Statistical closeness implies computational indistinguishabilityDifference between computational and statistical indistinguishabilitiesReductionist proofs of decisional problems to computationalCiphertext indistinguishability (IND-CPA) for symmetric cryptographyComputation indistinguishability questionsComputational indistinguishability with ExampleComputational indistinguishability: are function parameters known?Does concatenation of two pair computational indistinguishable distributions still indistinguishable?How to define the statistical distance between two functions?How to define the statistical distance between two probabilistic algorithms?
How should Thaumaturgy's "three times as loud as normal" be interpreted?
What is the purpose of the rotating plate in front of the lock?
Do aarakocra have arms as well as wings?
Leaving the USA
Project Euler problem #112
How do I make my fill-in-the-blank exercise more obvious?
First Number to Contain Each Letter
How many attacks exactly do I get combining Dual Wielder feat with Two-Weapon Fighting style?
I multiply the source, you (probably) multiply the output!
How do draw effects during the discard phase work?
Contractor cut joist hangers to make them fit
Should I tip on the Amtrak train?
Why do opposition parties not want an election?
At what point does a land become controlled?
Why does the seven segment display have decimal point at the right?
Template default argument loses its reference type
Why are UK MPs allowed to abstain (but it counts as a no)?
Male viewpoint in an erotic novel
Where on Earth is it easiest to survive in the wilderness?
Why can't some airports handle heavy aircraft while others do it easily (same runway length)?
What's this inadvertent thing?
Relationship between speed and cadence?
Poor management handling of recent sickness and how to approach my return?
How do English-speaking kids loudly request something?
Statistical closeness implies computational indistinguishability
Difference between computational and statistical indistinguishabilitiesReductionist proofs of decisional problems to computationalCiphertext indistinguishability (IND-CPA) for symmetric cryptographyComputation indistinguishability questionsComputational indistinguishability with ExampleComputational indistinguishability: are function parameters known?Does concatenation of two pair computational indistinguishable distributions still indistinguishable?How to define the statistical distance between two functions?How to define the statistical distance between two probabilistic algorithms?
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;
$begingroup$
This is so trivial that authors usually don't bother to give an explicit proof. But for me there is some vagueness.
We say that two ensembles $X_n$ and $Y_n$ are statistically close, if
$$ Delta(n) = 1/2 sum_alpha|mathbbP[X_n = alpha] - mathbbP[Y_n = alpha]| $$ is negligible in n. The probability is taken over the randomness of $X_n$ and $Y_n$ respectively.
We say that two ensembles are computationally indistinguishable if for every PPT-adversary D we have
$$ |mathbbP[D(X_n) to 1] - mathbbP[D(Y_n) to 1]|$$
is negligible.
Why the former implies the latter?
I do understand that for every deterministic function $f$ we have
$Delta(f(X), f(Y)) le Delta(X, Y),$ where $Delta(cdot, cdot)$ is the statistical distance.
But in the case of PPT adversaries $D$ is not deterministic, there are implicit random coins. Why can we treat PPT-algorithm $D$ as deterministic function?
provable-security distinguisher probability
$endgroup$
add a comment |
$begingroup$
This is so trivial that authors usually don't bother to give an explicit proof. But for me there is some vagueness.
We say that two ensembles $X_n$ and $Y_n$ are statistically close, if
$$ Delta(n) = 1/2 sum_alpha|mathbbP[X_n = alpha] - mathbbP[Y_n = alpha]| $$ is negligible in n. The probability is taken over the randomness of $X_n$ and $Y_n$ respectively.
We say that two ensembles are computationally indistinguishable if for every PPT-adversary D we have
$$ |mathbbP[D(X_n) to 1] - mathbbP[D(Y_n) to 1]|$$
is negligible.
Why the former implies the latter?
I do understand that for every deterministic function $f$ we have
$Delta(f(X), f(Y)) le Delta(X, Y),$ where $Delta(cdot, cdot)$ is the statistical distance.
But in the case of PPT adversaries $D$ is not deterministic, there are implicit random coins. Why can we treat PPT-algorithm $D$ as deterministic function?
provable-security distinguisher probability
$endgroup$
add a comment |
$begingroup$
This is so trivial that authors usually don't bother to give an explicit proof. But for me there is some vagueness.
