i\geq 1}v_{i}^{a_{i}}) in (29) form a basis of K[V]cK[V]_{c}, it follows from the properties of the Reynold’s operator that the elements R(∏i≥1viai)∈K[V]GR(\prod_{i\geq 1}v_{i}^{a_{i}})\in K[V]^{G} occurring in (30) span the subspace K[V]cG⊆K[V]GK[V]^{G}_{c}\subseteq K[V]^{G} of invariants of degree cc. By Theorem 8.2, the invariants of degree ≤l=nm2d2m2\leq l=nm^{2}d^{2m^{2}} generate K[V]GK[V]^{G}. Hence, the set

Let Δ3[n,l,k]\Delta_{3}[n,l,k] denote the class of diagonal depth three circuits (cf. Section 2.1) over KK and the variables x1,…,xnx_{1},\ldots,x_{n} with total degree ≤l\leq l and top fan-in ≤k\leq k. The size of any such circuit is O(knl)O(knl).

Theorem 8.1 follows from the following stronger result.

More strongly, CC can be computed by a uniform \mboxAC0\mbox{AC}^{0}-circuit of \mboxpoly(N){\mbox{poly}}(N) bit-size with oracle access to DET.

Proof strategy: The proof proceeds in four steps: (1) Show that the computation of the Reynolds operator on K[V;x]K[V;x] can be reduced to (a) the computation of the Reynolds operator on the coordinate ring K[G]K[G] of GG, and (b) the computation of a certain comorphism ψ∗\psi^{*} on K[V;x]K[V;x] (defined below) associated with the representation VV (cf. Lemma 8.6). (2) Give an efficient algorithm for the computation of the Reynolds operator on K[G]K[G], as needed in (1)(a), for constant mm (cf. Lemma 8.7). (3) Show that the computation of ψ∗(Xc)\psi^{*}(X^{c}) can be encoded by a small circuit of constant depth, for constant mm (cf. Lemma 8.9). (4) Put (1), (2), and (3) together to construct efficiently a small circuit of depth four for computing R(Xc)(v,x)R(X^{c})(v,x), for constant mm.

The following lemma concerning the computation of the Reynolds operator R=RGR=R_{G}, G=SLm(K)G=SL_{m}(K), addresses the first step in this proof strategy.

Consider the representation morphism ψ:V×G→V\psi:V\times G\rightarrow V given by: (v,σ)→σ−1v(v,\sigma)\rightarrow\sigma^{-1}v. Let ψ∗:K[V]→K[V×G]≅K[V]⊗K[G]\psi^{*}:K[V]\rightarrow K[V\times G]\cong K[V]\otimes K[G] denote the corresponding comorphism. This is defined so that, for any f∈K[V]f\in K[V] and t∈V×Gt\in V\times G,

By extending the base from KK to K[x]=K[x1,…,xn]K[x]=K[x_{1},\ldots,x_{n}], we get the morphism ψ∗\psi^{*} from K[V;x]K[V;x] to K[V;x]⊗K[G]K[V;x]\otimes K[G]. Given f∈K[V;x]f\in K[V;x], let ψ∗(f)=∑igi⊗hi\psi^{*}(f)=\sum_{i}g_{i}\otimes h_{i}, where gi∈K[V;x]g_{i}\in K[V;x] and hi∈K[G]h_{i}\in K[G].

(cf. Proposition 4.5.9 and Remark 4.5.29 in )

This reduces the computation of RGR_{G} on K[V;x]K[V;x] to (a) the computation of RGR_{G} on K[G]K[G], and (b) the computation of ψ∗\psi^{*}.

Let ZZ be an m×mm\times m variable matrix. Then K[G]=K[Z]/JK[G]=K[Z]/J, where JJ is the principal ideal generated by det⁡(Z)−1\det(Z)-1. Furthermore, by the First Fundamental Theorem of invariant theory , K[Z]G=K[det⁡(Z)]K[Z]^{G}=K[\det(Z)], where K[Z]K[Z] is considered as a left GG-module as in Section 8.2.

The following lemma addresses the second step in the proof strategy, namely, the computation of RGR_{G} on K[G]K[G].

More strongly, RG(g)R_{G}(g) can be computed by a uniform \mboxAC0\mbox{AC}^{0}-circuit of \mboxpoly(deg⁡(f)m2,⟨f⟩){\mbox{poly}}(\deg(f)^{m^{2}},\langle f\rangle) bit-size with oracle access to DET.

The computation of RGR_{G} on K[G]K[G] can be reduced to the computation of RGR_{G} on K[Z]K[Z], considered as a left GG-module as in Section 8.2, where RGR_{G} maps K[Z]K[Z] to K[Z]G=K[det⁡(Z)]K[Z]^{G}=K[\det(Z)]. Indeed, if g∈K[G]g\in K[G] is represented by f∈K[Z]f\in K[Z], then RG(g)=RG(f)R_{G}(g)=R_{G}(f) (mod JJ).

Towards this end, we first recall how RGR_{G} on K[Z]K[Z] can be computed using Cayley’s Ω\Omega process . Here Ω\Omega is a differential operator on K[Z]K[Z] defined as follows. Let zi,jz_{i,j}’s denote the variable entries of ZZ. Then, for any h(Z)∈K[Z]h(Z)\in K[Z],

where SmS_{m} is the symmetric group on mm letters.

(cf. Proposition 4.5.27 in ) Suppose f∈K[Z]f\in K[Z] is homogeneous. If the degree of ff is mrmr, then

If g∈K[G]g\in K[G] is represented by f∈K[Z]f\in K[Z], then RG(g)=Ωrfcr,mR_{G}(g)={\frac{\Omega^{r}f}{c_{r,m}}}, if the degree of ff is mrmr, and RG(g)=0R_{G}(g)=0, if the degree of ff is not divisible by mm.

Proof of Lemma 8.7: By Lemma 8.8, it suffices to compute Ωr(f)\Omega^{r}(f) and cr,m=Ωr(det⁡(Z)r)c_{r,m}=\Omega^{r}(\det(Z)^{r}) within the stated running time, when deg⁡(f)=mr\deg(f)=mr.

The coefficients aαa_{\alpha}’s can also be computed fast in parallel by a uniform \mboxAC0\mbox{AC}^{0}-circuit of \mboxpoly(deg⁡(f)m2){\mbox{poly}}(\deg(f)^{m^{2}}) bit-size with oracle access to DET, using multi-variate Vandermonde interpolation ; cf. also the proof of Lemma 8.9 below for the use of this technique. Hence Ωrfcr,m{\frac{\Omega^{r}f}{c_{r,m}}} can also be computed fast in parallel. Q.E.D.

Next we address the third step in the proof strategy, namely, the computation of ψ∗(Xc)\psi^{*}(X^{c}).

Let Gˉ=GLm(K)\bar{G}=GL_{m}(K). Then VV as in (23) is also a polynomial Gˉ\bar{G}-representation in a natural way so that, as a Gˉ\bar{G}-module:

Let u∈Gˉu\in\bar{G} be a generic (variable) matrix. Let 0<c≤l=O(\mboxpoly(n,dm2))0<c\leq l=O({\mbox{poly}}(n,d^{m^{2}})) and N=nm2dm4N=n^{m^{2}}d^{m^{4}} be as in Theorem 8.5. Let u−1=\mboxAdj(u)/det⁡(u)u^{-1}={\mbox{A}dj}(u)/\det(u), where \mboxAdj(u)\mbox{Adj}(u) denotes the adjoint of uu. Let ui,ju_{i,j} denote the (i,j)(i,j)-th entry of uu.

For any f∈K[V;x]f\in K[V;x], let u⋅f∈K[V;x]u\cdot f\in K[V;x] denote the result of applying u∈Gˉu\in\bar{G} to ff, thinking of K[V;x]K[V;x] as a Gˉ\bar{G}-module in the natural way. Formally,

for all w∈Vw\in V, thinking of ff as a polynomial function on VV with coefficients in K(x)K(x). Here u−1⋅wu^{-1}\cdot w denotes the result of applying u−1u^{-1} to ww. Let

for all w∈Vw\in V. If uu were a generic matrix of GG, instead of Gˉ\bar{G}, then u⋄fu\diamond f and u⋅fu\cdot f would coincide.

For X∈K[V;x]X\in K[V;x] as in (28), u⋄Xu\diamond X can be expressed as:

By (35), (u⋄Xc)(w)=Xc(Adj(u)⋅w)(u\diamond X^{c})(w)=X^{c}(Adj(u)\cdot w), for all w∈Vw\in V. Hence, it follows from (36) that

where μ\mu ranges over the monomials in ui,ju_{i,j}’s of total degree at most dmc≤dml=O(\mboxpoly(n,dm2))dmc\leq dml=O({\mbox{poly}}(n,d^{m^{2}})), and βμ(v,x)\beta_{\mu}(v,x) is a polynomial of degree cc in v=(v1,…,vn)v=(v_{1},\ldots,v_{n}) as well as x=(x1,…,xn)x=(x_{1},\ldots,x_{n}). The number of μ\mu’s here is ≤(dmc+m2−1m2−1)=O(\mboxpoly(N))\leq{dmc+m^{2}-1\choose m^{2}-1}=O({\mbox{poly}}(N)).

Thinking of μ\mu’s as elements of K[G]K[G], ψ∗(Xc)\psi^{*}(X^{c}), by the definition of ψ∗\psi^{*}, cf. (32), equals the r.h.s. of (37). This is because u⋅Xcu\cdot X^{c} and u⋄Xcu\diamond X^{c} coincide if we think of uu as a generic element of GG (rather than Gˉ\bar{G}), whence det⁡(u)=1\det(u)=1.

where μ\mu and βμ\beta_{\mu} are as in (37).

Hence, to encode ψ∗(Xc)\psi^{*}(X^{c}) efficiently by a circuit, it suffices to encode βμ(v,x)\beta_{\mu}(v,x)’s efficiently by a circuit. This is done in the following result.

Proof: We cannot compute βμ(v,x)\beta_{\mu}(v,x) in (37) by expanding (u⋄X)c(u\diamond X)^{c} as a polynomial in xx, uu, and vv, since the number of terms in this expansion is exponential in nn. But we can compute it by a constant depth circuit, by evaluating (u⋄X)c(u\diamond X)^{c} at several values of uu and then performing multivariate Vandermonde interpolation in the spirit of Strassen , as follows.

Towards this end, we first construct a depth two circuit Ag′A_{g}^{\prime}, with an addition gate at the top, that computes the quadratic polynomial in vv and xx

Next, we construct AgA_{g}, with a single multiplication (powering) gate of fan-in cc at its top, that computes the cc-th power of g⋄Xg\diamond X computed by the output node of Ag′A_{g}^{\prime}. The polynomial Ag(v,x)A_{g}(v,x) computed by AgA_{g} is (g⋄Xc)(v,x)(g\diamond X^{c})(v,x). Furthermore, for any fixed h∈Vh\in V, the circuit obtained by instantiating AgA_{g} at v=hv=h is a depth two circuit with a multiplication (powering) gate at the top.

