STOC2024

Communication Lower Bounds for Collision Problems via Density Increment Arguments

Guangxu Yang, Jiapeng Zhang

1 citation

Abstract

Collision problems are important problems in complexity theory and cryptography with diverse applications. Previous fruitful works have mainly focused on query models. Driven by various applications, several works by Bauer, Farshim and Mazaheri (CRYPTO 2018), Itsykson and Riazanov (CCC 2021), G'o'os and Jain (RANDOM 2022) independently proposed the communication version of collision problems. In the communication setting, both Alice and Bob receive k random subsets of [N]: S1,…,Sk and T1,…,Tk with each of size roughly √N, where a typical choice of k is in the order of √N for applications. Then Alice and Bob aim to find a pair (x,x′) such that x,x′∈ Si∩ Tj for some Si and Tj. A simple protocol that solves this problem with O(N1/4) communication bits is the following: Alice sends to Bob a random subset of S1 of size N1/4 and Bob checks if there is a set Tj that has more than two intersections to this subset. All the papers mentioned above believe this bound should be tight up to some log factors. In this paper, we prove an Ω(N1/4) randomized communication lower bound, affirming the conjecture above. Previously, only an Ω(N1/12) was known by a work of G'o'os and Jain (RANDOM 2022). Our lower bound provides direct applications to cryptography and proof complexity via connections by Bauer, Farshim, and Mazaheri (CRYPTO 2018) and Itsykson and Riazanov (CCC 2021). Our proof technique could be of independent interest as it is an extension of simulation methods to non-lifted functions. Previously, simulations have been widely applied to lifted functions (a.k.a composed functions), which leads to beautiful query-to- communication lifting theorems. However, many important communication problems are not lifted functions. We believe our methods could give more applications. In particular, it may have applications to communication complexity of search problems with many solutions. Note that many existing methods do not apply to this setting.