One uniform polynomial-time sumset-extractor family #
All parameters are generated from the original input length. The outer count has an unconditional polynomial bound, and a cap makes the candidate count uniformly bounded at every size. The cap is eventually inactive. The computed family therefore has the actual extractor's constant error and sublinear source entropy for all sufficiently large lengths.
Balanced padding gives one fixed, exactly balanced family at every positive length and preserves its total polynomial-time evaluator. The subsequent circuit lower bound is measured at this full padded input length.
The total unpadded evaluator returns exactly one bit at every input length.
The evaluator computes the same Boolean family at every input length.
All parameter generation, enumeration, actual calls, XOR, and majority are polynomial-time.
Eventually the computed family equals the actual finite sumset construction exactly.
The proof needs the candidate cap n + 1 to be inactive, and the cap binds at every positive
length with log₂ (n + 1) < 2 ^ 27 * 70 ^ 3 ≈ 4.6 * 10 ^ 13. The threshold here, which every
circuit bound for the hard family inherits, therefore exceeds 2 ^ (4.6 * 10 ^ 13).
The one computed family eventually extracts with constant error below one half.
The actual source entropy of the uniformly computed family is sublinear.
At each positive length, the final family is precisely balanced padding.
Exactly half of the full padded input cube is accepted, including while the cap is active.
A single total evaluator computes the hard family at every input length, including zero.
The final balanced family has an unconditional uniform polynomial-time evaluator.
The polynomial has enormous degree: on an input of length n + 1 the evaluator enumerates
(2 ^ clog₂ (n + 1)) ^ (2 ^ 27) ≥ (n + 1) ^ (2 ^ 27) outer coordinates, so its degree is at
least 2 ^ 27 ≈ 1.3 * 10 ^ 8.
Membership in the hard language agrees exactly with every Boolean slice.
The concrete hard language has a deterministic polynomial-time decider. The decider runs
sourceReductionHardEval, so its polynomial also has degree at least 2 ^ 27.