Next, we show how to efficiently construct a circuit C′C^{\prime} for computing the polynomials βμ\beta_{\mu}’s, using AgA_{g}’s for several gg’s of \mboxpoly(N){\mbox{poly}}(N) bit-length.

Let βˉ\bar{\beta} denote the column-vector of length ee whose rr-th entry, for r≤er\leq e, is βμr(v,x)\beta_{\mu_{r}}(v,x) (which we define to be zero if the total degree of μr\mu_{r} exceeds d′=dmcd^{\prime}=dmc). Let Aˉ\bar{A} denote the column vector of length ee whose ss-the entry, for s≤es\leq e, is Ags(v,x)=(gs⋄Xc)(v,x)A_{g_{s}}(v,x)=(g_{s}\diamond X^{c})(v,x). Then, by (37),

Using the second equation here, we can construct a constant depth circuit C′C^{\prime} (with multiple outputs) for computing the entries of βˉ\bar{\beta}, using the constant depth circuits AgsA_{g_{s}}’s constructed above. Each output gate of C′C^{\prime} is an addition gate with fan-in e=\mboxpoly(N)e={\mbox{poly}}(N). Each gate at the second level from the top is a powering gate with fan-in cc, because the top gate of each AgsA_{g_{s}} is the powering gate with fan-in cc. For a fixed h∈Vh\in V, the circuit Ch′C^{\prime}_{h} obtained by instantiating C′C^{\prime} at v=hv=h is thus a diagonal depth three circuit with multiple outputs in the class Δ3[n,c,e]\Delta_{3}[n,c,e].

Since AgsA_{g_{s}}, for every gs∈Eg_{s}\in E, and B−1B^{-1} can be constructed in \mboxpoly(N){\mbox{poly}}(N) time, the construction of C′C^{\prime} takes \mboxpoly(N){\mbox{poly}}(N) time. More strongly, it can be computed by a uniform \mboxAC0\mbox{AC}^{0}-circuit of \mboxpoly(N){\mbox{poly}}(N) bit-size with oracle access to DET. Q.E.D.

In the final step, we put everything together to construct the circuit C=C[V,m,c]C=C[V,m,c] for computing R(Xc)R(X^{c}), as required in Theorem 8.5, given n,d,m,cn,d,m,c, and the specification ⟨V,G⟩\langle V,G\rangle of VV and GG as in (24).

Here RG(μ)R_{G}(\mu) is a rational number that can be computed in \mboxpoly(N){\mbox{poly}}(N) time using Lemma 8.7, since the degree of μ\mu is \mboxpoly(n,dm2){\mbox{poly}}(n,d^{m^{2}}). Let C′C^{\prime} be the circuit for computing βμ\beta_{\mu}’s as in Lemma 8.9. The circuit CC is obtained by adding a single addition gate that performs linear combinations of the various output nodes of C′C^{\prime} computing βμ\beta_{\mu}’s, the coefficients in the linear combination being the \mboxpoly(N){\mbox{poly}}(N)-time-computable rational numbers RG(μ)R_{G}(\mu)’s. Since the top gates of C′C^{\prime} are addition gates with fan-in ee, we can ensure, by merging the addition gates in the top two levels, that the depth of CC is the same as that of C′C^{\prime}. The top gate of CC after this merge is an addition gate with fan-in k=e2=O(\mboxpoly(N))k=e^{2}=O({\mbox{poly}}(N)).

Given n,d,m,cn,d,m,c, and ⟨V,G⟩\langle V,G\rangle as in (24), the specification of C′C^{\prime} can be computed in \mboxpoly(N){\mbox{poly}}(N) time by Lemma 8.9. After this, the specification of the circuit CC as above can also be computed in \mboxpoly(N){\mbox{poly}}(N) time. More strongly, it can be computed by a uniform \mboxAC0\mbox{AC}^{0}-circuit of \mboxpoly(N){\mbox{poly}}(N) bit-size with oracle access to DET.

For any fixed h∈Vh\in V, the circuit ChC_{h}, obtained by specializing the variables viv_{i}’s in CC to the coordinates of hh, is a diagonal depth three circuit in the class Δ3[n,c,k]\Delta_{3}[n,c,k], with k=e2=O(\mboxpoly(N))k=e^{2}=O({\mbox{poly}}(N)). This is because, by Lemma 8.9, Ch′C^{\prime}_{h} is a diagonal depth three circuit with multiple outputs in the class Δ3[n,c,e]\Delta_{3}[n,c,e], e=O(\mboxpoly(N))e=O({\mbox{poly}}(N)).

The categorical quotient V/GV/G is quasi-explicit (cf. Definition 5.1 (d)) when m=O(d)m=O(\sqrt{d}).

Proof: By Lemma 8.3 (b), ll and NN in Theorems 8.2 and 8.5 are O(2\mboxpolylog(n))O(2^{{\mbox{polylog}}(n)}), if m=O(d)m=O(\sqrt{d}). The result follows from Theorem 8.5, in conjunction with this fact.Q.E.D.

NNL for the general ring of invariants

Let VV be a finite dimensional representation of G=SLm(K)G=SL_{m}(K). Let K[V]G⊆K[V]K[V]^{G}\subseteq K[V] be the ring of invariants, and V/G:=spec(K[V]G)V/G:=spec(K[V]^{G}), the categorical quotient . We assume that V/GV/G and K[V]GK[V]^{G} are specified succinctly by the tuple ⟨V,G⟩\langle V,G\rangle in (24). The bit-length of this succinct specification is O(n+m)O(n+m).

Since V/GV/G is explicit when mm is constant (cf. Theorem 8.1), we can also specify it succinctly in this case, as per the general definition of an explicit variety (Definition 5.1), by the circuits C[v,m,c]C[v,m,c]’s in Theorem 8.5. This specification is equivalent when mm is constant, because, given ⟨V,G⟩\langle V,G\rangle, one can compute the circuits C[V,m,c]C[V,m,c]’s in Theorem 8.5 in \mboxpoly(n,m){\mbox{poly}}(n,m) time.

If V/GV/G is explicit (cf. Conjecture 5.3), the general definition of an s.s.o.p. for explicit varieties (Definition 5.6) specializes to the following concrete definition.

(b) A set S⊆K[V]GS\subseteq K[V]^{G} is an e.s.o.p. (explicit system of parameters) for K[V]GK[V]^{G} if (1) SS is an s.s.o.p. for K[V]GK[V]^{G}, and (2) the specification of SS, consisting of a circuit as above for each s∈Ss\in S, can be computed in \mboxpoly(n,m){\mbox{poly}}(n,m) time, given the specification ⟨V,G⟩\langle V,G\rangle as in (24).

If V/GV/G is strongly explicit then, by convention, we assume that a small specification as in (a) (4) for each element of s∈Ss\in S is a weakly skew circuit (cf. Section 2.1).

(c) Quasi-s.s.o.p. and quasi-e.s.o.p. are defined by replacing \mboxpoly(n,m){\mbox{poly}}(n,m) by 2\mboxpolylog(n,m)2^{{\mbox{polylog}}(n,m)}.

(d) S.s.o.p., e.s.o.p., and the related notions without degree restrictions are defined by dropping the degree requirement in (a) (3).

(e) We call an s.s.o.p. or an e.s.o.p. separating if SS in (a) is separating (cf. Section 7).

By the problem NNL for K[V]GK[V]^{G}, we mean the problem of constructing an s.s.o.p. for K[V]GK[V]^{G}, given ⟨V,G⟩\langle V,G\rangle. By the strong form of NNL, we mean the problem of constructing a separating s.s.o.p.

For constant mm, define a separating near-e.s.o.p. for K[V]GK[V]^{G} by replacing \mboxpoly(n,m){\mbox{poly}}(n,m) in the definition of a separating e.s.o.p. above by O(nO(log⁡log⁡n))O(n^{O(\log\log n)}).

We prove the following stronger form of Theorem 1.6 in this section.

There exists a separating near-e.s.o.p. for K[V]GK[V]^{G}, if mm is constant, and a separating quasi-e.s.o.p., if m=O(d)m=O(\sqrt{d}).

Before we turn to this goal, we begin with the following result for the construction of an h.s.o.p.

The problem of constructing an h.s.o.p. (cf. Definition 3.3) for K[V]GK[V]^{G} belongs to EXPSPACE for any mm, not necessarily constant.

When mm is constant, this result follows from Theorem 5.5, since V/GV/G is then explicit (Theorem 8.1). For general mm, it cannot be deduced from Theorem 5.5, since V/GV/G in general is not yet known be explicit, though it is conjectured to be so; cf. Conjecture 5.3.

Proof: Let F={f1,…,ft}F=\{f_{1},\ldots,f_{t}\} be the set of generators of K[V]GK[V]^{G} as in (25), and πV/G\pi_{V/G} the morphism from VV to KtK^{t} based on FF as there. Here tt is the dimension of K[V]≤lGK[V]^{G}_{\leq l}, with ll as in Theorem 8.2. This can be exponential in nn even when mm is constant; cf. the discussion before (25).

Using this embedding πV/G\pi_{V/G} of V/GV/G and Gröbner basis theory, we can compute the equations of V/G⊆KtV/G\subseteq K^{t} in work-space that is exponential in dim⁡(V/G)≤n\dim(V/G)\leq n, polynomial in the dimension tt of the ambient space, and poly-logarithmic in the maximum degree of the elements in FF; cf. Theorem 1 in . This work-space requirement is single exponential in nn and mm (since d≤nd\leq n by Lemma 8.3).

Applying Gröbner basis theory again to these equations of V/GV/G, we compute an h.s.o.p. for K[V]GK[V]^{G}. The work-space requirement of this algorithm is also exponential in nn and mm; cf. the proof of Theorem 4.1. Q.E.D.

If we insist on an h.s.o.p., then Proposition 9.3 is the best that we can do at present. But if we are willing to settle for an s.s.o.p. (which need not have the optimal cardinality) instead of an h.s.o.p., then Theorem 9.2 shows that a near-s.s.o.p. for K[V]GK[V]^{G} can be constructed in near-\mboxpoly(n){\mbox{poly}}(n) time if mm is constant, and more generally, a quasi-s.s.o.p. for K[V]GK[V]^{G} can be constructed in quasi-\mboxpoly(n){\mbox{poly}}(n) time if m=O(d)m=O(\sqrt{d}).

2 A Monte Carlo algorithm

We begin with the following result, which gives an efficient Monte Carlo algorithm for constructing a separating s.s.o.p., when mm is constant.

