The knowledge complexity of interactive proof systems
SIAM Journal on Computing
On the power of two-point based sampling
Journal of Complexity
Quantum lower bounds by polynomials
Journal of the ACM (JACM)
Quantum computation and quantum information
Quantum computation and quantum information
Modern Cryptography, Probabilistic Proofs, and Pseudorandomness
Modern Cryptography, Probabilistic Proofs, and Pseudorandomness
imits on the Power of Quantum Statistical Zero-Knowledge
FOCS '02 Proceedings of the 43rd Symposium on Foundations of Computer Science
On the Composition of Zero-Knowledge Proof Systems
ICALP '90 Proceedings of the 17th International Colloquium on Automata, Languages and Programming
Zero-knowledge against quantum attacks
Proceedings of the thirty-eighth annual ACM symposium on Theory of computing
Hi-index | 0.00 |
Let L be a language decided by a constant-round quantum Arthur-Merlin (QAM) proto-col with negligible soundness error and all but possibly the last message being classical.We prove that if this protocol is zero knowledge with a black-box, quantum simulatorS, then L ∈ BQP. Our result also applies to any language having a three-round quan-tum interactive proof (QIP), with all but possibly the last message being classical, withnegligible soundness error and a black-box quantum simulator. These results in particular make it unlikely that certain protocols can be composed inparallel in order to reduce soundness error, while maintaining zero knowledge with ablack-box quantum simulator. They generalize analogous classical results of Goldreichand Krawczyk (1990). Our proof goes via a reduction to quantum black-box search. We show that the exis-tence of a black-box quantum simulator for such protocols when L ∉ BQP would implyan impossibly-good quantum search algorithm.