We say that two ensembles $X_n$ and $Y_n$ are statistically close, if
$$ Delta(n) = 1/2 sum_alpha|mathbbP[X_n = alpha] - mathbbP[Y_n = alpha]| $$ is negligible in n. The probability is taken over the randomness of $X_n$ and $Y_n$ respectively.
We say that two ensembles are computationally indistinguishable if for every PPT-adversary D we have
$$ |mathbbP[D(X_n) to 1] - mathbbP[D(Y_n) to 1]|$$
is negligible.
Why the former implies the latter?
I do understand that for every deterministic function $f$ we have
$Delta(f(X), f(Y)) le Delta(X, Y),$ where $Delta(cdot, cdot)$ is the statistical distance.
But in the case of PPT adversaries $D$ is not deterministic, there are implicit random coins. Why can we treat PPT-algorithm $D$ as deterministic function?
provable-security distinguisher probability
$endgroup$
This is so trivial that authors usually don't bother to give an explicit proof. But for me there is some vagueness.
We say that two ensembles $X_n$ and $Y_n$ are statistically close, if
$$ Delta(n) = 1/2 sum_alpha|mathbbP[X_n = alpha] - mathbbP[Y_n = alpha]| $$ is negligible in n. The probability is taken over the randomness of $X_n$ and $Y_n$ respectively.
We say that two ensembles are computationally indistinguishable if for every PPT-adversary D we have
$$ |mathbbP[D(X_n) to 1] - mathbbP[D(Y_n) to 1]|$$
is negligible.
Why the former implies the latter?
I do understand that for every deterministic function $f$ we have
$Delta(f(X), f(Y)) le Delta(X, Y),$ where $Delta(cdot, cdot)$ is the statistical distance.
But in the case of PPT adversaries $D$ is not deterministic, there are implicit random coins. Why can we treat PPT-algorithm $D$ as deterministic function?
provable-security distinguisher probability
provable-security distinguisher probability
asked 8 hours ago
Kirill Tsar.Kirill Tsar.
555 bronze badges
555 bronze badges
add a comment |
add a comment |
2 Answers
2
active
oldest
votes
$begingroup$
A probabilistic distinguisher is still a deterministic function of its input and random coins. So a probabilistic distinguisher trying to distinguish $X$ from $Y$ is equivalent to a deterministic distinguisher trying to distinguish $(X,R)$ from $(Y,R)$ where $R$ is a uniform distribution over random coins (importantly: independent of $X$/$Y$).
But:
beginalign
DeltaBigl( (X,R), (Y,R) Bigr) &= frac12 sum_alpha,r Bigl| Pr[(X,R)=(alpha,r)] - Pr[(Y,R)=(alpha,r)]Bigr|
\
&= frac12 sum_alpha,r Bigl| Pr[X=alpha]Pr[R=r] - Pr[Y=alpha]Pr[R=r]Bigr| \
&= frac12 sum_alpha,r Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| Pr[R=r]
\
&= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| ;underbracesum_r Pr[R=r]_=1 \
&= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| \
&= Delta(X,Y)
endalign
In short, having access to some distribution that is independent of $X$/$Y$ doesn't help (or hurt) to distinguish $X$ from $Y$.
$endgroup$
add a comment |
$begingroup$
Another way to see this would be to try and upper bound the distinguishing advantage for any distinguisher and relate that to the statistical distance.
Since the following answer is really good, I will just give ideas without proofs.
Let $(X, Y)$ be two random variables on the set $mathcalX$. We denote by $Delta^D(X;Y)$ the distinguishing advantage of a distinguisher $D$ with binary output and by $delta(X,Y)$ by the maximum distinguishing advantage for $(X,Y)$.(i.e the advantage of one optimal distinguisher).
We need to do two things:
- Give an "explicit description" of a deterministic distinguisher $mathcalD$ that has advantage $delta(X;Y)$
- show that $delta(X;Y) = Delta(X;Y)$
- The conclusion will be the implication in the question
First we show an explicit optimal deterministic distinguisher
For $X$ with distribution $Pr_X[x], x in mathcalX$ and $Y$ with distribution $Pr_Y[x]$, intuitively an optimal deterministic distinguisher $mathcalD(cdot)$ would do the following:
$mathcalD(x) = 0$ if $Pr_X[x] geq Pr_Y[x]$
$mathcalD(x) = 1$, otherwise
Let $mathcalX^* = x: Pr_X[x] geq Pr_Y[x]$, we can show that $Delta^mathcalD(X,Y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*]$.
