Lower Bounds on the Time/Memory Tradeoff of Function Inversion
Abstract
We study time/memory tradeoffs of function inversion: an algorithm, i.e., an inverter, equipped with an s-bit advice on a randomly chosen function and using oracle queries to , tries to invert a randomly chosen output of , i.e., to find . Much progress was done regarding adaptive function inversion - the inverter is allowed to make adaptive oracle queries. Hellman [IEEE transactions on Information Theory 80] presented an adaptive inverter that inverts with high probability a random . Fiat and Naor [SICOMP 00] proved that for any , with (ignoring low-order terms), an -advice, -query variant of Hellmans algorithm inverts a constant fraction of the image points of any function. Yao [STOC 90] proved a lower bound of for this problem. Closing the gap between the above lower and upper bounds is a long-standing open question. Very little is known for the non-adaptive variant of the question. The only known upper bounds, i.e., inverters, are the trivial ones (with ), and the only lower bound is the above bound of Yao. In a recent work, Corrigan-Gibbs and Kogan [TCC 19] partially justified the difficulty of finding lower bounds on non-adaptive inverters, showing that a lower bound on the time/memory tradeoff of non-adaptive inverters implies a lower bound on low-depth Boolean circuits. Bounds that, for a strong enough choice of parameters, are notoriously hard to prove. We make progress on the above intriguing question, both for the adaptive and the non-adaptive case, proving the following lower bounds on restricted families of inverters.
Keywords
Cite
@article{arxiv.2105.00761,
title = {Lower Bounds on the Time/Memory Tradeoff of Function Inversion},
author = {Dror Chawin and Iftach Haitner and Noam Mazor},
journal= {arXiv preprint arXiv:2105.00761},
year = {2021}
}
Comments
A preliminary version appeared in TCC 2020