arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2302.04749quant-phcs.CCcs.CR
收藏

基于单向函数的量子优势

Quantum Advantage from One-Way Functions

Tomoyuki Morimae, Takashi Yamakawa

AI总结:

本文提出低效验证者量子性证明 IV-PoQ 及其辅助输入版本,证明仅依靠单向函数等基础假设即可实现量子优势,并给出常数轮协议条件。

摘要:

我们在若干基本假设下展示了量子优势,具体而言仅基于 OWF(单向函数)的存在性。我们引入了低效验证者量子性证明(IV-PoQ),并从经典比特承诺构造它。IV-PoQ 是验证者与量子证明者之间的交互式协议,由两个阶段组成。在第一阶段,验证者是概率多项式时间的,并与证明者交互。在第二阶段,验证者变为低效,并基于第一阶段的传输记录作出决定。如果证明者诚实,低效验证者以高概率接受;但任何经典恶意证明者被低效验证者接受的概率都很小。我们的构造展示了以下结果:(1)如果单向函数存在,则 IV-PoQ 存在。(2)如果分布式抗碰撞哈希函数存在(若 SZK 中存在平均情形困难问题,则该函数存在),则常数轮 IV-PoQ 存在。我们还基于最坏情形困难假设展示了量子优势。我们定义了辅助输入 IV-PoQ(AI-IV-PoQ),它只要求对于任何恶意证明者,存在无穷多个辅助输入,使证明者在这些输入下无法欺骗。我们以类似方式从辅助输入版本的承诺构造 AI-IV-PoQ,表明:(1)如果辅助输入单向函数存在(若 CZK 不包含于 BPP,则该函数存在),则 AI-IV-PoQ 存在。(2)如果辅助输入抗碰撞哈希函数存在(等价于 PWPP 不包含于 FBPP),或 SZK 不包含于 BPP,则常数轮 AI-IV-PoQ 存在。

英文摘要:

We demonstrate quantum advantage with several basic assumptions, specifically based on only the existence of OWFs. We introduce inefficient-verifier proofs of quantumness (IV-PoQ), and construct it from classical bit commitments. IV-PoQ is an interactive protocol between a verifier and a quantum prover consisting of two phases. In the first phase, the verifier is probabilistic polynomial-time, and it interacts with the prover. In the second phase, the verifier becomes inefficient, and makes its decision based on the transcript of the first phase. If the prover is honest, the inefficient verifier accepts with high probability, but any classical malicious prover only has a small probability of being accepted by the inefficient verifier. Our construction demonstrates the following results: (1)If one-way functions exist, then IV-PoQ exist. (2)If distributional collision-resistant hash functions exist (which exist if hard-on-average problems in $\mathbf{SZK}$ exist), then constant-round IV-PoQ exist. We also demonstrate quantum advantage based on worst-case-hard assumptions. We define auxiliary-input IV-PoQ (AI-IV-PoQ) that only require that for any malicious prover, there exist infinitely many auxiliary inputs under which the prover cannot cheat. We construct AI-IV-PoQ from an auxiliary-input version of commitments in a similar way, showing that (1)If auxiliary-input one-way functions exist (which exist if $\mathbf{CZK}\not\subseteq\mathbf{BPP}$), then AI-IV-PoQ exist. (2)If auxiliary-input collision-resistant hash functions exist (which is equivalent to $\mathbf{PWPP}\nsubseteq \mathbf{FBPP}$) or $\mathbf{SZK}\nsubseteq \mathbf{BPP}$, then constant-round AI-IV-PoQ exist.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