Paper 1998/026

Comparing Entropies in Statistical Zero-Knowledge with Applications to the Structure of SZK

Oded Goldreich and Salil Vadhan

Abstract

We consider the following (promise) problem, denoted ED (for Entropy Difference): The input is a pairs of circuits, and YES instances (resp., NO instances) are such pairs in which the first (resp., second) circuit generates a distribution with noticeably higher entropy. On one hand we show that any language having a (honest-verifier) statistical zero-knowledge proof is Karp-reducible to ED. On the other hand, we present a public-coin (honest-verifier) statistical zero-knowledge proof for ED. Thus, we obtain an alternative proof of Okamoto's result by which HVSZK (i.e., Honest-Verifier Statistical Zero-Knowledge) equals public-coin HVSZK. The new proof is much simpler than the original one. The above also yields a trivial proof that HVSZK is closed under complementation (since ED easily reduces to its complement). Among the new results obtained is an equivalence of a weak notion of statistical zero-knowledge to the standard one.

Metadata
Available format(s)
PS
Publication info
Published elsewhere. Appeared in the THEORY OF CRYPTOGRAPHY LIBRARY and has been included in the ePrint Archive.
Keywords
Zero-KnowledgeUniversal Hashing
Contact author(s)
salil @ theory lcs mit edu
History
1998-12-24: received
Short URL
https://ia.cr/1998/026
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:1998/026,
      author = {Oded Goldreich and Salil Vadhan},
      title = {Comparing Entropies in Statistical Zero-Knowledge with Applications to the Structure of SZK},
      howpublished = {Cryptology ePrint Archive, Paper 1998/026},
      year = {1998},
      note = {\url{https://eprint.iacr.org/1998/026}},
      url = {https://eprint.iacr.org/1998/026}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.