Tsuyoshi Ito (McGill U) Hirotada Kobayashi (NII & JST) Keiji Matsumoto (NII & JST)

Similar documents
arxiv: v2 [cs.cc] 20 Oct 2009

Generalized Tsirelson Inequalities, Commuting-Operator Provers, and Multi-Prover Interactive Proof Systems

6.896 Quantum Complexity Theory 30 October Lecture 17

On the power of quantum, one round, two prover interactive proof systems

On the Power of Multi-Prover Interactive Protocols. Lance Fortnow. John Rompel y. Michael Sipser z. Massachusetts Institute of Technology

arxiv:quant-ph/ v2 11 Jan 2010

On the Space Complexity of Linear Programming with Preprocessing

Lecture 26. Daniel Apon

6.896 Quantum Complexity Theory November 4th, Lecture 18

Lecture 26: QIP and QMIP

On the Space Complexity of Linear Programming with Preprocessing

CS286.2 Lecture 8: A variant of QPCP for multiplayer entangled games

6.841/18.405J: Advanced Complexity Wednesday, April 2, Lecture Lecture 14

CS151 Complexity Theory. Lecture 13 May 15, 2017

Zero-Knowledge Against Quantum Attacks

QUANTUM ARTHUR MERLIN GAMES

Great Theoretical Ideas in Computer Science

Lecture 19: Interactive Proofs and the PCP Theorem

Spatial Isolation Implies Zero Knowledge Even in a Quantum World

Quantum interactive proofs with weak error bounds

Quantum Information and the PCP Theorem

. An introduction to Quantum Complexity. Peli Teloni

Quantum Proofs. Thomas Vidick California Institute of Technology John Watrous University of Waterloo

On the Role of Shared Entanglement

The Random Oracle Hypothesis is False

Upper Bounds for Quantum Interactive Proofs with Competing Provers

Quantum Information and the PCP Theorem

arxiv:cs/ v1 [cs.cc] 27 Jan 1999

Quantum Zero Knowledge via Local Codes

Classical and Quantum Strategies for Two-Prover Bit Commitments

Notes on Complexity Theory Last updated: November, Lecture 10

arxiv: v1 [cs.cc] 30 Apr 2015

Lecture 3: Interactive Proofs and Zero-Knowledge

Lecture 18: Zero-Knowledge Proofs

-bit integers are all in ThC. Th The following problems are complete for PSPACE NPSPACE ATIME QSAT, GEOGRAPHY, SUCCINCT REACH.

(Non-)Contextuality of Physical Theories as an Axiom

Identifying an Honest EXP NP Oracle Among Many

Interactive Proof System

Lecture 15 - Zero Knowledge Proofs

Efficient Probabilistically Checkable Debates

2 Natural Proofs: a barrier for proving circuit lower bounds

CS151 Complexity Theory. Lecture 14 May 17, 2017

A Short History of Computational Complexity

On Interactive Proofs with a Laconic Prover

The Random Oracle Hypothesis is False. Pankaj Rohatgi 1. July 6, Abstract

QMA(2) workshop Tutorial 1. Bill Fefferman (QuICS)

Complexity Theory. Jörg Kreiker. Summer term Chair for Theoretical Computer Science Prof. Esparza TU München

Tsirelson s problem and linear system games

Parallelization, amplification, and exponential time simulation of quantum interactive proof systems

Product theorems via semidefinite programming

General Properties of Quantum Zero-Knowledge Proofs

Interactive Proofs. Merlin-Arthur games (MA) [Babai] Decision problem: D;

arxiv: v2 [quant-ph] 10 Mar 2011

Rational Proofs with Multiple Provers. Jing Chen, Samuel McCauley, Shikha Singh Department of Computer Science

Interactive PCP. Yael Tauman Kalai Georgia Institute of Technology Ran Raz Weizmann Institute of Science

Thomas Vidick Postdoctoral Associate, MIT

Zero-Knowledge Proofs and Protocols

B(w, z, v 1, v 2, v 3, A(v 1 ), A(v 2 ), A(v 3 )).

