Unforgeable Quantum Encryption

Abstract

We study the problem of encrypting and authenticating quantum data in the presence of adversaries making adaptive chosen plaintext and chosen ciphertext queries. Classically, security games use string copying and comparison to detect adversarial cheating in such scenarios. Quantumly, this approach would violate no-cloning. We develop new techniques to overcome this problem: we use entanglement to detect cheating, and rely on recent results for characterizing quantum encryption schemes. We give definitions for (i.) ciphertext unforgeability , (ii.) indistinguishability under adaptive chosen-ciphertext attack, and (iii.) authenticated encryption. The restriction of each definition to the classical setting is at least as strong as the corresponding classical notion: (i) implies INT-CTXT, (ii) implies IND-CCA2, and (iii) implies AE. All of our new notions also imply QIND-CPA privacy. Combining one-time authentication and classical pseudorandomness, we construct schemes for each of these new quantum security notions, and provide several separation examples. Along the way, we also give a new definition of one-time quantum authentication which, unlike all previous approaches, authenticates ciphertexts rather than plaintexts.

22+2 pages, 1 figure. v3: error in the definition of QIND-CCA2 fixed, some proofs related to QIND-CCA2 clarified

References in corpus (5)

• Coding Theorem and Strong Converse for Quantum Channels
• Interactive Proofs For Quantum Computations
• Unforgeable Quantum Encryption
• Efficient Simulation for Quantum Message Authentication
• The Universal Composable Security of Quantum Message Authentication with Key Recyling

Cited by in corpus (13)

• Security in Quantum Cryptography
• Quantum Physical Unclonable Functions: Possibilities and Impossibilities
• Quantum-secure message authentication via blind-unforgeability
• Unforgeable Quantum Encryption
• Efficient simulation of random states and random unitaries
• Composable and Finite Computational Security of Quantum Message Transmission
• A Unified Framework For Quantum Unforgeability
• Quantum Multi-Solution Bernoulli Search with Applications to Bitcoin's Post-Quantum Security
• Learning Quantum Processes with Quantum Statistical Queries
• Can you sign a quantum state?
• How to Sign Quantum Messages
• Non-malleability for quantum public-key encryption
• Quantum Indistinguishability for Public Key Encryption