Statistical Randomized Encodings: A Complexity Theoretic View [chapter]

Shweta Agrawal, Yuval Ishai, Dakshita Khurana, Anat Paskin-Cherniavsky
2015 Lecture Notes in Computer Science  
A randomized encoding of a function f (x) is a randomized functionf (x, r), such that the "encoding"f (x, r) reveals f (x) and essentially no additional information about x. Randomized encodings of functions have found many applications in different areas of cryptography, including secure multiparty computation, efficient parallel cryptography, and verifiable computation. We initiate a complexity-theoretic study of the class SRE of languages (or boolean functions) that admit an efficient
more » ... ical randomized encoding. That is,f (x, r) can be computed in time poly(|x|), and its output distribution on input x can be sampled in time poly(|x|) given f (x), up to a small statistical distance. We obtain the following main results. • Separating SRE from efficient computation: We give the first examples of promise problems and languages in SRE that are widely conjectured to lie outside P/poly. Our candidate promise problems and languages are based on the standard Learning with Errors (LWE) assumption, a non-standard variant of the Decisional Diffie Hellman (DDH) assumption and the "Abelian Subgroup Membership problem" (which generalizes Quadratic-Residuosity and a variant of DDH). • Separating SZK from SRE: We explore the relationship of SRE with the class SZK of problems possessing statistical zero knowledge proofs. It is known that SRE ⊆ SZK. We present an oracle separation which demonstrates that a containment of SZK in SRE cannot be proved via relativizing techniques. IIT Delhi.
doi:10.1007/978-3-662-47672-7_1 fatcat:orihdksr3fa25mx2okutbgjqoe