Statistical closeness implies computational indistinguishabilityDifference between computational and statistical indistinguishabilitiesReductionist proofs of decisional problems to computationalCiphertext indistinguishability (IND-CPA) for symmetric cryptographyComputation indistinguishability questionsComputational indistinguishability with ExampleComputational indistinguishability: are function parameters known?Does concatenation of two pair computational indistinguishable distributions still indistinguishable?How to define the statistical distance between two functions?How to define the statistical distance between two probabilistic algorithms?

How should Thaumaturgy's "three times as loud as normal" be interpreted?

What is the purpose of the rotating plate in front of the lock?

Do aarakocra have arms as well as wings?

Leaving the USA

Project Euler problem #112

How do I make my fill-in-the-blank exercise more obvious?

First Number to Contain Each Letter

How many attacks exactly do I get combining Dual Wielder feat with Two-Weapon Fighting style?

I multiply the source, you (probably) multiply the output!

How do draw effects during the discard phase work?

Contractor cut joist hangers to make them fit

Should I tip on the Amtrak train?

Why do opposition parties not want an election?

At what point does a land become controlled?

Why does the seven segment display have decimal point at the right?

Template default argument loses its reference type

Why are UK MPs allowed to abstain (but it counts as a no)?

Male viewpoint in an erotic novel

Where on Earth is it easiest to survive in the wilderness?

Why can't some airports handle heavy aircraft while others do it easily (same runway length)?

What's this inadvertent thing?

Relationship between speed and cadence?

Poor management handling of recent sickness and how to approach my return?

How do English-speaking kids loudly request something?



Statistical closeness implies computational indistinguishability


Difference between computational and statistical indistinguishabilitiesReductionist proofs of decisional problems to computationalCiphertext indistinguishability (IND-CPA) for symmetric cryptographyComputation indistinguishability questionsComputational indistinguishability with ExampleComputational indistinguishability: are function parameters known?Does concatenation of two pair computational indistinguishable distributions still indistinguishable?How to define the statistical distance between two functions?How to define the statistical distance between two probabilistic algorithms?






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;








4












$begingroup$


This is so trivial that authors usually don't bother to give an explicit proof. But for me there is some vagueness.



We say that two ensembles $X_n$ and $Y_n$ are statistically close, if
$$ Delta(n) = 1/2 sum_alpha|mathbbP[X_n = alpha] - mathbbP[Y_n = alpha]| $$ is negligible in n. The probability is taken over the randomness of $X_n$ and $Y_n$ respectively.



We say that two ensembles are computationally indistinguishable if for every PPT-adversary D we have
$$ |mathbbP[D(X_n) to 1] - mathbbP[D(Y_n) to 1]|$$
is negligible.



Why the former implies the latter?



I do understand that for every deterministic function $f$ we have
$Delta(f(X), f(Y)) le Delta(X, Y),$ where $Delta(cdot, cdot)$ is the statistical distance.



But in the case of PPT adversaries $D$ is not deterministic, there are implicit random coins. Why can we treat PPT-algorithm $D$ as deterministic function?










share|improve this question









$endgroup$




















    4












    $begingroup$


    This is so trivial that authors usually don't bother to give an explicit proof. But for me there is some vagueness.



    We say that two ensembles $X_n$ and $Y_n$ are statistically close, if
    $$ Delta(n) = 1/2 sum_alpha|mathbbP[X_n = alpha] - mathbbP[Y_n = alpha]| $$ is negligible in n. The probability is taken over the randomness of $X_n$ and $Y_n$ respectively.



    We say that two ensembles are computationally indistinguishable if for every PPT-adversary D we have
    $$ |mathbbP[D(X_n) to 1] - mathbbP[D(Y_n) to 1]|$$
    is negligible.



    Why the former implies the latter?



    I do understand that for every deterministic function $f$ we have
    $Delta(f(X), f(Y)) le Delta(X, Y),$ where $Delta(cdot, cdot)$ is the statistical distance.



