title: Straight-line program
text: # Straight-line program
  
  In mathematics, more specifically in computational algebra, a straight-line program (SLP) for a finite group G = ⟨S⟩ is a finite sequence L of elements of G such that every element of L either belongs to S, is the inverse of a preceding element, or the product of two preceding elements. An SLP L is said to compute a group element g ∈ G if g ∈ L, where g is encoded by a word in S and its inverses.
  
  Intuitively, an SLP computing some g ∈ G is an efficient way of storing g as a group word over S; observe that if g is constructed in i steps, the word length of g may be exponential in i, but the length of the corresponding SLP is linear in i. This has important applications in computational group theory, by using SLPs to efficiently encode group elements as words over a given generating set.
  
  Straight-line programs were introduced by Babai and Szemerédi in 1984 as a tool for studying the computational complexity of certain matrix group properties. Babai and Szemerédi prove that every element of a finite group G has an SLP of length $O(log^2|G|)$ in every generating set.
  
  An efficient solution to the constructive membership problem is crucial to many group-theoretic algorithms. It can be stated in terms of SLPs as follows. Given a finite group G = ⟨S⟩ and g ∈ G, find a straight-line program computing g over S. The constructive membership problem is often studied in the setting of black box groups. The elements are encoded by bit strings of a fixed length. Three oracles are provided for the group-theoretic functions of multiplication, inversion, and checking for equality with the identity. A black box algorithm is one which uses only these oracles. Hence, straight-line programs for black box groups are black box algorithms.
  
  Explicit straight-line programs are given for a wealth of finite simple groups in the online ATLAS of Finite Groups.
  
  ## Definition
  
  ### Informal definition
  
  Let G be a finite group and let S be a subset of G. A sequence L = $(g_1,…,g_m)$ of elements of G is a straight-line program over S if each $g_i$ can be obtained by one of the following three rules:
  
  * $g_i$ ∈ S
  * $g_i$ = $g_j$ $\cdot$ $g_k$ for some j,k < i
  * $g_i$ = $g^{−1}$ $_j$ for some j < i.
  
  The straight-line cost c(g|S) of an element g ∈ G is the length of a shortest straight-line program over S computing g. The cost is infinite if g is not in the subgroup generated by S.
  
  A straight-line program is similar to a derivation in predicate logic. The elements of S correspond to axioms and the group operations correspond to the rules of inference.
  
  ### Formal definition
  
  Let G be a finite group and let S be a subset of G. A straight-line program of length m over S computing some g ∈ G is a sequence of expressions $(w_1,…,w_m)$ such that for each i, $w_i$ is a symbol for some element of S, or $w_i$ = $(w_j,-1)$ for some j < i, or $w_i$ = $(w_j,w_k)$ for some j,k < i, such that $w_m$ takes upon the value g when evaluated in G in the obvious manner.
  
  The original definition appearing in requires that G =⟨S⟩. The definition presented above is a common generalisation of this.
  
  From a computational perspective, the formal definition of a straight-line program has some advantages. Firstly, a sequence of abstract expressions requires less memory than terms over the generating set. Secondly, it allows straight-line programs to be constructed in one representation of G and evaluated in another. This is an important feature of some algorithms.
  
  ## Examples
  
  The dihedral group $D_{12}$ is the group of symmetries of a hexagon. It can be generated by a 60 degree rotation ρ and one reflection λ. The leftmost column of the following is a straight-line program for $λρ^3:$
  
  In $S_6,$ the group of permutations on six letters, we can take α=(1 2 3 4 5 6) and β=(1 2) as generators. The leftmost column here is an example of a straight-line program to compute (1 2 3)(4 5 6):
  
  ## Applications
  
  Short descriptions of finite groups. Straight-line programs can be used to study compression of finite groups via first-order logic. They provide a tool to construct "short" sentences describing G (i.e. much shorter than |G|). In more detail, SLPs are used to prove that every finite simple group has a first-order description of length O(log|G|), and every finite group G has a first-order description of length $O(log^3|G|).$
  
  Straight-line programs computing generating sets for maximal subgroups of finite simple groups. The online ATLAS of Finite Group Representations provides abstract straight-line programs for computing generating sets of maximal subgroups for many finite simple groups.
  
