Forrelation, Bent Functions, and a Spectral Criterion for Hardness

J. Landers

1. Introduction

The Forrelation problem, introduced by Aaronson and Ambainis (2015), serves as one of the cleanest demonstrations of an exponential separation between quantum and classical query complexity. Given oracle access to two Boolean functions \( f, g : \{0,1\}^n \to \{-1,1\} \), one must estimate their correlation \[ \Phi(f,g) = \frac{1}{2^{3n/2}} \sum_{x,y} f(x)(-1)^{x\cdot y}g(y). \] Let the Walsh–Hadamard transform be normalized as \[ \widehat f(y) := 2^{-n/2}\sum_x f(x)(-1)^{x\cdot y}. \] Then \[ \Phi(f,g) = 2^{-n}\sum_y \widehat f(y)\,g(y) \] \[ = \mathbb{E}_{y\sim\mathrm{Unif}}\big[\widehat f(y)\,g(y)\big]. \] The problem captures a fundamental contrast: a quantum computer can estimate \(\Phi(f,g)\) with one query, whereas classical randomized algorithms require exponentially many in the standard constant-gap regime (on the order of \(2^{n/2}\), up to polylog factors).

This note extends the framework by introducing a spectral criterion for hardness: a quantitative relation between Fourier flatness, resilience, and classical query complexity. It is useful to keep two “endpoints” in mind: (i) the Aaronson–Ambainis random-oracle regime, which attains the \(\widetilde\Omega(2^{n/2})\) classical scale; and (ii) the extremal bent frontier (maximal \(|\Phi|=1\)), where the best-known classical lower bound is \(\widetilde\Omega(2^{n/4})\) (Girish–Servedio, 2025). We then propose a smooth spectrum viewpoint that organizes intermediate structure between these extremes.

2. Background and the Two Extremes

2.1 Aaronson & Ambainis (2015)

In their foundational paper, Aaronson and Ambainis formulated the Forrelation problem to exhibit an optimal quantum-classical separation. The task is to distinguish whether \(\Phi(f,g) \geq \tau\) or \(|\Phi(f,g)| \leq \tau/2\), given a promise that one holds. They showed that a quantum computer can solve this with \(O(1)\) queries, while any classical algorithm requires \(\widetilde\Omega(2^{n/2})\) queries (equivalently \(\widetilde\Omega(\sqrt{N})\) where \(N=2^n\)).

Their analysis treats \(f\) and \(g\) as unstructured oracles, essentially random Boolean functions (with the YES case drawn from a “forrelated” distribution). Under the NO distribution, Fourier spectra behave like noise and \(\Phi(f,g)\) concentrates near \(0\); under the YES distribution, \(\Phi(f,g)\) is a constant bounded away from \(0\), yet still hard to detect by classical sampling. Quantum interference exploits the global structure of the Hadamard transform in a single step. This randomness-based regime represents one extreme of the spectrum, a coarse-grained demonstration that exponential advantage exists, without specifying the spectral structure that makes it hardest.

2.2 Girish & Servedio (2025)

In contrast, Girish and Servedio identify a structured extremal case. They focus on the extremal promise \(\Phi(f,g) \in \{+1,-1\}\), and show that such maximally forrelated (and anti-forrelated) pairs arise from bent functions—Boolean functions with perfectly flat Fourier spectra. They prove that distinguishing \(\Phi(f,g)=1\) from \(\Phi(f,g)=-1\) requires \(\widetilde\Omega(2^{n/4})\) classical queries, while quantum algorithms still need only \(O(1)\).

Thus, Aaronson’s random-oracle regime and the bent-function extremal regime represent two endpoints: the former achieves the largest known classical hardness scale for a one-query quantum algorithm (\(\widetilde\Omega(2^{n/2})\)), while the latter isolates an explicit algebraic frontier where \(|\Phi|\) is maximized but the best-known classical lower bound is \(\widetilde\Omega(2^{n/4})\). (Whether the extremal bound can be improved to \(\widetilde\Omega(2^{n/2})\) remains an open question.)

3. Bent Functions: Algebraic and Spectral Definitions

Two equivalent characterizations of bent functions are central in the literature:

These two definitions are mathematically equivalent; the quadratic form guarantees constant-magnitude Walsh coefficients, while any flat-spectrum Boolean function corresponds, up to affine transformation, to such a quadratic polynomial.

4. A Spectral Criterion for Hardness

We now propose a spectral criterion for hardness that aims to organize intermediate cases between random and bent extremes. Let \(f,g:\{0,1\}^n\to\{-1,1\}\) be Boolean functions with Fourier transforms \(\widehat f, \widehat g\).