    But in the case of PPT adversaries $D$ is not deterministic, there are implicit random coins. Why can we treat PPT-algorithm $D$ as deterministic function?










    share|improve this question









    $endgroup$
















      4












      4








      4





      $begingroup$


      This is so trivial that authors usually don't bother to give an explicit proof. But for me there is some vagueness.



      We say that two ensembles $X_n$ and $Y_n$ are statistically close, if
      $$ Delta(n) = 1/2 sum_alpha|mathbbP[X_n = alpha] - mathbbP[Y_n = alpha]| $$ is negligible in n. The probability is taken over the randomness of $X_n$ and $Y_n$ respectively.



      We say that two ensembles are computationally indistinguishable if for every PPT-adversary D we have
      $$ |mathbbP[D(X_n) to 1] - mathbbP[D(Y_n) to 1]|$$
      is negligible.



      Why the former implies the latter?



      I do understand that for every deterministic function $f$ we have
      $Delta(f(X), f(Y)) le Delta(X, Y),$ where $Delta(cdot, cdot)$ is the statistical distance.



      But in the case of PPT adversaries $D$ is not deterministic, there are implicit random coins. Why can we treat PPT-algorithm $D$ as deterministic function?










      share|improve this question









      $endgroup$




      This is so trivial that authors usually don't bother to give an explicit proof. But for me there is some vagueness.



      We say that two ensembles $X_n$ and $Y_n$ are statistically close, if
      $$ Delta(n) = 1/2 sum_alpha|mathbbP[X_n = alpha] - mathbbP[Y_n = alpha]| $$ is negligible in n. The probability is taken over the randomness of $X_n$ and $Y_n$ respectively.



      We say that two ensembles are computationally indistinguishable if for every PPT-adversary D we have
      $$ |mathbbP[D(X_n) to 1] - mathbbP[D(Y_n) to 1]|$$
      is negligible.



      Why the former implies the latter?



      I do understand that for every deterministic function $f$ we have
      $Delta(f(X), f(Y)) le Delta(X, Y),$ where $Delta(cdot, cdot)$ is the statistical distance.



      But in the case of PPT adversaries $D$ is not deterministic, there are implicit random coins. Why can we treat PPT-algorithm $D$ as deterministic function?







      provable-security distinguisher probability






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked 8 hours ago









      Kirill Tsar.Kirill Tsar.

      555 bronze badges




      555 bronze badges























          2 Answers
          2






          active

          oldest

          votes


















          4














          $begingroup$

          A probabilistic distinguisher is still a deterministic function of its input and random coins. So a probabilistic distinguisher trying to distinguish $X$ from $Y$ is equivalent to a deterministic distinguisher trying to distinguish $(X,R)$ from $(Y,R)$ where $R$ is a uniform distribution over random coins (importantly: independent of $X$/$Y$).



          But:



          beginalign
          DeltaBigl( (X,R), (Y,R) Bigr) &= frac12 sum_alpha,r Bigl| Pr[(X,R)=(alpha,r)] - Pr[(Y,R)=(alpha,r)]Bigr|
          \
          &= frac12 sum_alpha,r Bigl| Pr[X=alpha]Pr[R=r] - Pr[Y=alpha]Pr[R=r]Bigr| \
          &= frac12 sum_alpha,r Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| Pr[R=r]
          \
          &= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| ;underbracesum_r Pr[R=r]_=1 \
          &= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| \
          &= Delta(X,Y)
          endalign



          In short, having access to some distribution that is independent of $X$/$Y$ doesn't help (or hurt) to distinguish $X$ from $Y$.






          share|improve this answer











          $endgroup$






















            0














            $begingroup$

            Another way to see this would be to try and upper bound the distinguishing advantage for any distinguisher and relate that to the statistical distance.
            Since the following answer is really good, I will just give ideas without proofs.