  Example: The group Sz(32), belonging to the infinite family of Suzuki groups, has rank 2 via generators a and b, where a has order 2, b has order 4, ab has order 5, $ab^2$ has order 25 and $abab^2ab^3$ has order 25. The following is a straight-line program that computes a generating set for a maximal subgroup $E_{32}·E_{32}⋊C_{31}.$ This straight-line program can be found in the online ATLAS of Finite Group Representations.
  
  ## Reachability theorem
  
  The reachability theorem states that, given a finite group G generated by S, each g ∈ G has a maximum cost of (1 + $lg|G|)^2.$ This can be understood as a bound on how hard it is to generate a group element from the generators.
  
  Here the function lg(x) is an integer-valued version of the logarithm function: for k≥1 let lg(k) = max{r : $2^r$ ≤ k}.
  
  The idea of the proof is to construct a set Z = ${z_1,…,z_s}$ that will work as a new generating set (s will be defined during the process). It is usually larger than S, but any element of G can be expressed as a word of length at most 2|Z| over Z. The set Z is constructed by inductively defining an increasing sequence of sets K(i).
  
  Let K(i) = ${z_1^{α1}·z_2^{α2}·…·z_i^{αi}$ : $α_j$ ∈ {0,1}}, where $z_i$ is the group element added to Z at the i-th step. Let c(i) denote the length of a shortest straight-line program that contains Z(i) = ${z_1,…,z_i}.$ Let K(0) = ${1_G}$ and c(0)=0. We define the set Z recursively:
  
  * If $K(i)^{−1}K(i)$ = G, declare s to take upon the value i and stop.
  * Else, choose some $z_{i+1}$ ∈ $G\K(i)^{−1}K(i)$ (which is non-empty) that minimises the "cost increase" c(i+1) − c(i).
  
  By this process, Z is defined in a way so that any g ∈ G can be written as an element of $K(i)^{−1}K(i),$ effectively making it easier to generate from Z.
  
  We now need to verify the following claim to ensure that the process terminates within lg(|G|) many steps:
  
  Claim 1 — If i < s then |K(i+1)| = 2|K(i)|.
  
  It is immediate that |K(i+1)| ≤ 2|K(i)|. Now suppose for a contradiction that |K(i+1)| < 2|K(i)|. By the pigeonhole principle there are $k_1,k_2$ ∈ K(i+1) with $k_1$ = $z_1^{α1}·z_2^{α2}·…·z_{i+1}^{αi+1}$ = $z_1^{β1}·z_2^{β2}·…·z_{i+1}^{βi+1}$ = $k_2$ for some $α_j,β_j$ ∈ {0,1}. Let r be the largest integer such that $α_r$ ≠ $β_r.$ Assume WLOG that $α_r$ = 1. It follows that $z_r$ = $z_p^{−αp}·z_{p-1}^{−αp-1}·…·z_1^{−α1}·z_1^{β1}·z_2^{β2}·…·z_q^{βq},$ with p,q < r. Hence $z_r$ ∈ $K(r−1)^{−1}K(r$ − 1), a contradiction.
  
  The next claim is used to show that the cost of every group element is within the required bound.
  
  Claim 2 — c(i) ≤ i $^2$ − i.
  
  Since c(0)=0 it suffices to show that c(i+1) - c(i) ≤ 2i. The Cayley graph of G is connected and if i < s, $K(i)^{−1}K(i)$ ≠ G, then there is an element of the form $g_1·g_2$ ∈ G \ $K(i)^{−1}K(i)$ with $g_1$ ∈ $K(i)^{−1}K(i)$ and $g_2$ ∈ S.
  
  It takes at most 2i steps to generate $g_1$ ∈ $K(i)^{−1}K(i).$ There is no point in generating the element of maximum length, since it is the identity. Hence 2i −1 steps suffice. To generate $g_1·g_2$ ∈ $G\K(i)^{−1}K(i),$ 2i steps are sufficient.
  
  We now finish the theorem. Since $K(s)^{−1}K(s)$ = G, any g ∈ G can be written in the form $k^{−1}$ $_1·k_2$ with $k^{−1}$ $_1,k_2$ ∈ K(s). By Corollary 2, we need at most $s^2$ − s steps to generate Z(s) = Z, and no more than 2s − 1 steps to generate g from Z(s).
  
  Therefore c(g|S) ≤ $s^2$ + s − 1 ≤ $lg^2|G|$ + lg|G| − 1 ≤ (1 + $lg|G|)^2.$
  
  