On discrepancy estimates for pseudorandom vectors constructed by the elliptic curve congruential generator
Pith reviewed 2026-05-21 03:03 UTC · model grok-4.3
The pith
Under a relative maximal period condition on an induced linear congruential generator, the elliptic curve congruential generator produces pseudorandom vectors with discrepancy at most q to the one-half power over t.
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
Core claim
In a full-coset regime characterized by a relative maximal period condition (RMPC) on an induced one-dimensional linear congruential generator, bounds of type q^{1/2}/t are proved for the discrepancy D, the serial discrepancy D_s, and under the corresponding derived RMPC, the non-overlapping discrepancy ~D_s. In the general sub-period regime, bounds for D, D_s, and ~D_s reduce to estimation of Fourier ell^1 masses of admissible index sets attached to one-dimensional linear congruential generators.
What carries the argument
The relative maximal period condition (RMPC) on an induced one-dimensional linear congruential generator, which characterizes the full-coset regime and supports the proof of the q^{1/2}/t discrepancy bounds.
If this is right
- The generated vectors exhibit low discrepancy in one and higher dimensions when the condition is met.
- Similar bounds apply to serial and non-overlapping versions of the discrepancy.
- The general case isolates the problem to Fourier l1 mass estimates for further improvement.
- These results extend discrepancy analysis from linear to elliptic curve based generators.
Where Pith is reading between the lines
- Verifying the RMPC for specific elliptic curves could enable practical selection of good generators.
- The reduction to Fourier masses suggests links to exponential sum estimates in number theory.
- Extensions might include multidimensional versions or other curve families.
Load-bearing premise
The relative maximal period condition holds for the induced one-dimensional linear congruential generator defining the full-coset regime.
What would settle it
Select an elliptic curve and generator parameters that satisfy the relative maximal period condition, generate the vectors, compute their discrepancy numerically for large q, and verify if the value exceeds or stays below the q^{1/2}/t bound.
read the original abstract
This paper studies the problem of discrepancy estimates for pseudorandom vectors constructed by the elliptic curve congruential generator, particularly in the non-translational case. Two families of results are obtained. First, in a full-coset regime characterized by a relative maximal period condition (RMPC) on an induced one-dimensional linear congruential generator, one proves bounds of type $q^{1/2}/t$ for the discrepancy $D$, the serial discrepancy $D_s$, and, under the corresponding derived RMPC, the non-overlapping discrepancy $\widetilde D_s$. Second, in the general sub-period regime, one reduces bounds for $D$, $D_s$, and $\widetilde D_s$ to estimation of Fourier $\ell^1$ masses of admissible index sets attached to one-dimensional linear congruential generators. This isolates the arithmetic bottleneck for further improvement.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The paper studies discrepancy estimates for pseudorandom vectors from the elliptic curve congruential generator in the non-translational case. It proves bounds of type q^{1/2}/t for the discrepancy D, serial discrepancy D_s, and non-overlapping discrepancy ~D_s in a full-coset regime defined by a relative maximal period condition (RMPC) on an induced one-dimensional linear congruential generator. In the general sub-period regime, it reduces bounds for D, D_s, and ~D_s to estimates of the Fourier ℓ¹ masses of admissible index sets attached to one-dimensional linear congruential generators, thereby isolating the arithmetic bottleneck.
Significance. If the derivations hold, the work supplies a structured approach to discrepancy analysis for elliptic-curve-based generators by separating the full-coset case (where explicit q^{1/2}/t bounds are obtained) from the general case (where the problem is reduced to a concrete Fourier-analytic task). The clean isolation of the RMPC hypothesis and the reduction to ℓ¹-mass estimates constitute a useful technical contribution that can guide subsequent verification or construction of index sets satisfying the required arithmetic conditions.
major comments (2)
- [Abstract] Abstract and the statement of the main results: the quantitative bounds of type q^{1/2}/t for D, D_s and ~D_s are established exclusively inside the full-coset regime defined by the RMPC on the induced LCG. The manuscript does not prove that this RMPC is attained (or attained with positive density) for the admissible index sets produced by the elliptic-curve construction, nor does it supply explicit examples or density estimates. Consequently the headline bounds remain conditional on an arithmetic hypothesis whose validity is left open.
- [General sub-period regime (as described in abstract)] The reduction in the sub-period regime: while the reduction of discrepancy bounds to Fourier ℓ¹-mass estimates of admissible index sets is formally correct as a separation of concerns, the paper does not indicate whether these masses can be bounded non-trivially for the specific index sets arising from the elliptic-curve generator, leaving the practical utility of the reduction dependent on future arithmetic work.
minor comments (1)
- [Abstract] Notation: the parameters q and t are used without explicit definition in the abstract; a brief reminder of their meaning (field size and period parameter, respectively) would improve readability.
Simulated Author's Rebuttal
We thank the referee for the careful reading and constructive comments on our manuscript. We respond to each major comment below, indicating revisions where appropriate to improve clarity while preserving the scope of the results.
read point-by-point responses
-
Referee: [Abstract] Abstract and the statement of the main results: the quantitative bounds of type q^{1/2}/t for D, D_s and ~D_s are established exclusively inside the full-coset regime defined by the RMPC on the induced LCG. The manuscript does not prove that this RMPC is attained (or attained with positive density) for the admissible index sets produced by the elliptic-curve construction, nor does it supply explicit examples or density estimates. Consequently the headline bounds remain conditional on an arithmetic hypothesis whose validity is left open.
