PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP...
Transcript of PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP...
![Page 1: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/1.jpg)
CMU 15-251
Interactive proofs
Teachers:
Anil Ada
Ariel Procaccia (this time)
![Page 2: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/2.jpg)
Our protagonists
2
![Page 3: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/3.jpg)
NP, revisited
3
𝑥 ∈ 𝐴
![Page 4: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/4.jpg)
NP, revisited
•
• ¬
•
o
o
4
![Page 5: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/5.jpg)
Coke vs. Pepsi
5
![Page 6: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/6.jpg)
IP for Coke vs. Pepsi
6
![Page 7: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/7.jpg)
Graph nonisomorphism
• 𝐺0 = (𝑉0, 𝐸0) 𝐺1 =𝑉1, 𝐸1
𝜋: 𝑉0 → 𝑉1𝑢, 𝑣 ∈ 𝐸0 ⇔ 𝜋 𝑢 , 𝜋 𝑣 ∈ 𝐸1
7
1 2
3 4
5 6
7 8
1 2
3 4
5 6
7 8
![Page 8: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/8.jpg)
Graph nonisomorphism
• 𝐺0 𝐺1𝐺1 𝐺2 𝐺0
𝐺2•
•
•
8
![Page 9: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/9.jpg)
IP for Graph nonisomorphism
9
𝑏 ∈ {0,1}𝜋
𝜋(𝐺𝑏)
𝑏′
𝑏 = 𝑏′
![Page 10: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/10.jpg)
IP for Graph nonisomorphism
10
𝐺0:
𝐺1:
𝐺0: 𝜋(𝐺0):
0
1 2
3 4
1 2
3 4
![Page 11: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/11.jpg)
IP for Graph nonisomorphism
•
1. 1 1/𝑛!
2. 1 1/2
3. 1/2 1/𝑛!
4. 1/2 1/2
11
𝑏 ∈ {0,1} 𝜋𝜋(𝐺𝑏)
𝑏′𝑏 = 𝑏′
![Page 12: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/12.jpg)
Interactive proofs
• 𝐿
𝑃𝑉
o :
∀𝑥 ∈ 𝐿, Pr 𝑉 ↔ 𝑃 𝑥 = 1
o :
∀𝑥 ∉ 𝐿, ∀𝑃′, Pr 𝑉 ↔ 𝑃′ 𝑥 ≤ 1/2
12
![Page 13: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/13.jpg)
Interactive proofs
•
13
½
![Page 14: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/14.jpg)
Interactive proofs
•
⊂
⊂
=
14
![Page 15: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/15.jpg)
Zero knowledge proofs
•
•
•
15
![Page 16: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/16.jpg)
Why do we need ZKPs?
16
![Page 17: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/17.jpg)
Intuition for ZKPs
17
![Page 18: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/18.jpg)
ZKP for graph isomorphism
18
𝑏 ∈ {0,1} 𝜋𝐻 = 𝜋(𝐺𝑏)
𝑏′
𝜋′
𝐻 = 𝜋′ 𝐺𝑏′
![Page 19: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/19.jpg)
ZKP for graph isomorphism
19
𝑏 ∈ {0,1} 𝜋𝐻 = 𝜋(𝐺𝑏)
𝑏′𝜋′
𝐻 = 𝜋′ 𝐺𝑏′
•
o
o
•
![Page 20: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/20.jpg)
ZKP for 3-coloring
•
•
•
20
![Page 21: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/21.jpg)
ZKP for 3-coloring
21
𝜋 𝑅, 𝐺, 𝐵
𝜋 𝛾 𝑣 𝑣 ∈ 𝑉
𝑢, 𝑣 ∈ 𝐸
𝑎 = 𝜋 𝛾 𝑢
𝑏 = 𝜋(𝛾 𝑣 )
𝑎 ≠ 𝑏
![Page 22: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/22.jpg)
ZKP for 3-coloring
22
𝑐 𝑑
𝑒
𝑏
𝑎
𝛾(𝐺)
𝑐 𝑑
𝑐 𝑑
![Page 23: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/23.jpg)
• 𝐺0 𝐺1(𝐻, 𝑏′, 𝜋′)
𝐻 = 𝜋′ 𝐺𝑏′
3. 1 −1
3!
4. 1 −1
𝐸
ZKP for 3-coloring
23
𝜋 𝑅, 𝐺, 𝐵
𝜋 𝛾 𝑣 𝑣 ∈ 𝑉
𝑢, 𝑣 ∈ 𝐸
𝑎 = 𝜋 𝛾 𝑢 𝑏 = 𝜋(𝛾 𝑣 )
𝑎 ≠ 𝑏
• 𝐺
1. 1 −1
2
2. 1 −1
𝑛!
![Page 24: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/24.jpg)
ZKP for 3-coloring
•
•
24
𝜋 𝑅, 𝐺, 𝐵
𝜋 𝛾 𝑣 𝑣 ∈ 𝑉
𝑢, 𝑣 ∈ 𝐸
𝑎 = 𝜋 𝛾 𝑢 𝑏 = 𝜋(𝛾 𝑣 )
𝑎 ≠ 𝑏
![Page 25: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/25.jpg)
More generally
•
•
25
![Page 26: PowerPoint Presentationarielpro/15251f15/slides/lec28.pdf · 2015-12-08 · Coke vs. Pepsi 5. IP for Coke vs. Pepsi 6. Graph nonisomorphism • ... PowerPoint Presentation Author:](https://reader034.fdocuments.us/reader034/viewer/2022042412/5f2c343a7f9e57185f025fee/html5/thumbnails/26.jpg)
What you need to know
26