Admin: Created page with " The '''Berlekamp–Welch algorithm''', also known as the '''Welch–Berlekamp algorithm''', is named for Elwyn R. Berlekamp and Lloyd R. Welch. The algorithm ef..."

2019-03-20T04:25:44Z

Created page with "<amp/> The '''Berlekamp–Welch algorithm''', also known as the '''Welch–Berlekamp algorithm''', is named for Elwyn R. Berlekamp and Lloyd R. Welch. The algorithm ef..."

New page

<amp/>
The '''Berlekamp–Welch algorithm''', also known as the '''Welch–Berlekamp algorithm''', is named for [[Elwyn R. Berlekamp]] and [[Lloyd R. Welch]]. The algorithm efficiently corrects errors in [[BCH code]]s and [[Reed–Solomon error correction|Reed–Solomon codes]] (which are a subset of BCH codes). Unlike many other decoding algorithms, and in correspondence with the code-domain [[Berlekamp–Massey algorithm]] that uses [[Decoding methods#Syndrome decoding|syndrome decoding]] and the dual of the codes, the Berlekamp–Welch decoding algorithm provides a method for decoding Reed–Solomon codes using just the generator matrix and not syndromes.

==History on decoding Reed–Solomon codes==

* In 1960, Peterson developed an algorithm for decoding [[BCH codes]]. His algorithm solves the important second stage of the generalized BCH decoding procedure and is used to calculate the error locator polynomial coefficients that in turn provide the error locator polynomial. This is crucial to the decoding of BCH codes.
* In 1963, Gorenstein–Zierler saw that BCH codes and [[Reed–Solomon error correction|Reed–Solomon codes]] have a common generalization and that the decoding algorithm extends to more general situation.
* In 1968 / 69, [[Elwyn Berlekamp]] invented an algorithm for decoding BCH codes. [[James Massey]] recognized its application to linear feedback shift registers and simplified the algorithm. Massey termed the algorithm the LFSR Synthesis Algorithm (Berlekamp Iterative Algorithm) but it is now known as the [[Berlekamp–Massey algorithm]].
* In 1975, Sugiyama ''et al.'' developed a decoder based on the [[extended Euclidean algorithm]]. [[Reed%E2%80%93Solomon_error_correction#Euclidean_decoder]]
* In 1986, The Welch–Berlekamp algorithm was developed to solve the decoding equation of [[Reed–Solomon error correction|Reed–Solomon codes]], using a fast method to solve a certain polynomial equation. The Berlekamp–Welch algorithm has a running time complexity of <math>\mathcal{O}(N^3)</math>. The following sections look at the Gemmel and Sudan’s exposition of the Berlekamp–Welch algorithm.

==Error locator polynomial of Reed–Solomon codes==

In the problem of decoding Reed–Solomon codes, the inputs are pair wise distinct evaluation points <math>\alpha_1, \cdots, \alpha_n</math> where <math>\alpha_i \in \mathbb{F}</math> with [[Block code#Definitions|dimension]] <math>k</math> and [[Block code#Minimum distance|distance]] <math>d = n - k + 1 </math> and a codeword <math>y = (y_1, \cdots, y_n) \in \mathbb{F}^n.</math> Our goal is to describe an algorithm that can correct <math>e < \tfrac{1}{2}(n-k+1)</math> many errors in polynomial time. To do so we have to find <math>P \in \mathbb{F}[X]</math> such that <math>\deg(P) < k - 1</math> and the number of indices for which <math>P(\alpha_i) \ne y_i</math> is less than or equal to <math>e.</math> We can assume that there exists a polynomial <math>P</math> such that

:<math>\Delta(y, (P (\alpha_i))^N _{i=1}) \leqslant e \leqslant \tfrac{d}{2} = \tfrac{1}{2}(n - k + 1).</math>

Note that the coefficients of <math>P</math> are the encoded information. To solve this, we use an indicator for those indices where an error may have occurred. Thus we define an error locator polynomial, <math>E \in \mathbb{F}[X],</math> by:

