BPP (complexity)

Problems

All problems in P are obviously also in BPP. However, many problems have been known to be in BPP but not known to be in P. The number of such problems is decreasing, and it is conjectured that P = BPP.

For a long time, one of the most famous problems known to be in BPP but not known to be in P was the problem of determining whether a given number is prime. However, in the 2002 paper PRIMES is in P, Manindra Agrawal and his students Neeraj Kayal and Nitin Saxena found a deterministic polynomial-time algorithm for this problem, thus showing that it is in P.

An important example of a problem in BPP (in fact in co-RP) still not known to be in P is polynomial identity testing, the problem of determining whether a polynomial is identically equal to the zero polynomial, when you have access to the value of the polynomial for any given input, but not to the coefficients. In other words, is there an assignment of values to the variables such that when a nonzero polynomial is evaluated on these values, the result is nonzero? It suffices to choose each variable's value uniformly at random from a finite subset of at least d values to achieve bounded error probability, where d is the total degree of the polynomial.

Related classes

If the access to randomness is removed from the definition of BPP, we get the complexity class P. In the definition of the class, if we replace the ordinary Turing machine with a quantum computer, we get the class BQP.

Adding postselection to BPP, or allowing computation paths to have different lengths, gives the class BPP_path. BPP_path is known to contain NP, and it is contained in its quantum counterpart PostBQP.

A Monte Carlo algorithm is a randomized algorithm which is likely to be correct. Problems in the class BPP have Monte Carlo algorithms with polynomial bounded running time. This is compared to a Las Vegas algorithm which is a randomized algorithm which either outputs the correct answer, or outputs "fail" with low probability. Las Vegas algorithms with polynomial bound running times are used to define the class ZPP. Alternatively, ZPP contains probabilistic algorithms that are always correct and have expected polynomial running time. This is weaker than saying it is a polynomial time algorithm, since it may run for super-polynomial time, but with very low probability.

Complexity-theoretic properties

It is known that BPP is closed under complement; that is, BPP = co-BPP. BPP is low for itself, meaning that a BPP machine with the power to solve BPP problems instantly (a BPP oracle machine) is not any more powerful than the machine without this extra power. In symbols, BPP^BPP = BPP.

The relationship between BPP and NP is unknown: it is not known whether BPP is a subset of NP, NP is a subset of BPP or neither. If NP is contained in BPP, which is considered unlikely since it would imply practical solutions for NP-complete problems, then NP = RP and PH ⊆ BPP.

It is known that RP is a subset of BPP, and BPP is a subset of PP. It is not known whether those two are strict subsets, since we don't even know if P is a strict subset of PSPACE. BPP is contained in the second level of the polynomial hierarchy and therefore it is contained in PH. More precisely, the Sipser–Lautemann theorem states that ${\displaystyle \mathsf{B}\mathsf{P}\mathsf{P}\subseteq {\mathrm{\Sigma }}_2\cap {\mathrm{\Pi }}_2}$. As a result, P = NP leads to P = BPP since PH collapses to P in this case. Thus either P = BPP or P ≠ NP or both.

Adleman's theorem states that membership in any language in BPP can be determined by a family of polynomial-size Boolean circuits, which means BPP is contained in P/poly. Indeed, as a consequence of the proof of this fact, every BPP algorithm operating on inputs of bounded length can be derandomized into a deterministic algorithm using a fixed string of random bits. Finding this string may be expensive, however. Some weak separation results for Monte Carlo time classes were proven by Karpinski & Verbeek (1987a), see also Karpinski & Verbeek (1987b).

Closure properties

The class BPP is closed under complementation, union, intersection, and concatenation.

Relativization

Relative to oracles, we know that there exist oracles A and B, such that P^A = BPP^A and P^B ≠ BPP^B. Moreover, relative to a random oracle with probability 1, P = BPP and BPP is strictly contained in NP and co-NP.

There is even an oracle in which ⁠${\displaystyle \mathsf{B}\mathsf{P}\mathsf{P}={\mathsf{E}\mathsf{X}\mathsf{P}}^{\mathsf{N}\mathsf{P}}}$⁠ (and hence ⁠${\displaystyle \mathsf{P}\mathsf{<}\mathsf{N}\mathsf{P}\mathsf{<}\mathsf{B}\mathsf{P}\mathsf{P}\mathsf{=}\mathsf{E}\mathsf{X}\mathsf{P}\mathsf{=}\mathsf{N}\mathsf{E}\mathsf{X}\mathsf{P}}$⁠), which can be iteratively constructed as follows. For a fixed E^NP (relativized) complete problem, the oracle will give correct answers with high probability if queried with the problem instance followed by a random string of length kn (n is instance length; k is an appropriate small constant). Start with n=1. For every instance of the problem of length n fix oracle answers (see lemma below) to fix the instance output. Next, provide the instance outputs for queries consisting of the instance followed by kn-length string, and then treat output for queries of length ≤(k+1)n as fixed, and proceed with instances of length n+1.

Lemma—Given a problem (specifically, an oracle machine code and time constraint) in relativized E^NP, for every partially constructed oracle and input of length n, the output can be fixed by specifying 2^O(n) oracle answers.

Proof

The machine is simulated, and the oracle answers (that are not already fixed) are fixed step-by-step. There is at most one oracle query per deterministic computation step. For the relativized NP oracle, if possible fix the output to be yes by choosing a computation path and fixing the answers of the base oracle; otherwise no fixing is necessary, and either way there is at most 1 answer of the base oracle per step. Since there are 2^O(n) steps, the lemma follows.

The lemma ensures that (for a large enough k), it is possible to do the construction while leaving enough strings for the relativized E^NP answers. Also, we can ensure that for the relativized E^NP, linear time suffices, even for function problems (if given a function oracle and linear output size) and with exponentially small (with linear exponent) error probability. Also, this construction is effective in that given an arbitrary oracle A we can arrange the oracle B to have P^A≤P^B and EXP^NPA=EXP^NPB=BPP^B. Also, for a ZPP=EXP oracle (and hence ZPP=BPP=EXP<NEXP), one would fix the answers in the relativized E computation to a special nonanswer, thus ensuring that no fake answers are given.

Derandomization

The existence of certain strong pseudorandom number generators is conjectured by most experts of the field. Such generators could replace true random numbers in any polynomial-time randomized algorithm, producing indistinguishable results. The conjecture that these generators exist implies that randomness does not give additional computational power to polynomial time computation, that is, P = RP = BPP. More strongly, the assumption that P = BPP is in some sense equivalent to the existence of strong pseudorandom number generators.

László Babai, Lance Fortnow, Noam Nisan, and Avi Wigderson showed that unless EXPTIME collapses to MA, BPP is contained in

${\displaystyle \mathsf{\text{i.o.-SUBEXP}}={\bigcap }_{\epsilon >0}\mathsf{\text{i.o.-DTIME}}\left(2^{n^{\epsilon }}\right).}$

The class i.o.-SUBEXP, which stands for infinitely often SUBEXP, contains problems which have sub-exponential time algorithms for infinitely many input sizes. They also showed that P = BPP if the exponential-time hierarchy, which is defined in terms of the polynomial hierarchy and E as E^PH, collapses to E; however, note that the exponential-time hierarchy is usually conjectured not to collapse.

Russell Impagliazzo and Avi Wigderson showed that if any problem in E, where

${\displaystyle \mathsf{E}=\mathsf{D}\mathsf{T}\mathsf{I}\mathsf{M}\mathsf{E}\left(2^{O(n)}\right),}$

has circuit complexity 2^Ω(n) then P = BPP.