Suppose mm is constant. Then a separating s.s.o.p. for K[V]GK[V]^{G} can be constructed by a \mboxpoly(n){\mbox{poly}}(n)-time Monte Carlo algorithm that is correct with a high probability. In particular, a separating s.s.o.p. for K[V]GK[V]^{G} exists.

Proof: By Theorem 8.1, V/GV/G is explicit when mm is constant. Hence the result follows from Theorem 5.8. Q.E.D.

3 Reduction of NNL to the standard black-box identity testing for diagonal depth three circuits

The goal now is to derandomize this algorithm.

Since V/GV/G is strongly explicit (cf. Theorem 8.1) when mm is constant, and the image of the map πV/G\pi_{V/G} in (25) is closed (cf. Theorem 5.4 (a)), it follows from Theorem 5.13 and Remark 3 thereafter that the algorithm in Theorem 9.4 can be derandomized, assuming the standard black-box derandomization hypothesis for symbolic determinant identity testing. The following result shows that this derandomization is, in fact, possible assuming a much weaker hypothesis, namely, the standard black-box derandomization hypothesis for polynomial identity testing for diagonal depth three circuits (cf. Section 2.1). This hypothesis is that a hitting set against diagonal depth three circuits on nn variables with degree ≤e\leq e and top fan-in ≤k\leq k can be computed in \mboxpoly(s){\mbox{poly}}(s) time, where s=O(nek)s=O(nek) is the size of such circuits. The parallel black-box derandomization hypothesis in this context is that such a hitting set can be computed by a uniform \mboxAC0\mbox{AC}^{0}-circuit of \mboxpoly(s){\mbox{poly}}(s) bit-size with oracle access to DET. It is known that such a hitting set can be computed by a uniform \mboxAC0\mbox{AC}^{0}-circuit of quasi-\mboxpoly(s){\mbox{poly}}(s) bit-size .

Suppose the standard black-box derandomization hypothesis for polynomial identity testing for diagonal depth three circuits over KK holds. Then K[V]GK[V]^{G} has a separating e.s.o.p. if mm is constant.

Assuming the parallel black-box derandomization hypothesis for polynomial identity testing for diagonal depth three circuits, the specification of SS can be computed by a uniform \mboxAC0\mbox{AC}^{0}-circuit of \mboxpoly(N){\mbox{poly}}(N) bit-size with oracle access to DET.

Proof: Let NN be as above. Let k=O(\mboxpoly(N))k=O({\mbox{poly}}(N)) and ll be as in Theorem 8.5. Consider the class Δ3[n,l,2k]\Delta_{3}[n,l,2k] (cf. Section 8.3) of diagonal depth three circuits over nn variables, with total degree ≤l\leq l, and top fan-in ≤2k\leq 2k.

By our black-box derandomization hypothesis for diagonal depth three circuits over KK, there exists a hitting set TT against Δ3[n,l,2k]\Delta_{3}[n,l,2k] that can be computed in \mboxpoly(n,k,l)=\mboxpoly(N){\mbox{poly}}(n,k,l)={\mbox{poly}}(N) time. Assuming the parallel black-box derandomization hypothesis, TT can be computed by a uniform \mboxAC0\mbox{AC}^{0}-circuit of \mboxpoly(N){\mbox{poly}}(N) bit-size.

Fix such a TT. By the definition of a hitting set, for any circuit D∈Δ3[n,l,2k]D\in\Delta_{3}[n,l,2k] such that D(x)D(x), x=(x1,…,xn)x=(x_{1},\ldots,x_{n}), is not an identically zero polynomial, there exists b∈Tb\in T such that D(b)≠0D(b)\not=0.

For any b∈Tb\in T and 0<c≤l0<c\leq l, define the invariant

The elements of SS are homogeneous polynomials in vv of degree ≤l\leq l, which is \mboxpoly(n){\mbox{poly}}(n) if mm is constant.

Proof: Let w1,…,wnw_{1},\ldots,w_{n} be auxiliary variables. For every c≤lc\leq l, define the symbolic difference

Thus SS is separating. This proves the claim.

It follows from the claim and Theorem 7.7 that K[V]GK[V]^{G} is integral over the subring generated by SS.

For any b∈Tb\in T and 0<c≤l0<c\leq l, let Db,cD_{b,c} be the circuit obtained by specializing the circuit C[V,m,c]C[V,m,c] in Theorem 8.5 at x=bx=b. Then Db,cD_{b,c} computes rb,c=R(Xc)(v,b)r_{b,c}=R(X^{c})(v,b) as a polynomial in vv. We specify SS by giving, for every invariant rb,c∈Sr_{b,c}\in S, the specification of Db,cD_{b,c}. By Theorem 8.5, the circuit Db,cD_{b,c} has constant depth and \mboxpoly(N){\mbox{poly}}(N) bit-size. Hence, it can also be specified by a weakly skew circuit of \mboxpoly(N){\mbox{poly}}(N) bit-size.

By our black-box derandomization hypothesis, the specification of TT can be computed in \mboxpoly(N){\mbox{poly}}(N) time. Once TT is computed, using Theorem 8.5, we can compute in \mboxpoly(N){\mbox{poly}}(N) time, for each b∈Tb\in T and c≤lc\leq l, the specification of the circuit Db,cD_{b,c} computing the invariant rb,c∈Sr_{b,c}\in S. Thus the specification of SS in the form of a circuit Db,cD_{b,c} for each rb,cr_{b,c}, or the corresponding weakly skew circuit, can be computed in \mboxpoly(N){\mbox{poly}}(N) time. Hence, SS is a separating e.s.o.p.

Assuming the parallel black-box derandomization hypothesis, TT, and hence SS, can be computed by a uniform \mboxAC0\mbox{AC}^{0}-circuit of \mboxpoly(N){\mbox{poly}}(N) bit-size with oracle access to DET. Q.E.D.

4 Proof of Theorem 9.2

Proof: By Forbes, Saptharishi, and Shpilka , a hitting set against diagonal depth three circuits of size ≤s\leq s can be computed in O(sO(log⁡log⁡s))O(s^{O(\log\log s)}) time. The result follows from the proof of Theorem 9.5 in conjunction with this fact; we also need Lemma 8.3, if m=O(d)m=O(\sqrt{d}). Q.E.D.

5 General m𝑚m

The following is the current best result for general mm.

Let VV be a finite dimensional representation of G=SLm(K)G=SL_{m}(K). Suppose V/GV/G is explicit (cf. Definition 5.2). Then K[V]GK[V]^{G} has a separating e.s.o.p., assuming the standard black-box derandomization hypothesis for low-degree polynomial identity testing over KK

Proof: The proof is similar to that of Theorem 9.5, using the assumed explicitness of V/GV/G in place of Theorem 8.5, and the black-box derandomization hypothesis for low-degree polynomial identity testing in place of the black-box derandomization hypothesis for diagonal depth three circuits. Q.E.D.

Remark 1: If V/GV/G is strongly explicit (cf. Definition 5.2), then it follows similarly that K[V]GK[V]^{G} has a separating e.s.o.p., assuming the standard black-box derandomization hypothesis for symbolic determinant identity testing. If V/GV/G is explicit without any degree restrictions, then one has to assume instead the black-box derandomization hypothesis for polynomial identity testing without any degree restrictions.

Remark 2: All these results (and Theorems 9.8 (a), and 9.9 (b) below) also hold assuming explicitness of V/GV/G in the relaxed sense (cf. Definition 5.2 (e)).

Remark 3: The derandomization hypothesis in Theorem 9.7 can be traded, up to a quasi-prefix, with the hardness hypothesis in Theorem 2.1.

We also note down a consequence of the proof of Theorem 9.7.

Let VV be a finite dimensional representation of G=SLm(K)G=SL_{m}(K). Then:

(b) The problem belongs to P, if mm is constant.

(c) It belongs to DET ⊆\subseteq NC, for constant mm, if we do not ask for a separating invariant if the closures do not intersect.

Proof: (a): The proof of the first statement is similar to that of Theorem 7.8, using the assumed explicitness of V/GV/G in place of Theorem 6.1. The second statement is implicit in the proof of the first statement.

(b) and (c): Suppose mm is constant. Using Theorem 8.5 in place of Theorem 6.1 in the proof of Theorem 7.8, we get a co-RNC-algorithm for the problem. This algorithm only uses white-box (cf. Section 2.2) polynomial identity testing for diagonal depth three circuits. It can be derandomized using the DET-algorithm for this test, which follows from Raz and Shpilka , Arvind et al. , and Saxena . This yields a DET-algorithm as stated in (c) that, however, does not return a separating invariant if the orbit-closures do not intersect. To get a separating invariant if the closures intersect, as needed in (b), we use instead a polynomial time algorithm for white-box polynomial identity testing for diagonal depth three circuits that returns a witness input if the polynomial computed by the circuit is not identically zero. Such an algorithm can be obtained by combining with a proof technique in (cf. Appendix A therein). Using this witness input, a separating invariant can be constructed if the orbit-closures do not intersect; cf. the proof of Theorem 7.8. Q.E.D.

6 Generalization to reductive algebraic groups

The preceding results for SLmSL_{m} can be generalized to other reductive algebraic groups as follows.

Let KK be algebraically closed field of characteristic zero. Let GG be a connected, reductive, algebraic group over KK, specified by its root datum . Let VV be a finite dimensional rational representation of GG. Given any highest weight λ\lambda of GG, let Vλ(G)V_{\lambda}(G) denote the associated irreducible representation of GG . We specify VV, as in (24), by giving (in unary) n=dim⁡(V)n=\dim(V) and the multiplicities of Vλ(G)V_{\lambda}(G)’s that occur with non-zero multiplicities in VV.

(a) Analogues of Theorems 9.2, 9.5, and 9.8 (b) hold, when dim⁡(G)\dim(G) is constant

(b) Analogues of Theorems 9.7 and 9.8 (a) hold, without any restriction on dim⁡(G)\dim(G). In particular, if V/GV/G is explicit, K[V]GK[V]^{G} has a separating e.s.o.p., assuming the standard black-box derandomization hypothesis for low-degree polynomial identity testing over KK.

This can be proved by extending the proof for SLmSL_{m}; cf. the preliminary version for details.

It may be conjectured that, for any finite dimensional representation VV of a connected, reductive, algebraic group GG in characteristic zero, with the specification of VV and GG as above, V/GV/G is explicit, if K[V]GK[V]^{G} has a set of generators of \mboxpoly(n,dim⁡(G)){\mbox{poly}}(n,\dim(G)) degree, and is explicit without any degree restrictions, in general (cf. Definition 5.2).

In view of the results and arguments above, the strong form of NNL for K[V]GK[V]^{G}, for any finite dimensional representation VV of any reductive group GG in any characteristic, may be conjectured to be in P, along with the GG-orbit-closures-intersection and the null cone membership problems (cf. Theorem 9.8 and Remark 4 thereafter).