: <math>E(X) = \prod_{1\leqslant i \leqslant n \atop y_i \ne P(\alpha_i)} (X - \alpha_i)</math>

Note that <math>\deg(E) \leqslant \tfrac{1}{2}(n - k).</math> We can also claim that <math>y_i E(\alpha_i) = P(\alpha_i) E(\alpha_i)</math> holds for all <math>1 \leqslant i \leqslant n</math>. This fact holds true because in the event of <math>y_i \ne P(\alpha_i)</math>, both sides of the above equation vanish because <math>E(\alpha_i) = 0</math>.

However, since <math>E</math> and <math>P</math> are both unknown, the main task of the decoding algorithm would be to find <math>P</math>. To do this we use a seemingly useless yet very powerful method and define another polynomial <math>Q = PE.</math> This is because the <math>n</math> equations with <math>e + k</math> we need to solve are quadratic in nature. Thus by defining a product of two variables that gives rise to a quadratic term as one unknown variable, we increase the number of unknowns but make the equations linear in nature. This method is called linearization and is a very powerful tool.

Thus <math>Q \in \mathbb{F}[X]</math> having the properties:
# <math>\deg(Q) \leqslant \tfrac{1}{2}(n - k) + k - 1</math>
# <math>Q(\alpha_i) = E(\alpha_i)y_i, \qquad 1 \leqslant i \leqslant n</math>

This helps because if we now manage to find <math>Q</math> and <math>E</math>, we can easily find <math>P</math> using <math>P = \tfrac{Q}{E}</math>. The main purpose of the Berlekamp Welch algorithm is to find out <math>P</math> using degree bounded polynomials <math>Q</math> and <math>E</math> and the properties of <math>E</math> and <math>N</math>.

Computing <math>E</math> is as hard as finding the end solution <math>P.</math> Once <math>E</math> is computed, using erasure decoding for Reed–Solomon codes, we can easily recover <math>P</math>. However, in a few cases, even the polynomial <math>Q</math> is as hard to find as <math>E</math>. As an example, given <math>Q</math> and <math>y</math> (such that <math>y_i \ne 0</math> for <math>1 \leqslant i \leqslant n</math>), by checking positions where <math>Q(i) = 0</math>, we can find the error locations. Thus the algorithm works on the principle that while each of the polynomials <math>E</math> and <math>Q</math> are hard to find individually; computing them together is much easier.

==The Berlekamp–Welch decoder and algorithm==

The Welch–Berlekamp decoder for Reed–Solomon codes consists of the Welch– Berlekamp algorithm augmented by some additional steps that prepare the received word for the algorithm and interpret the result of the algorithm.

The inputs given to the Berlekamp Welch decoder are the integers denoting Block Length <math>n,</math> the number of errors <math>e</math> such that <math>e < \tfrac{1}{2}(n - k + 1),</math> and the received word <math>(y_i ,\alpha_i)^n _{i=1}</math> satisfying the condition that there exists at most one <math>P</math> with <math>\deg(P) \leqslant k - 1</math> with <math>\Delta(y, P(\alpha_i)_i) \leqslant e</math>.

The output of the decoder is either the polynomial <math>P</math>, or in some cases, a failure. This decoder functions in two steps as follows:
# This step is called the interpolation step in which the decoder computes a non zero polynomial <math>E</math> of degree <math>e</math> (This implies that the coefficient of <math>X^e</math> must be 1) and another polynomial <math>Q</math> with <math>\deg(Q) \leqslant e + k - 1.</math> These polynomials are created such that the condition <math>y_i E(\alpha_i) = Q(\alpha_i)</math> holds for all <math>1 \leqslant i \leqslant n.</math> In the case that polynomials satisfying the above condition cannot be computed, the output of the decoder would be a failure.
# If <math>E \mid Q</math> then a <math>P</math> is defined which equals <math>\tfrac{Q}{E}.</math> If <math>\Delta(y, (P(\alpha_i)_i ) \leqslant e,</math> then the decoder outputs <math>P.</math> If the above condition is not satisfied, i.e. if <math>E \nmid Q</math> then a failure is returned by the decoder.