Probabilistically Checkable Arguments

Mathematics, Proofs and Computation

Polylogarithmic Round Arthur-Merlin Games and Random-Self-Reducibility

arxiv: v1 [quant-ph] 12 May 2012

Characterization of Binary Constraint System Games Richard Cleve and Rajat Mittal ICALP 2014 and QIP 2014

The Power of Unentanglement (Extended Abstract)

Introduction to Interactive Proofs & The Sumcheck Protocol

Lecture 8 (Notes) 1. The book Computational Complexity: A Modern Approach by Sanjeev Arora and Boaz Barak;

Competing Provers Protocols for Circuit Evaluation

IP=PSPACE. Adi Shamir. Applied Mathematics Department The Weizmann Institute of Science Rehovot, Israel

Two Provers in Isolation

Lecture 16 November 6th, 2012 (Prasad Raghavendra)

Rank-one and Quantum XOR Games

From Secure MPC to Efficient Zero-Knowledge

Lecture 22: Oct 29, Interactive proof for graph non-isomorphism

Complexity Theory. Jörg Kreiker. Summer term Chair for Theoretical Computer Science Prof. Esparza TU München

Polylogarithmic-round Interactive Proofs for conp Collapse the Exponential Hierarchy

Doubly Efficient Interactive Proofs. Ron Rothblum

Circuits. Lecture 11 Uniform Circuit Complexity

Nonlocal Quantum XOR Games for Large Number of Players

How many rounds can Random Selection handle?

arxiv: v2 [quant-ph] 16 Nov 2008

1 On Proofs and Interactive Proofs

Lecture 26: Arthur-Merlin Games

Lecture 12: Interactive Proofs

Lecture Notes 17. Randomness: The verifier can toss coins and is allowed to err with some (small) probability if it is unlucky in its coin tosses.

Interactive Locking, Zero-Knowledge PCPs, and Unconditional Cryptography

The one-way communication complexity of the Boolean Hidden Matching Problem

EXPONENTIAL TIME HAS TWO-PROVER. Laszlo Babai, Lance Fortnow. and Carsten Lund. Abstract. We determine the exact power of two-prover interactive

Shamir s Theorem. Johannes Mittmann. Technische Universität München (TUM)

Interactive Oracle Proofs

Theorem 11.1 (Lund-Fortnow-Karloff-Nisan). There is a polynomial length interactive proof for the

Witness-preserving Amplification of QMA

arxiv: v2 [quant-ph] 21 Nov 2007

CS 867/QIC 890 Semidefinite Programming in Quantum Information Winter Topic Suggestions

Electronic Colloquium on Computational Complexity, Report No. 31 (2007) Interactive PCP

Parallel Repetition of Zero-Knowledge Proofs and the Possibility of Basing Cryptography on NP-Hardness

Interactive and probabilistic proof-checking

Permanent and Determinant

Algebrization: A New Barrier in Complexity Theory

Extended Nonlocal Games from Quantum-Classical Games

Quantum Multi Prover Interactive Proofs with Communicating Provers

Transcription:

Tsuyoshi Ito (McGill U) Hirotada Kobayashi (NII & JST) Keiji Matsumoto (NII & JST) arxiv:0810.0693 QIP 2009, January 12 16, 2009

Interactive proof [Babai 1985] [Goldwasser, Micali, Rackoff 1989] erifier: randomized poly-time x L P x L prob. of acceptance must be c x L prob. of acceptance must be s Prover: infinitely powerful computationally IP=PSPACE [Shamir 1992]

Multi-prover interactive proof (MIP) [Ben-Or, Goldwasser, Kilian, Wigderson 1988] 2 or more provers are kept separated Provers together try to convince P 1 P 2 x L can cross-check the provers answers MIP=NEXP [Babai, Fortnow, Lund 1991] Note: Shared randomness between provers does not change the computational power

