arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2510.04448quant-phcs.CCcs.CR
收藏

量子密码学与非坍缩测量的难度

Quantum Cryptography and Hardness of Non-Collapsing Measurements

Tomoyuki Morimae, Yuki Shirakawa, Takashi Yamakawa

AI总结:

该研究提出采样复杂性类SampPDQP,证明其平均难度可支撑单向谜题(OWPuzzs),同时引入分布抗碰撞谜题(dCRPuzzs)并明确其与SampPDQP、现有密码原语的推导关系,为量子密码原语提供了不依赖单向函数的难度假设基础。

摘要:

由Khurana和Tomer[STOC 2024]提出的单向谜题(OWPuzzs)是单向函数(OWFs)的自然量子对应物,也是“微密码学(Microcrypt)”领域最基础的原语之一——该领域中不存在单向函数,但量子密码学具备可行性。几乎所有量子密码原语都能推导出OWPuzzs的存在,而OWPuzzs又可支撑非交互式承诺、多方计算等多项重要应用。量子密码学领域的一个核心目标,是将OWPuzzs的存在性建立在不会推导出OWFs存在的合理假设之上。\n本文将OWPuzzs的存在性建立在非坍缩测量的难度之上。为此,我们提出了一个新的复杂性类$\n\textbf{SampPDQP}$,它是[Aaronson、Bouland、Fitzsimons和Lee,ITCS 2016]提出的决策类$\textbf{PDQP}$的采样版本。我们证明,若$\textbf{SampPDQP}$问题对于量子多项式时间算法而言平均难度较高,则OWPuzzs存在。$\textbf{SampPDQP}$是一类可由经典多项式时间算法求解的采样问题,该算法仅需向非坍缩测量谕言机发起一次查询——非坍缩测量谕言机是一种“理想化”谕言机,能够对量子态的测量结果进行采样且不会导致量子态坍缩。这类非坍缩测量是高度非物理的操作,应当难以在量子多项式时间内实现。\n我们还研究了$\textbf{SampPDQP}$难度的上界。我们提出了一种新原语:分布抗碰撞谜题(dCRPuzzs),它是分布抗碰撞哈希[Dubrov和Ishai,STOC 2006]的自然量子对应物。我们证明dCRPuzzs可推导出$\textbf{SampPDQP}$的平均难度(因此也能推导出OWPuzzs的存在)。我们还证明,具备经典通信的两轮诚实统计隐藏承诺,以及一次性签名[Amos、Georgiou、Kiayias、Zhandry,STOC 2020],均可推导出dCRPuzzs的存在。

英文摘要:

One-way puzzles (OWPuzzs) introduced by Khurana and Tomer [STOC 2024] are a natural quantum analogue of one-way functions (OWFs), and one of the most fundamental primitives in ''Microcrypt'' where OWFs do not exist but quantum cryptography is possible. OWPuzzs are implied by almost all quantum cryptographic primitives, and imply several important applications such as non-interactive commitments and multi-party computations. A significant goal in the field of quantum cryptography is to base OWPuzzs on plausible assumptions that will not imply OWFs. In this paper, we base OWPuzzs on hardness of non-collapsing measurements. To that end, we introduce a new complexity class, $\mathbf{SampPDQP}$, which is a sampling version of the decision class $\mathbf{PDQP}$ introduced in [Aaronson, Bouland, Fitzsimons, and Lee, ITCS 2016]. We show that if $\mathbf{SampPDQP}$ is hard on average for quantum polynomial time, then OWPuzzs exist. $\mathbf{SampPDQP}$ is the class of sampling problems that can be solved by a classical polynomial-time algorithm that can make a single query to a non-collapsing measurement oracle, which is a ''magical'' oracle that can sample measurement results on quantum states without collapsing the states. Such non-collapsing measurements are highly unphysical operations that should be hard to realize in quantum polynomial-time. We also study upperbounds of the hardness of $\mathbf{SampPDQP}$. We introduce a new primitive, distributional collision-resistant puzzles (dCRPuzzs), which are a natural quantum analogue of distributional collision-resistant hashing [Dubrov and Ishai, STOC 2006]. We show that dCRPuzzs imply average-case hardness of $\mathbf{SampPDQP}$ (and therefore OWPuzzs as well). We also show that two-message honest-statistically-hiding commitments with classical communication and one-shot signatures [Amos, Georgiou, Kiayias, Zhandry, STOC 2020] imply dCRPuzzs.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