A uniform Gamma extractor with an explicit Boolean seed budget #
The actual total polynomial-time program takes 8*b source bits and exactly
2^27 * (Nat.clog 2 (b+1))^3 seed bits, and emits b bits. At every size
satisfying the guard, it extracts with error at most one quarter from sources
of min-entropy at least 2*b. This holds eventually in b.
The stronger weighted theorem retains the entire padded seed, including its unused suffix. The evaluator equality holds at all sizes; outside the guard the program's defined output is all false. No field instances or abstract extractor are supplied by the caller. This interface combines the CGL-based recursive construction with its proved runtime and seed-padding transport.
The Boolean output vector is exactly the actual runtime's word, at every size.
The simple seed budget covers the actual seed tuple whenever the size guard holds.
At guarded sizes, the actual padded program uses precisely the required seed prefix.
The actual program strongly extracts while retaining every padded seed bit.
The same actual program is an ordinary flat seeded extractor.
The existing polynomial-time paired evaluator computes every padded Boolean output.
The complete padded seed budget can be generated in unary in polynomial time.
Every sufficiently large target has the full weighted retained-seed guarantee.
Every sufficiently large target gives an actual ordinary seeded extractor.