Chien search

In abstract algebra, the Chien search, named after Robert Tienwen Chien, is a fast algorithm for determining roots of polynomials defined over a finite field. Chien search is commonly used to find the roots of error-locator polynomials encountered in decoding Reed-Solomon codes and BCH codes.

Algorithm

The problem is to find the roots of the polynomial Template:Math (over the finite field Template:Math): $$\mathrm{\Lambda }(x)={\lambda }_0+{\lambda }_{1}x+{\lambda }_2{x}^2+\cdots +{\lambda }_t{x}^t$$

The roots may be found using brute force: there are a finite number of Template:Mvar, so the polynomial can be evaluated for each element Template:Math. If the polynomial evaluates to zero, then that element is a root.

For the trivial case Template:Math, only the coefficient Template:Math need be tested for zero. Below, the only concern will be for non-zero Template:Math.

A straightforward evaluation of the polynomial involves Template:Math general multiplications and Template:Math additions. A more efficient scheme would use Horner's method for Template:Math general multiplications and Template:Math additions. Both of these approaches may evaluate the elements of the finite field in any order.

Chien search improves upon the above by selecting a specific order for the non-zero elements. In particular, the finite field has a (constant) generator element Template:Math. Chien tests the elements in the generator's order Template:Math. Consequently, Chien search needs only Template:Math multiplications by constants and Template:Math additions. The multiplications by constants are less complex than general multiplications.

The Chien search is based on two observations:

• Each non-zero $\beta$ may be expressed as ${\alpha }^{i_{\beta }}$ for some $i_{\beta }$, where $\alpha$ is a primitive element of $\mathrm{G}\mathrm{F}(q)$, $i_{\beta }$ is the power number of primitive element $\alpha$. Thus the powers ${\alpha }^i$ for $0\le i<(q-1)$ cover the entire field (excluding the zero element).
• The following relationship exists:$$\begin{array}{ccccccccccc}\mathrm{\Lambda }({\alpha }^i)& =& {\lambda }_0& +& {\lambda }_1({\alpha }^i)& +& {\lambda }_2({\alpha }^i{)}^2& +& \cdots & +& {\lambda }_t({\alpha }^i{)}^t\\ & \triangleq & {\gamma }_{0,i}& +& {\gamma }_{1,i}& +& {\gamma }_{2,i}& +& \cdots & +& {\gamma }_{t,i}\\ \mathrm{\Lambda }({\alpha }^{i+1})& =& {\lambda }_0& +& {\lambda }_1({\alpha }^{i+1})& +& {\lambda }_2({\alpha }^{i+1}{)}^2& +& \cdots & +& {\lambda }_t({\alpha }^{i+1}{)}^t\\ & =& {\lambda }_0& +& {\lambda }_1({\alpha }^i)\alpha & +& {\lambda }_2({\alpha }^i{)}^2{\alpha }^2& +& \cdots & +& {\lambda }_t({\alpha }^i{)}^t{\alpha }^t\\ & =& {\gamma }_{0,i}& +& {\gamma }_{1,i}\alpha & +& {\gamma }_{2,i}{\alpha }^2& +& \cdots & +& {\gamma }_{t,i}{\alpha }^t\\ & \triangleq & {\gamma }_{0,i+1}& +& {\gamma }_{1,i+1}& +& {\gamma }_{2,i+1}& +& \cdots & +& {\gamma }_{t,i+1}\end{array}$$

In other words, we may define each $\mathrm{\Lambda }({\alpha }^i)$ as the sum of a set of terms $\{{\gamma }_{j,i}\mid 0\le j\le t\}$, from which the next set of coefficients may be derived thus: $${\gamma }_{j,i+1}={\gamma }_{j,i}{\alpha }^j$$

In this way, we may start at $i=0$ with ${\gamma }_{j,0}={\lambda }_j$, and iterate through each value of $i$ up to $(q-1)$. If at any stage the resultant summation is zero, i.e. $$\sum _{j=0}^t{\gamma }_{j,i}=0,$$ then $\mathrm{\Lambda }({\alpha }^i)=0$ also, so ${\alpha }^i$ is a root. In this way, we check every element in the field.

When implemented in hardware, this approach significantly reduces the complexity, as all multiplications consist of one variable and one constant, rather than two variables as in the brute-force approach.

References

• Template:Citation
• Template:Citation
• Template:Citation