Computational power of MIP NEXP = MIP with Poly provers Poly rounds Bounded 2-sided error [Feige, Lovász 1992] = MIP with 2 provers 1 rounds Exp-small 1-sided error Oracularization technique: Poly-prover poly-round (with some restriction) 2-prover 1-round

Quantum nonlocality a 1 a 2 a 3 q 1,q 2,q 3 {1,,9} Each column has odd parity Each row has even parity Oracularize Magic Square game [Avavind 2002] [Cleve, Høyer, Toner, Watrous 2004] q 1,q 2,q 3 a 1,a 2,a 3 b q i P 1 P 2 Ψ (2 EPR pairs) Max. winning probability = 17/18 in the classical world 1 using prior-entanglement

Effect of quantum nonlocality on MIP Entanglement gives provers more power Honest provers use nonlocality The power of MIP might increase Dishonest provers also use nonlocality Existing MIP protocols become unsound MIP*???? MIP = NEXP

Related results about MIP in quantum world (1) MIP(2,1), MIP*(2,1): 2 provers, 1 round, 1-bit answer, verifier only look at the XOR of the answers With some constant 2-sided error, MIP*(2,1) EXP NEXP= MIP(2,1) (unless EXP=NEXP) [Cleve, Høyer, Toner, Watrous 2004] Entanglement makes the class smaller! NP MIP*(2,1) with constant 2-sided error [Cleve, Gavinsky, Jain 2007]

Related results about MIP in quantum world (2) Trivially, MIP* IP=PSPACE [Kempe, Kobayashi, Matsumoto, Toner, idick 2008]: PSPACE MIP* with 2 provers, 1 round, 1-1/poly soundness error NEXP MIP* with 3 provers, 1 round, 1-1/exp soundness error NEXP QMIP (quantum messages) with 2 provers, 1 round, 1-1/exp soundness error NEXP MIP* with 3 provers, 1 round, 1-1/exp soundness error, 1-bit answer [Ito, Kobayashi, Preda, Sun, Yao 2008]

Related results about MIP in quantum world (3) [Ben-Or, Hassidim, Pilpel 2008]: NEXP has 2-prover 2-round protocol with constant soundness in new model with Quantum interaction Classical communication between provers Without prior-entanglement

Our results PSPACE MIP* with 2 provers, 1 round, exp-small 1-sided error 2 provers are more useful than 1, even with entanglement Soundness holds for more powerful no-signaling provers NEXP MIP* with 2 provers, 1 round, 1-1/exp 1-sided error Limitation of independent sampling: Known 2-prover protocols for NEXP really has error probability 1-1/exp in some cases

No-signaling provers p(a,b s,t) is called no-signaling when p(a,b s,t) 0 a,b p(a,b s,t)=1 a p(a,b s,t) does not depend on s b p(a,b s,t) does not depend on t s t a b P 1 P 2 Unentangled provers Entangled provers No-signaling provers MIP with no-signaling provers EXP [Preda]

Protocol for PSPACE by [KKMT08] Public-coin 1-prover r-round protocol for PSPACE (r = poly(n)) with perfect completeness, soundness error 2 -n q q 1,,q r : uniformly at random 1,,q r : random k {1,,r}: random q 1 a 1 q 2 a 2 P q r a r Oracularize q 1,,q r a1,,ar b 1,,b k q 1,,q k P 1 P 2 checks: (q 1,a 1,,q r,a r ) is accepted in original protocol a i =b i for i=1,,k [KKMT] proved 1-1/O(r 2 ) soundness error against entangled provers We prove 1-1/O(r) soundness error against no-signaling provers

Analysis of soundness (1) Suppose: P 1 and P 2 have a no-signaling strategy to convince with prob. 1-ε, with small ε q 1,,q r a1,,ar q 1,,q k P 1 P 2 b 1,,b k p(a 1,,a r ; b 1,,b k q 1,,q r ; q 1,,q k ) no-signaling p 1 (a 1,,a r q 1,,q r ) and p 2 (b 1,,b k q 1,,q k ) are well-defined P q 1 P 1,,q r a 1,,a r q 1,,q 2 k b 1,,b k

