On the Double Coset Membership Problem for Permutation Groups

Oleg Verbitsky

DOI: https://doi.org/10.48550/arXiv.0801.4911

2008-01-31

Computational Complexity

Abstract:We show that the Double Coset Membership problem for permutation groups possesses perfect zero-knowledge proofs.

What problem does this paper attempt to address?

A Zero-Knowledge Proof of Knowledge for Subgroup Distance Problem

Cansu Betin Onur

2024-08-01

Abstract:In this study, we introduce a novel zero-knowledge identification scheme based on the hardness of the subgroup distance problem in the Hamming metric. The proposed protocol, named Subgroup Distance Zero Knowledge Proof (SDZKP), employs a cryptographically secure pseudorandom number generator to mask secrets and utilizes a Stern-type algorithm to ensure robust security properties.

Cryptography and Security,Group Theory
Efficient Non-Interactive Zero Knowledge Arguments for Set Operations.

Prastudy Fauzi,Helger Lipmaa,Bingsheng Zhang

DOI: https://doi.org/10.1007/978-3-662-45472-5_14

2014-01-01

Abstract:We propose a non-interactive zero knowledge pairwise multiset sum equality test (PMSET) argument of knowledge in the common reference string (CRS) model that allows a prover to show that the given committed multisets A(j) for j is an element of {1, 2, 3, 4} satisfy A(1) (sic) A(2) = A(3) (sic) A(4), i. e., every element is contained in A(1) and A(2) exactly as many times as in A3 and A(4). As a corollary to the PMSET argument, we present arguments that enable to efficiently verify the correctness of various (multi) set operations, for example, that one committed set is the intersection or union of two other committed sets. The new arguments have constant communication and verification complexity (in group elements and group operations, respectively), whereas the CRS length and the prover's computational complexity are both proportional to the cardinality of the (multi) sets. We show that one can shorten the CRS length at the cost of a small increase of the communication and the verifier's computation.
Parabolic double cosets in Coxeter groups

Sara C. Billey,Matjaž Konvalinka,T. Kyle Petersen,William Slofstra,Bridget E. Tenner

DOI: https://doi.org/10.48550/arXiv.1612.00736

2017-12-15

Abstract:Parabolic subgroups $W_I$ of Coxeter systems $(W,S)$, as well as their ordinary and double quotients $W / W_I$ and $W_I \backslash W / W_J$, appear in many contexts in combinatorics and Lie theory, including the geometry and topology of generalized flag varieties and the symmetry groups of regular polytopes. The set of ordinary cosets $w W_I$, for $I \subseteq S$, forms the Coxeter complex of $W$, and is well-studied. In this article we look at a less studied object: the set of all double cosets $W_I w W_J$ for $I, J \subseteq S$. Double coset are not uniquely presented by triples $(I,w,J)$. We describe what we call the lex-minimal presentation, and prove that there exists a unique such object for each double coset. Lex-minimal presentations are then used to enumerate double cosets via a finite automaton depending on the Coxeter graph for $(W,S)$. As an example, we present a formula for the number of parabolic double cosets with a fixed minimal element when $W$ is the symmetric group $S_n$ (in this case, parabolic subgroups are also known as Young subgroups). Our formula is almost always linear time computable in $n$, and we show how it can be generalized to any Coxeter group with little additional work. We spell out formulas for all finite and affine Weyl groups in the case that $w$ is the identity element.

Combinatorics
Unipotent representations of real classical groups

Jia-jun Ma,Binyong Sun,Chen-Bo Zhu

2017-01-01

Abstract:Let $mathbf G$ be a complex orthogonal or complex symplectic group, and let $G$ be a real form of $mathbf G$, namely $G$ is a real orthogonal group, a real symplectic group, a quaternionic orthogonal group, or a quaternionic symplectic group. For a fixed parity $mathbb pin mathbb Z/2mathbb Z$, we define a set $mathrm{Nil}^{mathbb p}_{mathbf G}(mathfrak g)$ of nilpotent $mathbf G$-orbits $mathfrak g$ (the Lie algebra of $mathbf G$). When $mathbb p$ is the parity of the dimension of the standard module of $mathbf G$, this is the set of the stably trivial special nilpotent orbits, which includes all rigid special nilpotent orbits. For each $mathcal O in mathrm{Nil}^{mathbb p}_{mathbf G}(mathfrak g)$, we construct all unipotent representations of $G$ (or its metaplectic cover when $G$ is a real symplectic group and $mathbb p$ is odd) attached to $mathcal O$ via the method of theta lifting and show particular that they are unitary.
General Properties of Quantum Zero-Knowledge Proofs

