窃听者盲远程态制备及其在量子公钥加密中的应用
Eavesdropper-Blind Remote State Preparation and Applications to Quantum Public-Key Encryption
浏览论文内容
中文总结 AI 辅助
本研究提出窃听者盲远程态制备（EB-RSP）原语，构造双消息EB-RSP协议以实现量子公钥加密，并展示现有基于TCF的RSP构造可适配该原语，为陷门无关假设的RSP型原语奠定基础。
中文摘要 AI 辅助
远程态制备（Remote state preparation, RSP）是量子密码学中的核心基础原语，它允许经典参与方仅通过经典通信远程构建量子态。因此，RSP成为众多涉及经典客户端与量子服务器协议的关键构建模块，使经典参与方能够利用强大量子计算机的优势。所有已知的RSP构造都依赖强密码假设，通常是陷门无爪函数（trapdoor claw-free functions, TCF）的变体。在本研究中，我们启动了对一种更弱形式的远程态制备的研究，将其命名为窃听者盲远程态制备（eavesdropper-blind remote state preparation, EB-RSP）。非正式地说，EB-RSP仅要求对看到诚实协议 transcript 的外部观察者保持盲性，而非对量子服务器本身。尽管对抗模型有所放松，该概念仍足以用于实用密码应用。具体而言，我们表明双消息EB-RSP已足以构造具有经典公钥和量子密文的量子公钥加密。随后，我们从特定单向群作用构造双消息EB-RSP协议，迈出了基于不依赖陷门的假设的RSP型原语的第一步。最后，我们观察到现有RSP构造可能自然适配双消息EB-RSP概念，并针对具体的基于TCF的RSP构造明确展示了这一点。
英文摘要
Remote state preparation (RSP) is a central primitive in quantum cryptography, enabling classical parties to remotely construct quantum states using only classical communication. As a result, RSP serves as a key building block in numerous protocols involving classical clients and quantum servers, allowing classical parties to leverage the advantages offered by powerful quantum computers. All known constructions of RSP rely on strong cryptographic assumptions, typically variants of trapdoor claw-free functions (TCFs). In this work, we initiate the study of a weaker form of remote state preparation, which we call eavesdropper-blind remote state preparation (EB-RSP). Informally, EB-RSP requires blindness only against external observers who see the transcript of the honest protocol, rather than against the quantum server itself. Despite this relaxed adversarial model, the resulting notion remains sufficient for useful cryptographic applications. In particular, we show that two-message EB-RSP already suffices to construct quantum public-key encryption with classical public keys and quantum ciphertexts. We then construct two-message EB-RSP protocols from specific one-way group actions, yielding a first step toward RSP-type primitives based on assumptions that do not rely on trapdoors. Finally, we observe that existing RSP constructions are likely naturally adaptable to the two-message EB-RSP notion; we demonstrate this explicitly for a concrete TCF-based RSP construction.
