Quantum-safe Cryptographic protocols

量子安全加密协议

• 批准号: RGPIN-2014-04698
• 负责人: Crépeau, Claude
• 金额: $ 1.46万
• 依托单位: McGill University
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2017
• 资助国家: 加拿大
• 起止时间: 2017-01-01 至 2018-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=634805
• 关键词: Quantum; safe; Cryptographic; protocols

While physical implementation of a quantum computer still seems far away, the perspective of such a realization is so profound to the world of cryptography that it is worth considering already what this science will become after the construction of a quantum computer. The study of Quantum-safe (aka Post-Quantum) cryptographic tools and protocols follow from the belief that we must start now to prepare for this future.Quantum-Safe Oblivious Transfer and Fully Homomorphic Encryption*******************************************************In the classical world there used to be very general techniques to achieve Oblivious Transfer from various cryptographic assumption. In the Quantum-safe cryptographic world we have no such things: several techniques have been proposed to obtain Quantum-safe Oblivious Transfer but no general technique has emerged yet. The search for such a general approach will be one objective of our research. We will also consider the relation between Oblivious Transfer and the related task of Fully Homomorphic Encryption as implemented under the Learning with error assumption or the Approximate Integer GCD assumption. We would like to show that in the quantum world OT is inherently easier to achieve than FHE.Interactive Hashing and Statistical Zero-Knowledge Arguments**************************************************Another specific target is to study a powerful tool to construct secure protocols known as "Interactive Hashing". This tool was used in the classical setting both in the information theoretical and computational framework. Currently, none of the proofs of security of protocols involving interactive hashing is valid in the quantum setting. We will develop new techniques to establish security proofs in the quantum world. We hope to achieve the same result as in the classical world: It is possible to build statistical zero-knowledge arguments for NP under the sole assumption that a quantum one-way function exists.Non-Interactive Quantum-Safe Zero-Knowledge Proofs********************************************Another classical cryptographic situation that is no longer available in the Quantum-safe world, is the primitive of Non-Interactive Zero-Knowledge protocols under computational assumptions. Such protocols have been proposed for prefect or statistical Non-Interactive Zero-Knowledge proofs under no computational assumption (although using quantum communication to achieve that). However, it does not seem to apply to situations where only Computational Zero-Knowledge is achievable (for NP-complete languages for example) or where the soundness of the proof system is only valid because a certain computational assumption cannot be broken (Perfect or Statistical Zero-Knowledge Arguments).This research program will contain theoretical work only but will produce significant training of HQPs.

虽然量子计算机的物理实现似乎还很遥远，但这种实现的前景对密码学世界来说是如此深刻，以至于值得考虑在构建量子计算机后这门科学将变成什么样子。对量子安全（又名后量子）加密工具和协议的研究源于这样一种信念：我们必须从现在开始为未来做好准备。量子安全的不经意传输和完全同态加密************ **************************************************在古典世界里曾经是从各种密码学假设实现不经意转移的非常通用的技术。在量子安全密码世界中，我们没有这样的东西：已经提出了几种技术来获得量子安全的不经意传输，但尚未出现通用技术。寻找这样一种通用方法将是我们研究的目标之一。我们还将考虑在错误学习假设或近似整数 GCD 假设下实现的不经意转移与完全同态加密的相关任务之间的关系。我们想证明，在量子世界中，OT 本质上比 FHE 更容易实现。交互式哈希和统计零知识论证************************ **************************另一个具体目标是研究一种强大的工具来构建称为“交互式哈希”的安全协议。该工具在信息理论和计算框架的经典环境中使用。目前，涉及交互式哈希的协议的安全性证明在量子环境中都无效。我们将开发新技术在量子世界中建立安全证明。我们希望达到与经典世界相同的结果：在量子单向函数存在的唯一假设下，可以为 NP 建立统计零知识论证。非交互式量子安全零知识证明** ******************************************另一种经典的密码学情况已不再存在在量子安全世界中可用，是计算假设下非交互式零知识协议的原语。此类协议已被提议用于在没有计算假设的情况下完美或统计的非交互式零知识证明（尽管使用量子通信来实现这一点）。然而，它似乎不适用于只能实现计算零知识的情况（例如，对于 NP 完全语言），或者证明系统的健全性仅因某个计算假设无法被打破而有效（完美或统计假设）。零知识论据）。该研究计划仅包含理论工作，但将为 HQP 提供重要的培训。