On the Two-sided Permutation Inversion Problem

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Alagic, Gorjan, Bai, Chen, Poremba, Alexander, Shi, Kaiyan
Natura: Preprint
Pubblicazione: 2023
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866929322582867968
author Alagic, Gorjan
Bai, Chen
Poremba, Alexander
Shi, Kaiyan
author_facet Alagic, Gorjan
Bai, Chen
Poremba, Alexander
Shi, Kaiyan
contents In the permutation inversion problem, the task is to find the preimage of some challenge value, given oracle access to the permutation. This is a fundamental problem in query complexity, and appears in many contexts, particularly cryptography. In this work, we examine the setting in which the oracle allows for quantum queries to both the forward and the inverse direction of the permutation -- except that the challenge value cannot be submitted to the latter. Within that setting, we consider two options for the inversion algorithm: whether it can get quantum advice about the permutation, and whether it must produce the entire preimage (search) or only the first bit (decision). We prove several theorems connecting the hardness of the resulting variations of the inversion problem, and establish a number of lower bounds. Our results indicate that, perhaps surprisingly, the inversion problem does not become significantly easier when the adversary is granted oracle access to the inverse, provided it cannot query the challenge itself.
format Preprint
id arxiv_https___arxiv_org_abs_2306_13729
institution arXiv
publishDate 2023
record_format arxiv
spellingShingle On the Two-sided Permutation Inversion Problem
Alagic, Gorjan
Bai, Chen
Poremba, Alexander
Shi, Kaiyan
Quantum Physics
Cryptography and Security
In the permutation inversion problem, the task is to find the preimage of some challenge value, given oracle access to the permutation. This is a fundamental problem in query complexity, and appears in many contexts, particularly cryptography. In this work, we examine the setting in which the oracle allows for quantum queries to both the forward and the inverse direction of the permutation -- except that the challenge value cannot be submitted to the latter. Within that setting, we consider two options for the inversion algorithm: whether it can get quantum advice about the permutation, and whether it must produce the entire preimage (search) or only the first bit (decision). We prove several theorems connecting the hardness of the resulting variations of the inversion problem, and establish a number of lower bounds. Our results indicate that, perhaps surprisingly, the inversion problem does not become significantly easier when the adversary is granted oracle access to the inverse, provided it cannot query the challenge itself.
title On the Two-sided Permutation Inversion Problem
topic Quantum Physics
Cryptography and Security
url https://arxiv.org/abs/2306.13729