We provide a generic construction to turn any classical Zero-Knowledge (ZK) protocol into a composable (quantum) oblivious transfer (OT) protocol, mostly lifting the round-complexity properties and security guarantees (plain-model/statistical security/unstructured functions...) of the ZK protocol to the resulting OT protocol. Such a construction is unlikely to exist classically as Cryptomania is believed to be different from Minicrypt. In particular, by instantiating our construction using Non-Interactive ZK (NIZK), we provide the first round-optimal (2-message) quantum OT protocol secure in the random oracle model, and round-optimal extensions to string and k-out-of-n OT. At the heart of our construction lies a new method that allows us to prove properties on a received quantum state without revealing (too much) information on it, even in a non-interactive way and/or with statistical guarantees when using an appropriate classical ZK protocol. We can notably prove that a state has been partially measured (with arbitrary constraints on the set of measured qubits), without revealing any additional information on this set. This notion can be seen as an analog of ZK to quantum states, and we expect it to be of independent interest as it extends complexity theory to quantum languages, as illustrated by the two new complexity classes we introduce, ZKstateQIP and ZKstateQMA.
翻译:我们提供一种通用的构造,将任何古典零知识(ZK)协议变成一个可作曲(Quantum)的(Quantum)隐形转移(OT)协议,主要是解除ZK协议的圆形复杂特性和安全保障(Plain-model/statistic security/un结构化功能......),作为由此产生的OT协议的ZK协议的圆形复杂特性和安全保障(Plain-state-static security/statical-secreat-formation.) 。这种构造不可能古老地存在,因为人们相信coptomonia与Minicryt(Minicrypt)有差异。特别是通过使用非互动性 ZK(NIZK)协议(NIK),我们提供了第一个圆形最佳(2Mesage) 数量协议的量最佳(OI) 协议安全性(OT) 数量协议,以及圆形和圆形OT(k-OT-OT) 扩展的扩展的扩展的扩展。我们可以用一个任意的理论来测量到ZZ级, 将它理解为我们所测量到新的数量级。我们所测量到的高度的高度。我们所测量到的高度的高度。</s>