Definition (IPS)

Consider the following

An interactive proof system (IPS) is a protocol between PP and VV where

  1. PP and VV are given an input xx
  2. through exchange of messages PP tries to prove to VV that x∈Lx \in L (i.e. that xx is in language LL)
  3. at end of interaction VV outputs "accept" if proof is satisfactory or "reject" if not

(or say that language LL is in 𝐋𝐏[k]\mathbf{LP}[k], if the following hold, for VV having kk-round interaction with PP,)

Require that

  1. (completeness) if both PP and VV follow the protocol and x∈Lx \in L, thenPr⁑[VΒ acceptsΒ x]β‰₯23\Pr[V \text{ accepts } x] \geq \frac{2}{3} i.e., x∈Lβ‡’βˆƒPPr⁑[𝚘𝚞𝚝V⟨V,P⟩(x)=1]β‰₯2/3x \in L \Rightarrow \exists P \Pr[\mathtt{out}_V \langle V,P \rangle (x) = 1] \geq 2/3
  2. (soundness) if xβˆ‰Lx \notin L and VV follows the protocol, then regardless of what PP does,Pr⁑[VΒ rejectsΒ x]β‰₯23\Pr[V \text{ rejects } x] \geq \frac{2}{3} i.e., xβˆ‰Lβ‡’βˆ€PPr⁑[𝚘𝚞𝚝V⟨V,P⟩(x)=1]≀2/3x \notin L \Rightarrow \forall P \Pr[\mathtt{out}_V \langle V,P \rangle (x) = 1] \leq 2/3

(probabilities over choice of mm-bit random variable r∈R{0,1}mr \in_R \{0,1\}^m for interaction ⟨f,g⟩(x)\langle f,g \rangle (x) over rr)

Definition (class IP)

Define 𝐈𝐏=βˆͺcβ‰₯1𝐈𝐏[nc]\mathbf{IP} = \cup_{c\geq 1} \mathbf{IP}[n^c].

In other words, the class 𝐈𝐏\mathbf{IP} is the class of languages LL such that there exists an IPS for LL.

Theorem [Shamir 1992; Lund, Karloff, Fortnow, Nisan 1990]

IP = PSPACE

Notes

See also


References

  1. https://people.csail.mit.edu/ronitt/COURSE/S12/handouts/lec6.pdf
  2. https://en.wikipedia.org/wiki/IP_(complexity)
  3. https://en.wikipedia.org/wiki/Interactive_proof_system
  4. S. Arora, B. Barak. Computational Complexity: A Modern Approach, Cambridge University Press, 2009, pp. 146-147.
  5. Shamir, A. (1992). IP = PSPACE.Β Journal of the ACM (JACM),Β 39(4), 869-877. https://doi.org/10.1145/146585.146609
  6. Lund, C., Fortnow, L., Karloff, H., & Nisan, N. (1992). Algebraic methods for interactive proof systems.Β Journal of the ACM (JACM),Β 39(4), 859-868. https://doi.org/10.1145/146585.146605
  7. https://crypto.stackexchange.com/questions/101451/what-do-we-know-about-the-relationship-between-ip-zkp
  8. https://en.wikipedia.org/wiki/Zero-knowledge_proof
  9. https://crypto.stackexchange.com/questions/64347/can-you-explain-what-an-np-statement-is-when-they-refer-to-it-in-zero-knowledge
  10. S. Goldwasser, S. Micali, and C. Rackoff, β€œThe Knowledge Complexity of Interactive Proof Systems,” SIAM J. Comput., vol. 18, no. 1, pp. 186–208, Feb. 1989, doi: 10.1137/0218012.
  11. https://www.cs.umd.edu/~jkatz/complexity/f11/lecture19.pdf