TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Interactive zero knowledge 3-colorability demonstration

49 点作者 j0hann超过 3 年前

6 条评论

bmc7505超过 3 年前
One thing I do not understand and would like to learn more about is zero-knowledge proofs is that their soundness seems to rest on the data-generating mechanism. Suppose you had an adversary Alice who claims to possess a constructive proof that graph-isomorphism [1] is in P. Secretly, she has proven that graph-isomorphism is NP-complete, but only for a vanishingly small family of graphs, and almost all random graphs are polynomial-time distinguishable. Unless you had prior knowledge of these pathological cases, you never consider sampling graphs from that class, and for every triplet G, K, H, you do propose, Alice will almost surely distinguish the isomorphic pair in polynomial time, despite her claimed proof being incorrect. How would you design a ZKP to test her assertion?<p>[1]: <a href="https:&#x2F;&#x2F;www.scottaaronson.com&#x2F;papers&#x2F;philos.pdf#page=37" rel="nofollow">https:&#x2F;&#x2F;www.scottaaronson.com&#x2F;papers&#x2F;philos.pdf#page=37</a>
评论 #29709540 未加载
评论 #29710748 未加载
评论 #29712056 未加载
wakamoleguy超过 3 年前
With the second graph, Turbo mode often gets up to 60% or 70% confidence before detecting an issue. That seems odd, since I&#x27;d expect most edges in a graph to be colorable and only a few to have issues, so I&#x27;d &quot;expect&quot; most graphs to look fine up to that level. Is this an issue with the confidence equation and prior, or is it just expected that nobody would stop until they hit 99%+ confidence?<p>In other words, perhaps I&#x27;m just asking for the answer to Exercise 2!
评论 #29712322 未加载
评论 #29709504 未加载
daneel_w超过 3 年前
If you repeatedly toggle one and the same line on the outermost edge, over and over, the confidence level steadily rises to 99.99%.
评论 #29719100 未加载
whatshisface超过 3 年前
I can press reveal to make sure the prover is being honest in this simulation, but how would I know that in the real protocol? By the edges alone I can&#x27;t tell whether or not it&#x27;s randomly assigning different colors.
评论 #29709295 未加载
评论 #29709274 未加载
评论 #29709351 未加载
zimpenfish超过 3 年前
Oddly, YouTube recommended me a Numberphile video about this a couple of days ago - &quot;Zero Knowledge Proof (Avi Wigderson)&quot; from Feb 2021. Covers the same kind of ground although extended to &quot;you can turn any proof into a 3 colour graph and use that in your zero knowledge proof&quot; areas (in which I am completely bereft of knowledge.)<p><a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=5ovdoxnfFVc" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=5ovdoxnfFVc</a>
jl2718超过 3 年前
These are very long proofs. Is there a succinct version for this problem?