Extensions

In this section we extend the results in Sections 6 and 7 to arbitrary characteristics (cf. Section 10.1), and to quivers (cf. Section 10.2). We then deduce their implications for parametrization of closed orbits in representations of reductive groups (cf. Section 10.3), and for parametrization of semi-simple representations of finitely generated algebras (cf. Section 10.4). We also extend the results in Sections 4 and 5 to large enough positive characteristics (cf. Section 10.5). Henceforth, KK will denote an algebraically closed field of any characteristic pp.

First, we prove Theorem 1.4 in arbitrary characteristic. It follows from the following stronger result.

Let V=Mm(K)rV=M_{m}(K)^{r}, with the adjoint action of G=SLm(K)G=SL_{m}(K). Separating s.s.o.p. and e.s.o.p. for K[V]GK[V]^{G}, and the black-box derandomization hypothesis for low-degree circuits are defined as in characteristic zero (cf. Sections 7 and 2.2). If the characteristic pp is positive, the constants in the circuits specifying the s.s.o.p. and the entries of the elements of the hitting set against low-degree circuits are assumed to be in FplF_{p^{l}}, the finite field with plp^{l} elements, with l=O(log⁡(m))l=O(\log(m)).

(a) Suppose p∉[2,⌊m/2⌋]p\not\in[2,{\lfloor m/2\rfloor}]. Then a separating e.s.o.p. exists for K[V]GK[V]^{G}, assuming the standard black-box derandomization hypothesis for polynomial identity testing for read-once oblivious algebraic branching programs (cf. Section 2.1). A separating quasi-e.s.o.p. exists unconditionally.

(b) A separating e.s.o.p. exists for K[V]GK[V]^{G} for any pp, assuming the standard black-box derandomization hypothesis for symbolic determinant identity testing over KK.

(c) The problem of deciding if the closures of the GG-orbits of two rational points in VV intersect belongs to co-RDET ⊆\subseteq co-RNC for any pp. It belongs to NC if p∉[2,⌊m/2⌋]p\not\in[2,{\lfloor m/2\rfloor}]. By a rational point in VV, when p>0p>0, we mean a point whose coefficients belong to a finite extension of FpF_{p}.

The known upper bound on the degrees of the generators in the First Fundamental Theorem for matrix invariants in positive characteristic in Donkin is exponential in mm, unlike the polynomial bound in the First Fundamental Theorem for matrix invariants in characteristic zero (cf. Theorem 6.2). Hence the proof of Theorem 7.6 cannot be extended to arbitrary characteristic using Donkin in place of Procesi and Razmyslov . But, as we shall see below, the proof can be extended using the following geometric alternative to Theorem 6.2 in arbitrary characteristic.

Let U=(U1,…,Ur)U=(U_{1},\ldots,U_{r}) denote an rr-tuple of variable m×mm\times m matrices as in Section 6. Identify K[V]K[V] with the ring K[U]=K[U1,…,Ur]K[U]=K[U_{1},\ldots,U_{r}] generated by the variable entries of UiU_{i}’s. Given any word α∈[r]∗\alpha\in[r]^{*}, define Tα(U)∈K[V]GT_{\alpha}(U)\in K[V]^{G} as in (15). For any m×mm\times m matrix XX, let ci(X)c_{i}(X) denote the ii-th coefficient of its characteristic polynomial, so that

Define a separating set S⊆K[V]GS\subseteq K[V]^{G} in arbitrary characteristic pp just as it was defined in characteristic zero in Section 7.

(a) The set {ci(Uj)}∪{Tα(U)}⊆K[V]G\{c_{i}(U_{j})\}\cup\{T_{\alpha}(U)\}\subseteq K[V]^{G}, where ⌊m/2⌋<i≤m{\lfloor m/2\rfloor}<i\leq m, 1≤j≤r1\leq j\leq r, and α∈[r]∗\alpha\in[r]^{*} ranges over all words of length ≤m3\leq m^{3}, is separating, if p∉[2,⌊m/2⌋]p\not\in[2,{\lfloor m/2\rfloor}].

(b) The set {ci,α(U) ∣ 0≤i≤m}⊆K[V]G\{c_{i,\alpha}(U)\ |\ 0\leq i\leq m\}\subseteq K[V]^{G}, where α=i1i2⋯∈[r]∗\alpha=i_{1}i_{2}\cdots\in[r]^{*} ranges over all words of length ≤m2\leq m^{2}, and ci,α(U)=ci(Ui1Ui2⋯ )c_{i,\alpha}(U)=c_{i}(U_{i_{1}}U_{i_{2}}\cdots), is separating for any pp.

In characteristic zero, this result follows from Theorem 6.2, letting α\alpha range over the words of length ≤m2\leq m^{2}. For a proof in arbitrary characteristic, we need the following two results.

Let R^=K⟨U1,…,Ur⟩\hat{R}=K\langle U_{1},\ldots,U_{r}\rangle be the free non-commutative algebra over KK generated by the rr matrix-variables U1,…,UrU_{1},\ldots,U_{r} (not the rm2rm^{2} variable entries of UiU_{i}’s). Given any A=(A1,…,Ar)∈Mm(K)rA=(A_{1},\ldots,A_{r})\in M_{m}(K)^{r}, let ρA:R^→Mm(K)\rho_{A}:\hat{R}\rightarrow M_{m}(K) denote the mm-dimensional representation of R^\hat{R} given by Ui→AiU_{i}\rightarrow A_{i}. Clearly, two tuples A,B∈Mm(K)rA,B\in M_{m}(K)^{r} belong to the same GG-orbit iff ρA\rho_{A} and ρB\rho_{B} are isomorphic representations. We say that A∈Mm(K)rA\in M_{m}(K)^{r} is semi-simple if ρA\rho_{A} is a semi-simple representation of R^\hat{R}.

The GG-orbit of A∈Mm(K)rA\in M_{m}(K)^{r} is closed iff AA is semi-simple.

Let RR be any finite-dimensional algebra over KK. Let ρ:R→Mm(K)\rho:R\rightarrow M_{m}(K) be an mm-dimensional representation of RR. For any r∈Rr\in R, let χρ(r)\chi_{\rho}(r) denote the characteristic polynomial of ρ(r)\rho(r). Let Q⊆RQ\subseteq R be any subset that spans RR over KK.

(cf. , Theorem 5.7 in and its proof) Two finite dimensional semi-simple representations ρ\rho and ρ′\rho^{\prime} of RR are isomorphic iff χρ(q)=χρ′(q)\chi_{\rho}(q)=\chi_{\rho^{\prime}}(q) for all q∈Qq\in Q. If RR is not a finite dimensional algebra, then the same statement also holds if ρ(Q)\rho(Q) and ρ′(Q)\rho^{\prime}(Q) span ρ(R)\rho(R) and ρ′(R)\rho^{\prime}(R), respectively.

This follows from the proof of Theorem 5.7 in .

(a) By the generalization of Theorem 5.4 (d) to arbitrary characteristic (cf. Theorem 1.1 in ), it suffices to show that the set {ci(Uj)}∪{Tα(U)}\{c_{i}(U_{j})\}\cup\{T_{\alpha}(U)\} of invariants in (a) separates closed GG-orbits in Mm(K)rM_{m}(K)^{r}, i.e., given two distinct closed GG-orbits, there exists an invariant in the set that assumes different values on the orbits.

By Theorem 10.3, A∈Mm(K)rA\in M_{m}(K)^{r} has a closed GG-orbit iff AA is semi-simple. By definition, this is so iff the mm-dimensional representation ρA\rho_{A} of R^=K⟨U1,…,Ur⟩\hat{R}=K\langle U_{1},\ldots,U_{r}\rangle given by Ui→AiU_{i}\rightarrow A_{i} is semi-simple.

Furthermore, two semi-simple tuples A,B∈Mm(K)rA,B\in M_{m}(K)^{r} are in the same (closed) GG-orbit iff the two representations ρA\rho_{A} and ρB\rho_{B} of R^\hat{R} are isomorphic. Let S⊆[r]∗S\subseteq[r]^{*} be the subset of words of length ≤m3\leq m^{3}. It suffices to show that, given any two semi-simple A,B∈Mm(K)rA,B\in M_{m}(K)^{r} with ρA≇ρB\rho_{A}\not\cong\rho_{B}, there exists an α∈S\alpha\in S such that Tα(A)≠Tα(B)T_{\alpha}(A)\not=T_{\alpha}(B), or there exist an ii, with ⌊m/2⌋<i≤m{\lfloor m/2\rfloor}<i\leq m, and j≤rj\leq r such that ci(Aj)≠ci(Bj)c_{i}(A_{j})\not=c_{i}(B_{j}), where AjA_{j} denotes the jj-th matrix in AA.

Let K[A]K[A] denote the subalgebra of Mm(K)M_{m}(K) generated by AiA_{i}’s, the subalgebra K[B]K[B] being similar. Clearly ρA(R^)=K[A]\rho_{A}(\hat{R})=K[A], and ρB(R^)=K[B]\rho_{B}(\hat{R})=K[B]. Since dim⁡(K[A])≤dim⁡(Mm(K))=m2\dim(K[A])\leq\dim(M_{m}(K))=m^{2}, it follows (cf. Pappacena ) that the words in AiA_{i}’s of length ≤m2\leq m^{2} span K[A]K[A]. Similarly, the words in BiB_{i}’s of length ≤m2\leq m^{2} span K[B]K[B]. Let QQ be the set of words in UiU_{i}’s of length ≤m2\leq m^{2}. It follows that ρA(Q)\rho_{A}(Q) and ρB(Q)\rho_{B}(Q) span ρA(R^)=K[A]\rho_{A}(\hat{R})=K[A] and ρB(R^)=K[B]\rho_{B}(\hat{R})=K[B], respectively.

Suppose to the contrary that Tα(A)=Tα(B)T_{\alpha}(A)=T_{\alpha}(B), for all α∈S\alpha\in S, and ci(Aj)=ci(Bj)c_{i}(A_{j})=c_{i}(B_{j}), for all ⌊m/2⌋<i≤m{\lfloor m/2\rfloor}<i\leq m and j≤rj\leq r. Then we will show that χρA(q)=χρB(q)\chi_{\rho_{A}}(q)=\chi_{\rho_{B}}(q), for all q∈Qq\in Q. For this, we have to show that ck,α(A)=ck,α(B)c_{k,\alpha}(A)=c_{k,\alpha}(B), for every α∈[r]∗\alpha\in[r]^{*} of length ≤m2\leq m^{2} and 1≤k≤m1\leq k\leq m, where ck,α(A)=ck(Ai1Ai2⋯ )c_{k,\alpha}(A)=c_{k}(A_{i_{1}}A_{i_{2}}\cdots) if α=i1i2⋯\alpha=i_{1}i_{2}\cdots.