            Let $(X, Y)$ be two random variables on the set $mathcalX$. We denote by $Delta^D(X;Y)$ the distinguishing advantage of a distinguisher $D$ with binary output and by $delta(X,Y)$ by the maximum distinguishing advantage for $(X,Y)$.(i.e the advantage of one optimal distinguisher).



            We need to do two things:



            • Give an "explicit description" of a deterministic distinguisher $mathcalD$ that has advantage $delta(X;Y)$

            • show that $delta(X;Y) = Delta(X;Y)$

            • The conclusion will be the implication in the question

            First we show an explicit optimal deterministic distinguisher



            For $X$ with distribution $Pr_X[x], x in mathcalX$ and $Y$ with distribution $Pr_Y[x]$, intuitively an optimal deterministic distinguisher $mathcalD(cdot)$ would do the following:




            • $mathcalD(x) = 0$ if $Pr_X[x] geq Pr_Y[x]$


            • $mathcalD(x) = 1$, otherwise

            Let $mathcalX^* = x: Pr_X[x] geq Pr_Y[x]$, we can show that $Delta^mathcalD(X,Y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*]$.



            One can show that $Delta^mathcalD(X;y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*] = delta(X;Y)$



            Second, we relate the distinguishing advantage to the statistical distance



            We have the following $forall D, Delta^D(X;Y) leq delta(X;Y)$ by defition, and on the other hand $delta(X;Y) = Delta(X;Y)$ therefore we have the following
            $$forall D, Delta^D(X;Y) leq Delta(X,Y)$$.



            In conclusion the statistical distance gives an upper bound on the performance of any distinguisher, probabilistic included.






            share|improve this answer









            $endgroup$

















              Your Answer








              StackExchange.ready(function()
              var channelOptions =
              tags: "".split(" "),
              id: "281"
              ;
              initTagRenderer("".split(" "), "".split(" "), channelOptions);

              StackExchange.using("externalEditor", function()
              // Have to fire editor after snippets, if snippets enabled
              if (StackExchange.settings.snippets.snippetsEnabled)
              StackExchange.using("snippets", function()
              createEditor();
              );

              else
              createEditor();

              );

              function createEditor()
              StackExchange.prepareEditor(
              heartbeatType: 'answer',
              autoActivateHeartbeat: false,
              convertImagesToLinks: false,
              noModals: true,
              showLowRepImageUploadWarning: true,
              reputationToPostImages: null,
              bindNavPrevention: true,
              postfix: "",
              imageUploader:
              brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
              contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/4.0/"u003ecc by-sa 4.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
              allowUrls: true
              ,
              noCode: true, onDemand: true,
              discardSelector: ".discard-answer"
              ,immediatelyShowMarkdownHelp:true
              );



              );














              draft saved

              draft discarded
















              StackExchange.ready(
              function ()
              StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fcrypto.stackexchange.com%2fquestions%2f73108%2fstatistical-closeness-implies-computational-indistinguishability%23new-answer', 'question_page');

              );

              Post as a guest















              Required, but never shown

























              2 Answers
              2






              active

              oldest

              votes








              2 Answers
              2






              active

              oldest

              votes









              active

              oldest

              votes






              active

              oldest

              votes









              4














              $begingroup$

              A probabilistic distinguisher is still a deterministic function of its input and random coins. So a probabilistic distinguisher trying to distinguish $X$ from $Y$ is equivalent to a deterministic distinguisher trying to distinguish $(X,R)$ from $(Y,R)$ where $R$ is a uniform distribution over random coins (importantly: independent of $X$/$Y$).



