Welcome!
To use the personalized features of this site, please log in or register.
If you have forgotten your username or password, we can help.
|
 |
Locally random reductions: Improvements and applications
| |
|
Locally random reductions: Improvements and applications
D. Beaver1 , J. Feigenbaum2 , J. Kilian3 and P. Rogaway4 
| (1) |
Transarc Corporation, 707 Grant Street, 15219 Pittsburg, PA, U.S.A. |
| (2) |
Room AT&T Research, 2C473 600 Mountain Avenue, 07974-0636 NJ, Murray Hill, U.S.A. |
| (3) |
NEC Research Institute, 4 Independence Way, 08540 Princeton, NJ, U.S.A. |
| (4) |
Department of Computer Science, Engineering II Building, University of California, 95616 Davis, CA, U.S.A. |
Received: 18 October 1993 Revised: 16 September 1995
Communicated by Gilles Brassard
Abstract A ( t, n)-locally random reduction maps a problem instance x into a set of problem instances y
1,..., y
n in such a way that it is easy to construct the answer to x from the answers to y
1,..., y
n, and yet the distribution on t-element subsets of y
1,..., y
n depends only on | x|. In this paper we formalize such reductions and give improved methods for achieving them. Then we give a cryptographic application,
showing a new way to prove in perfect zero knowledge that committed bits x
1,..., x
m satisfy some predicate Q. Unlike previous techniques for such perfect zero-knowledge proofs, ours uses an amount of communication that is bounded
by a fixed polynomial in m, regardless of the computational complexity of Q.
Key words Random reducibility - Zero-knowledge protocols
These results were presented in preliminary form at the 10th Annual Crypto Conference, Santa Barbara, CA, August 1990. The
work of D. Beaver was done at Harvard University, supported in part by NSF Grant CCR-870-4513. The work of J. Kilian was done
at MIT and Harvard University, supported by an NSF postdoctoral fellowship.
Fulltext Preview (Small, Large)
 References secured to subscribers.
|
|
|
|
|
|