Publication:
Can Statistical Zero Knowledge be made Non-Interactive? or On the Relationship of SZK and NISZK

Thumbnail Image

Date

1999

Published Version

Journal Title

Journal ISSN

Volume Title

Publisher

Springer-Verlag
The Harvard community has made this article openly available. Please share how this access benefits you.

Research Projects

Organizational Units

Journal Issue

Citation

Goldreich, Odedm Amit Sahai, and Salil Vadhan. 1999. Can statistical zero-knowledge be made non-interactive?, or On the relationship of SZK and NISZK. In Advances in cryptology-CRYPTO `99: Proceedings of the 19th Annual International Cryptology Conference, August 15-19, 1999, Santa Barbara, California, ed. M. Wiener, 467-484. Berlin, Heidelberg: Springer-Verlag. Lecture Notes in Computer Science, 1666: 467-484.

Research Data

Abstract

We extend the study of non-interactive statistical zero-knowledge proofs. Our main focus is to compare the class NISZK of problems possessing such non-interactive proofs to the class SZK of problems possessing interactive statistical zero-knowledge proofs. Along these lines, we first show that if statistical zero knowledge is non-trivial then so is non-interactive statistical zero knowledge, where by non-trivial we mean that the class includes problems which are not solvable in probabilistic polynomial-time. (The hypothesis holds under various assumptions, such as the intractability of the Discrete Logarithm Problem.) Furthermore, we show that if NISZK is closed under complement, then in fact SZK=NISZK, i.e. all statistical zero-knowledge proofs can be made non-interactive. The main tools in our analysis are two promise problems that are natural restrictions of promise problems known to be complete for SZK. We show that these restricted problems are in fact complete for NISZK and use this relationship to derive our results comparing the two classes. The two problems refer to the statistical difference, and difference in entropy, respectively, of a given distribution from the uniform one. We also consider a weak form of NISZK, in which only requires that for every inverse polynomial 1/p(n), there exists a simulator which achieves simulator deviation 1/p(n), and show that this weak form of NISZK actually equals NISZK

Description

Other Available Sources

Keywords

statistical zero-knowledge proofs, non-interactive zero-knowledge proofs

Terms of Use

This article is made available under the terms and conditions applicable to Other Posted Material (LAA), as set forth at Terms of Service

Endorsement

Review

Supplemented By

Referenced By

Related Stories