Abstract:Broadbent and Islam (TCC '20) proposed a quantum cryptographic primitive called quantum encryption with certified deletion. In this primitive, a receiver in possession of a quantum ciphertext can generate a classical certificate that the encrypted message is deleted. Although their construction is information-theoretically secure, it is limited to the setting of one-time symmetric key encryption (SKE), where a sender and receiver have to share a common key in advance and the key can be used only once. Moreover, the sender has to generate a quantum state and send it to the receiver over a quantum channel in their construction. Although deletion certificates are privately verifiable, which means a verification key for a certificate has to be kept secret, in the definition by Broadbent and Islam, we can also consider public verifiability. In this work, we present various constructions of encryption with certified deletion. - Quantum communication case: We achieve (reusable-key) public key encryption (PKE) and attribute-based encryption (ABE) with certified deletion. Our PKE scheme with certified deletion is constructed assuming the existence of IND-CPA secure PKE, and our ABE scheme with certified deletion is constructed assuming the existence of indistinguishability obfuscation and one-way function. These two schemes are privately verifiable. - Classical communication case: We also achieve PKE with certified deletion that uses only classical communication. We give two schemes, a privately verifiable one and a publicly verifiable one. The former is constructed assuming the LWE assumption in the quantum random oracle model. The latter is constructed assuming the existence of one-shot signatures and extractable witness encryption.

A Comparative Study of Quantum and Classical Deletion

Quantum deletion: Beyond the no-deletion principle

Logically reversible measurements: Construction and application

Quantum Deletion Codes derived from Classical Deletion Codes (Extended Abstract)

Quantum Encryption with Certified Deletion, Revisited: Public Key, Attribute-Based, and Classical Communication

Quantum Deletion of Copies of Two Non-orthogonal Quantum States Via Weak Measurement

The Comparison Between Quantum Information and Classical Information

Experimental Quantum Deletion in an NMR Quantum Information Processor

Filling the gap between quantum no-cloning and classical duplication

Why Can We Copy Classical Information?

Quantum erasure of decoherence

High-Dimensional Quantum Certified Deletion

How to Delete Without a Trace: Certified Deniability in a Quantum World

Classically Replaceable Operations

Quantum Deletion Codes Derived From Quantum Reed-Solomon Codes

Logical Reversibility and Physical Reversibility in Quantum Measurement

Experimental Quantum Data Locking

IMPOSSIBILITY OF PERFECT QUANTUM SEALING OF CLASSICAL INFORMATION

An operational distinction between quantum entanglement and classical non-separability

Comment on "A short impossibility proof of quantum bit commitment"

Can error in quantum deletion machines be beneficial for deletion?