In mathematics, a negligible function is a
function such that for every positive integer ''c'' there exists an integer ''N''
''c'' such that for all ''x'' > ''N''
''c'',
:
Equivalently, the following definition may be used.
A function
is negligible, if for every
positive polynomial poly(·) there exists an integer ''N''
poly > 0 such that for all ''x'' > ''N''
poly
:
History
The concept of ''negligibility'' can find its trace back to sound models of analysis. Though the concepts of "
continuity" and "
infinitesimal
In mathematics, an infinitesimal number is a non-zero quantity that is closer to 0 than any non-zero real number is. The word ''infinitesimal'' comes from a 17th-century Modern Latin coinage ''infinitesimus'', which originally referred to the " ...
" became important in mathematics during
Newton and
Leibniz
Gottfried Wilhelm Leibniz (or Leibnitz; – 14 November 1716) was a German polymath active as a mathematician, philosopher, scientist and diplomat who is credited, alongside Sir Isaac Newton, with the creation of calculus in addition to many ...
's time (1680s), they were not well-defined until the late 1810s. The first reasonably rigorous definition of ''continuity'' in
mathematical analysis
Analysis is the branch of mathematics dealing with continuous functions, limit (mathematics), limits, and related theories, such as Derivative, differentiation, Integral, integration, measure (mathematics), measure, infinite sequences, series ( ...
was due to
Bernard Bolzano
Bernard Bolzano (, ; ; ; born Bernardus Placidus Johann Nepomuk Bolzano; 5 October 1781 – 18 December 1848) was a Bohemian mathematician, logician, philosopher, theologian and Catholic priest of Italian extraction, also known for his liberal ...
, who wrote in 1817 the modern definition of continuity. Later
Cauchy,
Weierstrass
Karl Theodor Wilhelm Weierstrass (; ; 31 October 1815 – 19 February 1897) was a German mathematician often cited as the " father of modern analysis". Despite leaving university without a degree, he studied mathematics and trained as a school t ...
and
Heine also defined as follows (with all numbers in the real number domain
):
:(
Continuous function
In mathematics, a continuous function is a function such that a small variation of the argument induces a small variation of the value of the function. This implies there are no abrupt changes in value, known as '' discontinuities''. More preci ...
) A function
is ''continuous'' at
if for every
, there exists a positive number
such that
implies
This classic definition of continuity can be transformed into the
definition of negligibility in a few steps by changing parameters used in the definition. First, in the case
with
, we must define the concept of "''infinitesimal function''":
:(
Infinitesimal
In mathematics, an infinitesimal number is a non-zero quantity that is closer to 0 than any non-zero real number is. The word ''infinitesimal'' comes from a 17th-century Modern Latin coinage ''infinitesimus'', which originally referred to the " ...
) A continuous function
is ''infinitesimal'' (as
goes to infinity) if for every
there exists
such that for all
::
Next, we replace
by the functions
where
or by
where
is a positive
polynomial
In mathematics, a polynomial is a Expression (mathematics), mathematical expression consisting of indeterminate (variable), indeterminates (also called variable (mathematics), variables) and coefficients, that involves only the operations of addit ...
. This leads to the definitions of negligible functions given at the top of this article. Since the constants
can be expressed as
with a constant polynomial, this shows that infinitesimal functions are a superset of negligible functions.
Use in cryptography
In complexity-based modern
cryptography
Cryptography, or cryptology (from "hidden, secret"; and ''graphein'', "to write", or ''-logy, -logia'', "study", respectively), is the practice and study of techniques for secure communication in the presence of Adversary (cryptography), ...
, a security scheme is
''
provably secure
Provable security refers to any type or level of computer security that can be proved. It is used in different ways by different fields.
Usually, this refers to mathematical proofs, which are common in cryptography. In such a proof, the capabilit ...
'' if the probability of security failure (e.g.,
inverting a
one-way function
In computer science, a one-way function is a function that is easy to compute on every input, but hard to invert given the image of a random input. Here, "easy" and "hard" are to be understood in the sense of computational complexity theory, s ...