One can show that $Delta^mathcalD(X;y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*] = delta(X;Y)$
Second, we relate the distinguishing advantage to the statistical distance
We have the following $forall D, Delta^D(X;Y) leq delta(X;Y)$ by defition, and on the other hand $delta(X;Y) = Delta(X;Y)$ therefore we have the following
$$forall D, Delta^D(X;Y) leq Delta(X,Y)$$.
In conclusion the statistical distance gives an upper bound on the performance of any distinguisher, probabilistic included.
$endgroup$
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "281"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/4.0/"u003ecc by-sa 4.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
noCode: true, onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fcrypto.stackexchange.com%2fquestions%2f73108%2fstatistical-closeness-implies-computational-indistinguishability%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
$begingroup$
A probabilistic distinguisher is still a deterministic function of its input and random coins. So a probabilistic distinguisher trying to distinguish $X$ from $Y$ is equivalent to a deterministic distinguisher trying to distinguish $(X,R)$ from $(Y,R)$ where $R$ is a uniform distribution over random coins (importantly: independent of $X$/$Y$).
But:
beginalign
DeltaBigl( (X,R), (Y,R) Bigr) &= frac12 sum_alpha,r Bigl| Pr[(X,R)=(alpha,r)] - Pr[(Y,R)=(alpha,r)]Bigr|
\
&= frac12 sum_alpha,r Bigl| Pr[X=alpha]Pr[R=r] - Pr[Y=alpha]Pr[R=r]Bigr| \
&= frac12 sum_alpha,r Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| Pr[R=r]
\
&= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| ;underbracesum_r Pr[R=r]_=1 \
&= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| \
&= Delta(X,Y)
endalign
In short, having access to some distribution that is independent of $X$/$Y$ doesn't help (or hurt) to distinguish $X$ from $Y$.
$endgroup$
add a comment |
$begingroup$
A probabilistic distinguisher is still a deterministic function of its input and random coins. So a probabilistic distinguisher trying to distinguish $X$ from $Y$ is equivalent to a deterministic distinguisher trying to distinguish $(X,R)$ from $(Y,R)$ where $R$ is a uniform distribution over random coins (importantly: independent of $X$/$Y$).
But:
beginalign
DeltaBigl( (X,R), (Y,R) Bigr) &= frac12 sum_alpha,r Bigl| Pr[(X,R)=(alpha,r)] - Pr[(Y,R)=(alpha,r)]Bigr|
\
&= frac12 sum_alpha,r Bigl| Pr[X=alpha]Pr[R=r] - Pr[Y=alpha]Pr[R=r]Bigr| \
&= frac12 sum_alpha,r Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| Pr[R=r]
\
&= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| ;underbracesum_r Pr[R=r]_=1 \
&= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| \
&= Delta(X,Y)
endalign
In short, having access to some distribution that is independent of $X$/$Y$ doesn't help (or hurt) to distinguish $X$ from $Y$.
$endgroup$
add a comment |
$begingroup$
A probabilistic distinguisher is still a deterministic function of its input and random coins. So a probabilistic distinguisher trying to distinguish $X$ from $Y$ is equivalent to a deterministic distinguisher trying to distinguish $(X,R)$ from $(Y,R)$ where $R$ is a uniform distribution over random coins (importantly: independent of $X$/$Y$).
But:
beginalign
DeltaBigl( (X,R), (Y,R) Bigr) &= frac12 sum_alpha,r Bigl| Pr[(X,R)=(alpha,r)] - Pr[(Y,R)=(alpha,r)]Bigr|
\
&= frac12 sum_alpha,r Bigl| Pr[X=alpha]Pr[R=r] - Pr[Y=alpha]Pr[R=r]Bigr| \
&= frac12 sum_alpha,r Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| Pr[R=r]
\
&= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| ;underbracesum_r Pr[R=r]_=1 \
&= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| \
&= Delta(X,Y)
endalign
In short, having access to some distribution that is independent of $X$/$Y$ doesn't help (or hurt) to distinguish $X$ from $Y$.
$endgroup$
A probabilistic distinguisher is still a deterministic function of its input and random coins. So a probabilistic distinguisher trying to distinguish $X$ from $Y$ is equivalent to a deterministic distinguisher trying to distinguish $(X,R)$ from $(Y,R)$ where $R$ is a uniform distribution over random coins (importantly: independent of $X$/$Y$).