According to the algorithm, in the cases where it does not output a failure, it outputs a <math>P</math> that is the correct and desired polynomial. To prove that, the algorithm always outputs the desired polynomial, we need to prove a few claims we have made while describing the algorithm. Let us go ahead and do so now.

:'''Claim 1.''' There exist a pair of polynomials, <math>(E, Q),</math> that satisfy Step 1 of the BW algorithm and <math>\tfrac{Q}{E} = P.</math>

Let <math>E</math> be the error-locating polynomial for <math>P</math> :

:<math>E(X) = X^{e - \Delta(y, P(\alpha_i)_i)} \prod_{1\leqslant i \leqslant n \atop y_i \ne P(\alpha_i)} \left (X - \alpha_i \right )</math>

Notice that <math>E</math> has the following properties by definition:

:<math>\deg(E) = e, \qquad E(\alpha_i) = 0 \Leftrightarrow y_i \ne P(\alpha_i).</math>

Now define <math>Q = PE</math> and note that:

:<math>\deg(Q) \leqslant \deg(P) + \deg(E) \leqslant e + k - 1.</math>

We can now claim that <math>y_i E(\alpha_i) = Q(\alpha_i)</math> from the first step of the BW algorithm holds. If <math>E(\alpha_i) = 0,</math> then <math>Q(\alpha_i) = P(\alpha_i)E(\alpha_i) = y_iE(\alpha_i) = 0</math>. For <math>E(\alpha_i) \ne 0</math> we have <math>P(\alpha_i) = y_i</math> and therefore <math>Q(\alpha_i)= P(\alpha_i)E(\alpha_i) = y_iE(\alpha_i)</math> just as we claimed.

This above claim however just reiterates and proves the fact that there exists a pair of polynomials <math>E</math> and <math>Q</math> such that <math>P = \tfrac{Q}{E}.</math> It however does not necessarily guarantee the fact that the algorithm we discussed above would indeed output such a pair of polynomials. We therefore move on to look at another claim that helps establish this fact using the above claim and thereby proving the correctness of the algorithm.

:'''Claim 2.''' If <math>(E_1, Q_1), (E_2, Q_2)</math> are two distinct solutions that satisfy the first step of the Berlekamp Welch algorithm, then we have <math>\tfrac{Q_1}{E_1} = \tfrac{Q_2}{E_2}.</math>

First note that

:<math>\deg(Q_1E_2), \deg(Q_2E_1) \leqslant 2e + k - 1.</math>

Then we define:

:<math>R := Q_1E_2 - Q_2E_1</math>

Note that <math>\deg(R) \leqslant 2e + k - 1.</math> From step 1 of the Berlekamp Welch algorithm we also know that <math>y_iE_1(\alpha_i) = Q_1(\alpha_i)</math> and <math>y_iE_2(\alpha_i) = Q_2(\alpha_i).</math> Now for all <math>i \in \{1, \cdots, n\}</math> we calculate:

:<math>\begin{align}
R(\alpha_i) &= Q_1(\alpha_i)E_2(\alpha_i) - Q_2(\alpha_i)E_1(\alpha_i) \\
&= y_iE_1(\alpha_i)E_2(\alpha_i) - y_iE_2(\alpha_i)E_1(\alpha_i) \\
&= 0
\end{align}</math>

Thus <math>R</math> has <math>n</math> roots, on the other hand

:<math>\deg(R(X)) \leqslant 2e + k - 1 < 2 \tfrac{1}{2}(n - k + 1) + k - 1 = n.</math>

Therefore, <math>R</math> is the zero polynomial which means that <math>Q_1E_2</math> and <math>Q_2E_1</math> are identical. Since <math>E_1, E_2</math> are non-zero we can write: <math>\tfrac{Q_1}{E_1} = \tfrac{Q_2}{E_2}</math> as per our initial claim.

