Low-bandwidth recovery of linear functions of Reed-Solomon-encoded data
share
We study the problem of efficiently computing on encoded data. More specifically, we study the question of low-bandwidth computation of functions F:𝔽^k →𝔽 of some data x ∈𝔽^k, given access to an encoding c ∈𝔽^n of x under an error correcting code. In our model – relevant in distributed storage, distributed computation and secret sharing – each symbol of c is held by a different party, and we aim to minimize the total amount of information downloaded from each party in order to compute F(x). Special cases of this problem have arisen in several domains, and we believe that it is fruitful to study this problem in generality. Our main result is a low-bandwidth scheme to compute linear functions for Reed-Solomon codes, even in the presence of erasures. More precisely, let ϵ > 0 and let 𝒞: 𝔽^k →𝔽^n be a full-length Reed-Solomon code of rate 1 - ϵ over a field 𝔽 with constant characteristic. For any γ∈ [0, ϵ), our scheme can compute any linear function F(x) given access to any (1 - γ)-fraction of the symbols of 𝒞(x), with download bandwidth O(n/(ϵ - γ)) bits. In contrast, the naive scheme that involves reconstructing the data x and then computing F(x) uses Θ(n log n) bits. Our scheme has applications in distributed storage, coded computation, and homomorphic secret sharing.
READ FULL TEXT