A hardcore lemma for computational indistinguishability: security amplification for arbitrarily weak PRGs with optimal stretch

• Authors: Ueli Maurer;Stefano Tessaro
• Venue: TCC'10 Proceedings of the 7th international conference on Theory of Cryptography
• Year: 2010

It is well known that two random variables X and Y with the same range can be viewed as being equal (in a well-defined sense) with probability 1−d(X,Y), where d(X,Y) is their statistical distance, which in turn is equal to the best distinguishing advantage for X and Y. In other words, if the best distinguishing advantage for X and Y is ε, then with probability 1−ε they are completely indistinguishable. This statement, which can be seen as an information-theoretic version of a hardcore lemma, is for example very useful for proving indistinguishability amplification results. In this paper we prove the computational version of such a hardcore lemma, thereby extending the concept of hardcore sets from the context of computational hardness to the context of computational indistinguishability. This paradigm promises to have many applications in cryptography and complexity theory. It is proven both in a non-uniform and a uniform setting. For example, for a weak pseudorandom generator (PRG) for which the (computational) distinguishing advantage is known to be bounded by ε (e.g. $\epsilon=\frac{1}{2}$), one can define an event on the seed of the PRG which has probability at least 1−ε and such that, conditioned on the event, the output of the PRG is essentially indistinguishable from a string with almost maximal min-entropy, namely log(1/(1−ε)) less than its length. As an application, we show an optimally efficient construction for converting a weak PRG for any ε