Abstract:We propose an application for near-term quantum devices: namely, generating cryptographically certified random bits, to use (for example) in proof-of-stake cryptocurrencies. Our protocol repurposes the existing "quantum supremacy" experiments, based on random circuit sampling, that Google and USTC have successfully carried out starting in 2019. We show that, whenever the outputs of these experiments pass the now-standard Linear Cross-Entropy Benchmark (LXEB), under plausible hardness assumptions they necessarily contain $\Omega(n)$ min-entropy, where $n$ is the number of qubits. To achieve a net gain in randomness, we use a small random seed to produce pseudorandom challenge circuits. In response to the challenge circuits, the quantum computer generates output strings that, after verification, can then be fed into a randomness extractor to produce certified nearly-uniform bits -- thereby "bootstrapping" from pseudorandomness to genuine randomness. We prove our protocol sound in two senses: (i) under a hardness assumption called Long List Quantum Supremacy Verification, which we justify in the random oracle model, and (ii) unconditionally in the random oracle model against an eavesdropper who could share arbitrary entanglement with the device. (Note that our protocol's output is unpredictable even to a computationally unbounded adversary who can see the random oracle.) Currently, the central drawback of our protocol is the exponential cost of verification, which in practice will limit its implementation to at most $n\sim 60$ qubits, a regime where attacks are expensive but not impossible. Modulo that drawback, our protocol appears to be the only practical application of quantum computing that both requires a QC and is physically realizable today.

Optimality of Quantum Randomness Certification with Independent Devices

Tighter bound of quantum randomness certification for independent-devices scenario.

Enhancing Device-Independent Estimation of Quantum Randomness from Real Experimental Data

More Randomness from a Prepare-and-measure Scenario with Independent Devices

Extracting More Quantum Randomness with Non-Uniform Quantization

Investigating a Device Independence Quantum Random Number Generation

Semi-device-independent Randomness Certification Usingn→1quantum Random Access Codes

Security analysis and improvement of source independent quantum random number generators with imperfect devices

Certified Randomness from Untrusted Sources and Uncharacterized Measurements.

Experimental Certification of Random Numbers Via Quantum Contextuality.

Certified Randomness from Quantum Supremacy

Reduced Gap Between Observed and Certified Randomness for Semi-Device-independent Protocols

Measurement-device-independent quantum random number generation over 23 Mbps with imperfect single-photon sources

Randomness versus Nonlocality in Multi-input and Multi-output Quantum Scenario

Experimental measurement-device-independent quantum random number generation.

Necessary and Sufficient Condition for Randomness Certification from Incompatibility

Imperfection-insensitivity Quantum Random Number Generator with Untrusted Daily Illumination.

Increased Certification of Semi-device Independent Random Numbers using Many Inputs and More Postprocessing

Generalized time-bin quantum random number generator with uncharacterized devices

Experimental Fast Quantum Random Number Generation Using High-Dimensional Entanglement with Entropy Monitoring