arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 1402.4797quant-ph
收藏

物理随机性提取器:以最小假设生成随机数

Physical Randomness Extractors: Generating Random Numbers with Minimal Assumptions

Kai-Min Chung, Yaoyun Shi, Xiaodi Wu

摘要:

如何用最少的假设产生可证明的真实随机性?这个问题不仅对信息处理的效率和安全性很重要,而且对理解自然界中极端不可预测的事件是如何发生的也很重要。所有现有的解决方案都要求初始随机源具有特殊的结构,或者两个或多个随机源之间具有一定的独立关系。这两种假设都不可能在实践中得到检验和保证。在这里,我们将展示如何通过提取器来规避这一基本限制,这些提取器将安全性建立在物理定律的有效性基础上,并从不可信的量子设备中提取随机性。结合Miller和Shi最近的工作(arXiv:1402:0489),我们的物理随机性提取器仅使用单个和一般的弱源,产生任意长且接近均匀的输出,具有接近最优的误差,可以抵御强大的量子对手,并容忍恒定的实现不精确性。源必须对设备不可预测,但否则甚至可以被对手知道。我们的核心技术的贡献,等价引理,提供了一个一般原则证明组合安全的不受信任的设备协议。这意味着可以通过交叉馈送任何两个扩展协议来简单地实现无界随机性扩展。特别是,这种无界扩展可以是鲁棒的,这是第一次知道。另一个重要的含义是,它使安全的随机性生成和密钥分发使用公共随机性,如NIST的随机性信标广播。我们的协议还提供了一种方法,用于反驳本地隐藏变量理论下的一个弱假设的可用随机性选择的测量设置。

英文摘要:

How to generate provably true randomness with minimal assumptions? This question is important not only for the efficiency and the security of information processing, but also for understanding how extremely unpredictable events are possible in Nature. All current solutions require special structures in the initial source of randomness, or a certain independence relation among two or more sources. Both types of assumptions are impossible to test and difficult to guarantee in practice. Here we show how this fundamental limit can be circumvented by extractors that base security on the validity of physical laws and extract randomness from untrusted quantum devices. In conjunction with the recent work of Miller and Shi (arXiv:1402:0489), our physical randomness extractor uses just a single and general weak source, produces an arbitrarily long and near-uniform output, with a close-to-optimal error, secure against all-powerful quantum adversaries, and tolerating a constant level of implementation imprecision. The source necessarily needs to be unpredictable to the devices, but otherwise can even be known to the adversary. Our central technical contribution, the Equivalence Lemma, provides a general principle for proving composition security of untrusted-device protocols. It implies that unbounded randomness expansion can be achieved simply by cross-feeding any two expansion protocols. In particular, such an unbounded expansion can be made robust, which is known for the first time. Another significant implication is, it enables the secure randomness generation and key distribution using public randomness, such as that broadcast by NIST's Randomness Beacon. Our protocol also provides a method for refuting local hidden variable theories under a weak assumption on the available randomness for choosing the measurement settings.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