Does parallel repetition lower the error in computationally sound protocols?
被引:67
作者:
Bellare, M
论文数: 0引用数: 0
h-index: 0
机构:
Univ Calif San Diego, Dept Comp Sci & Engn, La Jolla, CA 92093 USAUniv Calif San Diego, Dept Comp Sci & Engn, La Jolla, CA 92093 USA
Bellare, M
[1
]
Impagliazzo, R
论文数: 0引用数: 0
h-index: 0
机构:
Univ Calif San Diego, Dept Comp Sci & Engn, La Jolla, CA 92093 USAUniv Calif San Diego, Dept Comp Sci & Engn, La Jolla, CA 92093 USA
Impagliazzo, R
[1
]
Naor, M
论文数: 0引用数: 0
h-index: 0
机构:
Univ Calif San Diego, Dept Comp Sci & Engn, La Jolla, CA 92093 USAUniv Calif San Diego, Dept Comp Sci & Engn, La Jolla, CA 92093 USA
Naor, M
[1
]
机构:
[1] Univ Calif San Diego, Dept Comp Sci & Engn, La Jolla, CA 92093 USA
来源:
38TH ANNUAL SYMPOSIUM ON FOUNDATIONS OF COMPUTER SCIENCE, PROCEEDINGS
|
1997年
关键词:
D O I:
10.1109/SFCS.1997.646126
中图分类号:
TP301 [理论、方法];
学科分类号:
081202 ;
摘要:
Whether or not parallel repetition lowers the error has been a fundamental question in the theory of protocols, with applications in many different areas. It is well known that parallel repetition reduces the error at an exponential rate in interactive proofs and Arthur-Merlin games. It seems to have been taken for granted that the same is true in arguments, or other proofs where the soundness only holds with respect to computationally bounded parties. We show that this is not the case. Surprisingly, parallel repetition can actually fail in this setting. We present four-round protocols whose error does not decrease under parallel repetition. This holds for any (polynomial) number of repetitions. These protocols exploit non-malleable encryption and can be based on any trap door permutation. On the other hand we show that for three-round protocols the error does go down exponentially fast. The question of parallel error reduction is particularly important when the protocol is used in cryptographic settings like identification, and the error represent the probability that an intruder succeeds.