Can Statistical Zero Knowledge be made Non-Interactive? or On the Relationship of SZK and NISZK

DSpace/Manakin Repository

Can Statistical Zero Knowledge be made Non-Interactive? or On the Relationship of SZK and NISZK

Citable link to this page

. . . . . .

Title: Can Statistical Zero Knowledge be made Non-Interactive? or On the Relationship of SZK and NISZK
Author: Sahai, Amit; Goldreich, Oded; Vadhan, Salil P.

Note: Order does not necessarily reflect citation order of authors.

Citation: Goldreich, Odedm Amit Sahai, and Salil Vadhan. 1999. Can statistical zero-knowledge be made non-interactive?, or On the relationship of SZK and NISZK. In Advances in cryptology-CRYPTO `99: Proceedings of the 19th Annual International Cryptology Conference, August 15-19, 1999, Santa Barbara, California, ed. M. Wiener, 467-484. Berlin, Heidelberg: Springer-Verlag. Lecture Notes in Computer Science, 1666: 467-484.
Full Text & Related Files:
Abstract: We extend the study of non-interactive statistical zero-knowledge proofs. Our main focus is to compare the class NISZK of problems possessing such non-interactive proofs to the class SZK of problems possessing interactive statistical zero-knowledge proofs. Along these lines, we first show that if statistical zero knowledge is non-trivial then so is non-interactive statistical zero knowledge, where by non-trivial we mean that the class includes problems which are not solvable in probabilistic polynomial-time. (The hypothesis holds under various assumptions, such as the intractability of the Discrete Logarithm Problem.) Furthermore, we show that if NISZK is closed under complement, then in fact SZK=NISZK, i.e. all statistical zero-knowledge proofs can be made non-interactive. The main tools in our analysis are two promise problems that are natural restrictions of promise problems known to be complete for SZK. We show that these restricted problems are in fact complete for NISZK and use this relationship to derive our results comparing the two classes. The two problems refer to the statistical difference, and difference in entropy, respectively, of a given distribution from the uniform one. We also consider a weak form of NISZK, in which only requires that for every inverse polynomial 1/p(n), there exists a simulator which achieves simulator deviation 1/p(n), and show that this weak form of NISZK actually equals NISZK
Published Version: http://dx.doi.org/10.1007/3-540-48405-1_30
Terms of Use: This article is made available under the terms and conditions applicable to Other Posted Material, as set forth at http://nrs.harvard.edu/urn-3:HUL.InstRepos:dash.current.terms-of-use#LAA
Citable link to this page: http://nrs.harvard.edu/urn-3:HUL.InstRepos:4728400

Show full Dublin Core record

This item appears in the following Collection(s)

  • FAS Scholarly Articles [6948]
    Peer reviewed scholarly articles from the Faculty of Arts and Sciences of Harvard University
 
 

Search DASH


Advanced Search
 
 

Submitters