REVIEW 3 major objections 3 minor 21 references
Modular Debiasing: A Robust Method for Quantum Randomness Extraction
T0 review · 3 major / 3 minor · reviewed 2026-08-16 · deepseek-v4-flash
Pith's one-line read For any m-sided source in which every outcome can occur, summing N draws modulo m drives the output distribution to uniform with error bounded by ((m-1)/m) rho^N, and the guarantee persists when probabilities drift across trials.
desk verdict The IID modular-sum debiasing result is correct but standard, while the advertised non-stationary robustness theorem is false as stated and the novelty claim is unsupported. read the letter →
The pith
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
The reading
What carries the argument
The load-bearing identity is the root-of-unity extraction formula P(r_f ≡ k mod m) = (1/m) Σ_{r=0}^{m-1} $ω^{{-rk}}$ ∏_{j=1}^N G_j(ω^r), where G_j(t) = Σ_k $p^{{(j)}}$_k t^k is the probability generating function of trial j and ω = $e^{{2πi/m}}$. The r = 0 term contributes exactly 1/m; every r ≠ 0 term is a product of Fourier coefficients G_j(ω^r), each of magnitude ≤ 1, and strictly less than 1 under full support. The rate parameter ρ = max_{r≠0} |Σ_l p_l $ω^{{rl}}$| sets the exponential contraction rate. The machinery converts a question about residue statistics of a sum into a question about whether a product of complex numbers on the unit disk contracts to zero.
What would settle it
Run the modular sum for m = 2 with $p^{{(j)}}$(0) = 1 − $2^{{-(j+1)}}$ and $p^{{(j)}}$(1) = $2^{{-(j+1)}}$. The trial product equals ∏_{j=1}^N (1 − $2^{{-j}}$), which converges to a positive constant c ≈ 0.2888, so P(r_f = 0) tends to (1+c)/2 ≈ 0.644 rather than 1/2. This calculation shows that the divergence condition in Section 4 is doing real work; a simulation of this sequence would settle whether the paper's non-stationary theorem is meant to hold under positivity alone.
Extended reading notes
Core claim
The central discovery is that modular summation is itself a debiasing map. For independent draws with fixed probabilities p_k > 0, the modular sum r_f satisfies P(r_f ≡ k mod m) = (1/m) Σ_{j=0}^{m-1} $ω^{{-jk}}$ (Σ_l p_l $ω^{{jl}}$)^N, and for every j ≠ 0 the base A_j = Σ_l p_l $ω^{{jl}}$ has |A_j| < 1. The deviation from uniform is therefore bounded by ((m-1)/m) ρ^N with ρ = max_{j≠0} |A_j| < 1. The paper extends the statement to time-dependent probabilities, asserting that the product ∏_j G_j(ω^r) vanishes and the output distribution becomes uniform whenever $p^{{(j)}}$_k remains positive for every trial, so arbitrary initial bias and drift both wash out.
Load-bearing premise
The non-stationary robustness claim relies on an extra condition beyond positivity: the per-trial deviations from perfect uniformity must accumulate, in the sense that ∑_j (1 − |G_j(ω^r)|) diverges for each nonzero frequency; without that condition, a trial sequence can keep every outcome positive yet fail to converge to uniform.
Editorial extensions
If this is right
- A biased quantum source with m spatial detection regions can be debiased by a simple running counter that adds and reduces modulo m, removing the need to calibrate per-detector efficiency or illumination.
- No raw samples are discarded: every draw contributes to the final block output, so the output rate approaches log2 m bits per block as N grows.
- The error bound ((m-1)/m) ρ^N gives a direct way to choose N for a target statistical distance to uniform, even for strongly biased sources.
- Under the stated average-decay condition, slow parameter drift or cyclic bias does not prevent convergence to uniformity; only a persistent failure to make every outcome possible would leave a residual bias.
- The method is alphabet-agnostic: the same proof works for any discrete source with m outcomes, including non-binary quantum detection maps.
Reading between the lines
- Going beyond the paper, the bound can be inverted into a practical block-size rule: to guarantee |P - 1/m| ≤ ε, take N ≥ ln(ε m/(m-1)) / ln ρ, which an online extractor could compute on the fly.
- Going beyond the paper, the product structure suggests a natural extension where each trial has its own alphabet size but a common final modulus; convergence would still hold as long as the Fourier factors contract.
- Going beyond the paper, the method as stated assumes independent trials; whether modular summation remains a debiaser for weakly dependent sources (e.g., fast-mixing Markov chains) is an open testable extension that the current proof does not cover.
