On the computational hardness needed for quantum cryptography
summary
Defines EFI pairs (efficiently sampleable, statistically far but quantumly indistinguishable mixed states) and shows they imply commitments, oblivious transfer, quantum MPC, and quantum computational zero‑knowledge; conversely, weakened versions of those primitives (no statistical security, semi‑honest only, nontrivial functionality) imply EFI. Uses mixed‑state trace distance, quantum pseudorandomness and oracle separations to argue EFI does not black‑box yield classical one‑way functions, and leaves open constructing pseudorandom states from EFI and comparing EFI to quantum one‑wayness.
AI-written summary · about
chapters (10)
- 0:00Intro
- 0:20Root of classical crypto: one-way functions
- 1:40Landscape of classical cryptography
- 3:38Quantum changes landscape dramatically
- 7:12Goldreich EFID pairs: non-trivial computational indistinguishability
- 9:16EFI pairs (of quantum states)
- 10:30What is so different about EFI vs EFID?
- 14:10Minimality of EFI in a quantum world
- 16:03Summary
- 17:56Open questions
related talks
48mOn the Computational Hardness Needed for Quantum Cryptography
48mBlack-Box Separations in Quantum Cryptography
01h 26mQuantum FHE
01h 13mQuantum 3
59mAn Introduction to Quantum Obfuscation
57mThe Cryptographic Lens: Visions of our Past and Future
34mQuantum Minimalism
12mOne-Way Functions Imply Secure Computation in a Quantum World
