Abstract:In the quantum computation verification problem, a quantum server wants to convince a client that the output of evaluating a quantum circuit $C$ is some result that it claims. This problem is considered very important both theoretically and practically in quantum computation [<a class="link-https" data-arxiv-id="1709.06984" href="https://arxiv.org/abs/1709.06984">arXiv:1709.06984</a>], [<a class="link-https" data-arxiv-id="1704.04487" href="https://arxiv.org/abs/1704.04487">arXiv:1704.04487</a>], [<a class="link-https" data-arxiv-id="1209.0449" href="https://arxiv.org/abs/1209.0449">arXiv:1209.0449</a>]. The client is considered to be limited in computational power, and one desirable property is that the client can be completely classical, which leads to the classical verification of quantum computation (CVQC) problem. In terms of the total time complexity, the fastest single-server CVQC protocol so far has complexity $O(poly(\kappa)|C|^3)$ where $|C|$ is the size of the circuit to be verified and $\kappa$ is the security parameter, given by Mahadev [<a class="link-https" data-arxiv-id="1804.01082" href="https://arxiv.org/abs/1804.01082">arXiv:1804.01082</a>]. In this work, by developing new techniques, we give a new CVQC protocol with complexity $O(poly(\kappa)|C|)$, which is significantly faster than existing protocols. Our protocol is secure in the quantum random oracle model [<a class="link-https" data-arxiv-id="1008.0931" href="https://arxiv.org/abs/1008.0931">arXiv:1008.0931</a>] assuming the existence of noisy trapdoor claw-free functions [<a class="link-https" data-arxiv-id="1804.00640" href="https://arxiv.org/abs/1804.00640">arXiv:1804.00640</a>], which are both extensively used assumptions in quantum cryptography. Along the way, we also give a new classical channel remote state preparation protocol for states in $\{|+_\theta\rangle=\frac{1}{\sqrt{2}}(|0\rangle+e^{i\theta\pi/4}|1\rangle):\theta\in \{0,1\cdots 7\}\}$, another basic primitive in quantum cryptography. Our protocol allows for parallel verifiable preparation of $L$ independently random states in this form (up to a constant overall error and a possibly unbounded server-side simulator), and runs in only $O(poly(\kappa)L)$ time and constant rounds; for comparison, existing works (even for possibly simpler state families) all require very large or unestimated time and round complexities [<a class="link-https" data-arxiv-id="1904.06320" href="https://arxiv.org/abs/1904.06320">arXiv:1904.06320</a>][<a class="link-https" data-arxiv-id="1904.06303" href="https://arxiv.org/abs/1904.06303">arXiv:1904.06303</a>][<a class="link-https" data-arxiv-id="2201.13445" href="https://arxiv.org/abs/2201.13445">arXiv:2201.13445</a>][<a class="link-https" data-arxiv-id="2201.13430" href="https://arxiv.org/abs/2201.13430">arXiv:2201.13430</a>].

Linear gate bounds against natural functions for position-verification

Code-routing: a new attack on position verification

Efficient Experimental Verification of Quantum Gates with Local Operations

Rank lower bounds on non-local quantum computation

Efficient Verification of Quantum Gates with Local Operations

Relating non-local quantum computation to information theoretic cryptography

Perfect cheating is impossible for single-qubit position verification

Classical Verification of Quantum Measurement for the Computational Basis and the XY-plane Basis

Towards practical quantum position verification

Quantum Logspace Computations are Verifiable

Continuous-variable Quantum Position Verification secure against entangled attackers

Verifier-on-a-Leash: new schemes for verifiable delegated quantum computation, with quasilinear resources

Classical Verification of Quantum Computations in Linear Time

Short Proofs of Linear Growth of Quantum Circuit Complexity

Classical certification of quantum gates under the dimension assumption

Robust Fitting on a Gate Quantum Computer

Single-qubit loss-tolerant quantum position verification protocol secure against entangled attackers

Certified Randomness implies Secure Classical Position-Verification

Quadratic Lower bounds on the Approximate Stabilizer Rank: A Probabilistic Approach

Quantum Analog of Shannon's Lower Bound Theorem

Matchgates and classical simulation of quantum circuits