Tight Bounds for Inverting Permutations via Compressed Oracle Arguments

03/16/2021
by   Ansis Rosmanis, et al.
0

In his seminal work on recording quantum queries [Crypto 2019], Zhandry studied interactions between quantum query algorithms and the quantum oracle corresponding to random functions. Zhandry presented a framework for interpreting various states in the quantum space of the oracle that can be used to provide security proofs in quantum cryptography. In this paper, we introduce a similar interpretation for the case when the oracle corresponds to random permutations instead of random functions. Because both random functions and random permutations are highly significant in security proofs, we hope that the present framework will find applications in quantum cryptography. Additionally, we show how this framework can be used to prove that the success probability for a k-query quantum algorithm that attempts to invert a random N-element permutation is at most O(k^2/N).

READ FULL TEXT

page 1

page 2

page 3

page 4

research
11/23/2022

Quantum-Classical Tradeoffs in the Random Oracle Model

We study tradeoffs between quantum and classical queries for hybrid algo...
research
04/25/2019

Quantum Lazy Sampling and Game-Playing Proofs for Quantum Indifferentiability

Game-playing proofs constitute a powerful framework for classical crypto...
research
06/23/2023

On the Two-sided Permutation Inversion Problem

In the permutation inversion problem, the task is to find the preimage o...
research
10/22/2020

On the Compressed-Oracle Technique, and Post-Quantum Security of Proofs of Sequential Work

We revisit the so-called compressed oracle technique, introduced by Zhan...
research
10/28/2020

Tight adaptive reprogramming in the QROM

The random oracle model (ROM) enjoys widespread popularity, mostly becau...
research
12/28/2021

Quantum Merkle Trees

Commitment scheme is a central task in cryptography, where a party (typi...
research
08/21/2020

Probability and consequences of living inside a computer simulation

It is shown that under reasonable assumptions a Drake-style equation can...

Please sign up or login with your details

Forgot password? Click here to reset