Hirotada Kobayashi

DOI: https://doi.org/10.48550/arXiv.0705.1129

2007-05-09

Abstract:This paper studies the complexity classes QZK and HVQZK of problems having a quantum computational zero-knowledge proof system and an honest-verifier quantum computational zero-knowledge proof system, respectively. The results proved in this paper include: (a) HVQZK = QZK, (b) any problem in QZK has a public-coin quantum computational zero-knowledge proof system, (c) any problem in QZK has a quantum computational zero-knowledge proof system of perfect completeness, and (d) any problem in QZK has a three-message public-coin quantum computational zero-knowledge proof system of perfect completeness with arbitrarily small constant error in soundness. All the results above are unconditional and do not rely any computational assumptions. For the classes QPZK, HVQPZK, and QSZK of problems having a quantum perfect zero-knowledge proof system, an honest-verifier quantum perfect zero-knowledge proof system, and a quantum statistical zero-knowledge proof system, respectively, the following new properties are proved: (e) HVQPZK = QPZK, (f) any problem in QPZK has a public-coin quantum perfect zero-knowledge proof system, (g) any problem in QSZK has a quantum statistical zero-knowledge proof system of perfect completeness, and (h) any problem in QSZK has a three-message public-coin quantum statistical zero-knowledge proof system of perfect completeness with arbitrarily small constant error in soundness. It is stressed that our proofs are direct and do not use complete promise problems or those equivalents. This gives a unified framework that works well for all of quantum perfect, statistical, and computational zero-knowledge proofs, and enables us to prove properties even on the computational and perfect zero-knowledge proofs for which no complete promise problems are known.

Quantum Physics
A Zero-Knowledge PCP Theorem

Tom Gur,Jack O'Connor,Nicholas Spooner

2024-11-13

Abstract:We show that for every polynomial q* there exist polynomial-size, constant-query, non-adaptive PCPs for NP which are perfect zero knowledge against (adaptive) adversaries making at most q* queries to the proof. In addition, we construct exponential-size constant-query PCPs for NEXP with perfect zero knowledge against any polynomial-time adversary. This improves upon both a recent construction of perfect zero-knowledge PCPs for #P (STOC 2024) and the seminal work of Kilian, Petrank and Tardos (STOC 1997).

Computational Complexity,Cryptography and Security
The Hilden Double Coset Problem in Braid Groups

Seth Hovland

2024-01-31

Abstract:In this paper we provide a solution to the double coset problem for the braid group $B_n$ modulo the Hilden subgroup $H_n.$ This result demonstrates that, as in the case of braid closures, the Link Problem for plat closures is "stably equivalent" to a solvable algebraic problem. A particularly interesting feature of the proof is that, like Garside's solutions to the Word and Conjugacy Problems, it too relies on Garside's decomposition of braids in $B_n.$

Geometric Topology,Group Theory
Complete algorithms for transversals and double coset representatives of subgroups via subfactors

M.H. Hooshmand

2023-04-04

Abstract:Recently, we have introduced and studied the topic of sub-indices and sub-factors of groups. During those studies, an algorithm for obtaining the sub-factors of a finite group was stated and proved, which has a particular case for calculating the transversals of subgroups. In this work, we first show that it is a complete algorithm for obtaining all transversals. Then, motivated by it, we state and prove a complete general algorithm to obtain all representatives and the number of double cosets of subgroups (which has not been possible so far). Moreover, we introduce the concept of middle direct product of three subsets and several equivalent conditions for a subset to be a complete set of representatives of double cosets. Also, as another important result of the topic, we provide a definitive method to obtain the middle factor of groups relative to a couple of subgroups.

