On the Computational Hardness Needed for Quantum Cryptography
summary
Claims that EFI pairs — efficiently samplable states that are statistically far but computationally indistinguishable — are necessary and broadly sufficient for quantum cryptography: the work builds EFI from minimal commitment variants, from semi‑honest oblivious transfer derived from general commitments, and from any nontrivial MPC, and shows how to get QCZK for all of QIP from any EFI. Constructions use canonical commit-by-running-Gb, trace‑distance binding, and MPC composition; several amplification and separations remain open.
AI-written summary · about
chapters (24)
- 0:00Intro
- 0:42One-way functions: A minimal primitive for computational cryptography
- 3:18A dichotomy for cryptographic primitives
- 6:00Come quantum information processing...
- 7:31Quantum information: A brave new world...
- 11:03Are PRSG's minimal for quantum crypto?
- 12:58A dichotomy for quantum cryptography?
- 15:57EFI pairs (of quantum states)
- 23:41EFI & quantum cryptography
- 24:52Quantum bit commitment
- 26:37Bit commitment from EFI [Yan22]
- 29:02EFI from general commitments
- 30:28EFI from weak commitment: roadmap
- 31:28Oblivious transfer (semi-honest receiver)
- 32:25EFI from semi-honest oblivious transfer
- 34:30Oblivious transfer from commitment
- 35:051-round honest oblivious transfer
- 37:322-round semi-honest oblivious transfer
- 38:18Secure multiparty computation
- 39:46From EFIs to Zero knowledge proofs
- 43:02EFIs from Zero knowledge proofs
- 44:07Summary: Minimality of EFI
- 44:33Candidate EFI from random quantum circuits
- 46:28Open problems / musings
related talks
20mOn the computational hardness needed for quantum cryptography
57mThe Cryptographic Lens: Visions of our Past and Future
01h 15mTo interact or not to interact: Cryptographic proof systems and the Fiat-Shamir heuristic
49mQuantum Cryptanalysis
01h 13mQuantum 3
01h 05mNew Quantum Cryptographic Primitives I
25mCrypto's Quantum Leap: Blockchain vs Quantum Computer
31mMachine-checking post-quantum cryptography
