Distribution of the math operations results with variables from different sets.

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
0
down vote

favorite












There is a simple equation $ax = bc$, where $a$ and $b$ are sampled uniformly at random from the space of all possible $k$-bits values $mathcalK$. Also, we know, that $c$ is sampled uniformly at random from the space of all possible $j$-bits values $mathcalJ$.



What can be said about $x$ distribution?



I'm stuck. Intuitively it seems that $x$ should be a random value from $mathcalK$ space. However, I don't know how to prove this or how to modify the equation to make it true. I would appreciate any ideas and hints.



Here is my thought process:



The original equation I'm trying to solve is from modular arithmetic $G = g^axbmod p = g^bcbmod p$, where $g$ is a generator of a cyclic group $mathbbG$ of a prime order $q$ and $p=2q+1$ is also prime.



So, I have fixed $G=g^bcbmod p$ and want to find $x$ such that $G$ can be also computed as $g^axbmod p$. Log problem is hard, but we know $a,b,c$, so we can find $x$ such that $ax = bc$.



Observation 1: $a,b$ are $k$-bits outputs of a secure $PRF$, which implies that there is no efficient algorithm can distinguish this output and a truly random one. Since $c$ is also chosen uniformly at random, $x = fracbca$ is random.



Observation 2: By definition of the bit size of an integer (at least, a prime in a cryptographic context) $2^k-1 leq a < 2^k$, also $2^k-1 leq b < 2^k$ and $2^j-1 leq c < 2^j$. Thus, $ 2^k-1 + j-1 - (k-1) leq fracbca < 2^k +j - k$, which means $2^j-1 leq x < 2^j$.



This implies that a) $x$ is $j$-bits number b) $x$ is random since $fracbca$ is random. Though, I'm not sure it couns as a proof of $x$ being uniform and random in space $mathcalJ$.







share|cite|improve this question





















  • @JoséCarlosSantos done.
    – pintor
    Jul 24 at 13:36














up vote
0
down vote

favorite












There is a simple equation $ax = bc$, where $a$ and $b$ are sampled uniformly at random from the space of all possible $k$-bits values $mathcalK$. Also, we know, that $c$ is sampled uniformly at random from the space of all possible $j$-bits values $mathcalJ$.



What can be said about $x$ distribution?



I'm stuck. Intuitively it seems that $x$ should be a random value from $mathcalK$ space. However, I don't know how to prove this or how to modify the equation to make it true. I would appreciate any ideas and hints.



Here is my thought process:



The original equation I'm trying to solve is from modular arithmetic $G = g^axbmod p = g^bcbmod p$, where $g$ is a generator of a cyclic group $mathbbG$ of a prime order $q$ and $p=2q+1$ is also prime.



So, I have fixed $G=g^bcbmod p$ and want to find $x$ such that $G$ can be also computed as $g^axbmod p$. Log problem is hard, but we know $a,b,c$, so we can find $x$ such that $ax = bc$.



Observation 1: $a,b$ are $k$-bits outputs of a secure $PRF$, which implies that there is no efficient algorithm can distinguish this output and a truly random one. Since $c$ is also chosen uniformly at random, $x = fracbca$ is random.



Observation 2: By definition of the bit size of an integer (at least, a prime in a cryptographic context) $2^k-1 leq a < 2^k$, also $2^k-1 leq b < 2^k$ and $2^j-1 leq c < 2^j$. Thus, $ 2^k-1 + j-1 - (k-1) leq fracbca < 2^k +j - k$, which means $2^j-1 leq x < 2^j$.



This implies that a) $x$ is $j$-bits number b) $x$ is random since $fracbca$ is random. Though, I'm not sure it couns as a proof of $x$ being uniform and random in space $mathcalJ$.







share|cite|improve this question





















  • @JoséCarlosSantos done.
    – pintor
    Jul 24 at 13:36












up vote
0
down vote

favorite









up vote
0
down vote

favorite











There is a simple equation $ax = bc$, where $a$ and $b$ are sampled uniformly at random from the space of all possible $k$-bits values $mathcalK$. Also, we know, that $c$ is sampled uniformly at random from the space of all possible $j$-bits values $mathcalJ$.



What can be said about $x$ distribution?



I'm stuck. Intuitively it seems that $x$ should be a random value from $mathcalK$ space. However, I don't know how to prove this or how to modify the equation to make it true. I would appreciate any ideas and hints.



Here is my thought process:



The original equation I'm trying to solve is from modular arithmetic $G = g^axbmod p = g^bcbmod p$, where $g$ is a generator of a cyclic group $mathbbG$ of a prime order $q$ and $p=2q+1$ is also prime.