Group Theory
Finding automorphism groups of double coset graphs and Cayley graphs are equivalent

Rachel Barber,Ted Dobson

2024-07-02

Abstract:It has long been known that a vertex-transitive graph $\Gamma$ is isomorphic to a double coset graph $\text{Cos}(G,H,S)$ of a transitive group $G\le\text{Aut}(\Gamma)$, a vertex stabilizer $H\le G$, and some subset $S\subseteq G$. We show that the automorphism group of the Cayley graph $\text{Cay}(G,S)$ with connection set $S$ can be obtained from the automorphism group of $\text{Cos}(G,H,S)$ and vice versa. We also show that the isomorphism problem for double coset graphs is equivalent to the isomorphism problem for Cayley graphs provided one knows all groups $G$ for which a fixed Cayley graph is a Cayley graph of $G$. Our main tool is a "recognition theorem", which recognizes when a Cayley graph of a group $G$ is a wreath product of two graphs based upon its connection set.

Combinatorics
Inverse Zero-Sum Problems III

Weidong Gao,Alfred Geroldinger,David J. Grynkiewicz

DOI: https://doi.org/10.48550/arXiv.0801.3792

2008-01-25

Abstract:Let $G$ be a finite abeilian group. A sequence $S$ with terms from $G$ is zero-sum if the sum of terms in $S$ equals zero. It is a minimal zero-sum sequence if no proper, nontrivial subsequence is zero-sum. The maximal length of a minimal zero-sum subsequence in $G$ is the Davenport constant, denoted $D(G)$. For a rank 2 group $G=C_n \oplus C_n$, it is known that $D(G)=2n-1$. However, the structure of all maximal length minimal zero-sum sequences remains open. If every such sequence contains a term with multiplicity $n-1$, then $C_n \oplus C_n$ is said to have Property B, and it is conjectured that this is true for all rank 2 groups $C_n \oplus C_n$. In this paper, we show that Property B is multiplicative, namely, if $G=C_n \oplus C_n$ and $G=C_m \oplus C_m$ both satisfy Property B, with $m, n\geq 3$ odd and $mn>9$, then $C_{mn}\oplus C_{mn}$ satisfies Property B also. Combined with previous work in the literature, this reduces the question of establishing Property B to the prime cases, and in such case the complete structural description of the sequence follows.

Number Theory,Combinatorics
Derangements in Cosets of Primitive Permutation Groups

Andrei Pavelescu

DOI: https://doi.org/10.48550/arXiv.1312.1422

2013-12-05

Abstract:Motivated by questions arising in connection with branched coverings of connected smooth projective curves over finite fields, we study the proportion of fixed point free elements (derangements) in cosets of normal subgroups of primitive permutations groups. Using the Aschbacher-O'Nan-Scott theorem for primitive groups to partition the problem, we provide complete answers for affine groups and groups which contain a regular normal nonabelian subgroup.

Group Theory
Double coset problem for parabolic subgroups of braid groups

Arkadius Kalka,Mina Teicher,Boaz Tsaban

DOI: https://doi.org/10.48550/arXiv.1402.5541

2014-02-22

Group Theory

Abstract:We provide the first solution to the double coset problem (DCP) for a large class of natural subgroups of braid groups, namely for all parabolic subgroups which have a connected associated Coxeter graph. Update: We succeeded to solve the DCP for all parabolic subgroups of braid groups.
Two prover perfect zero knowledge for MIP*

