Abstract:The application and analysis of the Cut-and-Choose technique in protocols secure against quantum adversaries is not a straightforward transposition of the classical case, among other reasons due to the difficulty to use rewinding in the quantum realm. We introduce a Quantum Computation Cut-and-Choose (QC-CC) technique which is a generalisation of the classical Cut-and-Choose in order to build quantum protocols secure against quantum covert adversaries. Such adversaries can deviate arbitrarily provided that their deviation is not detected. As an application of the QC-CC we give a protocol for securely performing two-party quantum computation with classical input/output. As basis we use secure delegated quantum computing (Broadbent et al 2009), and in particular the garbled quantum computation of (Kashefi et al 2016) that is secure against only a weak specious adversaries, defined in (Dupuis et al 2010). A unique property of these protocols is the separation between classical and quantum communications and the asymmetry between client and server, which enables us to sidestep the quantum rewinding issues. This opens the prospect of using the QC-CC to other quantum protocols with this separation. In our proof of security we adapt and use (at different parts) two quantum rewinding techniques, namely Watrous' oblivious q-rewinding (Watrous 2009) and Unruh's special q-rewinding (Unruh 2012). Our protocol achieves the same functionality as in previous works (e.g. Dupuis et al 2012), however using the QC-CC technique on the protocol from (Kashefi et al 2016) leads to the following key improvements: (i) only one-way offline quantum communication is necessary , (ii) only one party (server) needs to have involved quantum technological abilities, (iii) only minimal extra cryptographic primitives are required, namely one oblivious transfer for each input bit and quantum-safe commitments.

Unconditionally secure quantum coin flipping

Protocols for Quantum Weak Coin Flipping

Tight bounds for classical and quantum coin flipping

Experimental cheat-sensitive quantum weak coin flipping

Quantum Bit Escrow

A proposal for founding mistrustful quantum cryptography on coin tossing

Quantum key distribution based on orthogonal states allows secure quantum bit commitment

Unconditionally Secure Quantum Coin Tossing via Entanglement Swapping

Quantum Bit Commitment Protocol Based on Counterfactual Quantum Cryptography

Improving device-independent weak coin flipping protocols

Semi-Loss-Tolerant Strong Coin Flipping Protocol Using EPR Pairs

Fully Distrustful Quantum Cryptography

Security bound of cheat sensitive quantum bit commitment

Quantum Game—Research on “PQ” Problem

An optical implementation of quantum bit commitment using infinite-dimensional systems

Optimal bounds for quantum bit commitment

Variable Bias Coin Tossing

Simple, near-optimal quantum protocols for die-rolling

Measurement-device-independent quantum coin tossing

The Quantum Cut-and-Choose Technique and Quantum Two-Party Computation

Probabilistic versions of Quantum Private Queries