quantum data locking, enigma machines and entropic uncertainty relations saikat guha, patrick...
TRANSCRIPT
![Page 1: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/1.jpg)
Quantum data locking, enigma machines and entropic uncertainty relations
Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo,Jeffrey H. Shapiro, Masahiro Takeoka, Mark M. Wilde
Phys. Rev. X 4, 011016 (2014)
QU
ANTU
M K
RISP
Y KR
EME
SEM
INAR
--- L
ouis
iana
Sta
te U
nive
rsity
--- F
EB 1
7
![Page 2: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/2.jpg)
A few words on classical cryptography
Quantum Data Locking
Cryptographic applications
Symmetric-key cryptography (from the Caesar cipher to the enigma machine)One time pad (information theoretical security)
Uncertainty relationsQuantum enigma machines
Composability and robustnessLocking noisy channelsCoherent state quantum data locking
SummaryQ
UAN
TUM
KRI
SPY
KREM
E SE
MIN
AR --
- Lou
isia
na S
tate
Uni
vers
ity --
- FEB
17
![Page 3: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/3.jpg)
Encryption
Decription
THERE IS A HOUSE IN NEW ORLEANS
Physical medium
Alice (the sender)
Bob (the receiver)
THERE IS A HOUSE IN NEW ORLEANS
Eve (the eavesdropper)
Symmetric-key cryptography
![Page 4: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/4.jpg)
THERE IS A HOUSE IN NEW ORLEANS
VJGTGKUCJQWUGKPPGYQTNGCPU
Caesar’s cipher
The secret key is the relative angle between the two discs
T VH JG I
Mono-alphabetic ciphers
VJGTGKUCJQWUGKPPGYQTNGCPU
THERE IS A HOUSE IN NEW ORLEANS
One letter is enough to uncover all the message!Frequency analysis
![Page 5: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/5.jpg)
The secret key is a word
Alberti’s cipherVigenère’s cipher
Plaintext
Key
THEREISAHOUSEINNEWORLEANS
KEYKEYKEYKEYKEYKEYKEYKEYK
+
DLCBIGCEFYYQOMLXIUYVIOELC
Frequency analysis on each sub-text
A 0B 1C 2….Z 25
Summation modulo 26
Poli-alphabetic ciphers
![Page 6: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/6.jpg)
The secret key is a word
Alberti’s cipherVigenère’s cipher
Plaintext
Key
0100010101000110101101001
0100100100100100100100100
+
0000110001100010001001101
Poli-alphabetic ciphers
0 10 0 11 1 0
Summation modulo 2
![Page 7: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/7.jpg)
The secret key is the initial configuration of the rotors
Enigma machine
Side information (espionage)AND
Good algorithms (Alan Turing)AND
Computational power (Bomba)=
Enigma machine was cracked
Poli-alphabetic ciphers
Long pseudo-random key from a short random key
![Page 8: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/8.jpg)
Increasing computational power to crack
![Page 9: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/9.jpg)
Increasing computational power to crack
We need a secret key which is truly random --- and of same length of the plaintext.
+ =
+ =
One time padSecret key is truly random
Encrypt by XOR operation (sum modulo 2)
010010110101001011…+100011010101010100…=110001100000011111…
Plaintext
Secret key
Ciphertext
Plaintext
PlaintextSecret key
Secret key Ciphertext
Ciphertext
![Page 10: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/10.jpg)
00001
00010 …..
Label each message with a new variable
Ecryption with random secret key 01011
01010
01011….
Eve try to crack the message using the best algorithm and the most powerful computer
She then guess a value of the label of the message.
Info-theory security
1m
2m
2nm 11111 10100
m
m̂
![Page 11: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/11.jpg)
2logi
i ix
H X p x p x Shannon entropy
2 2log 1 log 1H X p p p p
Quantify randomness and information
Example: binary variable
0p p 1p p
1 2, ,....X x x 1 2, ,....p x p x
![Page 12: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/12.jpg)
ˆp m m we want it as uniform as possible
2ˆ
ˆ ˆ ˆlogm
H M m p m m p m m Shannon entropy:
ˆ ˆm
H M M p m H M mConditional entropy:
ˆ ˆ ˆ:I M M H M H M M Mutual information:
Max number of bits of information that Eve gets about the message
Equals zero if the key is truly random and has same lenght of the message
+ =
Info-theory securityConditional probability distr.
ˆ ˆ 0H M H M M
![Page 13: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/13.jpg)
QU
ANTU
M K
RISP
Y KR
EME
SEM
INAR
--- L
ouis
iana
Sta
te U
nive
rsity
--- F
EB 1
7
Shor algorithm (asymmetric cryptography)
Quantum key distribution (no cloning theorem)
Quantum data locking
Information theoretical security with an exponentially shorter secret key
Quantum physics comes into play
![Page 14: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/14.jpg)
Uncertainty principle
12q p Canonically conjugate variables
12 2 2 2log log logq p Entropy of a Gaussian distribution
Apply the log
2log 2H Q e q
2log
2
H Q H Pe
Entropic uncertainty relations
For any Gaussian state
![Page 15: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/15.jpg)
Uncertainty principle
z
1
2 2
H Z H X Entropic uncertainty relations
Qubit example
x
0 , 1
0 1 0 / 1
2 2,
For any qubit state
Basis of eigenvalues
Basis of eigenvalues
Maassen and Uffink PRL 60, 1103 (1988)
![Page 16: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/16.jpg)
DiVincenzo et al. PRL 92, 067902 (2004)
Quantum Data Locking
Encryption
Decription
0100110111101010..
