Abstract:Zero-Knowledge (ZK) protocols have been intensely studied due to their fundamental importance and versatility. However, quantum information's inherent differences significantly alter the landscape, necessitating a re-examination of ZK designs. A crucial aspect is round complexity, linked to $\textit{simulation}$, which forms the foundation of ZK definition and security proofs. In the $\textit{post-quantum}$ setting, where honest parties and channels are classical but adversaries quantum, Chia et al. [FOCS'21] showed constant-round $\textit{black-box-simulatable}$ ZK arguments (BBZK) for $\mathbf{NP}$ are impossible unless $\mathbf{NP} \subseteq \mathbf{BQP}$. But this problem remains open when all parties and communication are quantum. Indeed, this problem interests the broader theory of quantum computing. Investigating how quantum power alters tasks like the $\textit{unconditional}$ security of QKD and incorporating OT in MiniQCrypt has been crucial. Moreover, quantum communication has enabled round compression for commitments and interactive arguments. Along this line, understanding if quantum computing could fundamentally change ZK protocols is vital. We resolved this problem by proving that only languages in $\mathbf{BQP}$ admit constant-round $\textit{fully-quantum}$ BBZK. This result holds significant implications. Firstly, it illuminates the nature of quantum zero-knowledge and provides valuable insights for designing future protocols in the quantum realm. Secondly, it relates ZK round complexity with the intriguing problem of $\mathbf{BQP}$ vs $\mathbf{QMA}$, which is out of the reach of previous analogue impossibility results in the classical or post-quantum setting. Lastly, it justifies the need for the $\textit{non-black-box}$ simulation techniques or the relaxed security notions employed in existing constant-round fully-quantum BBZK protocols.

Ideal Functionality and Sequential Composition of Zero-knowledge

Practical zero-knowledge arguments from ∑-protocols

Regarding Classification of n-sharing of Multivariate Mappings over Finite Fields and One NSUCrypto'2019 Olympiad Problem

Practical Zero-Knowledge Arguments from Σ-Protocols

Resettable Zero-Knowledge In The Weak Public-Key Model

Concurrent/Resettable Zero-Knowledge with Concurrent Soundness in the Bare Public-Key Model and Its Applications.

Lightweight Zero-Knowledge Proofs for Crypto-Computing Protocols.

Interactive zero-knowledge with restricted random oracles

Improvements on Non-Interactive Zero-Knowledge Proof Systems Related to Quadratic Residuosity Languages.

The Black-Box Simulation Barrier Persists in a Fully Quantum World

Concurrently Knowledge-Extractable Resettable-ZK in the Bare Public-Key Model

Implementation and Security Test of Zero-Knowledge Protocols on SSI Blockchain

Formal security analysis of MPC-in-the-head zero-knowledge protocols

Reduction Zero-Knowledge.

Generic yet Practical ( Statistical ) Zero-Knowledge from any Public-Coin HVZK ∗ †

A Black-Box Approach to Post-Quantum Zero-Knowledge in Constant Rounds

Oblivious Transfer from Zero-Knowledge Proofs, or How to Achieve Round-Optimal Quantum Oblivious Transfer and Zero-Knowledge Proofs on Quantum States

Universally Composable Identity-Based Signature

Generic and Practical Resettable Zero-Knowledge in the Bare Public-Key Model

GUC-Secure Commitments Via Random Oracles: New Impossibility and Feasibility.

Zero-Knowledge MIPs using Homomorphic Commitment Schemes