Signed reviews
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The paper proposes a modular debiasing method for discrete m-ary sources: the outcomes of N independent trials are summed modulo m, and the resulting residue is used as a supposedly uniform output. The authors claim that, provided every outcome has positive probability, the distribution of the modular sum converges exponentially to the uniform distribution, and that the guarantee persists under non-stationary or time-dependent biases. The derivation uses probability generating functions and roots of unity, derives an IID error bound controlled by the spectral radius rho, and validates the claims with numerical simulations for stationary and non-stationary examples. A practical application to spatial photon-detection QRNGs is also discussed.
Significance. The IID part of the paper is both correct and useful: Eq. (9) gives an exact formula for the modular-sum distribution, and the bound in Eq. (17) is a clean exponential convergence statement for any full-support stationary source. The method is conceptually simple and the numerical experiments are extensive, including entropy and TVD convergence tests. However, the paper's headline contribution is the claimed robustness to non-stationary sources, and that claim is false as stated. Since the QRNG motivation in Section 7 and the abstract's central promise rest on this non-stationary robustness, the current manuscript cannot be accepted without a fundamental reformulation and restriction of the theorem.
major comments (3)
- [Section 4, Eqs. (11)-(13)] The inference that positivity of p_j(k) forces the product of Fourier factors to vanish is invalid. From |G_j(omega^r)| < 1 for each j it does not follow that the infinite product tends to 0; this requires a summability condition such as sum_j (1 - |G_j(omega^r)|) = infinity. The paper itself states such a sufficient condition in passing, but it is not assumed in the theorem and is not implied by p_j(k) > 0. A concrete counterexample with m=2 is p_j(0) = 1 - 2^{-(j+1)}, p_j(1) = 2^{-(j+1)}. Then G_j(-1) = 1 - 2^{-j}, so P(r_f=0) = 1/2 + (1/2) prod_{j=1}^N (1 - 2^{-j}), whose limit is (1+C)/2 with C = prod_{j=1}^infty (1-2^{-j}) > 0, not 1/2. All hypotheses of Eq. (13) are satisfied, yet the conclusion fails.
- [Section 6 (Non-Stationary simulations)] The numerical validation does not test the theorem as stated. The non-stationary scenarios (random fluctuations around a fixed mean and cyclic bias with a dominant outcome) are special processes in which the logarithms of |G_j| have a negative drift, so the missing summability condition happens to hold. They do not probe the failure mode exhibited by the Section 4 counterexample, where the probabilities approach a perfectly biased limit fast enough that the Fourier product saturates at a positive constant. The simulations therefore cannot provide evidence for the claimed general robustness.
- [Section 5, last paragraph; Section 7] The claim that the non-stationary convergence rate is 'also exponential, governed by the average behavior of |G_j|' is not proved and, as written, cannot be true without additional assumptions on the rate at which the sequence approaches degeneracy. The QRNG proposal in Section 7 explicitly rests on robustness to detector-efficiency drift and illumination variation; slow drifts can be exactly the kind of process for which the posited theorem fails, so the practical motivation inherits the Section 4 gap.
minor comments (3)
- [Section 3] The sentence 'the complex numbers omega^{jl} for l = 0, ..., m-1 are distinct' is inaccurate when gcd(j,m) > 1; the parenthetical that follows correctly notes periodicity, but the wording should be cleaned up. The strict inequality |A_j| < 1 remains valid because not all nonzero terms have a common phase, but this requires a separate argument in the repeated-root case.
- [Section 6, TVD bullet list] The last bullet under 'The TVD values at specific N' repeats the entropy text ('Shows an increase from 1.0979 bits at N=1 ... to 2.3218 bits at N=100') instead of reporting the TVD value for the Non-Stationary Cyclic Bias scenario.
- [Figure 3] The log-scale y-axis labels appear corrupted (reading like 10^{-203}, 10^{-176}, etc.), and those values are inconsistent with the TVD values quoted for N=100 in the text. Please regenerate the figure or correct the axis formatting.