              But:



              beginalign
              DeltaBigl( (X,R), (Y,R) Bigr) &= frac12 sum_alpha,r Bigl| Pr[(X,R)=(alpha,r)] - Pr[(Y,R)=(alpha,r)]Bigr|
              \
              &= frac12 sum_alpha,r Bigl| Pr[X=alpha]Pr[R=r] - Pr[Y=alpha]Pr[R=r]Bigr| \
              &= frac12 sum_alpha,r Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| Pr[R=r]
              \
              &= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| ;underbracesum_r Pr[R=r]_=1 \
              &= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| \
              &= Delta(X,Y)
              endalign



              In short, having access to some distribution that is independent of $X$/$Y$ doesn't help (or hurt) to distinguish $X$ from $Y$.






              share|improve this answer











              $endgroup$



















                4














                $begingroup$

                A probabilistic distinguisher is still a deterministic function of its input and random coins. So a probabilistic distinguisher trying to distinguish $X$ from $Y$ is equivalent to a deterministic distinguisher trying to distinguish $(X,R)$ from $(Y,R)$ where $R$ is a uniform distribution over random coins (importantly: independent of $X$/$Y$).



                But:



                beginalign
                DeltaBigl( (X,R), (Y,R) Bigr) &= frac12 sum_alpha,r Bigl| Pr[(X,R)=(alpha,r)] - Pr[(Y,R)=(alpha,r)]Bigr|
                \
                &= frac12 sum_alpha,r Bigl| Pr[X=alpha]Pr[R=r] - Pr[Y=alpha]Pr[R=r]Bigr| \
                &= frac12 sum_alpha,r Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| Pr[R=r]
                \
                &= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| ;underbracesum_r Pr[R=r]_=1 \
                &= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| \
                &= Delta(X,Y)
                endalign



                In short, having access to some distribution that is independent of $X$/$Y$ doesn't help (or hurt) to distinguish $X$ from $Y$.






                share|improve this answer











                $endgroup$

















                  4














                  4










                  4







                  $begingroup$

                  A probabilistic distinguisher is still a deterministic function of its input and random coins. So a probabilistic distinguisher trying to distinguish $X$ from $Y$ is equivalent to a deterministic distinguisher trying to distinguish $(X,R)$ from $(Y,R)$ where $R$ is a uniform distribution over random coins (importantly: independent of $X$/$Y$).



                  But:



                  beginalign
                  DeltaBigl( (X,R), (Y,R) Bigr) &= frac12 sum_alpha,r Bigl| Pr[(X,R)=(alpha,r)] - Pr[(Y,R)=(alpha,r)]Bigr|
                  \
                  &= frac12 sum_alpha,r Bigl| Pr[X=alpha]Pr[R=r] - Pr[Y=alpha]Pr[R=r]Bigr| \
                  &= frac12 sum_alpha,r Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| Pr[R=r]
                  \
                  &= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| ;underbracesum_r Pr[R=r]_=1 \
                  &= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| \
                  &= Delta(X,Y)
                  endalign



                  In short, having access to some distribution that is independent of $X$/$Y$ doesn't help (or hurt) to distinguish $X$ from $Y$.






                  share|improve this answer











                  $endgroup$



                  A probabilistic distinguisher is still a deterministic function of its input and random coins. So a probabilistic distinguisher trying to distinguish $X$ from $Y$ is equivalent to a deterministic distinguisher trying to distinguish $(X,R)$ from $(Y,R)$ where $R$ is a uniform distribution over random coins (importantly: independent of $X$/$Y$).



                  But:



                  beginalign
                  DeltaBigl( (X,R), (Y,R) Bigr) &= frac12 sum_alpha,r Bigl| Pr[(X,R)=(alpha,r)] - Pr[(Y,R)=(alpha,r)]Bigr|
                  \
                  &= frac12 sum_alpha,r Bigl| Pr[X=alpha]Pr[R=r] - Pr[Y=alpha]Pr[R=r]Bigr| \
                  &= frac12 sum_alpha,r Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| Pr[R=r]
                  \
                  &= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| ;underbracesum_r Pr[R=r]_=1 \
                  &= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| \
                  &= Delta(X,Y)
                  endalign



                  In short, having access to some distribution that is independent of $X$/$Y$ doesn't help (or hurt) to distinguish $X$ from $Y$.