But:
beginalign
DeltaBigl( (X,R), (Y,R) Bigr) &= frac12 sum_alpha,r Bigl| Pr[(X,R)=(alpha,r)] - Pr[(Y,R)=(alpha,r)]Bigr|
\
&= frac12 sum_alpha,r Bigl| Pr[X=alpha]Pr[R=r] - Pr[Y=alpha]Pr[R=r]Bigr| \
&= frac12 sum_alpha,r Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| Pr[R=r]
\
&= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| ;underbracesum_r Pr[R=r]_=1 \
&= frac12 sum_alpha Bigl| Pr[X=alpha] - Pr[Y=alpha]Bigr| \
&= Delta(X,Y)
endalign
In short, having access to some distribution that is independent of $X$/$Y$ doesn't help (or hurt) to distinguish $X$ from $Y$.
edited 3 hours ago
Squeamish Ossifrage
32k1 gold badge53 silver badges137 bronze badges
32k1 gold badge53 silver badges137 bronze badges
answered 7 hours ago
MikeroMikero
5,9071 gold badge20 silver badges28 bronze badges
5,9071 gold badge20 silver badges28 bronze badges
add a comment |
add a comment |
$begingroup$
Another way to see this would be to try and upper bound the distinguishing advantage for any distinguisher and relate that to the statistical distance.
Since the following answer is really good, I will just give ideas without proofs.
Let $(X, Y)$ be two random variables on the set $mathcalX$. We denote by $Delta^D(X;Y)$ the distinguishing advantage of a distinguisher $D$ with binary output and by $delta(X,Y)$ by the maximum distinguishing advantage for $(X,Y)$.(i.e the advantage of one optimal distinguisher).
We need to do two things:
- Give an "explicit description" of a deterministic distinguisher $mathcalD$ that has advantage $delta(X;Y)$
- show that $delta(X;Y) = Delta(X;Y)$
- The conclusion will be the implication in the question
First we show an explicit optimal deterministic distinguisher
For $X$ with distribution $Pr_X[x], x in mathcalX$ and $Y$ with distribution $Pr_Y[x]$, intuitively an optimal deterministic distinguisher $mathcalD(cdot)$ would do the following:
$mathcalD(x) = 0$ if $Pr_X[x] geq Pr_Y[x]$
$mathcalD(x) = 1$, otherwise
Let $mathcalX^* = x: Pr_X[x] geq Pr_Y[x]$, we can show that $Delta^mathcalD(X,Y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*]$.
One can show that $Delta^mathcalD(X;y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*] = delta(X;Y)$
Second, we relate the distinguishing advantage to the statistical distance
We have the following $forall D, Delta^D(X;Y) leq delta(X;Y)$ by defition, and on the other hand $delta(X;Y) = Delta(X;Y)$ therefore we have the following
$$forall D, Delta^D(X;Y) leq Delta(X,Y)$$.
In conclusion the statistical distance gives an upper bound on the performance of any distinguisher, probabilistic included.
$endgroup$
add a comment |
$begingroup$
Another way to see this would be to try and upper bound the distinguishing advantage for any distinguisher and relate that to the statistical distance.
Since the following answer is really good, I will just give ideas without proofs.
Let $(X, Y)$ be two random variables on the set $mathcalX$. We denote by $Delta^D(X;Y)$ the distinguishing advantage of a distinguisher $D$ with binary output and by $delta(X,Y)$ by the maximum distinguishing advantage for $(X,Y)$.(i.e the advantage of one optimal distinguisher).
We need to do two things:
- Give an "explicit description" of a deterministic distinguisher $mathcalD$ that has advantage $delta(X;Y)$
- show that $delta(X;Y) = Delta(X;Y)$
- The conclusion will be the implication in the question
First we show an explicit optimal deterministic distinguisher
For $X$ with distribution $Pr_X[x], x in mathcalX$ and $Y$ with distribution $Pr_Y[x]$, intuitively an optimal deterministic distinguisher $mathcalD(cdot)$ would do the following:
$mathcalD(x) = 0$ if $Pr_X[x] geq Pr_Y[x]$
$mathcalD(x) = 1$, otherwise
Let $mathcalX^* = x: Pr_X[x] geq Pr_Y[x]$, we can show that $Delta^mathcalD(X,Y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*]$.