Thus based on the above claims, we can safely state that the output of the Berlekamp Welch algorithm, when outputting the polynomial <math>P(X)</math> is correct.

We can now claim that the algorithm can be implemented such that it has a running time of <math>O(n^3)</math>. This can be proved as follows: In Step 1 of the algorithm, the polynomials <math>Q</math> and <math>E</math> have <math>e + k</math> and <math>e + 1</math> unknown values respectively and the constraints <math>y_i E(\alpha_i) = Q(\alpha_i)</math> for all <math>1 \leqslant i \leqslant n</math> acts as a linear equation with these unknowns. We therefore get a system of <math>n</math> linear equations in <math>2e + k + 1 < n + 2</math> unknowns. Using our first claim, this system of equations has a solution since <math>\deg(E) = e.</math> This can be solved in <math>O(n^3)</math> time, by say Gaussian elimination. Finally, we can note that Step 2 of the algorithm can also be implemented in time <math>O(n^3)</math> by "long division" method. Hence we can state that the Berlekamp Welch algorithm can be used to uniquely decode any <math>[n,k]_q</math> Reed–Solomon code in <math>O(n^3)</math> time for a maximum of <math>\tfrac{1}{2}(n - k + 1)</math> errors.

==Example==
Consider a simple example where a redundant set of points are used to represent the line <math>y = 5 - x</math>, and one of the points is incorrect. The points that the algorithm gets as an input are <math>(1,4), (2,3), (3,4), (4,1)</math>, where <math>(3,4)</math> is the defective point. The algorithm must solve the following system of equations:

:<math> \begin{align}
Q(1) & = 4*E(1) \\
Q(2) & = 3*E(2) \\
Q(3) & = 4*E(3) \\
Q(4) & = 1*E(4)
\end{align}</math>

Given a solution pair <math>(Q, E)</math> to this system of equations, it is evident that at any of the points <math>x = 1,2,3,4</math> one of the following must be true:

:<math>Q(\alpha_i) = E(\alpha_i) = 0, \quad \text{or} \quad P(\alpha_i) = \frac{Q(\alpha_i)}{E(\alpha_i)} = y_i.</math>

Since <math>E</math> is defined as only having a degree of one, the former can only be true in one point. Therefore, <math>P(\alpha_i) = y_i</math> at the three other points.

Letting <math>E(x) = x + e_0</math> and <math>Q = q_0 + q_1x + q_2x^2</math> we can rewrite the system:

:<math>\begin{cases}
q_0 + q_1 + q_2 -4 e_0 -4 = 0 \\
q_0 +2q_1 + 4q_2 - 3e_0 - 6 = 0 \\
q_0 + 3q_1+ 9q_2 - 4e_0 - 12 = 0 \\
q_0 + 4q_1 + 16q_2 - e_0 -4 = 0
\end{cases}</math>

This system can be solved through [[Gaussian elimination]], and gives the values:

:<math>q_0 = -15, q_1 = 8, q_2 = -1, e_0 = -3</math>

Thus:

:<math>Q = -x^2 + 8x - 15, E = x - 3, \quad \text{and} \quad \frac{Q}{E} = P = 5-x.</math>

<math>5-x</math> fits three of the four points given, so it is the most likely to be the original polynomial.

==See also==

*[[BCH code]]
*[[Berlekamp–Massey algorithm]]
*[[Reed–Solomon error correction]]

==Source==

[http://wikipedia.org/ http://wikipedia.org/]

[[Category:Cryptography]]
[[Category:Cryptographic algorithms]]
[[Category:Error-detecting codes]]

Berlekamp–Welch algorithm - Revision history

Admin: Created page with " The '''Berlekamp–Welch algorithm''', also known as the '''Welch–Berlekamp algorithm''', is named for Elwyn R. Berlekamp and Lloyd R. Welch. The algorithm ef..."