How to Delegate Computations: The Power of No-Signaling Proofs
description
Transcript of How to Delegate Computations: The Power of No-Signaling Proofs
![Page 1: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/1.jpg)
How to Delegate Computations:The Power of No-Signaling Proofs
Ran Raz(Weizmann Institute & IAS)
Joint work with:Yael Tauman Kalai
Ron Rothblum
![Page 2: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/2.jpg)
Delegation of Computation
![Page 3: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/3.jpg)
Delegation of Computation:Alice has Alice needs to compute , where is publicly knownBob offers to compute for AliceAlice sends to BobBob sends to Alice
𝒙𝒇 (𝒙)
![Page 4: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/4.jpg)
1-Round Delegation Scheme for :
or 1) Completeness: if is honest:
2) Soundness: if:
3) Running time of : 4) Running time of :
𝑽 𝑷𝒙 ,𝒒
𝒃= 𝒇 (𝒙 ) ,𝒘
![Page 5: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/5.jpg)
Previous Work [GKR+KR]:If is a logspace-uniform circuit
ofsize and depth :1-round delegation scheme s.t.:Running time of : Running time of : (under exponential hardness
assumptions)
![Page 6: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/6.jpg)
Our Result:If 1-round delegation scheme s.t.:Running time of : Running time of : (under exponential hardness
assumptions)
![Page 7: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/7.jpg)
Variants of Delegation Schemes:1-Round or InteractiveComputational or Statistical
soundness:• 1-Round, Computational: This
talk!• 1-Round, Statistical: Impossible!• Interactive, Computational:
Solved! (with only 2-rounds) [Killian,Micali], (based on ) [BFL]
• Interactive, Statistical: [GKR 08]
• Many other works, under unfalsifiable assumptions, or with preprocessing.
![Page 8: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/8.jpg)
The Approach of Aiello et al.
![Page 9: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/9.jpg)
2-Prover Interactive Proofs [BGKW]:Provers claim that sends a query to and to no communication between
and answers by answers by decides accept/reject by
𝒒 𝒓𝑨 𝑩𝒂 𝒃
![Page 10: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/10.jpg)
MIP=NEXP (scaled down) [BFL+FL]:, 2-provers MIP s.t.:1) Completeness: if are honest:
2) Soundness: if:
3) Running time of : 4) Running time of : 5) Communication:
𝒒 𝒓𝑨 𝑩𝒂 𝒃
![Page 11: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/11.jpg)
[Aiello Bhatt Ostrovsky Sivarama 00]:MIP 1-Round Argument ?!?
MIP:
= FHE of (with different keys) = FHE of
𝒒 𝒓𝑨 𝑩
𝒂=𝑨(𝒒) 𝒃=𝑩(𝒓 )
𝑽 𝑷�̂� ,𝒓�̂� , �̂�
![Page 12: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/12.jpg)
No-Signaling Strategies:
, (where is a shared random
string):Given , the random variables
are independent Given , the random variables
are independent
𝒒 𝒓𝑨 𝑩𝒂 𝒃
![Page 13: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/13.jpg)
No-Signaling Strategies for provers:queries: , answers , ( random string)For every : Given ,,, are independent Soundness Against No-Signaling:, if:
![Page 14: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/14.jpg)
We Show (using [ABOS 00]):MIP with no-signaling
soundness 1-Round Argument (we need soundness for almost-no-signaling
strategies)
Corollary:Interactive Proof 1-Round Argument(under exponential hardness
assumptions)Gives a simpler proof for [KR 09]
Challenge: Show stronger MIPs withno-signaling soundness
= FHE of (with different keys) = FHE of
![Page 15: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/15.jpg)
No-Signaling Strategies
![Page 16: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/16.jpg)
Entangled Strategies:
share entangled quantum state gets , gets measures , measures answers , answers Soundness Against Entangled Strategies:, if:
[IV12, V13]:
𝒒 𝒓𝑨 𝑩𝒂 𝒃
![Page 17: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/17.jpg)
Entangled vs. No-Signaling:Entangled strategies are no-signalingSignaling information travels faster than
lightHence, no-signaling is likely to hold
in any future ultimate theory of
physicsNo-signaling soundness is likely to
ensuresoundness in any future physical
theory
𝒒 𝒓𝑨 𝑩𝒂 𝒃
![Page 18: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/18.jpg)
MIPs with No-Signaling Soundness:No-Sig cheating provers are powerful: (by linear programing)
In particular, all known protocols for
are not sound for no-signalingExample: Assume: checks Let . Let . ( is random)Then always accepts (and the strategy is no-signaling)
![Page 19: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/19.jpg)
Our Result: If MIP s.t.:Running time of : Running time of : Number of provers: Communication: Completeness: Soundness: against no-sig
strategies (with negligible error)(gives soundness against entangled
provers)
![Page 20: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/20.jpg)
Delegating Computation to the Martians:
![Page 21: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/21.jpg)
Delegating Computation to the Martians:
Running time of provers: Running time of : Number of provers: Number of provers: Completeness: Soundness: against no-sig
strategies (with negligible error)
𝒒𝟏 . .𝒒𝒌
𝑷 𝟏 𝑷 𝒌𝒂𝟏 𝒂𝒌
𝑷 𝟐……
![Page 22: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/22.jpg)
Steps of the Proof
![Page 23: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/23.jpg)
Step I: Switch to PCP:
![Page 24: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/24.jpg)
PCP:A proof for that can be(probabilistically) verified by
readinga small number of its bits.
proof is correct ) P(V accepts) = 1 ) P(V accepts) ≤ ε
![Page 25: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/25.jpg)
No-Signaling PCPs:For every subset of locationss.t. , distribution If queries locations , theanswers are given by Guarantee: if , then agree on their intersectionSoundness Against No-Signaling:, if:
![Page 26: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/26.jpg)
Our Result: PCP s.t.:Running time of prover: Running time of : Number of queries:Completeness: Soundness: against no-sig
strategies with (with negligible error)
![Page 27: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/27.jpg)
Step I: Switch to PCP:PCP with no-sig soundness
implies MIPwith no-sig soundness. with provers
![Page 28: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/28.jpg)
Step II: Amplification Lemma: If there exists a cheating no-sig
PCPthat cheats our verifier with exp
smallprob, then there exists a cheating
no-sig PCP that cheats (a slightly differentverifier) with prob close to 1
![Page 29: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/29.jpg)
Step III: Let be a circuit for . Let bethe outputs of all gates of . Our PCP contains the low degree extension ofWe “read” each by a procedure, as inlocally decodeable codes. Denote thesevalues by . Note that only of can be defined simultaneously.For every gate in the circuit, with parent and children , we show that satisfy the gate w.h.p.
![Page 30: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/30.jpg)
Step IV: If , the circuit is of width . So all the variables in the same level of can bedefined simultaneously. We can work our
wayup and prove that the output is computed correctly w.h.p.
![Page 31: How to Delegate Computations: The Power of No-Signaling Proofs](https://reader035.fdocuments.us/reader035/viewer/2022062305/568160ed550346895dd02357/html5/thumbnails/31.jpg)
Thank You!