392 karma · joined January 12, 2025
(I don't feel like anyone is upset?)
Economics both describe and prescribe, so those models should be evaluated on their predictive power and on whether they have actually done any good.
Plenty of peeps are being much more factual below, compared to the gvt linguo that you are just rehashing rn
This has to do with "how an hash function behaves" in the sense that, in the context of a specific protocol (GKR), it is possible to bake in the circuit the ability to predict the randomness obtained from hashing the statement itself and the public values satisfying it.
Previous examples which showed how instantiating Fiat Shamir leads to an unsound protocol were so contrived that people use to think that they were a testament to how unlikely breaking FS would be [1].
In "How to Prove False Statements", you can actually build what they show.
[1]: e.g. see https://eprint.iacr.org/1998/011.pdf
Cryptographic protocols often feature coin tosses. The idea is that if we replace a hash function in place of the protocol coin tosses, it should still be hard for a malicious prover to craft a false statement with an accepting proof - making the protocol unsound.
Roughly, the meat of the attack consists in baking in the statement being proven the ability for the prover to predict upfront how the hash function is going to behave - hereby breaking the Fiat Shamir heuristic and making the prover able to craft a false statement with an accepting proof.
That’s it, this is “How to Prove False Statements“!
However the paper shows that there in fact exists a pretty simple way to break the Fiat Shamir heuristic, for a protocol operating in the RO model. And such kind of efficient attacks are rather concerning in cryptography land.
So this isn't about the attack per se, rather it's about the existence of such an easy one.
Could you suggest some literature supporting this claim? Went through your blog post but couldn't find any.
Not sure though, the point s/he is making isn't really clear to me as well
It basically consists in the prover getting its random challenges from hashing public inputs, rather than from the verifier's coin tosses.
I guess that might be one explanation?
title: "we found insurance fraud in our crash data"
end of post: "Does this prove fraud? Absolutely not."
lmao
Looking at housing costs, life expectancy, food insecurity or poverty rates do a much better job at capturing this.
My point is: the Gini coefficient might indicate what your country's income distribution looks like, it however does not tell anything about actual life conditions.