On probabilistic versus deterministic provers in the definition of proofs of knowledge

Mihir Bellare, Oded Goldreich

Research output: Chapter in Book/Report/Conference proceedingChapterpeer-review

Abstract

This article points out a gap between two natural formulations of the concept of a proof of knowledge, and shows that in all natural cases (e.g., NP-statements) this gap can be bridged. The aforementioned formulations differ by whether they refer to (all possible) probabilistic or deterministic prover strategies. Unlike in the rest of cryptography, in the current context, the obvious transformation of probabilistic strategies to deterministic strategies does not seem to suffice per se. The source of trouble is "bad interaction" between the expectation operator and other operators, which appear in the definition of a proof of knowledge (reviewed here).

Original languageEnglish
Title of host publicationStudies in Complexity and Cryptography
Subtitle of host publicationMiscellanea on the Interplay between Randomness and Computation
EditorsOded Goldreich
Chapter14
Pages114-123
Number of pages10
DOIs
StatePublished - 2011

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume6650 LNCS

All Science Journal Classification (ASJC) codes

  • Theoretical Computer Science
  • General Computer Science

Fingerprint

Dive into the research topics of 'On probabilistic versus deterministic provers in the definition of proofs of knowledge'. Together they form a unique fingerprint.

Cite this