Authors: We agree that the q^{1/2}/t bounds are established conditionally on the RMPC holding for the induced one-dimensional LCG. The manuscript derives these bounds under that hypothesis and does not attempt to prove attainment or positive density for the elliptic-curve index sets, as that would require separate arithmetic work on the specific admissible sets. We will revise the abstract and add a clarifying paragraph in the introduction to state explicitly that the bounds are conditional on the RMPC and to note that verifying this condition for the constructions remains open. This addresses the presentation concern without changing the technical results. revision: partial
-
Referee: [General sub-period regime (as described in abstract)] The reduction in the sub-period regime: while the reduction of discrepancy bounds to Fourier ℓ¹-mass estimates of admissible index sets is formally correct as a separation of concerns, the paper does not indicate whether these masses can be bounded non-trivially for the specific index sets arising from the elliptic-curve generator, leaving the practical utility of the reduction dependent on future arithmetic work.
Authors: The reduction is designed precisely to isolate the remaining arithmetic task of bounding the Fourier ℓ¹ masses on the admissible index sets attached to the induced LCGs. We do not claim non-trivial bounds for the elliptic-curve-specific sets in this paper. To better indicate the utility, we will add a short remark in the relevant section outlining possible approaches to such bounds (e.g., via character-sum techniques or properties of the underlying elliptic curve) and explicitly framing this as a direction for subsequent work. This strengthens the separation-of-concerns contribution without extending the current proofs. revision: partial
- Proving that the RMPC holds (or holds with positive density) for the admissible index sets arising from the elliptic-curve congruential generator.
- Deriving non-trivial bounds on the Fourier ℓ¹ masses for the specific admissible index sets in the general sub-period regime.
Circularity Check
No circularity: bounds derived under explicit RMPC hypothesis via standard Fourier/discrepancy methods; general case reduced to independent arithmetic estimates
full rationale
The paper establishes q^{1/2}/t-type bounds for discrepancy quantities exclusively inside the full-coset regime defined by the relative maximal period condition (RMPC) on the induced one-dimensional LCG, using standard techniques from discrepancy theory and Fourier analysis. In the sub-period regime it reduces the problem to bounding Fourier ℓ¹ masses of admissible index sets, thereby isolating an open arithmetic question rather than presupposing its resolution. No equation equates a claimed prediction to a fitted input by construction, no load-bearing step collapses to a self-citation chain, and RMPC is introduced as an explicit arithmetic hypothesis rather than a self-definitional tautology. The derivation chain therefore remains self-contained against external number-theoretic benchmarks.
Axiom & Free-Parameter Ledger
axioms (1)
- standard math Standard bounds and properties from discrepancy theory and Fourier analysis on finite fields.
Lean theorems connected to this paper
-
IndisputableMonolith/Foundation/ArithmeticFromLogic.leanLogicNat ≃ Nat recovery; embed_injective unclear?
unclearRelation between the paper passage and the cited Recognition theorem.
bounds of type q^{1/2}/t for the discrepancy D, the serial discrepancy D_s, and ... non-overlapping discrepancy ~D_s ... under the relative maximal period condition (RMPC) on an induced one-dimensional linear congruential generator
-
IndisputableMonolith/Foundation/AlexanderDuality.leanalexander_duality_circle_linking unclear?
unclearRelation between the paper passage and the cited Recognition theorem.
reduces bounds for D, D_s, and ~D_s to estimation of Fourier ℓ¹ masses of admissible index sets attached to one-dimensional linear congruential generators
What do these tags mean?
- matches
- The paper's claim is directly supported by a theorem in the formal canon.
- supports
- The theorem supports part of the paper's argument, but the paper may add assumptions or extra steps.
- extends
- The paper goes beyond the formal theorem; the theorem is a base layer rather than the whole result.
- uses
- The paper appears to rely on the theorem as machinery.
- contradicts
- The paper's claim conflicts with a theorem or certificate in the canon.
- unclear
- Pith found a possible connection, but the passage is too broad, indirect, or ambiguous to say the theorem truly supports the claim.
Reference graph
Works this paper leans on
-
[1]
C. P. Mok, Pseudorandom vector generation using elliptic curves and applications to Wiener processes,Finite Fields Appl.85(2023), 102129
work page 2023
-
[2]
C. P. Mok, H. Zheng, Monte Carlo Integration Using Elliptic Curves,Chin. Ann. Math. Ser. B.46(2) (2025), 241–260
work page 2025
-
[3]
X. Wang, On the distribution of pseudorandom vectors generated by elliptic curves,Finite Fields Appl.93(2024), 102318. 29
work page 2024
-
[4]
P. Hellekalek, General discrepancy estimates: the Walsh function system,Acta Arith.LXVII (3) (1994), 209–218
work page 1994
- [5]
-
[6]
I. E. Shparlinski, Bilinear character sums over elliptic curves,Finite Fields Appl.14(2008), 132–141
work page 2008
-
[7]
O. Ahmadi and I. E. Shparlinski, Bilinear character sums and sum-product problems on elliptic curves,Proc. Edinburgh Math. Soc.53(2010), 1–12. 30
work page 2010
discussion (0)
Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.