Soundness of an interactive proof

ID: soundness-of-an-interactive-proof

Soundness of an interactive proof bounds how often a verifier in an interactive proof can be induced to accept a false statement. For every false input and every cheating prover in an interactive proof strategy , an acceptance bound requires
In the usual interactive proof system definition, the quantifier includes computationally unrestricted cheating strategies. Bounding only one tested strategy is insufficient.[ref]
An original repetition example shows why conditional bounds matter. Suppose a single fair bit is reused in two tests, and both accept exactly when . Each test separately accepts with probability , but both accept with probability , not . Merely multiplying marginal probabilities would be wrong.
Instead, if every next test has acceptance probability at most conditional on every preceding accepting history, the chain rule for probabilities gives
with the first term unconditional and zero-probability histories handled trivially. For and , the bound is . The relevant protocol must justify those conditional bounds, rather than assuming that repetition automatically makes every transcript independent.
Soundness protects the false-statement side of verification. It neither guarantees acceptance of true statements nor establishes that a successful interaction hides a cryptographic witness; those are separate completeness and zero-knowledge proof questions.

New to topics? Read the docs here!