Abstract:Randomized encoding is a powerful cryptographic primitive with various applications such as secure multiparty computation, verifiable computation, parallel cryptography, and complexity lower bounds. Intuitively, randomized encoding $\hat{f}$ of a function $f$ is another function such that $f(x)$ can be recovered from $\hat{f}(x)$, and nothing except for $f(x)$ is leaked from $\hat{f}(x)$. Its quantum version, quantum randomized encoding, has been introduced recently [Brakerski and Yuen, arXiv:2006.01085]. Intuitively, quantum randomized encoding $\hat{F}$ of a quantum operation $F$ is another quantum operation such that, for any quantum state $\rho$, $F(\rho)$ can be recovered from $\hat{F}(\rho)$, and nothing except for $F(\rho)$ is leaked from $\hat{F}(\rho)$. In this paper, we show three results. First, we show that if quantum randomized encoding of BB84 state generations is possible with an encoding operation $E$, then a two-round verification of quantum computing is possible with a classical verifier who can additionally do the operation $E$. One of the most important goals in the field of the verification of quantum computing is to construct a verification protocol with a verifier as classical as possible. This result therefore demonstrates a potential application of quantum randomized encoding to the verification of quantum computing: if we can find a good quantum randomized encoding (in terms of the encoding complexity), then we can construct a good verification protocol of quantum computing. Our second result is, however, to show that too good quantum randomized encoding is impossible: if quantum randomized encoding for the generation of even simple states (such as BB84 states) is possible with a classical encoding operation, then the no-cloning is violated. Finally, we consider a natural modification of blind quantum computing protocols in such a way that the server gets the output like quantum randomized encoding. We show that the modified protocol is not secure.

Verification for measurement-only blind quantum computing

Measurement-only verifiable blind quantum computing with quantum input verification

Blind quantum computation protocol in which Alice only makes measurements

Blind topological measurement-based quantum computation

Verification of Blind Quantum Computation with Entanglement Witnesses

Robust and efficient verification of graph states in blind measurement-based quantum computation

Blind quantum computation with completely classical client and a trusted center

Blind quantum computation where a user only performs single-qubit gates

Hardware requirements for trapped-ion based verifiable blind quantum computing with a measurement-only client

Parallel self-testing for device-independent verifiable blind quantum computation.

Verifiable blind quantum computation over collective-noise

Client-friendly Continuous-Variable Blind and Verifiable Quantum Computing

Blind quantum computation using the central spin Hamiltonian

Verification of Quantum Computations without Trusted Preparations or Measurements

Experimental Blind Quantum Computing for a Classical Client.

Public verifiable measurement-only blind quantum computation based on entanglement witnesses

Universal Single-Server Blind Quantum Computation for Classical Clients

Efficient Post-Quantum Secured Blind Computation

Towards experimental classical verification of quantum computation

Verifiable Blind Quantum Computing with Trapped Ions and Single Photons

Quantum randomized encoding, verification of quantum computing, no-cloning, and blind quantum computing