Fix any word α=i1⋯il\alpha=i_{1}\cdots i_{l} of length l≤m2l\leq m^{2}. It follows that αj=α⋯α\alpha^{j}=\alpha\cdots\alpha (jj times), for any j≤mj\leq m, belongs to SS. Hence, by our assumption, it follows that Tαj(A)=Tαj(B)T_{\alpha^{j}}(A)=T_{\alpha^{j}}(B) for all j≤mj\leq m, and ci(Aj)=ci(Bj)c_{i}(A_{j})=c_{i}(B_{j}) for all ⌊m/2⌋<i≤m{\lfloor m/2\rfloor}<i\leq m and j≤rj\leq r. By Lemma 2 in Domokos , ck,α(A)c_{k,\alpha}(A), 1≤k≤m1\leq k\leq m, is a polynomial in ct,α(A)c_{t,\alpha}(A)’s, t≤⌊m/2⌋t\leq{\lfloor m/2\rfloor}, and ci(Aj)c_{i}(A_{j})’s, ⌊m/2⌋<i≤m{\lfloor m/2\rfloor}<i\leq m and j≤rj\leq r. Since p∉[2,⌊m/2⌋]p\not\in[2,{\lfloor m/2\rfloor}], by Newton’s identities, ct,α(A)c_{t,\alpha}(A), for t≤⌊m/2⌋t\leq{\lfloor m/2\rfloor}, can be expressed as:

This shows that ct,α(A)c_{t,\alpha}(A), for t≤⌊m/2⌋t\leq{\lfloor m/2\rfloor}, is a polynomial in Tαj(A)T_{\alpha^{j}}(A)’s, j≤⌊m/2⌋j\leq{\lfloor m/2\rfloor}. The story for BB is similar.

It follows that ck,α(A)=ck,α(B)c_{k,\alpha}(A)=c_{k,\alpha}(B), for every α∈[r]∗\alpha\in[r]^{*} of length ≤m2\leq m^{2} and 1≤k≤m1\leq k\leq m. That is, χρA(q)=χρB(q)\chi_{\rho_{A}}(q)=\chi_{\rho_{B}}(q) for all q∈Qq\in Q.

The representations ρA\rho_{A} and ρB\rho_{B} are semi-simple, since AA and BB are semi-simple. Furthermore, ρA(Q)\rho_{A}(Q) and ρB(Q)\rho_{B}(Q) span ρA(R^)=K[A]\rho_{A}(\hat{R})=K[A] and ρB(R^)=K[B]\rho_{B}(\hat{R})=K[B], respectively. Hence, it follows from Theorem 10.4, applied to R^\hat{R}, that ρA≅ρB\rho_{A}\cong\rho_{B}; a contradiction.

(b) The proof is similar to that of (a). It holds in arbitrary characteristic, since we do not need to use Newton’s identities now. Q.E.D.

(a): Fix any p∉[2,⌊m/2⌋]p\not\in[2,{\lfloor m/2\rfloor}]. Let Y=(y1,…,ym2)Y=(y_{1},\ldots,y_{m^{2}}) be a tuple of auxiliary variables. For any l≤m2l\leq m^{2}, let Pl(Y,U):=∑αYαTα(U)P_{l}(Y,U):=\sum_{\alpha}Y_{\alpha}T_{\alpha}(U), where α=α1α2⋯\alpha=\alpha_{1}\alpha_{2}\cdots ranges over all words of length ll with each αj∈[r]\alpha_{j}\in[r], and Yα=∏j=1lyjαjY_{\alpha}=\prod_{j=1}^{l}y_{j}^{\alpha_{j}}.

By Theorem 10.2 (a), the coefficients ci(Uj)c_{i}(U_{j})’s of det⁡(zI−Uj)\det(zI-U_{j})’s (considered as polynomials in zz with coefficients in K[U]K[U]), 1≤j≤r1\leq j\leq r, and the coefficients of Pl(Y,U)P_{l}(Y,U)’s (considered as polynomials in YY with coefficients in K[U]K[U]), l≤m2l\leq m^{2}, form a separating set of invariants in K[V]GK[V]^{G}.

Furthermore (cf. the proof of Lemma 7.9), each Pl(Y,U)P_{l}(Y,U) can be computed by a read-once oblivious algebraic branching program over YY and UU of \mboxpoly(l,m,r){\mbox{poly}}(l,m,r) size, thinking of the entries of UiU_{i}’s as indeterminate constants.

is a separating set of invariants in K[V]GK[V]^{G}, if p∉[2,⌊m/2⌋]p\not\in[2,{\lfloor m/2\rfloor}].

Proof of the claim: Let A=(A1,…,Ar)A=(A_{1},\ldots,A_{r}) and A′=(A1′,…,Ar′)A^{\prime}=(A_{1}^{\prime},\ldots,A_{r}^{\prime}) be any two rr-tuples in V=Mm(K)rV=M_{m}(K)^{r} such that, for some invariant h∈K[V]Gh\in K[V]^{G}, h(A)≠h(A′)h(A)\not=h(A^{\prime}). We have to show that some element in SS assumes distinct values at AA and A′A^{\prime}.

By Theorem 10.2 (a), either (1) some coefficient ci(Uj)c_{i}(U_{j}) of det⁡(zI−Uj)\det(zI-U_{j}) (considered as a polynomial in zz), for some j≤rj\leq r, or (2) some coefficient of Pl(Y,U)P_{l}(Y,U) (considered as a polynomial in YY), for some l≤m2l\leq m^{2}, assumes different values at AA and A′A^{\prime}.

In the first case, since det⁡(zI−Uj)\det(zI-U_{j}), as a polynomial in zz, has degree mm, it follows that det⁡(aiI−Aj)≠det⁡(aiI−Aj)\det(a_{i}I-A_{j})\not=\det(a_{i}I-A_{j}) for some 0≤i≤m0\leq i\leq m. Hence det⁡(aiI−Uj)∈S\det(a_{i}I-U_{j})\in S assumes distinct values at AA and A′A^{\prime} in this case.

It follows that SS is a separating set of invariants in K[V]GK[V]^{G}. This proves the claim.

Every element of SS is clearly homogeneous of \mboxpoly(m,r){\mbox{poly}}(m,r) degree. By the generalization of Theorem 7.7 to arbitrary characteristic (cf. Theorem 2.3.12 in ), it follows that K[V]GK[V]^{G} is integral over the subring generated by SS.

The size of SS is \mboxpoly(m,r){\mbox{poly}}(m,r). Since the hitting set BB is explicit, and Pl(Y,Uj)P_{l}(Y,U_{j})’s and det⁡(aiI−Uj)\det(a_{i}I-U_{j})’s have explicit weakly skew circuits, it follows that the specification of SS, consisting of a weakly skew circuit for its every element, can be computed in \mboxpoly(m,r){\mbox{poly}}(m,r) time. Hence SS is a separating e.s.o.p. of K[V]GK[V]^{G}.

This proves the first statement in Theorem 10.1 (a).

The second statement follows from this proof of the first statement, inserting quasi-prefixes in appropriate places, in conjunction with the black-box quasi-derandomization of polynomial identity testing for read-once oblivious algebraic branching programs in Forbes and Shpilka , which holds in arbitrary characteristic.

(b) By Theorem 10.2 (b), the set {ci,α(U) ∣ 0≤i≤m}⊆K[V]G\{c_{i,\alpha}(U)\ |\ 0\leq i\leq m\}\subseteq K[V]^{G}, where α=i1i2⋯∈[r]∗\alpha=i_{1}i_{2}\cdots\in[r]^{*} ranges over all words of length ≤m2\leq m^{2} and ci,α(U)=ci(Ui1Ui2⋯ )c_{i,\alpha}(U)=c_{i}(U_{i_{1}}U_{i_{2}}\cdots), is a separating set of invariants in K[V]GK[V]^{G}, for any pp.

Introduce new variables yy and zj,sz_{j,s}, 1≤j≤m21\leq j\leq m^{2}, 0≤s≤r0\leq s\leq r. Let z=(..,zj,s,..)z=(..,z_{j,s},..) denote the tuple of zj,sz_{j,s}’s. Let

where II denotes the m×mm\times m identity matrix. This polynomial remains invariant under the adjoint action of GG on the tuple U=(U1,…,Ur)U=(U_{1},\ldots,U_{r}). Hence the coefficients of p(U,y,z)p(U,y,z), considered as a polynomial in yy and zz with coefficients in K[U]K[U], belong to K[U]G=K[V]GK[U]^{G}=K[V]^{G}.

For any α=i1i2⋯∈[r]∗\alpha=i_{1}i_{2}\cdots\in[r]^{*} of length ≤m2\leq m^{2}, we can set each zj,sz_{j,s} to either zero or one so that p(U,y,z)p(U,y,z) specializes to the characteristic polynomial of Ui1Ui2⋯U_{i_{1}}U_{i_{2}}\cdots. It follows that the coefficients of p(U,y,z)p(U,y,z), considered as a polynomial in yy and zz with coefficients in K[U]GK[U]^{G}, form a separating set of invariants in K[V]GK[V]^{G}.

The polynomial p(U,y,z)p(U,y,z) in (43) has a weakly skew circuit (cf. Section 2.1) of O(\mboxpoly(m,r))O({\mbox{poly}}(m,r)) size over y,zy,z, and UU. By the polynomial equivalence between weakly skew circuits and symbolic determinants , p(U,y,z)p(U,y,z) can also be expressed as a symbolic determinant of size q=O(\mboxpoly(m,r))q=O({\mbox{poly}}(m,r)) over y,zy,z, and UU. By our assumption, there exists an explicit \mboxpoly(m,r){\mbox{poly}}(m,r)-time-computable hitting set BB against all symbolic determinants over yy and zz of size qq. Note that BB is defined by considering symbolic determinants over yy and zz, not over y,zy,z, and UU. Fix such as a BB.

The set S={p(U,b1,b2) ∣ (b1,b2)∈B}S=\{p(U,b_{1},b_{2})\ |\ (b_{1},b_{2})\in B\} is a set of separating invariants in K[V]GK[V]^{G}, for any pp.

The proof is similar to that of Claim 10.5, with Theorem 10.2 (b) in place of Theorem 10.2 (a). The rest of the proof of Theorem 10.1 (b) is similar to that of the first statement in Theorem 10.1 (a).

(c): Given two rational points A,A′∈V=Mm(K)rA,A^{\prime}\in V=M_{m}(K)^{r}, we want to decide if the closures of the GG-orbits of AA and A′A^{\prime} intersect. By the generalization of Theorem 5.4 (d) to arbitrary characteristic (cf. Theorem 1 in ), this is so iff every invariant in K[V]GK[V]^{G} assumes the same value at AA and A′A^{\prime}, or equivalently, if every invariant in any separating set of invariants in K[V]GK[V]^{G} assumes the same value at AA and A′A^{\prime}.