Conjecture 1 (Spectral Criterion for Hardness).
Suppose \(f\) and \(g\) are both \(\eta\)-flat and \(\kappa\)-resilient, meaning \[ \|\widehat f\|_\infty \le 2^{-(1/2-\eta)n}, \quad \sum_{|S|\le d} \widehat f(S)^2 \le 2^{-\kappa n}, \] and likewise for \(g\), for some fixed low-degree cutoff \(d\). Then a classical randomized algorithm that distinguishes whether \(\Phi(f,g) \ge \tau\) or \(\Phi(f,g) \le \tau/2\) with bias \(\tau\) should require at least on the order of \[ T \gtrsim \frac{\tau}{8} \cdot 2^{(a(\tau) - 2\eta - \kappa)n} \] queries to \(f\) and \(g\), where the baseline exponent \(a(\tau)\in[1/4,1/2]\) depends on the promised correlation scale \(\tau\).

The key point is that a single fixed baseline exponent cannot simultaneously match both endpoints: the Aaronson–Ambainis constant-gap regime exhibits \(\widetilde\Omega(2^{n/2})\) classical hardness at a constant forrelation level, whereas the extremal \(\tau=1\) promise currently has a \(\widetilde\Omega(2^{n/4})\) bound. The role of \(\eta\) (flatness) and \(\kappa\) (low-degree suppression) is to quantify how close one is to the “spectrally ideal” case; the role of \(a(\tau)\) is to reflect which endpoint regime the promise level is actually probing.

4.1 A spline baseline between the two extremes

To make the “spectrum” picture concrete, we can define a smooth baseline exponent \(a(\tau)\) that interpolates between the two anchor points: \[ \big(\tau_0, a(\tau_0)\big)= \] \[ \Big(\frac{2}{\pi},\frac{1}{2}\Big) \quad \text{(AA-style forrelated scale)}, \] \[ \big(\tau_1, a(\tau_1)\big)= \] \[ \big(1,\frac{1}{4}\big) \quad \text{(extremal bent frontier)}. \] With only two knots, the natural cubic spline degenerates to a straight line. A simple “one-segment spline” with curvature is the cubic Hermite choice with zero slope at both endpoints.

Proposition 2 (Cubic Hermite spline baseline).
Let \(\tau\in[\tau_0,\tau_1]\) with \(\tau_0=2/\pi\) and \(\tau_1=1\), and define \[ t(\tau):=\frac{\tau-\tau_0}{\tau_1-\tau_0}\in[0,1], \quad S(t):=3t^2-2t^3. \] Define the baseline exponent \[ a_{\mathrm{spline}}(\tau):=\frac12+\Big(\frac14-\frac12\Big)S\big(t(\tau)\big) \] \[ =\frac12-\frac14\big(3t(\tau)^2-2t(\tau)^3\big). \] Then \(a_{\mathrm{spline}}(\tau_0)=1/2\), \(a_{\mathrm{spline}}(1)=1/4\), and \(a_{\mathrm{spline}}\) is smooth and monotone decreasing on \((\tau_0,1)\), with \(a'_{\mathrm{spline}}(\tau_0)=a'_{\mathrm{spline}}(1)=0\).

Plugging \(a_{\mathrm{spline}}(\tau)\) into Conjecture 1 yields a compact “spectrum hypothesis”: for promise levels near \(\tau\approx 2/\pi\), one expects the AA-scale exponent \(\approx 1/2\); as \(\tau\to 1\), the baseline exponent smoothly relaxes toward \(1/4\), consistent with the known extremal lower bound. This spline is not a proof technique; it is a concise way to encode how the underlying hardness scale might vary with the promised correlation level while remaining pinned to the two established endpoints.

5. Discussion: Beyond Bent Functions

Beyond bent functions, recent works have explored related function classes in Forrelation and similar problems:

This broader context suggests that Forrelation hardness is governed by spectral flatness and low-degree suppression, the same properties that drive pseudorandomness and cryptographic resistance.

6. Conclusion

The Forrelation problem provides a unifying stage for examining how spectral properties of Boolean functions translate into computational hardness. Aaronson and Ambainis revealed the existence of exponential quantum advantage in a random-oracle regime at the \(\widetilde\Omega(2^{n/2})\) scale; Girish and Servedio located an explicit extremal bent frontier where \(|\Phi|\) is maximized and proved a \(\widetilde\Omega(2^{n/4})\) lower bound. The spectral viewpoint in this note reframes these results as endpoints of a continuous story: flat Fourier spectra and low-degree suppression are “hardness-enabling resources,” while the promised correlation scale \(\tau\) controls which baseline exponent is plausible. Conjecture 1 packages this viewpoint into a single heuristic inequality, and Proposition 2 supplies a concrete spline baseline \(a_{\mathrm{spline}}(\tau)\) that interpolates between the two established endpoint exponents \(1/2\) and \(1/4\). A natural next step is to test (numerically, or within restricted function families) whether the \((\eta,\kappa)\) parameters correlate with classical query hardness in the way suggested here, and to understand how much of the remaining gap is due to promise design versus proof technique.

References

  1. S. Aaronson and A. Ambainis. Forrelation: A Problem that Optimally Separates Quantum from Classical Computing. SIAM J. Comput. 47(3):982–1038, 2018. (Conference version in STOC 2015.)
  2. U. Girish and R. A. Servedio. Forrelation is Extremally Hard. arXiv preprint arXiv:2508.02514, 2025.