Abstract:The application and analysis of the Cut-and-Choose technique in protocols secure against quantum adversaries is not a straightforward transposition of the classical case, among other reasons due to the difficulty to use rewinding in the quantum realm. We introduce a Quantum Computation Cut-and-Choose (QC-CC) technique which is a generalisation of the classical Cut-and-Choose in order to build quantum protocols secure against quantum covert adversaries. Such adversaries can deviate arbitrarily provided that their deviation is not detected. As an application of the QC-CC we give a protocol for securely performing two-party quantum computation with classical input/output. As basis we use secure delegated quantum computing (Broadbent et al 2009), and in particular the garbled quantum computation of (Kashefi et al 2016) that is secure against only a weak specious adversaries, defined in (Dupuis et al 2010). A unique property of these protocols is the separation between classical and quantum communications and the asymmetry between client and server, which enables us to sidestep the quantum rewinding issues. This opens the prospect of using the QC-CC to other quantum protocols with this separation. In our proof of security we adapt and use (at different parts) two quantum rewinding techniques, namely Watrous' oblivious q-rewinding (Watrous 2009) and Unruh's special q-rewinding (Unruh 2012). Our protocol achieves the same functionality as in previous works (e.g. Dupuis et al 2012), however using the QC-CC technique on the protocol from (Kashefi et al 2016) leads to the following key improvements: (i) only one-way offline quantum communication is necessary , (ii) only one party (server) needs to have involved quantum technological abilities, (iii) only minimal extra cryptographic primitives are required, namely one oblivious transfer for each input bit and quantum-safe commitments.

Resonance contributions to HBT correlation radii

Insecurity of Quantum Two-Party Computation with Applications to Cheat-Sensitive Protocols and Oblivious Transfer Reductions

Probabilistic versions of Quantum Private Queries

Encryption with Quantum Public Keys

Quantum public-key algorithms to encrypt and authenticate quantum messages with information-theoretic security

Generalized Uncertainty Principles for Quantum Cryptography

Quantum cryptography -- an information theoretic security

Privacy and correctness trade-offs for information-theoretically secure quantum homomorphic encryption

Incomplete quantum oblivious transfer with perfect one-sided security

Superselection rules and quantum protocols

On Statistically-Secure Quantum Homomorphic Encryption

Limitations on information theoretically secure quantum homomorphic encryption

Security of "Counterfactual Quantum Cryptography"

Entropy Accumulation under Post-Quantum Cryptographic Assumptions

Quantum Non-malleability and Authentication

Finding Collisions in a Quantum World: Quantum Black-Box Separation of Collision-Resistance and One-Wayness

The Quantum Cut-and-Choose Technique and Quantum Two-Party Computation

Breaking barriers in two-party quantum cryptography via stochastic semidefinite programming

A proposal for founding mistrustful quantum cryptography on coin tossing

Quantum Copy-Protection and Quantum Money

Computational Security of Quantum Encryption