4 ms·
The paper https://eprint.iacr.org/2025/1296 https://eprint.iacr.org/2025/1296
by dandanua 4mo ago
The paper https://eprint.iacr.org/2025/1296 https://eprint.iacr.org/2025/1296
- ian_j_butler 4mo agoI can't even tell if this is tangent or central to the main idea, but I'm so intrigued by this one part: > at the relatively mild cost that such applications now have security that is "game-based" instead of "simulation-based." Quite interesting and mysterious. What is a game but a kind of simulation with two or more potentially competing "physics engines" involved? What is a simulation but a game, where exactly one player happens to be called "The Environment"? If these aren't two ways of looking at the same thing, what's this about a relatively mild cost?
- Ar-Curunir 4mo agoThe author didn’t use those words “just because”. Game-based security and simulation-based security are two different styles of security definitions used in cryptography, and we differentiate between them for good reason: game-based definitions are typically weaker (in that they capture less adversary behaviour) than simulation-based definitions. Also, they have nothing to do with “video games” or physical simulations therein.
- ian_j_butler 4mo agoThanks for the hint. Reading more about this, it seems the crypto/zero-knowledge/interactive-proof terminology is formal but overloaded here.. games that have nothing to do with game-theory, simulation that has no connection with bisimulation