Paper 2026/2668

An Algebraic Polynomial Evaluation Datastructure for Fields of Large Characteristic

Hiroki Okada, KDDI Research (Japan), University of Tokyo
Rachel Player, Royal Holloway University of London
Simon Pohmann, Royal Holloway University of London
Abstract

In this work, we study (multivariate) polynomial evaluation datastructures, i.e. algorithms that can evaluate a multivariate polynomial at any input point, using random access to some precomputed encoding of the polynomial. Multiple constructions have been proposed in the literature, with the work by Bhargava, Ghosh, Guo, Kumar and Umans (2024) achieving optimal datastructure size and query complexity, up to polynomial factors. For $n \in d^{o(1)}$ this is equivalent to having datastructure size $d^{n + o(n)} (d n \log q)^{O(1)}$ and query complexity $(d n \log q)^{O(1)}$ for an $n$-variate polynomial of total degree $d$ over $\mathbb{F}_q$. However, the algorithm of Bhargava et al. is not algebraic, since it requires lifting prime field elements to $\mathbb{Z}$. An algebraic algorithm would be desirable, as an algebraic model of computation is natural for studying polynomial evaluation and is the standard model in algebraic complexity theory. One approach to finding algebraic polynomial evaluation datastructures is to use univariate polynomial interpolation to reconstruct the polynomial along algebraic curves. This approach was first made explicit by Bhargava, Ghosh, Kumar and Mohapatra (2023), who used it to build an essentially optimal algebraic polynomial evaluation datastructure for fields of small characteristic $p = \mathrm{char}(\mathbb{F}_q) \in d^{o(1)}$. Over these fields, their construction refutes a previous conjecture by Miltersen. For fields of larger characteristic, it remains an open problem to find an algebraic algorithm with optimal datastructure size and query complexity. In this work, we propose a new way to construct algebraic curves over prime fields that allow polynomial interpolation: by deriving curves from the base-$\beta$ representation of (lifts of) prime field elements, we are able to recursively reduce the evaluation problem to points in boxes of decreasing size. This leads to a datastructure whose performance scales much more favourably with $p$. Concretely, we improve the dependency of the query complexity on $p$ from $p^{O(1)}$ to $d^{2\log_2 \ln\ln p} \ln p$, and completely remove the dependency on $p$ from the datastructure size. Its query complexity is still slightly super-polynomial in $d \log p$. Nevertheless, a variant of our results is enough to disprove Miltersen's conjecture for all finite fields, including prime fields. We further show that for a certain class of datastructures, which captures natural generalizations of our approach, the query complexity is lower-bounded by $d^{(1 - o(1))\log_3\ln\ln p}$. Consequently, within this class, our construction is optimal up to a constant in the exponent.

Metadata
Available format(s)
PDF
Category
Foundations
Publication info
Preprint.
Keywords
polynomial evaluationcomputational complexitydatastructurepolynomial interpolationNikodym setfinite field
Contact author(s)
ir-okada @ kddi com
Rachel Player @ rhul ac uk
simon @ pohmann de
History
2026-10-28: approved
2026-10-28: received
See all versions
Short URL
https://ia.cr/2026/2668
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2026/2668,
      author = {Hiroki Okada and Rachel Player and Simon Pohmann},
      title = {An Algebraic Polynomial Evaluation Datastructure for Fields of Large Characteristic},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/2668},
      year = {2026},
      url = {https://eprint.iacr.org/2026/2668}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.