So, I have fixed $G=g^bcbmod p$ and want to find $x$ such that $G$ can be also computed as $g^axbmod p$. Log problem is hard, but we know $a,b,c$, so we can find $x$ such that $ax = bc$.



Observation 1: $a,b$ are $k$-bits outputs of a secure $PRF$, which implies that there is no efficient algorithm can distinguish this output and a truly random one. Since $c$ is also chosen uniformly at random, $x = fracbca$ is random.



Observation 2: By definition of the bit size of an integer (at least, a prime in a cryptographic context) $2^k-1 leq a < 2^k$, also $2^k-1 leq b < 2^k$ and $2^j-1 leq c < 2^j$. Thus, $ 2^k-1 + j-1 - (k-1) leq fracbca < 2^k +j - k$, which means $2^j-1 leq x < 2^j$.



This implies that a) $x$ is $j$-bits number b) $x$ is random since $fracbca$ is random. Though, I'm not sure it couns as a proof of $x$ being uniform and random in space $mathcalJ$.







share|cite|improve this question













There is a simple equation $ax = bc$, where $a$ and $b$ are sampled uniformly at random from the space of all possible $k$-bits values $mathcalK$. Also, we know, that $c$ is sampled uniformly at random from the space of all possible $j$-bits values $mathcalJ$.



What can be said about $x$ distribution?



I'm stuck. Intuitively it seems that $x$ should be a random value from $mathcalK$ space. However, I don't know how to prove this or how to modify the equation to make it true. I would appreciate any ideas and hints.



Here is my thought process:



The original equation I'm trying to solve is from modular arithmetic $G = g^axbmod p = g^bcbmod p$, where $g$ is a generator of a cyclic group $mathbbG$ of a prime order $q$ and $p=2q+1$ is also prime.



So, I have fixed $G=g^bcbmod p$ and want to find $x$ such that $G$ can be also computed as $g^axbmod p$. Log problem is hard, but we know $a,b,c$, so we can find $x$ such that $ax = bc$.



Observation 1: $a,b$ are $k$-bits outputs of a secure $PRF$, which implies that there is no efficient algorithm can distinguish this output and a truly random one. Since $c$ is also chosen uniformly at random, $x = fracbca$ is random.



Observation 2: By definition of the bit size of an integer (at least, a prime in a cryptographic context) $2^k-1 leq a < 2^k$, also $2^k-1 leq b < 2^k$ and $2^j-1 leq c < 2^j$. Thus, $ 2^k-1 + j-1 - (k-1) leq fracbca < 2^k +j - k$, which means $2^j-1 leq x < 2^j$.



This implies that a) $x$ is $j$-bits number b) $x$ is random since $fracbca$ is random. Though, I'm not sure it couns as a proof of $x$ being uniform and random in space $mathcalJ$.









share|cite|improve this question












share|cite|improve this question




share|cite|improve this question








edited Jul 25 at 12:00









TZakrevskiy

19.8k12253




19.8k12253









asked Jul 24 at 12:58









pintor

11




11











  • @JoséCarlosSantos done.
    – pintor
    Jul 24 at 13:36
















  • @JoséCarlosSantos done.
    – pintor
    Jul 24 at 13:36















@JoséCarlosSantos done.
– pintor
Jul 24 at 13:36




@JoséCarlosSantos done.
– pintor
Jul 24 at 13:36















active

oldest

votes











Your Answer




StackExchange.ifUsing("editor", function ()
return StackExchange.using("mathjaxEditing", function ()
StackExchange.MarkdownEditor.creationCallbacks.add(function (editor, postfix)
StackExchange.mathjaxEditing.prepareWmdForMathJax(editor, postfix, [["$", "$"], ["\\(","\\)"]]);
);
);
, "mathjax-editing");

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "69"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: false,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
noCode: true, onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);








 

draft saved


draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fmath.stackexchange.com%2fquestions%2f2861308%2fdistribution-of-the-math-operations-results-with-variables-from-different-sets%23new-answer', 'question_page');

);

Post as a guest



































active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes










 

draft saved


draft discarded


























 


draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fmath.stackexchange.com%2fquestions%2f2861308%2fdistribution-of-the-math-operations-results-with-variables-from-different-sets%23new-answer', 'question_page');

);

Post as a guest













































































Comments

Popular posts from this blog

What is the equation of a 3D cone with generalised tilt?

Color the edges and diagonals of a regular polygon

Relationship between determinant of matrix and determinant of adjoint?