Quantifying the Leakage of Quantum Protocols for Classical Two-Party Cryptography
arXiv:1501.01549 · doi:10.1142/S0219749914500415
Abstract
We study quantum protocols among two distrustful parties. By adopting a rather strict definition of correctness - guaranteeing that honest players obtain their correct outcomes only - we can show that every strictly correct quantum protocol implementing a non-trivial classical primitive necessarily leaks information to a dishonest player. This extends known impossibility results to all non-trivial primitives. We provide a framework for quantifying this leakage and argue that leakage is a good measure for the privacy provided to the players by a given protocol. Our framework also covers the case where the two players are helped by a trusted third party. We show that despite the help of a trusted third party, the players cannot amplify the cryptographic power of any primitive. All our results hold even against quantum honest-but-curious adversaries who honestly follow the protocol but purify their actions and apply a different measurement at the end of the protocol. As concrete examples, we establish lower bounds on the leakage of standard universal two-party primitives such as oblivious transfer.
38 pages, completely supersedes arXiv:0902.4036
References in corpus (13)
- Unconditionally secure quantum bit commitment is impossible
- Non-local correlations as an information theoretic resource
- Is Quantum Bit Commitment Really Possible?
- Insecurity of Quantum Secure Computations
- Degrees of concealment and bindingness in quantum bit commitment protocols
- Inequalities for Quantum Entropy: A Review with Conditions for Equality
- Reexamination of Quantum Bit Commitment: the Possible and the Impossible
- Distinguishability of States and von Neumann Entropy
- Complete Insecurity of Quantum Protocols for Classical Two-Party Computation
- The Impossibility Of Secure Two-Party Classical Computation
- Possibility, Impossibility and Cheat-Sensitivity of Quantum Bit String Commitment
- A large family of quantum weak coin-flipping protocols
- On quantum and approximate privacy