翻訳と辞書
Words near each other
・ "O" Is for Outlaw
・ "O"-Jung.Ban.Hap.
・ "Ode-to-Napoleon" hexachord
・ "Oh Yeah!" Live
・ "Our Contemporary" regional art exhibition (Leningrad, 1975)
・ "P" Is for Peril
・ "Pimpernel" Smith
・ "Polish death camp" controversy
・ "Pro knigi" ("About books")
・ "Prosopa" Greek Television Awards
・ "Pussy Cats" Starring the Walkmen
・ "Q" Is for Quarry
・ "R" Is for Ricochet
・ "R" The King (2016 film)
・ "Rags" Ragland
・ ! (album)
・ ! (disambiguation)
・ !!
・ !!!
・ !!! (album)
・ !!Destroy-Oh-Boy!!
・ !Action Pact!
・ !Arriba! La Pachanga
・ !Hero
・ !Hero (album)
・ !Kung language
・ !Oka Tokat
・ !PAUS3
・ !T.O.O.H.!
・ !Women Art Revolution


Dictionary Lists
翻訳と辞書 辞書検索 [ 開発暫定版 ]
スポンサード リンク

proof of knowledge : ウィキペディア英語版
proof of knowledge
In cryptography, a proof of knowledge is an interactive proof in which the prover succeeds 'convincing' a verifier that the prover knows something. What it means for a machine to 'know something' is defined in terms of computation. A machine 'knows something', if this something can be computed, given the machine as an input. As the program of the prover does not necessarily spit out the knowledge itself (as is the case for zero-knowledge proofsShafi Goldwasser, Silvio Micali, and Charles Rackoff. (The knowledge complexity of interactive proof-systems ). ''Proceedings of 17th Symposium on the Theory of Computation'', Providence, Rhode Island. 1985. Draft. (Extended abstract )〕) a machine with a different program, called the knowledge extractor is introduced to capture this idea. We are mostly interested in what can be proven by polynomial time bounded machines. In this case the set of knowledge elements is limited to a set of witnesses of some language in NP.
Let x be a language element of language L in NP, and W(x) the set of witnesses for x that should be accepted in the proof. This allows us to define the following relation: R= \.
A proof of knowledge for relation R with knowledge error \kappa is a two
party protocol with a prover P and a verifier V with the following two properties:
# Completeness: if (x,w) \in R, the prover P who knows witness w for x succeeds in convincing the verifier V of his knowledge. More formally: \Pr(P(x,w)\leftrightarrow V(x) \rightarrow 1) =1
# Validity: Validity requires that the success probability of a knowledge extractor E in extracting the witness, given oracle access to a possibly malicious prover \tilde P, must be at least as high as the success probability of the prover \tilde P in convincing the verifier. This Property guarantees that no prover that doesn't know the witness can succeed in convincing the verifier.
==Details on the definition==

This is a more rigorous definition of Validity:〔Mihir Bellare, Oded Goldreich: (On Defining Proofs of Knowledge ). CRYPTO 1992: 390–420〕
Let R be a witness relation, W(x) the set of all witnesses for public value x, and \kappa the knowledge error.
A proof of knowledge is \kappa-valid if there exists a polynomial-time machine E, given oracle access to \tilde P, such that for every \tilde P, it is the case that E^(x) \in W(x) \cup \ and \Pr(E^(x) \in W(x)) \geq \Pr(\tilde P(x)\leftrightarrow V(x) \rightarrow 1) - \kappa(x).
The result \bot signifies that the Turing machine E did not come to a conclusion.
The knowledge error \kappa(x) denotes the probability that the verifier V might accept x, even though the prover does in fact not know a witness w. The knowledge extractor E is used to express what is meant by the knowledge of a Turing machine. If E can extract w from \tilde P, we say that \tilde P knows the value of w.
This definition of the validity property is a combination of the validity and strong validity properties in.〔 For small knowledge errors \kappa(x), such as e.g. 2^ or 1/\mathrm(|x|) it can be seen as being stronger than the soundness of ordinary interactive proofs.

抄文引用元・出典: フリー百科事典『 ウィキペディア(Wikipedia)
ウィキペディアで「proof of knowledge」の詳細全文を読む



スポンサード リンク
翻訳と辞書 : 翻訳のためのインターネットリソース

Copyright(C) kotoba.ne.jp 1997-2016. All Rights Reserved.