We show that a simple eavesdropper listening in on classical communication between potentially entangled quantum parties will eventually be able to impersonate any of the parties. Furthermore, the attack is efficient if one-way puzzles do not exist. As a direct consequence, one-way puzzles are implied by reusable authentication schemes over classical channels with quantum pre-shared secrets that are potentially evolving. As an additional application, we show that any quantum money scheme that can be verified through only classical queries to any oracle cannot be information-theoretically secure. This significantly generalizes the prior work by Ananth, Hu, and Yuen (ASIACRYPT'23) where they showed the same but only for the specific case of random oracles. Therefore, verifying black-box constructions of quantum money inherently requires coherently evaluating the underlying cryptographic tools, which may be difficult for near-term quantum devices.
翻译:我们证明,一个简单的窃听者通过监听潜在纠缠量子方之间的经典通信,最终能够模拟任何一方。此外,如果单向谜题不存在,该攻击是高效的。作为直接推论,单向谜题的存在性可由具有潜在演化的量子预共享秘密、通过经典信道实现的可重用认证方案所蕴含。作为另一项应用,我们证明任何仅通过经典查询至任意预言机即可验证的量子货币方案,均无法实现信息论安全性。这显著推广了Ananth、Hu和Yuen(ASIACRYPT'23)的先前工作,他们仅针对随机预言机这一特定情况证明了相同结论。因此,验证量子货币的黑盒构造本质上需要对底层密码学工具进行相干评估,这对近期量子设备而言可能具有挑战性。