Abstract:Recently, quantum computing experiments have for the first time exceeded the capability of classical computers to perform certain computations -- a milestone termed "quantum computational advantage." However, verifying the output of the quantum device in these experiments required extremely large classical computations. An exciting next step for demonstrating quantum capability would be to implement tests of quantum computational advantage with efficient classical verification, such that larger system sizes can be tested and verified. One of the first proposals for an efficiently-verifiable test of quantumness consists of hiding a secret classical bitstring inside a circuit of the class IQP, in such a way that samples from the circuit's output distribution are correlated with the secret (<a class="link-https" data-arxiv-id="0809.0847" href="https://arxiv.org/abs/0809.0847">arXiv:0809.0847</a>). The classical hardness of this protocol has been supported by evidence that directly simulating IQP circuits is hard, but the security of the protocol against other (non-simulating) classical attacks has remained an open question. In this work we demonstrate that the protocol is not secure against classical forgery. We describe a classical algorithm that can not only convince the verifier that the (classical) prover is quantum, but can in fact can extract the secret key underlying a given protocol instance. Furthermore, we show that the key extraction algorithm is efficient in practice for problem sizes of hundreds of qubits. Finally, we provide an implementation of the algorithm, and give the secret vector underlying the "$25 challenge" posted online by the authors of the original paper.

Towards practical quantum position verification

Making Existing Quantum Position Verification Protocols Secure Against Arbitrary Transmission Loss

Towards experimental classical verification of quantum computation

Perfect cheating is impossible for single-qubit position verification

Security of a Continuous-Variable based Quantum Position Verification Protocol

Single-qubit loss-tolerant quantum position verification protocol secure against entangled attackers

Loss-tolerant Quantum Secure Positioning with Weak Laser Sources.

Formal Verification of Quantum Protocols

Classical Verification of Quantum Measurement for the Computational Basis and the XY-plane Basis

Continuous-variable Quantum Position Verification secure against entangled attackers

Location-Dependent Communications using Quantum Entanglement

On the Role of Quantum Communication and Loss in Attacks on Quantum Position Verification

Secure and Robust Transmission and Verification of Unknown Quantum States in Minkowski Space

Foiling covert channels and malicious classical post-processing units in quantum key distribution

Forging quantum data: classically defeating an IQP-based quantum test

Quantum non-demolition measurement of nonlocal variables and its application in quantum authentication

Quantum Money with Classical Verification

How to Sign Quantum Messages

Simplified instantaneous non-local quantum computation with applications to position-based cryptography

A security framework for quantum key distribution implementations

Practical verification protocols for analog quantum simulators