Quantum Merkle Trees

Lijie Chen,Ramis Movassagh
DOI: https://doi.org/10.22331/q-2024-06-18-1380
2024-06-19
Quantum
Abstract:Quantum 8, 1380 (2024). https://doi.org/10.22331/q-2024-06-18-1380 Committing to information is a central task in cryptography, where a party (typically called a prover) stores a piece of information (e.g., a bit string) with the promise of not changing it. This information can be accessed by another party (typically called the verifier), who can later learn the information and verify that it was not meddled with. Merkle trees [1] are a well-known construction for doing so in a succinct manner, in which the verifier can learn any part of the information by receiving a short proof from the honest prover. Despite its significance in classical cryptography, there was no quantum analog of the Merkle tree. A direct generalization using the Quantum Random Oracle Model (QROM) [2] does not seem to be secure. In this work, we propose the . It is based on what we call the (QHROM). In QHROM, both the prover and the verifier have access to a random quantum oracle and its inverse. Using the quantum Merkle tree, we propose a succinct quantum argument for the Gap- -Local-Hamiltonian problem. Assuming the Quantum PCP conjecture is true, this succinct argument extends to all of QMA. This work raises a number of interesting open research problems.
physics, multidisciplinary,quantum science & technology
What problem does this paper attempt to address?