Cryptographic security parameter 2026-11-05
A cryptographic security parameter is an integer indexing a family of cryptographic protocols or algorithms. It controls the scale at which efficiency and security guarantees are stated. Theoretical algorithms are often given , a string of ones, so polynomial time in that input length means polynomial time in .[ref]
Zero-Knowledge chapter draft of Foundations of Cryptography by Oded Goldreich. Protocol Input Specification, unary security parameter
A typical asymptotic guarantee requires a cryptographically negligible probability: for every fixed , the relevant probability eventually falls below . An exponential such as has that property; does not, because it fails the requirement for .
An original idealized guessing example separates a parameter from a concrete security claim. If a secret is uniform among possible values and no other information about it is supplied, one fixed guess succeeds with probability . Checking distinct guesses covers at most a fractionof those possibilities. This is a counting argument under the stated uniform-secret model, not a guarantee for every scheme described as having a128-bit key.