Abstract:The application and analysis of the Cut-and-Choose technique in protocols secure against quantum adversaries is not a straightforward transposition of the classical case, among other reasons due to the difficulty to use rewinding in the quantum realm. We introduce a Quantum Computation Cut-and-Choose (QC-CC) technique which is a generalisation of the classical Cut-and-Choose in order to build quantum protocols secure against quantum covert adversaries. Such adversaries can deviate arbitrarily provided that their deviation is not detected. As an application of the QC-CC we give a protocol for securely performing two-party quantum computation with classical input/output. As basis we use secure delegated quantum computing (Broadbent et al 2009), and in particular the garbled quantum computation of (Kashefi et al 2016) that is secure against only a weak specious adversaries, defined in (Dupuis et al 2010). A unique property of these protocols is the separation between classical and quantum communications and the asymmetry between client and server, which enables us to sidestep the quantum rewinding issues. This opens the prospect of using the QC-CC to other quantum protocols with this separation. In our proof of security we adapt and use (at different parts) two quantum rewinding techniques, namely Watrous' oblivious q-rewinding (Watrous 2009) and Unruh's special q-rewinding (Unruh 2012). Our protocol achieves the same functionality as in previous works (e.g. Dupuis et al 2012), however using the QC-CC technique on the protocol from (Kashefi et al 2016) leads to the following key improvements: (i) only one-way offline quantum communication is necessary , (ii) only one party (server) needs to have involved quantum technological abilities, (iii) only minimal extra cryptographic primitives are required, namely one oblivious transfer for each input bit and quantum-safe commitments.

Experimental cheat-sensitive quantum weak coin flipping

Protocols for Quantum Weak Coin Flipping

Unconditionally secure quantum coin flipping

Semi-Loss-Tolerant Strong Coin Flipping Protocol Using EPR Pairs

Experimental quantum fingerprinting with weak coherent pulses

Measurement-device-independent quantum coin tossing

Improving device-independent weak coin flipping protocols

Tight bounds for classical and quantum coin flipping

Counterfactual Quantum Cryptography Based on Weak Coherent States

Experimental Fault-Tolerant Quantum Cryptography in a Decoherence-Free Subspace

Experimental Quantum Error Detection

An Integrated Quantum Secure Communication System

Quantum Cryptography: Theory and Practice

The Quantum Cut-and-Choose Technique and Quantum Two-Party Computation

Optimal bounds for quantum bit commitment

Quantum Hacking of a Continuous-Variable Quantum-Key-distribution System Using a Wavelength Attack

Quantum multi-secret sharing scheme with access structures and cheat identification

On the composable security of weak coin flipping

Quantum Hacking on Quantum Key Distribution using Homodyne Detection

A proposal for founding mistrustful quantum cryptography on coin tossing

Lower Bounds for Quantum Oblivious Transfer