Kieran Mastel,William Slofstra

2024-07-30

Abstract:The recent MIP*=RE theorem of Ji, Natarajan, Vidick, Wright, and Yuen shows that the complexity class MIP* of multiprover proof systems with entangled provers contains all recursively enumerable languages. Prior work of Grilo, Slofstra, and Yuen [FOCS '19] further shows (via a technique called simulatable codes) that every language in MIP* has a perfect zero knowledge (PZK) MIP* protocol. The MIP*=RE theorem uses two-prover one-round proof systems, and hence such systems are complete for MIP*. However, the construction in Grilo, Slofstra, and Yuen uses six provers, and there is no obvious way to get perfect zero knowledge with two provers via simulatable codes. This leads to a natural question: are there two-prover PZK-MIP* protocols for all of MIP*? In this paper, we show that every language in MIP* has a two-prover one-round PZK-MIP* protocol, answering the question in the affirmative. For the proof, we use a new method based on a key consequence of the MIP*=RE theorem, which is that every MIP* protocol can be turned into a family of boolean constraint system (BCS) nonlocal games. This makes it possible to work with MIP* protocols as boolean constraint systems, and in particular allows us to use a variant of a construction due to Dwork, Feige, Kilian, Naor, and Safra [Crypto '92] which gives a classical MIP protocol for 3SAT with perfect zero knowledge. To show quantum soundness of this classical construction, we develop a toolkit for analyzing quantum soundness of reductions between BCS games, which we expect to be useful more broadly. This toolkit also applies to commuting operator strategies, and our argument shows that every language with a commuting operator BCS protocol has a two prover PZK commuting operator protocol.

Quantum Physics,Computational Complexity
On Covers of Abelian Groups by Cosets

Guenter Lettl,Zhi-Wei Sun

DOI: https://doi.org/10.4064/aa131-4-3

2008-01-01

Acta Arithmetica

Abstract:Let G be any abelian group and a_sG_s_s=1^k be a finite system of cosetsof subgroups G_1,...,G_k. We show that if a_sG_s_s=1^k covers all theelements of G at least m times with the coset a_tG_t irredundant then[G:G_t]≤2^k-m and furthermore k≥m+f([G:G_t]), where f(∏_i=1^rp_i^alpha_i)=∑_i=1^r alpha_i(p_i-1) if p_1,...,p_r are distinct primesand alpha_1,...,alpha_r are nonnegative integers. This extends Mycielski'sconjecture in a new way and implies a conjecture of Gao and Geroldinger. Ournew method involves algebraic number theory and characters of abelian groups.
Zero-Knowledge MIPs using Homomorphic Commitment Schemes

Claude Crépeau,John Stuart

2023-04-20

Abstract:A Zero-Knowledge Protocol (ZKP) allows one party to convince another party of a fact without disclosing any extra knowledge except the validity of the fact. For example, it could be used to allow a customer to prove their identity to a potentially malicious bank machine without giving away private information such as a personal identification number. This way, any knowledge gained by a malicious bank machine during an interaction cannot be used later to compromise the client's banking account. An important tool in many ZKPs is bit commitment, which is essentially a digital way for a sender to put a message in a lock-box, lock it, and send it to the receiver. Later, the key is sent for the receiver to open the lock box and read the message. This way, the message is hidden from the receiver until they receive the key, and the sender is unable to change their mind after sending the lock box. In this paper, the homomorphic properties of a particular multi-party commitment scheme are exploited to allow the receiver to perform operations on commitments, resulting in polynomial time ZKPs for two NP-Complete problems: the Subset Sum Problem and 3SAT. These ZKPs are secure with no computational restrictions on the provers, even with shared quantum entanglement. In terms of efficiency, the Subset Sum ZKP is competitive with other practical quantum-secure ZKPs in the literature, with less rounds required, and fewer computations.

Quantum Physics,Cryptography and Security
On a Theorem of Ito and Szép

Zhenfeng Wu,Wenbin Guo

DOI: https://doi.org/10.1515/jgth-2020-0084

2020-01-01

Journal of Group Theory

Abstract:Abstract A subgroup H of a group G is said to be conditionally permutable (or c-permutable for short) in G if, for every subgroup T of G, there exists an element x ∈ G {x\in G} such that H ⁢ T x = T x ⁢ H {HT^{x}=T^{x}H} . A subgroup H of a group G is said to be completely c-permutable in G if, for every subgroup T of G, the subgroups H and T are c-permutable in 〈 H , T 〉 {\langle H,T\rangle} . In this paper, we prove that H / H G {H/H_{G}} is nilpotent if H is a completely c-permutable subnormal subgroup of G. This result generalizes a well-known theorem of Ito and Szép, and gives a positive answer to an open problem in [W. Guo, Structure Theory for Canonical Classes of Finite Groups, Springer, Heidelberg, 2015]. We also use complete c-permutability to determine the p-supersolubility of a group G.
Perfect Zero-Knowledge PCPs for #P

Tom Gur,Jack O'Connor,Nicholas Spooner

2024-03-19

Abstract:We construct perfect zero-knowledge probabilistically checkable proofs (PZK-PCPs) for every language in #P. This is the first construction of a PZK-PCP for any language outside BPP. Furthermore, unlike previous constructions of (statistical) zero-knowledge PCPs, our construction simultaneously achieves non-adaptivity and zero knowledge against arbitrary (adaptive) polynomial-time malicious verifiers.

