论文标题
隐私和正确性权衡理论上的信息量子同构加密
Privacy and correctness trade-offs for information-theoretically secure quantum homomorphic encryption
论文作者
论文摘要
量子同构加密,可以直接在加密数据上通过服务器进行计算,是一个基本原始的,可以构建更复杂的量子加密协议。为了使这种构造可能是可能的,量子同构加密必须满足两个隐私属性:数据隐私,以确保输入数据是从服务器中私有的,并且电路隐私可确保计算后的密文不会显示出有关执行电路的任何其他信息,超出了计算本身的输出本身。虽然电路隐私在古典密码学上进行了充分研究,并且许多同构加密方案都可以配备它,但其量子类似物几乎没有受到关注。在这里,我们建立了具有信息理论安全性量子同态加密的电路隐私的定义。此外,我们减少了量子遗漏的转移到量子同态加密。通过使用这种减少,我们的工作可以为广泛的量子同构加密协议提供电路隐私,数据隐私和正确性之间的基本权衡,包括仅允许计算Clifford电路的方案。
Quantum homomorphic encryption, which allows computation by a server directly on encrypted data, is a fundamental primitive out of which more complex quantum cryptography protocols can be built. For such constructions to be possible, quantum homomorphic encryption must satisfy two privacy properties: data privacy which ensures that the input data is private from the server, and circuit privacy which ensures that the ciphertext after the computation does not reveal any additional information about the circuit used to perform it, beyond the output of the computation itself. While circuit privacy is well-studied in classical cryptography and many homomorphic encryption schemes can be equipped with it, its quantum analogue has received little attention. Here we establish a definition of circuit privacy for quantum homomorphic encryption with information-theoretic security. Furthermore, we reduce quantum oblivious transfer to quantum homomorphic encryption. By using this reduction, our work unravels fundamental trade-offs between circuit privacy, data privacy and correctness for a broad family of quantum homomorphic encryption protocols, including schemes that allow only the computation of Clifford circuits.