Circularity Check
No significant circularity: the modular-debiasing derivation is self-contained, and its conclusion follows from the stated PGF/root-of-unity calculation rather than from fitted inputs or self-citation.
full rationale
The paper's central derivation (Eqs. 3-17) is a direct analytic calculation: the distribution of the modular sum is expressed via roots of unity, and the IID convergence bound is obtained from |A_j|<1. No input parameter is fitted to the target uniformity; the rate parameter rho is computed from the assumed known bias distribution, not from the data being predicted. The only fitted element in the numerical section is the vertical scale of the dashed theoretical lines in Figure 3, which the paper explicitly says is 'scaled to match the empirical TVD at an early N'; this is a harmless visual alignment and does not determine the slope predicted by rho. There are no self-citations, no imported uniqueness theorems, and no ansatz smuggled in via prior work. The non-stationary robustness argument in Section 4 does contain a real mathematical gap (pointwise |G_j(omega^r)|<1 does not imply product decay without a divergence condition on sum(1-|G_j|)), but that is an error of proof validity, not circularity: the conclusion is not assumed in the hypotheses, and the derivation does not reduce to its inputs by construction. Accordingly, the circularity score is 0.
Assumptions & free parameters
free parameters (1)
- Theory-line scale in Figure 3 =
unspecified, matched to empirical TVD at early N
assumptions (4)
- domain assumption Trials are independent: X_1,...,X_N are independent random variables.
- domain assumption Every outcome has positive probability at every trial, p_j,k>0.
- ad hoc to paper For non-stationary sources, the tail Fourier products vanish, e.g. sum_j (1-|G_j(omega^r)|)=infinity.
- standard math Root-of-unity orthogonality and the identity between coefficient sums mod m and evaluations at roots of unity.
Cite this review
Pith. "Pith review of Modular Debiasing: A Robust Method for Quantum Randomness Extraction." pith.science (2026). https://pith.science/paper/FMLF6YB3
@misc{pith2026250418585,
author = {Pith},
title = {Pith review of: Modular Debiasing: A Robust Method for Quantum Randomness Extraction},
year = {2026},
howpublished = {\url{https://pith.science/paper/FMLF6YB3}},
note = {Machine review of arXiv:2504.18585}
}
abstract
We propose a novel modular debiasing technique applicable to any discrete random source, addressing the fundamental challenge of reliably extracting high-quality randomness from inherently imperfect physical processes. The method involves summing the outcomes of multiple independent trials from a biased source and reducing the sum modulo the number of possible outcomes, $m$. We provide a rigorous theoretical framework, utilizing probability generating functions and roots of unity, demonstrating that this simple operation guarantees the exponential convergence of the output distribution to the ideal uniform distribution over $\{0, 1, \dots, m-1\}$. A key theoretical result is the method's remarkable robustness: convergence is proven for any initial bias (provided all outcomes have non-zero probability) and, crucially, is maintained even under non-stationary conditions or time-dependent noise, which are common in physical systems. Analytical bounds quantify this exponential rate of convergence, and are empirically validated by numerical simulations. This technique's simplicity, strong theoretical guarantees, robustness, and data efficiency make it particularly well-suited for practical implementation in quantum settings, such as spatial photon-detection-based Quantum Random Number Generators (QRNGs), offering an efficient method for extracting high-quality randomness resilient to experimental imperfections. This work contributes a valuable tool to the field of Quantum Information Science.
Figures
Figures from the paper (4 more)
Reference graph
Works this paper leans on
-
[1]
Quantum computing in the nisq era and beyond
John Preskill. “Quantum computing in the nisq era and beyond”. Quantum 2, 79 (2018)
work page 2018
-
[2]
A mathematical theory of communication
Claude E. Shannon. “A mathematical theory of communication”. Bell System Tech- nical Journal 27, 379–423 (1948)
work page 1948
-
[3]
True random number generation using the spin crossover in lacoo3
Kyung Seok Woo, Alan Zhang, Allison Arabelo, Timothy D. Brown, Minseong Park, A. Alec Talin, Elliot J. Fuller, Ravindra Singh Bisht, Xiaofeng Qian, Raymundo Ar- royave, Shriram Ramanathan, Luke Thomas, R. Stanley Williams, and Suhas Kumar. “True random number generation using the spin crossover in lacoo3”. Nature Com- munications 15, 4656 (2024)
work page 2024
-
[4]
Recommendation for the entropy sources used for random bit generation
Elaine Barker and John Kelsey. “Recommendation for the entropy sources used for random bit generation”. NIST Special Publication (2022)
work page 2022
-
[5]
Maximization of extractable randomness in a quantum random- number generator
Jing Yan Haw, Syed Assad, Andrew Lance, Nelly Ng, Vikram Sharma, Ping Koy Lam, and T. Symul. “Maximization of extractable randomness in a quantum random- number generator”. Physical Review Applied3 (2014)
work page 2014
-
[6]
Certified randomness using a trapped-ion quantum processor
Minzhao Liu, Ruslan Shaydulin, Pradeep Niroula, Matthew DeCross, Shih-Han Hung, Wen Yu Kon, Enrique Cervero-Martín, Kaushik Chakraborty, Omar Amer, Scott Aaronson, Atithi Acharya, Yuri Alexeev, K. Jordan Berg, Shouvanik Chakrabarti, Florian J. Curchod, Joan M. Dreiling, Neal Erickson, Cameron Foltz, Michael Foss- Feig, David Hayes, Travis S. Humble, Niraj...
