Due to the special no-cloning principle, quantum states appear to be very useful in cryptography. But this very same property also has drawbacks: when receiving a quantum state, it is nearly impossible for the receiver to efficiently check non-trivial properties on that state without destroying it. In this work, we initiate the study of Non-Destructive Zero-Knowledge Proofs on Quantum States. Our method binds a quantum state to a classical encryption of that quantum state. That way, the receiver can obtain guarantees on the quantum state by asking to the sender to prove properties directly on the classical encryption. This method is therefore non-destructive, and it is possible to verify a very large class of properties. For instance, we can force the sender to send different categories of states depending on whether they know a classical password or not. Moreover, we can also provide guarantees to the sender: for example, we can ensure that the receiver will never learn whether the sender knows the password or not. We also extend this method to the multi-party setting. We show how it can prove useful to distribute a GHZ state between different parties, in such a way that only parties knowing a secret can be part of this GHZ. Moreover, the identity of the parties that are part of the GHZ remains hidden to any malicious party. A direct application would be to allow a server to create a secret sharing of a qubit between unknown parties, authorized for example by a third party Certification Authority. Finally, we provide simpler "blind" versions of the protocols that could prove useful in Anonymous Transmission or Quantum Onion Routing, and we explicit a cryptographic function required in our protocols based on the Learning With Errors hardness problem.
翻译:由于特殊的不克隆原则,量子国似乎在加密中非常有用。但是,同样的属性也有缺点:当收到量子状态时,接收者几乎不可能在不破坏该状态的情况下有效地检查非三轨性质。在这项工作中,我们开始研究量子国的非破坏性零知识证据。我们的方法将量子状态与该量子状态的经典加密联系在一起。这样,接收者就可以通过要求发送者直接在古典加密中证明属性来获得量子状态的保证。因此,这种方法是非破坏性的,并且有可能核查非常大类别的属性。例如,我们可以迫使发送者发送不同类别的国家,这取决于它们是否知道经典密码。此外,我们还可以向发送者提供保证:比如,我们的方法可以确保接收者永远知道发送者是否知道密码。我们也可以将这种方法扩大到多党设置。我们证明如何将GHOO的硬性能状态传播到OF的硬性能性能。这个方法是非机密性能的, 并且可以证明我们向不同缔约方发送一个秘密的版本。在OHA中,我们只能提供一个秘密的版本。