Abstract:In this work, we study a generalization of hidden subspace states to hidden coset states (first introduced by Aaronson and Christiano [STOC '12]). This notion was considered independently by Vidick and Zhang [Eurocrypt '21], in the context of proofs of quantum knowledge from quantum money schemes. We explore unclonable properties of coset states and several applications: - We show that assuming indistinguishability obfuscation (iO), hidden coset states possess a certain direct product hardness property, which immediately implies a tokenized signature scheme in the plain model. Previously, it was known only relative to an oracle, from a work of Ben-David and Sattath [QCrypt '17]. - Combining a tokenized signature scheme with extractable witness encryption, we give a construction of an unclonable decryption scheme in the plain model. The latter primitive was recently proposed by Georgiou and Zhandry [ePrint '20], who gave a construction relative to a classical oracle. - We conjecture that coset states satisfy a certain natural (information-theoretic) monogamy-of-entanglement property. Assuming this conjecture is true, we remove the requirement for extractable witness encryption in our unclonable decryption construction, by relying instead on compute-and-compare obfuscation for the class of unpredictable distributions. This conjecture was later proved by Culf and Vidick in a follow-up work. - Finally, we give a construction of a copy-protection scheme for pseudorandom functions (PRFs) in the plain model. Our scheme is secure either assuming iO, OWF, and extractable witness encryption, or assuming iO, OWF, compute-and-compare obfuscation for the class of unpredictable distributions, and the conjectured monogamy property mentioned above. This is the first example of a copy-protection scheme with provable security in the plain model for a class of functions that is not evasive.

Building Usable Witness Encryption

Homomorphic Witness Encryption and Its Applications

How to build time-lock encryption

Secrecy by Witness-Functions under Equational Theories

Multiqubit Entanglement Witness

Multipartite Entanglement Witnesses

Tempora-Fusion: Time-Lock Puzzle with Efficient Verifiable Homomorphic Linear Combination

An Exponential Reduction in Training Data Sizes for Machine Learning Derived Entanglement Witnesses

Verifiable Homomorphic Linear Combinations in Multi-Instance Time-Lock Puzzles

Slicer: Verifiable, Secure and Fair Search over Encrypted Numerical Data Using Blockchain

A new encryption scheme for multivariate quadratic systems.

Transitive Signatures Based on Bilinear Maps

Practical Verifiable Time-Lock Puzzle: Pre- and Post-Solution Verification

A Provable Encrypted Ring Signature from Bilinear Pairings

HMFEv - An Efficient Multivariate Signature Scheme.

Witness Generation for JSON Schema

CSI-Otter: isogeny-based (partially) blind signatures from the class group action with a twist

New cryptographic constructions using generalized LWE

Correctness Witnesses for Concurrent Programs: Bridging the Semantic Divide with Ghosts (Extended Version)

Hidden Cosets and Applications to Unclonable Cryptography

A Broadband Subliminal Channel in Signatures Without Sharing the Signing Key