                  share|improve this answer














                  share|improve this answer



                  share|improve this answer








                  edited 3 hours ago









                  Squeamish Ossifrage

                  32k1 gold badge53 silver badges137 bronze badges




                  32k1 gold badge53 silver badges137 bronze badges










                  answered 7 hours ago









                  MikeroMikero

                  5,9071 gold badge20 silver badges28 bronze badges




                  5,9071 gold badge20 silver badges28 bronze badges


























                      0














                      $begingroup$

                      Another way to see this would be to try and upper bound the distinguishing advantage for any distinguisher and relate that to the statistical distance.
                      Since the following answer is really good, I will just give ideas without proofs.



                      Let $(X, Y)$ be two random variables on the set $mathcalX$. We denote by $Delta^D(X;Y)$ the distinguishing advantage of a distinguisher $D$ with binary output and by $delta(X,Y)$ by the maximum distinguishing advantage for $(X,Y)$.(i.e the advantage of one optimal distinguisher).



                      We need to do two things:



                      • Give an "explicit description" of a deterministic distinguisher $mathcalD$ that has advantage $delta(X;Y)$

                      • show that $delta(X;Y) = Delta(X;Y)$

                      • The conclusion will be the implication in the question

                      First we show an explicit optimal deterministic distinguisher



                      For $X$ with distribution $Pr_X[x], x in mathcalX$ and $Y$ with distribution $Pr_Y[x]$, intuitively an optimal deterministic distinguisher $mathcalD(cdot)$ would do the following:




                      • $mathcalD(x) = 0$ if $Pr_X[x] geq Pr_Y[x]$


                      • $mathcalD(x) = 1$, otherwise

                      Let $mathcalX^* = x: Pr_X[x] geq Pr_Y[x]$, we can show that $Delta^mathcalD(X,Y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*]$.



                      One can show that $Delta^mathcalD(X;y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*] = delta(X;Y)$



                      Second, we relate the distinguishing advantage to the statistical distance



                      We have the following $forall D, Delta^D(X;Y) leq delta(X;Y)$ by defition, and on the other hand $delta(X;Y) = Delta(X;Y)$ therefore we have the following
                      $$forall D, Delta^D(X;Y) leq Delta(X,Y)$$.



                      In conclusion the statistical distance gives an upper bound on the performance of any distinguisher, probabilistic included.






                      share|improve this answer









                      $endgroup$



















                        0














                        $begingroup$

                        Another way to see this would be to try and upper bound the distinguishing advantage for any distinguisher and relate that to the statistical distance.
                        Since the following answer is really good, I will just give ideas without proofs.



                        Let $(X, Y)$ be two random variables on the set $mathcalX$. We denote by $Delta^D(X;Y)$ the distinguishing advantage of a distinguisher $D$ with binary output and by $delta(X,Y)$ by the maximum distinguishing advantage for $(X,Y)$.(i.e the advantage of one optimal distinguisher).



                        We need to do two things:



                        • Give an "explicit description" of a deterministic distinguisher $mathcalD$ that has advantage $delta(X;Y)$

                        • show that $delta(X;Y) = Delta(X;Y)$

                        • The conclusion will be the implication in the question

                        First we show an explicit optimal deterministic distinguisher



                        For $X$ with distribution $Pr_X[x], x in mathcalX$ and $Y$ with distribution $Pr_Y[x]$, intuitively an optimal deterministic distinguisher $mathcalD(cdot)$ would do the following:




                        • $mathcalD(x) = 0$ if $Pr_X[x] geq Pr_Y[x]$


                        • $mathcalD(x) = 1$, otherwise

                        Let $mathcalX^* = x: Pr_X[x] geq Pr_Y[x]$, we can show that $Delta^mathcalD(X,Y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*]$.