If p∉[2,⌊m/2⌋]p\not\in[2,{\lfloor m/2\rfloor}], then we can give a deterministic NC-algorithm for the problem as follows.

We also note down the following consequence of the proof of Theorem 10.1 (b). Define strong explicitness of V/GV/G in the relaxed sense by extending Definition 5.2 (e) to positive characteristic in the obvious way.

The categorical quotient V/GV/G is strongly explicit in the relaxed sense in any characteristic, with p(U,y,z)p(U,y,z) in (43) as the defining polynomial.

Remark (on matrix semi-invariants): We can also let G=SLm(K)×SLm(K)G=SL_{m}(K)\times SL_{m}(K), and V=Mm(K)rV=M_{m}(K)^{r}, with the left-right action of GG, which maps (C1,…,Cr)∈V(C_{1},\ldots,C_{r})\in V, given (A,B)∈G(A,B)\in G, to (AC1B−1,…,ACrB−1)(AC_{1}B^{-1},\ldots,AC_{r}B^{-1}). In characteristic zero, the recent polynomial degree bound in , in conjunction with , implies that the categorical quotient V/GV/G is then strongly explicit. Hence, by Theorem 9.9 (b) and Remark 1 after Theorem 9.7, K[V]GK[V]^{G} has a separating e.s.o.p. in this case, assuming the black-box derandomization hypothesis for symbolic determinant identity testing. It would be interesting to make this result unconditional.

2 Generalization to quivers

Theorem 10.1 can be generalized to arbitrary quivers as follows.

where Mϕ(K)M_{\phi}(K) denotes the space of m(h(ϕ))×m(t(ϕ))m(h(\phi))\times m(t(\phi)) matrices with entries in KK. There is a canonical action of

for any g=(g(1),…,g(l))∈Gg=(g(1),\ldots,g(l))\in G and W∈V(Q,m)W\in V(Q,m).

The analogue of Theorem 10.1, after replacing mm there with ∣m∣|m| here, holds for VV and GG as above.

For the proof, we recall some results concerning the path algebra of a quiver.

Let RQR_{Q} be the path algebra (cf. Section 1.2 in ) of QQ. This is the associative algebra generated by the variables eie_{i}, i∈Q0i\in Q_{0}, and eϕe_{\phi}, ϕ∈Q1\phi\in Q_{1}, subject to the relations:

Given two representations W1W_{1} and W2W_{2} of QQ, a morphism f:W1→W2f:W_{1}\rightarrow W_{2} between these two representations is a family of linear morphisms {f(i):W1(i)→W2(i) ∣ i∈Q0}\{f(i):W_{1}(i)\rightarrow W_{2}(i)\ |\ i\in Q_{0}\} such that, for all ϕ∈Q1\phi\in Q_{1}, W2(ϕ)∘f(t(ϕ))=f(h(ϕ))∘W1(ϕ)W_{2}(\phi)\circ f(t(\phi))=f(h(\phi))\circ W_{1}(\phi). Thus the set of representations of QQ is a category, and two representations of QQ are isomorphic iff they are in the same GG-orbit.

(cf. Proposition 1.2.2 in ) The category of representations of QQ is equivalent to the category of left RQR_{Q}-modules.

Let W=({W(i)},{Wϕ})W=(\{W(i)\},\{W_{\phi}\}) be any representation of QQ with the dimension vector m=(m(1),m(2),…)m=(m(1),m(2),\ldots). For any i∈Q0i\in Q_{0}, let MiWM^{W}_{i} denote the ∣Q0∣×∣Q0∣|Q_{0}|\times|Q_{0}|-block matrix whose (1) (i′,j′)(i^{\prime},j^{\prime})-th block, for 1≤i′,j′≤∣Q0∣1\leq i^{\prime},j^{\prime}\leq|Q_{0}| with i′≠j′i^{\prime}\not=j^{\prime} or i′=j′≠ii^{\prime}=j^{\prime}\not=i, is the m(i′)×m(j′)m(i^{\prime})\times m(j^{\prime}) zero-matrix, and (2) the (i,i)(i,i)-th block is the m(i)×m(i)m(i)\times m(i) identity matrix. For any ϕ∈Q1\phi\in Q_{1}, let MϕWM^{W}_{\phi} denote the ∣Q0∣×∣Q0∣|Q_{0}|\times|Q_{0}|-block matrix defined similarly, whose (h(ϕ),t(ϕ))(h(\phi),t(\phi))-th block is WϕW_{\phi}, and all other blocks are zero.

It can be checked that the representation WW of QQ defines the left RQR_{Q}-module W^:=⨁iW(i)\hat{W}:=\bigoplus_{i}W(i), on which the action of eie_{i}, i∈Qii\in Q_{i}, is given by the matrix MiWM^{W}_{i}, and the action of eϕe_{\phi} is given by MϕWM^{W}_{\phi}. The representation W^\hat{W} is completely specified by the matrix tuple MW:=(⋯ ,MiW,⋯ ,MϕW,⋯ )M^{W}:=(\cdots,M^{W}_{i},\cdots,M^{W}_{\phi},\cdots), i∈Q0i\in Q_{0}, ϕ∈Q1\phi\in Q_{1}, of ∣m∣×∣m∣|m|\times|m| matrices. We think of this tuple as an element of V^:=M∣m∣(K)∣Q0∣+∣Q1∣\hat{V}:=M_{|m|}(K)^{|Q_{0}|+|Q_{1}|}.

(cf. Theorem 4.1 in King ) The GG-orbit of a representation WW of QQ is closed iff the RQR_{Q}-module W^\hat{W} is semi-simple.

Proof of Theorem 10.8: We only show how the analogue of Theorem 10.1 (a) for quivers can be deduced from Theorem 10.1 (a) for matrix invariants. The story for the analogues of Theorem 10.1 (b) and (c) is similar.

So assume that the characteristic p∉[2,⌊∣m∣/2⌋]p\not\in[2,{\lfloor|m|/2\rfloor}], and that the black-box derandomization hypothesis for polynomial identity testing for read-once oblivious algebraic branching programs holds.

Let VV be the representation space of QQ associated with the dimension vector mm. Consider the adjoint action of G^=SL∣m∣(K)\hat{G}=SL_{|m|}(K) on V^=M∣m∣(K)∣Q0∣+∣Q1∣\hat{V}=M_{|m|}(K)^{|Q_{0}|+|Q_{1}|}. By Theorem 10.1 (a) and our black-box derandomization hypothesis, the invariant ring K[V^]G^K[\hat{V}]^{\hat{G}} has a separating e.s.o.p. S^\hat{S} that can be computed in \mboxpoly(∣m∣,∣Q0∣,∣Q1∣){\mbox{poly}}(|m|,|Q_{0}|,|Q_{1}|) time. Fix such an S^\hat{S}.

For the tuple U=(…,Uϕ,…)U=(\ldots,U_{\phi},\ldots), ϕ∈Q1\phi\in Q_{1}, of variable matrices as before, define the matrices MiUM^{U}_{i}, i∈Q0i\in Q_{0}, and MϕUM^{U}_{\phi}, ϕ∈Q1\phi\in Q_{1}, just as we defined MiWM^{W}_{i} and MϕWM^{W}_{\phi}, replacing WϕW_{\phi}’s by UϕU_{\phi}’s in the definition.

This defines a generic representation of RQR_{Q} on ⊕iKm(i)\oplus_{i}K^{m(i)} specified by the matrix tuple MU=(⋯ ,MiU,⋯ ,MϕU,⋯ )M^{U}=(\cdots,M^{U}_{i},\cdots,M^{U}_{\phi},\cdots), i∈Q0i\in Q_{0}, ϕ∈Q1\phi\in Q_{1}, of ∣m∣×∣m∣|m|\times|m| matrices. This tuple can be thought of as a generic point in V^\hat{V}, and we can evaluate each invariant in S^\hat{S} at MUM^{U}. It is easy to see that, for each s^∈S^\hat{s}\in\hat{S}, s^(MU)∈K[V]G\hat{s}(M^{U})\in K[V]^{G}.

Let S={s^(MU) ∣ s^∈S^}S=\{\hat{s}(M^{U})\ |\ \hat{s}\in\hat{S}\}.

The set SS is a separating set of invariants in K[V]GK[V]^{G}.

Proof of the claim: By the generalization of Theorem 5.4 (d) to arbitrary characteristic (cf. Theorem 1.1 in ), it suffices to show that SS separates the closed GG-orbits in VV.

So suppose A,A′∈VA,A^{\prime}\in V are two representations of QQ whose GG-orbits are closed and distinct. We want to show that some invariant in SS assumes distinct values on these orbits.

Since the GG-orbits of AA and A′A^{\prime} are distinct, it follows that AA and A′A^{\prime} are not isomorphic representations of QQ. Hence, by Proposition 10.9, the RQR_{Q}-modules A^\hat{A} and A^′\hat{A}^{\prime} are not isomorphic.

Since the GG-orbits of AA and A′A^{\prime} are closed, it follows from Theorem 10.10 that the RQR_{Q}-modules A^\hat{A} and A^′\hat{A}^{\prime} are semi-simple. Hence, by Theorem 10.3, the G^\hat{G}-orbits of the matrix tuples MA^M^{\hat{A}} and MA^′M^{\hat{A}^{\prime}} are closed. Since A^\hat{A} and A^′\hat{A}^{\prime} are not isomorphic, it follows that the G^\hat{G}-orbits of MA^M^{\hat{A}} and MA^′M^{\hat{A}^{\prime}} are distinct and closed. Since S^\hat{S} is a separating set of invariants in K[V^]G^K[\hat{V}]^{\hat{G}}, it follows, by the generalization of Theorem 5.4 (d) to arbitrary characteristic , that there exists an invariant s^∈S^\hat{s}\in\hat{S} that assumes distinct values at MA^M^{\hat{A}} and MA^′M^{\hat{A}^{\prime}}.

But, s^(MA^)=s^(MU)(A)\hat{s}(M^{\hat{A}})=\hat{s}(M^{U})(A), and similarly, s^(MA^′)=s^(MU)(A′)\hat{s}(M^{\hat{A}^{\prime}})=\hat{s}(M^{U})(A^{\prime}). It follows that the element s^(MU)∈S\hat{s}(M^{U})\in S assumes distinct values at AA and A′A^{\prime}. This proves the claim.

