Proofs that yield nothing but their validity or AII languages in NP have zero-knowledge proof systems

Oded Goldreich*, Silvio Micali, A. V.I. Wigderson

*Corresponding author for this work

Research output: Contribution to journalArticlepeer-review

678 Scopus citations

Abstract

In this paper the generality and wide applicability of zero-knowledge proofs, a notion introduced by Goldwasser, Micali, and Rackoff is demonstrated. These are probabilistic and interactive proofs that, for the members of a language, efficiently demonstrate membership in the language without conveying any additional knowledge. All previously known zero-knowledge proofs were only for number-theoretic languages in NP ∩ CoNP. Under the assumption that secure encryption functions exist or by using "physical means for hiding information," it is shown that all languages in NP have zero-knowledge proofs. Loosely speaking, it is possible to demonstrate that a CNF formula is satisfiable without revealing any other property of the formula, in particular, without yielding neither a satisfying assignment nor properties such as whether there is a satisfying assignment in which x1 = x3 etc. It is also demonstrated that zero-knowledge proofs exist "outside the domain of cryptography and number theory." Using no assumptions, it is shown that both graph isomorphism and graph nonisomorphism have zero-knowledge interactive proofs. The mere existence of an interactive proof for graph nonisomorphism is interesting, since graph nonisomorphism is not known to be in NP and hence no efficient proofs were known before for demonstrating that two graphs are not isomorphic.

Original languageEnglish
Pages (from-to)691-729
Number of pages39
JournalJournal of the ACM
Volume38
Issue number3
StatePublished - 1991

Fingerprint

Dive into the research topics of 'Proofs that yield nothing but their validity or AII languages in NP have zero-knowledge proof systems'. Together they form a unique fingerprint.

Cite this