Analysis of soundness (2) Construct P s strategy using distribution p 2 q 1 q 2 P 1st round: q 2 1 101 101 P P 2nd round: q 1,q 2 2 001,111

= = = Analysis of soundness (2) Construct P s strategy using distribution p 2 P 1st round: q 2 1 101 q 1 q 2 q 3 101 111 P P 2nd round: q 1,q 2 2 101,111 P 3rd round: q 1,q 2,q 2 3 101,111,100 This P behaves similarly to P 1 If x L, P 1 and P 2 cannot be accepted w.p. much higher than 2 -n (Contradiction!) x L

Final step: Parallel repetition Running the protocol poly times in parallel Soundness error becomes exp-small [Holenstein 2007] Resulting protocol exactly the same as [Cai, Condon, Lipton 1994] Implication Oracularization of 1-prover IP protocols works even if 2 provers are just no-signaling Cf. 1-prover constant-round IP is weak: IP(k)=AM Π 2 P [Goldwasser, Sipser 1986 & Babai, Moran 1988] If we want constant-round interactive proof with exp-small error, asking 2 provers is more powerful than asking 1 prover even if 2 provers are entangled (unless the polynomial hierarchy collapses)

2-prover 1-round protocol for NEXP 3-query PCP for L NEXP q 1 q 2 q 3 Oracularize q 1,q 2,q 3 a 1,a 2,a 3 b q i P 1 P 2 a 1 a 2 a 3 Provers can cheat with entanglement (Kochen-Specker game, Magic Square game) [Cleve, Høyer, Toner, Watrous 2004]

Dummy question prevents perfect cheating 3-query PCP for L NEXP q 1 q 2 q 3 Oracularize with dummy question q 1,q 2,q 3 q i,q a 1,a 2,a 3 b,b P 1 P 2 a 1 a 2 a 3 q : dummy question chosen independently High acceptance prob. All the measurements by provers are almost commuting Soundness error at most 1-1/O( Q 2 ) = 1-1/exp against entangled provers Similar to [Kempe, Kobayashi, Matsumoto, Toner, idick 2008]

Limit of independent sampling Magic Square game a 1 a 2 a 3 q 1,q 2,q 3 {1,,9} Each column has odd parity Each row has even parity Oracularize q 1,q 2,q 3 a 1,a 2,a 3 b q i P 1 P 2 Ψ

Limit of independent sampling 1 Oracularize with dummy question q 1,q 2,q 3,t a 1,a 2,a 3 b,b q i,t,q,t P 1 P 2 t {1,,k} Quantum q 1,q2-prover 2 3 {1,,9} 1-round protocol for NEXP [KKMT08] also uses independent sampling and has a similar a Ψ limitation 1 a 2 k copies of a 3 entangled Ψ t k state Ψ k copies of game t t w.p. 1-1/k = 1-9/ Q

Summary 2-prover 1-round protocol for PSPACE with exp-small soundness error against no-signaling provers based on oracularization technique 2-prover 1-round protocol for NEXP with 1-1/exp soundness error against entangled provers using oracularization with dummy question Independent sampling seems to impose limitation on soundness The above protocol for NEXP Quantum 2-prover 1-round protocol for NEXP by [KKMT08]

Open problems Better soundness for EXP & NEXP Upper bound for MIP* [Doherty, Liang, Toner, Wehner] [Navascués, Pironio, Acín] imply 2-prover 1-round MIP* Recursive assuming finite-dim entanglement suffices Characterization of MIP ns, MIP with no-signaling provers PSPACE MIP ns EXP (upper bound based on LP [Preda]) Parallel repetition for MIP* Alternative to oracularization Parallelization Possible using quantum answers from provers [Kempe, Kobayashi, Matsumoto, idick 2007] Reducing the number of provers