Theory of Cryptography Conference

TCC 2010: Theory of Cryptography pp 37-51

Almost Optimal Bounds for Direct Product Threshold Theorem

  • Charanjit S. Jutla
Conference paper

DOI: 10.1007/978-3-642-11799-2_3

Volume 5978 of the book series Lecture Notes in Computer Science (LNCS)


We consider weakly-verifiable puzzles which are challenge-response puzzles such that the responder may not be able to verify for itself whether it answered the challenge correctly. We consider k-wise direct product of such puzzles, where now the responder has to solve k puzzles chosen independently in parallel. Canetti et al have earlier shown that such direct product puzzles have a hardness which rises exponentially with k. In the threshold case addressed in Impagliazzo et al, the responder is required to answer correctly a fraction of challenges above a threshold. The bound on hardness of this threshold parallel version was shown to be similar to Chernoff bound, but the constants in the exponent are rather weak. Namely, Impagliazzo et al show that for a puzzle for which probability of failure is δ, the probability of failing on less than (1 − γ)δk out of k puzzles, for any parallel strategy, is at most \(e^{-\gamma^2\delta k/40}\).

In this paper, we develop new techniques to bound this probability, and show that it is arbitrarily close to Chernoff bound. To be precise, the bound is \(e^{-\gamma^2(1-\gamma) \delta k/2}\). We show that given any responder that solves k parallel puzzles with a good threshold, there is a uniformized parallel solver who has the same threshold of solving k parallel puzzles, while being oblivious to the permutation of the puzzles. This enhances the analysis considerably, and may be of independent interest.

Download to read the full conference paper text

Copyright information

© Springer-Verlag Berlin Heidelberg 2010

Authors and Affiliations

  • Charanjit S. Jutla
    • 1
  1. 1.IBM T. J. Watson Research CenterYorktown Heights