                        One can show that $Delta^mathcalD(X;y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*] = delta(X;Y)$



                        Second, we relate the distinguishing advantage to the statistical distance



                        We have the following $forall D, Delta^D(X;Y) leq delta(X;Y)$ by defition, and on the other hand $delta(X;Y) = Delta(X;Y)$ therefore we have the following
                        $$forall D, Delta^D(X;Y) leq Delta(X,Y)$$.



                        In conclusion the statistical distance gives an upper bound on the performance of any distinguisher, probabilistic included.






                        share|improve this answer









                        $endgroup$

















                          0














                          0










                          0







                          $begingroup$

                          Another way to see this would be to try and upper bound the distinguishing advantage for any distinguisher and relate that to the statistical distance.
                          Since the following answer is really good, I will just give ideas without proofs.



                          Let $(X, Y)$ be two random variables on the set $mathcalX$. We denote by $Delta^D(X;Y)$ the distinguishing advantage of a distinguisher $D$ with binary output and by $delta(X,Y)$ by the maximum distinguishing advantage for $(X,Y)$.(i.e the advantage of one optimal distinguisher).



                          We need to do two things:



                          • Give an "explicit description" of a deterministic distinguisher $mathcalD$ that has advantage $delta(X;Y)$

                          • show that $delta(X;Y) = Delta(X;Y)$

                          • The conclusion will be the implication in the question

                          First we show an explicit optimal deterministic distinguisher



                          For $X$ with distribution $Pr_X[x], x in mathcalX$ and $Y$ with distribution $Pr_Y[x]$, intuitively an optimal deterministic distinguisher $mathcalD(cdot)$ would do the following:




                          • $mathcalD(x) = 0$ if $Pr_X[x] geq Pr_Y[x]$


                          • $mathcalD(x) = 1$, otherwise

                          Let $mathcalX^* = x: Pr_X[x] geq Pr_Y[x]$, we can show that $Delta^mathcalD(X,Y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*]$.



                          One can show that $Delta^mathcalD(X;y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*] = delta(X;Y)$



                          Second, we relate the distinguishing advantage to the statistical distance



                          We have the following $forall D, Delta^D(X;Y) leq delta(X;Y)$ by defition, and on the other hand $delta(X;Y) = Delta(X;Y)$ therefore we have the following
                          $$forall D, Delta^D(X;Y) leq Delta(X,Y)$$.



                          In conclusion the statistical distance gives an upper bound on the performance of any distinguisher, probabilistic included.






                          share|improve this answer









                          $endgroup$



                          Another way to see this would be to try and upper bound the distinguishing advantage for any distinguisher and relate that to the statistical distance.
                          Since the following answer is really good, I will just give ideas without proofs.



                          Let $(X, Y)$ be two random variables on the set $mathcalX$. We denote by $Delta^D(X;Y)$ the distinguishing advantage of a distinguisher $D$ with binary output and by $delta(X,Y)$ by the maximum distinguishing advantage for $(X,Y)$.(i.e the advantage of one optimal distinguisher).



                          We need to do two things:



                          • Give an "explicit description" of a deterministic distinguisher $mathcalD$ that has advantage $delta(X;Y)$

                          • show that $delta(X;Y) = Delta(X;Y)$

                          • The conclusion will be the implication in the question

                          First we show an explicit optimal deterministic distinguisher



                          For $X$ with distribution $Pr_X[x], x in mathcalX$ and $Y$ with distribution $Pr_Y[x]$, intuitively an optimal deterministic distinguisher $mathcalD(cdot)$ would do the following:




                          • $mathcalD(x) = 0$ if $Pr_X[x] geq Pr_Y[x]$


                          • $mathcalD(x) = 1$, otherwise

                          Let $mathcalX^* = x: Pr_X[x] geq Pr_Y[x]$, we can show that $Delta^mathcalD(X,Y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*]$.