Since S^\hat{S} is a separating e.s.o.p., a specification of S^\hat{S}, in the form of a weakly skew circuit for its every element, can computed in \mboxpoly(∣m∣,∣Q0∣,∣Q1∣){\mbox{poly}}(|m|,|Q_{0}|,|Q_{1}|) time. It follows that the specification of SS, in the form of a weakly skew circuit for its every element, can also computed in \mboxpoly(∣m∣,∣Q0∣,∣Q1∣){\mbox{poly}}(|m|,|Q_{0}|,|Q_{1}|) time. The size of SS is the same as the size of S^\hat{S}, which is \mboxpoly(∣m∣,∣Q0∣,∣Q1∣){\mbox{poly}}(|m|,|Q_{0}|,|Q_{1}|). Furthermore, each element of SS is homogeneous, since each element of S^\hat{S} is homogeneous. By Claim 10.11, SS is separating. Hence, by the generalization of Theorem 7.7 to arbitrary characteristic (cf. Theorem 2.3.12 in ), K[V]GK[V]^{G} is integral over the subring generated by SS. It follows that SS is a separating e.s.o.p. of K[V]GK[V]^{G}. Q.E.D.

Theorem 10.8 has a simpler proof in characteristic zero. This can be obtained by extending the proof of Theorem 7.6, using Proposition 10.9, and replacing Theorem 6.2 by its generalization for quivers (cf. Theorem 1 in ). This generalization states that K[V]GK[V]^{G} is generated by the trace-monomials associated with the oriented cycles in QQ of length ≤∣m∣2\leq|m|^{2}.

3 Explicit parametrization of closed orbits

Now, let VV be a finite dimensional representation of any reductive algebraic group GG over KK. The set of GG-orbits in VV, in general, cannot be given the structure of an algebraic variety. The fundamental insight in is that the set of closed GG-orbits in VV can be given the structure of an algebraic variety. Indeed, by the generalization of Theorem 5.4 to arbitrary characteristic , the points of V/GV/G are in one-to-one correspondence with the closed GG-orbits in VV. But this algebraic structure is not efficient from the complexity-theoretic perspective, since typically a set of generators for K[V]GK[V]^{G}, such as the one in Theorem 6.2, has exponential cardinality. So we ask if the set of closed GG-orbits in VV can be given the structure of a variety that is efficient from the complexity-theoretic perspective.

For simplicity, we confine ourselves to the case when V=Mm(K)rV=M_{m}(K)^{r}, with the adjoint action of G=SLm(K)G=SL_{m}(K), as in Section 10.1, and we assume that VV and GG are specified by giving mm and rr in unary. But the analogue of Theorem 10.13 below holds for any finite dimensional representation of any reductive algebraic group.

Given a set S={s1,…,sk}⊆K[V]GS=\{s_{1},\ldots,s_{k}\}\subseteq K[V]^{G}, let ψS:V→Kk\psi_{S}:V\rightarrow K^{k} denote the map v→(s1(v),…,sk(v))v\rightarrow(s_{1}(v),\ldots,s_{k}(v)). Let n=dim⁡(V)n=\dim(V).

We say that the closed GG-orbits in VV have an explicit parametrization if there is exists a subset S={s1,…,sk}⊆K[V]GS=\{s_{1},\ldots,s_{k}\}\subseteq K[V]^{G}, k=O(\mboxpoly(n))k=O({\mbox{poly}}(n)), of homogeneous invariants of \mboxpoly(n){\mbox{poly}}(n) degree such that (1) the image ψS(V)\psi_{S}(V) of ψS\psi_{S} is closed, (2) for any x∈ψS(V)x\in\psi_{S}(V), ψS−1(x)\psi_{S}^{-1}(x) contains a unique closed GG-orbit in VV, and (3) given the specification of VV and GG as above, the specification of SS, consisting of a circuit of \mboxpoly(n){\mbox{poly}}(n) bit-size for every element in it, can be computed in \mboxpoly(n){\mbox{poly}}(n) time. The constants in these circuits are rational, if the characteristic pp of KK is zero. Otherwise, they are in a finite extension field FplF_{p^{l}}, with l=O(log⁡(m))l=O(\log(m)).

In this case, the points of the variety ψS(V)\psi_{S}(V) are in one-to-one correspondence with the closed GG-orbits in VV, and given any v∈Vv\in V, ψS(V)\psi_{S}(V) can be computed in \mboxpoly(n){\mbox{poly}}(n) arithmetic operations over KK. If the circuits specifying SS are weakly skew, ψS(V)\psi_{S}(V), for a rational vv (cf. Theorem 10.1), can be computed in time polynomial in nn and the bit-length of vv.

By the generalization of Theorem 5.4 to arbitrary characteristic , explicit parametrization of closed GG-orbits in VV also yields explicit parametrization of the equivalence classes of GG-orbits in VV, where two GG-orbits are considered equivalent iff their closures intersect.

The closed GG-orbits in VV have an explicit parametrization if K[V]GK[V]^{G} has a separating e.s.o.p.

For the proof, we need the following lemma.

Let S={s1,…,sk}⊆K[V]GS=\{s_{1},\ldots,s_{k}\}\subseteq K[V]^{G} be a separating set of homogeneous invariants. Then the image ψS(V)\psi_{S}(V) of ψS\psi_{S} is a closed subvariety of KkK^{k}. Furthermore, for any x∈ψS(V)x\in\psi_{S}(V), ψS−1(x)\psi_{S}^{-1}(x) contains a unique closed GG-orbit in VV.

Proof: The map ψS\psi_{S} can be factored as:

where πV/G\pi_{V/G} is defined as in (7). By the generalization of Theorem 5.4 (a) to arbitrary characteristic , the first map is surjective. Hence the image of ψS\psi_{S} coincides with the image of ψS′\psi^{\prime}_{S}. Since SS is separating, by the generalization of Theorem 7.7 to arbitrary characteristic , the coordinate ring K[V]GK[V]^{G} of V/GV/G is integral over the subring generated by SS. This means the map ψS′\psi^{\prime}_{S} is finite (cf. Section 5.3 in ), and hence its image is a closed subvariety of KkK^{k}. Thus the image of ψS\psi_{S} is closed.

The map ψS′\psi^{\prime}_{S} is also one-to-one, since SS is separating. Hence, by the generalization of Theorem 5.4 (b) to arbitrary characteristic , for any x∈ψS(V)x\in\psi_{S}(V), ψS−1(x)\psi_{S}^{-1}(x) contains a unique closed GG-orbit in VV, Q.E.D.

Proof of Theorem 10.13: Suppose K[V]GK[V]^{G} has a separating e.s.o.p. SS. The properties (1) and (2) in Definition 10.12 follow from Lemma 10.14. The property (3) follows because SS is an e.s.o.p. Q.E.D.

Theorem 10.1 (a), in conjunction with the proof of Theorem 10.13, implies:

The closed GG-orbits in VV have a quasi-explicit parametrization if p∉[2,⌊m/2⌋]p\not\in[2,{\lfloor m/2\rfloor}].

4 Explicit parametrization of semi-simple representations of algebras

Next, we show (cf. Theorem 10.16) that the existence of a separating e.s.o.p. for K[V]GK[V]^{G}, with V=Mm(K)rV=M_{m}(K)^{r} and G=SLm(K)G=SL_{m}(K) as above, implies explicit parametrization of semi-simple representations of any finitely generated algebra.

We say that semi-simple representations of RR of dimension mm have an explicit parametrization if there exists a set SS of \mboxpoly(n){\mbox{poly}}(n) homogeneous invariants of \mboxpoly(n){\mbox{poly}}(n) degree in K[V]GK[V]^{G} such that (1) the image ψS(Wm)\psi_{S}(W_{m}) of WmW_{m} under the map ψS\psi_{S}, defined in Section 10.3, is closed, (2) for any x∈ψS(Wm)x\in\psi_{S}(W_{m}), ψS−1(x)\psi_{S}^{-1}(x) contains a unique closed GG-orbit in WmW_{m}, and (3) given mm and the specification of RR, the specification of SS, consisting of a circuit of \mboxpoly(n){\mbox{poly}}(n) bit-size for every element in it, can be computed in time polynomial in nn and the bit-length of the specification of RR. The constants in these circuits are rational if the characteristic pp of KK is zero. Otherwise, they are in a finite extension field FplF_{p^{l}} with l=O(log⁡(m))l=O(\log(m)).

In this case, the points of the variety ψS(Wm)\psi_{S}(W_{m}) are in one-to-one correspondence with the isomorphism classes of mm-dimensional semi-simple representations of RR, and given any rr-tuple A∈VA\in V of matrices specifying an mm-dimensional representation of RR, ψS(A)\psi_{S}(A) can be computed in \mboxpoly(n){\mbox{poly}}(n) arithmetic operations over KK.

For any mm, the mm-dimensional semi-simple representations of RR over KK have an explicit parametrization if K[V]GK[V]^{G} has a separating e.s.o.p.

This result follows from Theorem 10.13 and the following result.

Let SS be as in Lemma 10.14, with VV and GG as above. Then ψS(Wm)\psi_{S}(W_{m}) is a closed subvariety of KkK^{k}.

Proof: By the generalization of Theorem 5.4 (c) to arbitrary characteristic , Y=πV/G(Wm)Y=\pi_{V/G}(W_{m}) is a closed subvariety of V/GV/G. As shown in the proof of Lemma 10.14, ψS′\psi_{S}^{\prime} in (47) is a finite morphism. Since the image of a closed variety under a finite morphism is closed (cf. Section 5.3. in ), the image ψS′(Y)=ψS(Wm)\psi_{S}^{\prime}(Y)=\psi_{S}(W_{m}) is closed. Q.E.D.

Remark: The set SS giving the explicit parametrization in Theorem 10.16 depends only on mm and rr, the number of generators of RR, but not on the relations among the generators of RR.

Theorem 10.16, in conjunction with Theorem 10.1 (a), implies:

For any mm, the mm-dimensional semi-simple representations of RR over KK have a quasi-explicit parametrization, if p∉[2,⌊m/2⌋]p\not\in[2,{\lfloor m/2\rfloor}].

5 Other extensions in positive characteristic

Next, we briefly explain how the results in Sections 4 and 5 can be extended to positive characteristics.

The strengthened black-box derandomization problem for low-degree polynomial identity testing over an algebraically closed field KK of positive characteristic pp is defined just as in characteristic zero (cf. Section 2.5). The hitting set against low-degree circuits over KK of size ≤s\leq s is assumed to be a subset of FplnF_{p^{l}}^{n}, nn the number of variables, for a large enough l=O(log⁡s)l=O(\log s). The phrase “infinitesimally close” is interpreted in the Zariski topology. The definition of NNL is extended from characteristic zero to positive characteristics similarly in a straightforward way.

The following result extends Theorem 4.9 to positive characteristics.

(a) The variety Δ[det⁡,m]\Delta[\det,m] has a strict e.s.o.p. in any characteristic iff the strengthened black-box derandomization hypothesis for symbolic determinant identity testing holds.

