Ecien t Construction of the Dual Span Program

We consider monotone span programs as a tool for representing, we will say computing, general access structures. It is known that if an access structure Γ is computed by a monotone span program M, then the dual access structure Γ∗ is computed by a monotone span program M∗ of the same size. We will strengthen this result by proving that such an M∗ not only exists, but can be efficiently computed from M.

[1]  Anna Gál,et al.  Combinatorial methods in boolean function complexity , 1995 .

[2]  Ivan Damgård,et al.  Proofs of Partial Knowledge and Simplified Design of Witness Hiding Protocols , 1994, CRYPTO.

[3]  Avi Wigderson,et al.  On span programs , 1993, [1993] Proceedings of the Eigth Annual Structure in Complexity Theory Conference.

[4]  Ueli Maurer,et al.  General Secure Multi-party Computation from any Linear Secret-Sharing Scheme , 2000, EUROCRYPT.