                          One can show that $Delta^mathcalD(X;y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*] = delta(X;Y)$



                          Second, we relate the distinguishing advantage to the statistical distance



                          We have the following $forall D, Delta^D(X;Y) leq delta(X;Y)$ by defition, and on the other hand $delta(X;Y) = Delta(X;Y)$ therefore we have the following
                          $$forall D, Delta^D(X;Y) leq Delta(X,Y)$$.



                          In conclusion the statistical distance gives an upper bound on the performance of any distinguisher, probabilistic included.







                          share|improve this answer












                          share|improve this answer



                          share|improve this answer










                          answered 1 hour ago









                          Marc IlungaMarc Ilunga

                          5471 gold badge2 silver badges9 bronze badges




                          5471 gold badge2 silver badges9 bronze badges































                              draft saved

                              draft discarded















































                              Thanks for contributing an answer to Cryptography Stack Exchange!


                              • Please be sure to answer the question. Provide details and share your research!

                              But avoid


                              • Asking for help, clarification, or responding to other answers.

                              • Making statements based on opinion; back them up with references or personal experience.

                              Use MathJax to format equations. MathJax reference.


                              To learn more, see our tips on writing great answers.




                              draft saved


                              draft discarded














                              StackExchange.ready(
                              function ()
                              StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fcrypto.stackexchange.com%2fquestions%2f73108%2fstatistical-closeness-implies-computational-indistinguishability%23new-answer', 'question_page');

                              );

                              Post as a guest















                              Required, but never shown





















































                              Required, but never shown














                              Required, but never shown












                              Required, but never shown







                              Required, but never shown

































                              Required, but never shown














                              Required, but never shown












                              Required, but never shown







                              Required, but never shown







                              Popular posts from this blog

                              Canceling a color specificationRandomly assigning color to Graphics3D objects?Default color for Filling in Mathematica 9Coloring specific elements of sets with a prime modified order in an array plotHow to pick a color differing significantly from the colors already in a given color list?Detection of the text colorColor numbers based on their valueCan color schemes for use with ColorData include opacity specification?My dynamic color schemes

                              Invision Community Contents History See also References External links Navigation menuProprietaryinvisioncommunity.comIPS Community ForumsIPS Community Forumsthis blog entry"License Changes, IP.Board 3.4, and the Future""Interview -- Matt Mecham of Ibforums""CEO Invision Power Board, Matt Mecham Is a Liar, Thief!"IPB License Explanation 1.3, 1.3.1, 2.0, and 2.1ArchivedSecurity Fixes, Updates And Enhancements For IPB 1.3.1Archived"New Demo Accounts - Invision Power Services"the original"New Default Skin"the original"Invision Power Board 3.0.0 and Applications Released"the original"Archived copy"the original"Perpetual licenses being done away with""Release Notes - Invision Power Services""Introducing: IPS Community Suite 4!"Invision Community Release Notes

                              François Viète Contents Biography Work and thought Bibliography See also Notes Further reading External links Navigation menup. 21Google Bookspp. 75–77Google BooksDe thou (from University of Saint Andrews)ArchivedGoogle BooksGoogle BooksGoogle BooksGoogle booksGoogle Bookscc-parthenay.frL'histoire universelle (fr)Universal History (en)ArchivedAdsabs.harvard.eduPagesperso-orange.frArchive.orgChikara Sasaki. Descartes' mathematical thought p.259Google BooksGoogle BooksGoogle Bookspp. 152 and onwardGoogle BooksGoogle BooksScribd.comGoogle Books1257-7979Google BooksGoogle BooksGoogle BooksGoogle BooksGoogle BooksGoogle BooksGallica.bnf.frGoogle BooksGoogle Books"François Viète"Francois Viète: Father of Modern Algebraic NotationThe Lawyer and the GamblerAbout TarporleySite de Jean-Paul GuichardL'algèbre nouvelle"About the Harmonicon"cb120511976(data)1188044800000 0001 0913 5903n82164680ola2013766880073431702w6vt1sb70287374827140948071409480