Philosophy:Soundness (interactive proof)

From HandWiki
Revision as of 02:02, 8 July 2022 by imported>Ohm (change)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Soundness is a property of interactive proof systems that requires that no prover can make the verifier accept for a wrong statement [math]\displaystyle{ y \not\in L }[/math] except with some small probability. The upper bound of this probability is referred to as the soundness error of a proof system. More formally, for every prover [math]\displaystyle{ (\tilde{\mathcal{P}}) }[/math], and every [math]\displaystyle{ y \not\in L }[/math]:

[math]\displaystyle{ \Pr[(\perp,(\text{accept}))\gets (\tilde{\mathcal{P}})(y) \leftrightarrow (\mathcal{V})(y)] \lt \epsilon. }[/math]

for some [math]\displaystyle{ \epsilon \ll 1 }[/math]. As long as the soundness error is bounded by a polynomial fraction of the potential running time of the verifier (i.e. [math]\displaystyle{ \epsilon\leq1/\mathrm{poly}(|y|) }[/math]), it is always possible to amplify soundness until the soundness error becomes negligible function relative to the running time of the verifier. This is achieved by repeating the proof and accepting only if all proofs verify. After [math]\displaystyle{ \ell }[/math] repetitions, a soundness error [math]\displaystyle{ \epsilon }[/math] will be reduced to [math]\displaystyle{ \epsilon^\ell }[/math].[1]

See also

References

  1. Goldreich, Oded (2002), Zero-Knowledge twenty years after its invention, ECCC TR02-063 .