(b) The variety Δ[det⁡,m]\Delta[\det,m] has a strict e.s.o.p. over an algebraically closed field of Ω(2(log⁡m)a)\Omega(2^{(\log m)^{a}}) characteristic, for a large enough positive constant aa, iff, ignoring a quasi-prefix, there exists a family {fn(x1,…,xn)}\{f_{n}(x_{1},\ldots,x_{n})\} of exponential-time-computable (cf. the remark after Theorem 2.1), multi-linear, integral polynomials such that fnf_{n} cannot be approximated infinitesimally closely over an algebraically closed field of Ω(2nδ)\Omega(2^{n^{\delta}}) characteristic by circuits of O(2nϵ)O(2^{n^{\epsilon}}) size, for some constants δ,ϵ>0\delta,\epsilon>0, as n→∞n\rightarrow\infty.

Analogous result holds for the explicit variety Δ[H(Y)m,k,m]\Delta[H(Y)_{m},k,m] associated with the low-degree universal circuit in Section 5.1.3. Similar extensions of Theorems 5.11 (a), 5.14 (a), and 5.14 (b) to arbitrary characteristics, and of Theorems 5.11 (b) and 5.14 (c) to large enough characteristics also hold.

For the proof, we need the following results.

(cf. ) Suppose KK is an algebraically closed field of positive characteristic pp. Then:

(a) Given any polynomial g∈K[x1,…,xn]g\in K[x_{1},\ldots,x_{n}] and a polynomial f∈K[x1,…,xn]f\in K[x_{1},\ldots,x_{n}] dividing gg, there exists a nonuniform circuit over KK, with oracle gates for gg, of O((ndeg⁡(g))a)O((n\deg(g))^{a}) size, for some absolute positive constant aa not depending on nn or pp, that computes the highest power of ff of the form fplf^{p^{l}}, l≥0l\geq 0, that divides gg.

(b) In particular, given any polynomial g∈K[x1,…,xn]g\in K[x_{1},\ldots,x_{n}], with deg⁡(g)<p\deg(g)<p, and a polynomial f∈K[x1,…,xn]f\in K[x_{1},\ldots,x_{n}] dividing gg, there exists a nonuniform circuit over KK, with oracle gates for gg, of O((ndeg⁡(g))a)O((n\deg(g))^{a}) size, for some absolute positive constant aa not depending on nn or pp, that computes ff.

The following is the analogue of Theorem 2.4 in this setting.

Suppose there exists a family {pm(x1,…,xm)}\{p_{m}(x_{1},\ldots,x_{m})\} of exponential-time-computable, multi-linear, integral polynomials such that pmp_{m} cannot be approximated infinitesimally closely over an algebraically closed field of Ω(2mδ)\Omega(2^{m^{\delta}}) characteristic by circuits of O(2mϵ)O(2^{m^{\epsilon}}) size, for some positive constants δ\delta and ϵ\epsilon, as m→∞m\rightarrow\infty.

Then polynomial identity testing for low-degree circuits of size ≤s\leq s over an algebraically closed field of Ω(2(log⁡s)a)\Omega(2^{(\log s)^{a}}) characteristic, for a large enough positive constant aa, has O(2\mboxpolylog(s))O(2^{{\mbox{polylog}}(s)})-time-computable strengthened black-box derandomization.

This is proved like Theorem 2.4, using Theorem 10.20 (b) in place of Theorem 2.2. It can be checked that this replacement is possible, by choosing the constant ee in the proof of Theorem 2.4 large enough, depending upon ϵ\epsilon and δ\delta. The analogue of this result also holds for exact computation in place of infinitesimally close approximation, with a similar proof.

Proof of Theorem 10.19: All results, other than Theorem 2.4, used in the proof of Theorem 4.9, namely, Theorem 2.3, Noether’s Normalization Lemma (Lemma 3.1), Hilbert’s Nullstellensatz, and other standard facts from algebraic geometry hold in arbitrary characteristic.

Hence, the proof of (a) is similar to that of Theorem 4.9 (a). The proof of (b) is similar to that of Theorem 4.9 (b), using Theorem 10.21 in place of Theorem 2.4. Q.E.D.

Remark 1: The restrictions on the characteristics in Theorem 10.19 (b) (and its generalizations to arbitrary explicit varieties; cf. the remark after Theorem 10.19) can be dropped, and we can let the base field be an algebraically closed field KK of any fixed characteristic pp, if we assume for the fnf_{n} therein that fnpif_{n}^{p^{i}}, for any nonnegative i=O(\mboxpoly(n))i=O({\mbox{poly}}(n)), cannot be approximated infinitesimally closely by circuits over KK of O(2nϵ)O(2^{n^{\epsilon}}) size, for some constant ϵ>0\epsilon>0, as n→∞n\rightarrow\infty.

Remark 2: Theorem 5.8 similarly holds in arbitrary characteristic. Theorem 5.13 also holds in arbitrary characteristic, since Theorem 5.4 holds in arbitrary characteristic .

Discussion

Finally, we discuss the difficulties that need to be overcome to improve the current best bound for NNL for Δ[det⁡,m]\Delta[\det,m] in Theorem 4.10.

Let KK now be an algebraically closed field of characteristic zero. If every polynomial in Δ[det⁡,m]\Delta[\det,m] had a small circuit over KK of \mboxpoly(m){\mbox{poly}}(m) size, then the strengthened black-box derandomization problem for symbolic determinant identity testing would be in PSPACE unconditionally, like the standard black-box derandomization problem (cf. Proposition 2.9), with essentially the same proof. By (the proof of) Theorem 4.5, NNL for Δ[det⁡,m]\Delta[\det,m] would then be in PSPACE unconditionally.

However, it may be conjectured that the boundary of the orbit of the determinant in Δ[det⁡,m]\Delta[\det,m] contains points which do not have small circuits over KK; cf. Section 4.2 in for a preliminary investigation in this direction, and for further investigation. Formally, we conjecture that \mboxVPws‾⊈\mboxVP\overline{\mbox{VP}_{ws}}\not\subseteq\mbox{VP}. Here VP is the class of families of polynomials of small degree having circuits of polynomial size, \mboxVPws\mbox{VP}_{ws} is the class of families of polynomials that can be computed by symbolic determinants of polynomial size, and \mboxVPws‾\overline{\mbox{VP}_{ws}} is the class of families of polynomials that can be approximated infinitesimally closely by symbolic determinants of polynomial size.

This conjecture is counter-intuitive, since one would have expected the complexity of infinitesimally close approximation of multi-linear polynomials by symbolic determinants to be polynomially related to that of exact computation. As pointed out in Bürgisser (cf. Lemma 5.6 (3) and Theorem 5.7 therein), this would be the case if every point in the boundary of the orbit of the determinant could be approached by a one-parameter deformation of the determinant of polynomial order. We conjecture that this is not the case. However, for the VNP-complete polynomials such as the permanent, the complexity of infinitesimally close approximation can be conjectured to be polynomially related to that of exact computation. At present, it is not even known if \mboxVPws‾⊆\mboxVNP\overline{\mbox{VP}_{ws}}\subseteq\mbox{VNP}, where VNP is the class of p-definable families of polynomials.

The conjectural points with large circuit complexity in Δ[det⁡,m]\Delta[\det,m] constitute the main obstacle to putting NNL for Δ[det⁡,m]\Delta[\det,m] in PSPACE, or even EXP, unconditionally with the existing techniques. (This obstacle is absent for explicit categorical quotients, as in Theorems 1.3 and 1.5, by Theorem 5.4 (a).) In contrast, the Generalized Riemann Hypothesis assumption in the current EXPH-bound in Theorem 4.10 may be removed in the foreseeable future (though, this by itself is a nontrivial problem).

Thus, bringing NNL for Δ[det⁡,m]\Delta[\det,m] from EXPH, where it is currently assuming the Generalized Riemann Hypothesis, to even EXP unconditionally seems difficult with the existing techniques. Theorem 1.7 says that a sub-exponential algebraic circuit-size lower bound for infinitesimally close approximation of the permanent would put NNL for Δ[det⁡,m]\Delta[\det,m] in quasi-P. Theorem 1.7 (and Remark 2 after Theorem 5.11) may thus explain why the hardness hypothesis of geometric complexity theory in has turned out to be so difficult. (In the terminology above, this hypothesis is that \mboxVNP⊈\mboxVPws‾\mbox{VNP}\not\subseteq\overline{\mbox{VP}_{ws}}; cf. Proposition 9.3.2 in .) It is a reasonable thesis that any realistic approach to the \mboxVNP⊈\mboxVPws\mbox{VNP}\not\subseteq{\mbox{VP}_{ws}} conjecture in Valiant would also prove this hypothesis. Indeed, all known lower bounds for the exact computation of the permanent also hold for infinitesimally close approximation; eg. see . Hence, Theorem 1.7 may also explain why the \mboxVNP⊈\mboxVPws\mbox{VNP}\not\subseteq{\mbox{VP}_{ws}} conjecture in has turned out to be so difficult.

Theorem 1.7 and the equivalence results in this article (Theorems 1.9 and 5.14) thus reveal that the fundamental problems of geometry (NNL) and complexity theory (hardness) share a common root difficulty, namely, the problem of overcoming the existing EXPH vs. P gap (assuming the Generalized Riemann Hypothesis) in the complexity of NNL for general explicit varieties, or rather, the EXPH vs. NC gap; cf. Remark 1 after Theorem 5.11. We call this gap the geometric complexity theory (GCT) chasm. It may be viewed as the common cause and measure of the difficulty of these problems in geometry and complexity theory.

The superpolynomial lower bound in for additive approximation of the maxflow in the PRAM model without bit-operations, which initiated geometric complexity theory (cf. the introduction of ), assumes special significance in view of this chasm. First, this lower bound is the main reason why the hardness hypothesis in is expected to hold, despite the conjectural non-containment of \mboxVPws‾\overline{\mbox{VP}_{ws}} in VP. This is because a lower bound akin to that in for additive approximation of the permanent of integral matrices (instead of the maxflow) implies the hardness hypothesis in for infinitesimally close approximation. Such a lower bound can be expected since, in view #P\#P-completeness of the permanent, the approximation of the permanent is expected to be harder than the approximation of the maxflow. Second, the lower bound in is the only known arithmetic version of a foundational conjecture in complexity theory (in this case, the P ≠\not= NC conjecture) that holds unconditionally in a natural and realistic model of computation. It is now likely to remain the only such lower bound in complexity theory, until the GCT chasm is crossed.

We conjecture that the strong form of NNL for every explicit variety is in P, and hence, the GCT chasm can be crossed, as suggested by Theorem 5.11. By geometric complexity theory, we mean henceforth any approach to cross the GCT chasm using a synthesis of geometry and complexity theory. One such approach will be described in the sequel .

Acknowledgement: The author is grateful to Michael Forbes and Amir Shpilka for bringing to his attention and for pointing out an error in the preliminary version of this paper (cf. Section 1.7), and to Jonah Blasiak, Peter Bürgisser, Josh Grochow, Joseph Landsberg, Nitin Saxena, Jimmy Qiao, and the referees for helpful comments.

References