One can show that $Delta^mathcalD(X;y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*] = delta(X;Y)$
Second, we relate the distinguishing advantage to the statistical distance
We have the following $forall D, Delta^D(X;Y) leq delta(X;Y)$ by defition, and on the other hand $delta(X;Y) = Delta(X;Y)$ therefore we have the following
$$forall D, Delta^D(X;Y) leq Delta(X,Y)$$.
In conclusion the statistical distance gives an upper bound on the performance of any distinguisher, probabilistic included.
$endgroup$
add a comment |
$begingroup$
Another way to see this would be to try and upper bound the distinguishing advantage for any distinguisher and relate that to the statistical distance.
Since the following answer is really good, I will just give ideas without proofs.
Let $(X, Y)$ be two random variables on the set $mathcalX$. We denote by $Delta^D(X;Y)$ the distinguishing advantage of a distinguisher $D$ with binary output and by $delta(X,Y)$ by the maximum distinguishing advantage for $(X,Y)$.(i.e the advantage of one optimal distinguisher).
We need to do two things:
- Give an "explicit description" of a deterministic distinguisher $mathcalD$ that has advantage $delta(X;Y)$
- show that $delta(X;Y) = Delta(X;Y)$
- The conclusion will be the implication in the question
First we show an explicit optimal deterministic distinguisher
For $X$ with distribution $Pr_X[x], x in mathcalX$ and $Y$ with distribution $Pr_Y[x]$, intuitively an optimal deterministic distinguisher $mathcalD(cdot)$ would do the following:
$mathcalD(x) = 0$ if $Pr_X[x] geq Pr_Y[x]$
$mathcalD(x) = 1$, otherwise
Let $mathcalX^* = x: Pr_X[x] geq Pr_Y[x]$, we can show that $Delta^mathcalD(X,Y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*]$.
One can show that $Delta^mathcalD(X;y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*] = delta(X;Y)$
Second, we relate the distinguishing advantage to the statistical distance
We have the following $forall D, Delta^D(X;Y) leq delta(X;Y)$ by defition, and on the other hand $delta(X;Y) = Delta(X;Y)$ therefore we have the following
$$forall D, Delta^D(X;Y) leq Delta(X,Y)$$.
In conclusion the statistical distance gives an upper bound on the performance of any distinguisher, probabilistic included.
$endgroup$
Another way to see this would be to try and upper bound the distinguishing advantage for any distinguisher and relate that to the statistical distance.
Since the following answer is really good, I will just give ideas without proofs.
Let $(X, Y)$ be two random variables on the set $mathcalX$. We denote by $Delta^D(X;Y)$ the distinguishing advantage of a distinguisher $D$ with binary output and by $delta(X,Y)$ by the maximum distinguishing advantage for $(X,Y)$.(i.e the advantage of one optimal distinguisher).
We need to do two things:
- Give an "explicit description" of a deterministic distinguisher $mathcalD$ that has advantage $delta(X;Y)$
- show that $delta(X;Y) = Delta(X;Y)$
- The conclusion will be the implication in the question
First we show an explicit optimal deterministic distinguisher
For $X$ with distribution $Pr_X[x], x in mathcalX$ and $Y$ with distribution $Pr_Y[x]$, intuitively an optimal deterministic distinguisher $mathcalD(cdot)$ would do the following:
$mathcalD(x) = 0$ if $Pr_X[x] geq Pr_Y[x]$
$mathcalD(x) = 1$, otherwise
Let $mathcalX^* = x: Pr_X[x] geq Pr_Y[x]$, we can show that $Delta^mathcalD(X,Y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*]$.
One can show that $Delta^mathcalD(X;y) = Pr[Y in mathcalX^*] - Pr[Y in mathcalX^*] = delta(X;Y)$
Second, we relate the distinguishing advantage to the statistical distance
We have the following $forall D, Delta^D(X;Y) leq delta(X;Y)$ by defition, and on the other hand $delta(X;Y) = Delta(X;Y)$ therefore we have the following
$$forall D, Delta^D(X;Y) leq Delta(X,Y)$$.
In conclusion the statistical distance gives an upper bound on the performance of any distinguisher, probabilistic included.
answered 1 hour ago
Marc IlungaMarc Ilunga
5471 gold badge2 silver badges9 bronze badges
5471 gold badge2 silver badges9 bronze badges
add a comment |
add a comment |
Thanks for contributing an answer to Cryptography Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
Use MathJax to format equations. MathJax reference.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fcrypto.stackexchange.com%2fquestions%2f73108%2fstatistical-closeness-implies-computational-indistinguishability%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown