A New Approximate Min-Max Theorem with Applications in Cryptography
We propose a novel proof technique that can be applied to attack a broad class of problems in computational complexity, when switching the order of universal and existential quantifiers is helpful. Our approach combines the standard min-max theorem and convex approximation techniques, offering quantitative improvements over the standard way of using min-max theorems as well as more concise and elegant proofs.
đĄ Research Summary
The paper introduces a novel proof technique that refines the classic vonâŻNeumann minâmax theorem by incorporating a carefully designed convexâapproximation step. The central problem addressed is the difficulty of swapping existential and universal quantifiers in complexityâtheoretic statements when the underlying sets of algorithms (A) and distributions (C) are not convex. The authors observe that while the standard minâmax theorem guarantees the equivalence of supâŻinf and infâŻsup when both sets are convex, most cryptographic applications involve nonâconvex sets (e.g., polynomialâsize circuits). To bridge this gap they propose embedding the nonâconvex sets into âalmostâ convex hulls AⲠand Câ˛, with a controlled approximation error δ. This is formalized in condition (3): for every AâA and XâC there exist Aâ˛âconv(Aâ˛) and Xâ˛âconv(Câ˛) such that |v(A,X)âv(Aâ˛,Xâ˛)|â¤Î´, where v measures the payoff (e.g., prediction advantage). Under this condition they prove an Approximate MinâMax Theorem: the weak statement âââŻAâŻââŻXâŻ:âŻv(A,X)â¤câ implies the dream statement âââŻXâŻââŻAâŻ:âŻv(A,X)â¤c+δâ after replacing A and C by their convex approximations.
The paper then applies this framework to two cornerstone results in cryptography:
-
Impagliazzoâs Hardcore Lemma â Traditionally proved via iterative boosting and a nonâstandard âNissanâLevyâ trick to improve hardcore density. The authors first establish the weak statement that for each circuit A of size s there exists a distribution X (with certain properties) on which Aâs advantage is bounded. Using the Approximate MinâMax Theorem with a HĂślderâbased approximation, they construct AⲠ(circuits of size sâ˛=Ί(s¡δ²/ log(1/Îľ))) and CⲠ(conditional distributions) such that the error introduced is only δ. This yields a hardcore set of probability ξ¡O(log(1/Îľ)¡δâťÂ˛) that works simultaneously for all circuits of size sâ˛, matching the optimal parameters of prior work but with a dramatically simpler, modular proof that avoids boosting altogether.
-
MetricâtoâHILL PseudoâEntropy Transformation â Metric pseudoâentropy guarantees that any circuit of size s cannot distinguish a distribution Y from some highâentropy YⲠby more than Îľ. HILL pseudoâentropy requires a similar guarantee but with a minâentropy lower bound k. Existing transformations suffered a loss proportional to n (the full length) and required a separate hardcore extraction step. By defining A as realâvalued circuits of size s and C as conditional highâminâentropy distributions Xâ˛|E (with Pr
Comments & Academic Discussion
Loading comments...
Leave a Comment