Pcp Verifiers
نویسندگان
چکیده
Definition 1 ((r, q)-verifier) An algorithm V is an (r, q)-verifier for a language L if on input strings x and y: step 1 V reads input x and draws r random bits ρ ∈ {0, 1}. step 2 V decides (after a polynomial-time computation in |x|) on q indexes: i1, . . . , iq and on a predicate φ : {0, 1} → {0, 1}. step 3 V outputs φ(y[i1], . . . , y[iq]). and the following holds, 1. (Completeness) If x ∈ L then ∃y s.t. Prρ[V er(x, ρ) = 1] = 1. 2. (Soundness) If x / ∈ L then ∀y Prρ[V er(x, ρ) = 1] ≤ 1/2. Notes: 1. V er is the notation for the fact that that the verifier can access any index in y in one step (see also previous lecture). 2. This is an equivalent definition to the one given in the previous lecture. 3. The above definition is called a non-adaptive verifier. An adaptive verifier accesses y one bit at a time and may adapt its computation according to the read bit. In our definition V has a fixed predicate after step 2, and simply outputs that predicate in step 3. 4. The length of the proof y is at most 2q since there are 2 possible random strings of length r and q possible accesses for each string. Therefore if r is c log n(n = |x|) for some constant c, the proof y is of length at most nq, i.e. polynomial in n.
منابع مشابه
Lecture 20
One distinguishes between adaptive and non–adaptive verifiers. For adaptive verifier its ith query can depend on “the past” i.e. on the previous queries. For non–adaptive verifiers, the positions in the proof to be queried should be read simultaneously. By definition adaptive verifiers are stronger than non–adaptive ones. An adaptive verifiers decision of which position to query next (given the...
متن کاملOn Efficient Zero-Knowledge PCPs
We revisit the question of Zero-Knowledge PCPs, studied by Kilian, Petrank, and Tardos (STOC ’97). A ZK-PCP is defined similarly to a standard PCP, except that the view of any (possibly malicious) verifier can be efficiently simulated up to a small statistical distance. Kilian et al. obtained a ZK-PCP for NEXP in which the proof oracle is in EXP. They also obtained a ZK-PCP for NP in which the ...
متن کاملProver Verifier
In the 1980’s two notions interactive computation were developed. One, due to Babai, originated in generalizations of NP to allow more powerful verifiers that include probabilistic verification. The other, due to Goldwasser, Micali, and Rackoff, originated in cryptography and was a means to the end of defining zero-knowledge proofs, protocols that allow a party in a cryptographic protocol to co...
متن کاملPointer Quantum PCPs and Multi-Prover Games
The quantum PCP (QPCP) conjecture states that all problems in QMA, the quantum analogue of NP, admit quantum verifiers that only act on a constant number of qubits of a polynomial size quantum proof and have a constant gap between completeness and soundness. Despite an impressive body of work trying to prove or disprove the quantum PCP conjecture, it still remains widely open. The above-mention...
متن کاملHardness of Approximate Hypergraph Coloring
We introduce the notion of covering complexity of a probabilistic verifier. The covering complexity of a verifier on a given input is the minimum number of proofs needed to “satisfy” the verifier on every random string, i.e., on every random string, at least one of the given proofs must be accepted by the verifier. The covering complexity of PCP verifiers offers a promising route to getting str...
متن کامل(poly(log log n), poly(log log n))-Restricted Verifiers are Unlikely to Exist for Languages in NP
The aim of this paper is to present a proof of the equivalence of the equalities N P = PCP(log log n; 1) and P = N P. The proof is based on producing long pseudo-random bit strings through random walks on expander graphs. This technique also implies that for any language in N P there exists a restricted veriier using log n + c, c is a constant, random bits. Furthermore, we prove that the equali...
متن کامل