# If G is a secure PRG and G' is a function of G, is G' secure?

For example: for secure PRG G if I have a G' s.t. G'(k) = G(k)||0, is G' necessarily secure? This question is not for the above example only but for any other possibilities as well. My thinking is that since G is secure (ADV is negligible and PRG is unpredictable), then no matter what I do with G to make G', G' is secure.

-
This feels like a homework question to me. Is it? – pg1989 Jan 11 '14 at 0:16
My question is not the HW problem, it is something I am gathering after doing it and wondering if it is true. – arynhard Jan 11 '14 at 0:19
Your example is already sufficient to contradict your intuition. If the last bit is always zero can the output of $G'$ be indistinguishable from uniformly random strings? – DrLecter Jan 11 '14 at 0:24
Oh man, it is distinguishable. Thank you. So is it the advantage in the case of my example that would make G' insecure? – arynhard Jan 11 '14 at 0:29

Hint: Consider the function $G'(k) = f(G(k))$, where $f(x) = 0$ for all $x$. Clearly, $G'$ is a function of $G$. Is $G'$ a secure PRG?