Paper 1998/026

Comparing Entropies in Statistical Zero-Knowledge with Applications to the Structure of SZK

Oded Goldreich and Salil Vadhan

Abstract

We consider the following (promise) problem, denoted ED (for Entropy Difference): The input is a pairs of circuits, and YES instances (resp., NO instances) are such pairs in which the first (resp., second) circuit generates a distribution with noticeably higher entropy. On one hand we show that any language having a (honest-verifier) statistical zero-knowledge proof is Karp-reducible to ED. On the other hand, we present a public-coin (honest-verifier) statistical zero-knowledge proof for ED. Thus, we obtain an alternative proof of Okamoto's result by which HVSZK (i.e., Honest-Verifier Statistical Zero-Knowledge) equals public-coin HVSZK. The new proof is much simpler than the original one. The above also yields a trivial proof that HVSZK is closed under complementation (since ED easily reduces to its complement). Among the new results obtained is an equivalence of a weak notion of statistical zero-knowledge to the standard one.

Metadata
Available format(s)
PDF PS
Publication info
Published elsewhere. Appeared in the THEORY OF CRYPTOGRAPHY LIBRARY and has been included in the ePrint Archive.
Keywords
Zero-KnowledgeUniversal Hashing
Contact author(s)
salil @ theory lcs mit edu
History
1998-12-24: received
Short URL
https://ia.cr/1998/026
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:1998/026,
      author = {Oded Goldreich and Salil Vadhan},
      title = {Comparing Entropies in Statistical Zero-Knowledge with Applications to the Structure of {SZK}},
      howpublished = {Cryptology ePrint Archive, Paper 1998/026},
      year = {1998},
      note = {\url{https://eprint.iacr.org/1998/026}},
      url = {https://eprint.iacr.org/1998/026}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.