Abstract:In this work we first examine the hardness of solving various search problems by hybrid quantum-classical strategies, namely, by algorithms that have both quantum and classical capabilities. We then construct a hybrid quantum-classical search algorithm and analyze its success probability. Regarding the former, for search problems that are allowed to have multiple solutions and in which the input is sampled according to arbitrary distributions we establish their hybrid quantum-classical query complexities -- i.e., given a fixed number of classical and quantum queries, determine what is the probability of solving the search task. At a technical level, our results generalize the framework for hybrid quantum-classical search algorithms proposed by Rosmanis. Namely, for an arbitrary distribution $D$ on Boolean functions, the probability an algorithm equipped with $\tau_c$ classical and $\tau_q$ quantum queries succeeds in finding a preimage of $1$ for a function sampled from $D$ is at most $\nu_D \cdot(2\sqrt{\tau_c} + 2\tau_q + 1)^2$, where $\nu_D$ captures the average (over $D$) fraction of preimages of $1$. As applications of our hardness results, we first revisit and generalize the security of the Bitcoin protocol called the Bitcoin backbone, to a setting where the adversary has both quantum and classical capabilities, presenting a new hybrid honest majority condition necessary for the protocol to properly operate. Secondly, we examine the generic security of hash functions against hybrid adversaries. Regarding our second contribution, we design a hybrid algorithm which first spends all of its classical queries and in the second stage runs a ``modified Grover'' where the initial state depends on the distribution $D$. We show how to analyze its success probability for arbitrary target distributions and, importantly, its optimality for the uniform and the Bernoulli distribution cases.

On quantum preimage attacks

Classical and Quantum Meet-in-the-Middle Nostradamus Attacks on AES-like Hashing

A Quantum-Resistant Photonic Hash Function

On the Concept of Cryptographic Quantum Hashing

Quantum Attacks on Hash Constructions with Low Quantum Random Access Memory

Quantum Differential and Linear Cryptanalysis

Generalized Hybrid Search and Applications to Blockchain and Hash Function Security

Quantum attacks on some feistel block ciphers

Preimages for Step-Reduced SHA-2

Post-quantum hash functions using

Hacking Cryptographic Protocols with Advanced Variational Quantum Attacks

Protecting Quantum Procrastinators with Signature Lifting: A Case Study in Cryptocurrencies

Designing Hash and Encryption Engines using Quantum Computing

Quantum Attacks: A View of Data Complexity on Offline Simon's Algorithm.

Preimage Attacks on 4-Round Keccak by Solving Multivariate Quadratic Systems

Study of Attacks on the HHL Quantum Algorithm

Automated Quantum Circuit Generation for Computing Inverse Hash Functions

On Quantum Chosen-Ciphertext Attacks and Learning with Errors

A Security Assessment tool for Quantum Threat Analysis

The NISQ Complexity of Collision Finding

Quantum Attacks on 1K-AES and PRINCE