, distinguishing
cryptographically strong pseudorandom bits from truly random bits) is negligible in terms of the input
= cryptographic key length
. Hence comes the definition at the top of the page because key length
must be a natural number.
Nevertheless, the general notion of negligibility doesn't require that the input parameter
is the key length
. Indeed,
can be any predetermined system metric and corresponding mathematical analysis would illustrate some hidden analytical behaviors of the system.
The reciprocal-of-polynomial formulation is used for the same reason that
computational boundedness is defined as polynomial running time: it has mathematical closure properties that make it tractable in the
asymptotic
In analytic geometry, an asymptote () of a curve is a line such that the distance between the curve and the line approaches zero as one or both of the ''x'' or ''y'' coordinates Limit of a function#Limits at infinity, tends to infinity. In pro ...
setting (see
#Closure properties). For example, if an attack succeeds in violating a security condition only with negligible probability, and the attack is repeated a polynomial number of times, the success probability of the overall attack still remains negligible.
In practice one might want to have more
concrete
Concrete is a composite material composed of aggregate bound together with a fluid cement that cures to a solid over time. It is the second-most-used substance (after water), the most–widely used building material, and the most-manufactur ...
functions bounding the adversary's success probability and to choose the security parameter large enough that this probability is smaller than some threshold, say 2
−128.
Closure properties
One of the reasons that negligible functions are used in foundations of
complexity-theoretic cryptography is that they obey closure properties.
Specifically,
# If
are negligible, then the function
is negligible.
# If
is negligible and
is any real polynomial, then the function
is negligible.
Conversely, if
is not negligible, then neither is
for any real polynomial
.
Examples
*
is negligible for any
:
** Step: This is an exponential decay function where
is a constant greater than or equal to 2. As
,
very quickly, making it negligible.
*
is negligible:
** Step: This function has exponential decay with a base of 3, but the exponent grows slower than
(only at
). As
,
, so it’s still negligible but decays slower than
.
*
is negligible:
** Step: In this case,
represents a polynomial decay, with the exponent growing negatively due to
. Since the decay rate increases with
, the function goes to 0 faster than polynomial functions like
for any constant
, making it negligible.
*
is negligible:
** Step: This function decays as the logarithm of
raised to a negative exponent
, which leads to a fast approach to 0 as
. The decay here is faster than inverse logarithmic or polynomial rates, making it negligible.
*
is not negligible, for positive
:
** Step: We can rewrite this as
, which is a polynomial decay rather than an exponential one. Since
is positive,
as
, but it doesn’t decay as quickly as true exponential functions with respect to
, making it non-negligible.
Assume
, we take the limit as
:
Negligible:
*
:
** Step: This function decays exponentially with base
raised to the power of
. As
,
quickly, making it negligible.
*
for
:
** Step: We can simplify
as
, which decays faster than any polynomial. As
, the function approaches zero and is considered negligible for any
and
.
*
for
:
** Step: The decay is determined by the base
raised to the power of
. Since
grows with
, this function approaches zero faster than polynomial decay, making it negligible.=
*
:
** Step: Here,
decays exponentially with a base of
raised to
. As
,
quickly, so it’s considered negligible.
Non-negligible:
*
:
** Step: Since
as
, this function decays very slowly, failing to approach zero quickly enough to be considered negligible.
*
:
** Step: With an exponential base and exponent
, this function would approach zero very rapidly, suggesting negligibility.
See also
*
Negligible set
In mathematics, a negligible set is a set that is small enough that it can be ignored for some purpose.
As common examples, finite sets can be ignored when studying the limit of a sequence, and null sets can be ignored when studying the integral ...
*
Colombeau algebra
*
Nonstandard numbers
*
Gromov's theorem on groups of polynomial growth
*
Non-standard calculus
References
*
*
*
*
* {{cite journal , first = Mihir , last = Bellare , date = 1997 , citeseerx = 10.1.1.43.7900 , title = A Note on Negligible Functions , journal = Journal of Cryptology , volume = 15 , page = 2002 , publisher = Dept. of Computer Science & Engineering University of California at San Diego
Mathematical analysis
Types of functions