Computational Complexity,Cryptography and Security,Data Structures and Algorithms
Optimal Strategies for Winning Certain Coset-Guessing Quantum Games

Michael Schleppy,Emina Soljanin,Nicolas Swanson

2024-10-11

Abstract:In a recently introduced coset guessing game, Alice plays against Bob and Charlie, aiming to meet a joint winning condition. Bob and Charlie can only communicate before the game starts to devise a joint strategy. The game we consider begins with Alice preparing a 2m-qubit quantum state based on a random selection of three parameters. She sends the first m qubits to Bob and the rest to Charlie and then reveals to them her choice for one of the parameters. Bob is supposed to guess one of the hidden parameters, Charlie the other, and they win if both guesses are correct. From previous work, we know that the probability of Bob's and Charlie's guesses being simultaneously correct goes to zero exponentially as m increases. We derive a tight upper bound on this probability and show how Bob and Charlie can achieve it. While developing the optimal strategy, we devised an encoding circuit using only CNOT and Hadamard gates, which could be relevant for building efficient CSS-coded systems. We found that the role of quantum information that Alice communicates to Bob and Charlie is to make their responses correlated rather than improve their individual (marginal) correct guessing rates.

Quantum Physics,Information Theory
Minimal operations over permutation groups

Paolo Marimon,Michael Pinsker

2024-10-29

Abstract:We classify the possible types of minimal operations above an arbitrary permutation group. Above the trivial group, a theorem of Rosenberg yields that there are five types of minimal operations. We show that above any non-trivial permutation group there are at most four such types. Indeed, except above Boolean groups acting freely on a set, there are only three. In particular, this is the case for oligomorphic permutation groups, for which we improve a result of Bodirsky and Chen by showing one of the types in their classification does not exist. Building on these results, we answer three questions of Bodirsky that were previously open.

Rings and Algebras,Group Theory,Logic
Schur–Zassenhaus Theorem for X-Permutable Subgroups

Wenbin Guo,K. P. Shum,Alexander N. Skiba

DOI: https://doi.org/10.1142/s1005386708000187

2008-01-01

Algebra Colloquium

Abstract:Let A and B be subgroups of a group G, and ∅ ≠ X ⊆ G. Then A is said to be X-permutable with B if there exists an element x ∈ X such that ABx = BxA. In this paper, a new version of Schur–Zassenhaus theorem is obtained for X-permutable subgroups, and hence, Question 5.1 in [6] is answered.

On the Double Coset Membership Problem for Permutation Groups

A Zero-Knowledge Proof of Knowledge for Subgroup Distance Problem

Efficient Non-Interactive Zero Knowledge Arguments for Set Operations.

Parabolic double cosets in Coxeter groups

Unipotent representations of real classical groups

General Properties of Quantum Zero-Knowledge Proofs

A Zero-Knowledge PCP Theorem

The Hilden Double Coset Problem in Braid Groups

Complete algorithms for transversals and double coset representatives of subgroups via subfactors

Finding automorphism groups of double coset graphs and Cayley graphs are equivalent

Inverse Zero-Sum Problems III

Derangements in Cosets of Primitive Permutation Groups

Double coset problem for parabolic subgroups of braid groups

Two prover perfect zero knowledge for MIP*

On Covers of Abelian Groups by Cosets

Zero-Knowledge MIPs using Homomorphic Commitment Schemes

On a Theorem of Ito and Szép

Perfect Zero-Knowledge PCPs for #P

Optimal Strategies for Winning Certain Coset-Guessing Quantum Games

Minimal operations over permutation groups

Schur–Zassenhaus Theorem for X-Permutable Subgroups