work page 2025
-
[7]
Salil P. Vadhan. “Pseudorandomness”. Volume 7 of Foundations and Trends in Theo- retical Computer Science. Now Publishers Inc. (2012)
work page 2012
-
[8]
Extractors and pseudorandom generators
Luca Trevisan. “Extractors and pseudorandom generators”. Journal of the ACM48, 860–879 (2001)
work page 2001
Show all 21 references
-
[9]
Explicit two-source extractors and resilient functions
Eshan Chattopadhyay and David Zuckerman. “Explicit two-source extractors and resilient functions”. Annals of Mathematics189, 653–705 (2019)
2019
-
[10]
Various techniques used in connection with random digits
John von Neumann. “Various techniques used in connection with random digits”. National Bureau of Standards Applied Mathematics Series12, 36–38 (1951)
1951
-
[11]
Iterating Von Neumann’s Procedure for Extracting Random Bits
Yuval Peres. “Iterating Von Neumann’s Procedure for Extracting Random Bits”. The Annals of Statistics20, 590–597 (1992)
1992
-
[12]
From the Bernoulli factory to a dice enterprise via perfect sampling of Markov chains
Giulio Morina, Krzysztof Łatuszyński, Piotr Nayar, and Alex Wendland. “From the Bernoulli factory to a dice enterprise via perfect sampling of Markov chains”. The Annals of Applied Probability32, 327–359 (2022)
2022
-
[13]
Computational analogues of en- tropy
Boaz Barak, Ronen Shaltiel, and Avi Wigderson. “Computational analogues of en- tropy”. In International Workshop on Randomization and Computation (RANDOM). Pages 200–215. Springer, Berlin, Heidelberg (2003)
2003
-
[14]
Randomness extraction and key derivation using the cbc, cascade and hmac modes
Yevgeniy Dodis, Krzysztof Pietrzak, and Daniel Wichs. “Randomness extraction and key derivation using the cbc, cascade and hmac modes”. In Annual International Cryp- tology Conference (CRYPTO). Pages 494–510. Springer, Berlin, Heidelberg (2004)
2004
-
[15]
Free-space quantum random number generation based on spatial detection of single photons
Bilal Khan, Faisal M. Arain, Atta ur Rehman, Kwangyun Jung, and Hyun Jae Shin. “Free-space quantum random number generation based on spatial detection of single photons”. Optics Letters 45, 4790–4793 (2020)
2020
-
[16]
Quantumrandom-numbergeneration and key sharing
J.G.Rarity, P.C.M.Owens, andP.R.Tapster. “Quantumrandom-numbergeneration and key sharing”. Journal of Modern Optics41, 2435–2444 (1994)
1994
-
[17]
Tree algorithms for unbiased coin tossing with a biased coin
Q. R. Stout and B. Warren. “Tree algorithms for unbiased coin tossing with a biased coin”. Annals of Probability12, 212–222 (1984)
1984
-
[18]
Univariate discrete distributions
Norman L. Johnson, Samuel Kotz, and Adrienne W. Kemp. “Univariate discrete distributions”. Wiley Series in Probability and Mathematical Statistics: Probability and Mathematical Statistics. Wiley. New York (1992). 2nd edition
1992
-
[19]
Real time demonstration of high bitrate quan- tum random number generation with coherent laser light
T. Symul, S. M. Assad, and P. K. Lam. “Real time demonstration of high bitrate quan- tum random number generation with coherent laser light”. Applied Physics Letters 98, 231103 (2011)
2011
-
[20]
Introduction to nonparametric estimation
Alexandre B. Tsybakov. “Introduction to nonparametric estimation”. Springer Series in Statistics. Springer. (2009). 1 edition
2009
-
[21]
Detecting single infrared photons with 93% system efficiency
F. Marsili, V. B. Verma, J. A. Stern, S. Harrington, A. E. Lita, T. Gerrits, I. Vayshenker, B. Baek, M. D. Shaw, R. P. Mirin, and S. W. Nam. “Detecting single infrared photons with 93% system efficiency”. Nature Photonics7, 210–214 (2013). 17
2013
Reviewed August 16, 2026 · model on record in the stance chip above.
Discussion (0). Continue with ORCID to comment.