Physical medium
0100110111101010..
Secret key is of 1 bit
0 , 1
,
If 0
If 1
use basis
use basis
n-bit message
![Page 17: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/17.jpg)
DiVincenzo et al. PRL 92, 067902 (2004)
Quantum Data Locking
Encryption
0100110111101010..
m̂
ˆ : : accI M M IHow much bits of information Eve can get at max?
“Accessible Information”
n-bit message
1
2 2acc
H Z H X nI n
Secret key is of 1 bit
0 , 1
,
If 0
If 1
use basis
use basis
![Page 18: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/18.jpg)
Quantum Data Locking
,x z secret bit allows us to encrypt bits. Chose one of 2 bases12
n
secret bits allow us to encrypt bits, with K bases2log K 1 n 1 ,..., KA A
“Accessible Information”
accI n 1/4
1
K for 1nwith
1
11
K
kk
H A nK
Strong uncertainty relations for K observables
Hayden et al. CMP 250, 371 (2004)Fawzi et al. J. ACM 60 44 (2013)Lupo et al. arXiv:1311.5212
![Page 19: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/19.jpg)
Encryption
m
Physical medium
m m 1,2,..., 2nm d
The key corresponds to unitary transformation
km U m 2log1,2,..., 2 Kk K
1/4
1accI n
K
![Page 20: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/20.jpg)
Encryption
Decription
m
Physical medium
m
m m 1,2,..., 2nm d
The key corresponds to unitary transformation
km U m 2log1,2,..., 2 Kk K
1kU m
To decrypt, apply inverse unitary and measure in standard basis
basis vectors
![Page 21: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/21.jpg)
Encryption
Decription
m
Physical medium
m
km U m
Quantum Enigma Machine
Single photon over d modes.
Random phase-shifts generates strong data locking properties
The secret key is the combination of phase shifts
Lloyd, arXiv: 1307.0380Lupo et al. arXiv:1311.5212
![Page 22: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/22.jpg)
QU
ANTU
M K
RISP
Y KR
EME
SEM
INAR
--- L
ouis
iana
Sta
te U
nive
rsity
--- F
EB 1
7
Composability
Robustness
Locking of noisy channels
Towards cryptographic applications?
![Page 23: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/23.jpg)
Composability
Composable security:The output of the protocol is still secure if used as input of another protocol
Standard security criterion in quantum cryptography.Holevo information.
n Guarantee composability.
Accessible information criterion is not composable in general
accI n accI
Quantum Data Locking
Some other protocol
Secu
re
Secu
re??
Solved by a physical assumption: time-life of Eve’s quantum memory
Secu
re
![Page 24: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/24.jpg)
Robustness
The strenght of quantum data locking is also its Achilles’ heel
Example:If 1 bit can lock half of the message, then if Eve correctly guess only 1 bit she could get half of the message.
Work in progress: design data locking protocol which are robust under information leakage!
![Page 25: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/25.jpg)
Locking noisy channels
A BN
All communication systems suffer from physical-layer noise
Error correction should be applied to achieve reliable (enigmatized) communication
Encryption
Decription
m
m
![Page 26: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/26.jpg)
Locking noisy channels
A BN A BEU
All communication systems suffer from physical-layer noise
Error correction should be applied to achieve reliable (enigmatized) communication
Encryption
Decription
m
m
Noisy channel can always be complemented to a unitary transformation
Eve has access to the complement of Bob output.
![Page 27: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/27.jpg)
Thre notions of capacities:
Name Symbol Requirements
Locking noisy channels
The price of error correction is to reduce the communication rate
The capacity of the channel is the max communication rate (with zero error for asymptotically long messages)
Guha et al. PRX 4, 011016 (2014)P L C
Private capacity Reliable communication from A to B. Holevo inf. secrecy.P
CClassical capacity Reliable communication from Alice to Bob. No secrecy.
LLocking capacity Reliable communication from A to B. Accessible inf. secrecy.
![Page 28: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/28.jpg)
Locking vs Private CapacityHow big is the gap between the locking capacity and the private capacity?
Guha et al. PRX 4, 011016 (2014)
Private capacity: 1. Composable security
Locking capacity:2. Non-composable
A BN A BEU
L P D Quantum discord(at the output of the channel)
This gap can be very large (example by A. Winter)
Ollivier and Zurek PRL 88, 017901 (2001)
![Page 29: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/29.jpg)
We don’t expect strong quantum properties from semi-classical coherent-states..
Yet they are most robust and easy to prepare with current technologies.
A fundamental question is if and how coherent states can be used for data locking protocols
Coherent State Locking
1 2n
n Encode information in multi-mode coherent states
2
1
1 n
S jj
Nn
Mean photon number per mode
2logL P e bits per mode
Guha et al. PRX 4, 011016 (2014)
(vacuum flucutations)
![Page 30: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/30.jpg)
Conclusions
Alternative to QKD. Quantum Enigma Machines may allow direct secret communication at higher rates.
Locking Capacity is greater than private capacity. (Indications that the gap can be big!)
Weaker security criterion. Physical assumption on Eve. Robustness problem to be solved.
Explicit data locking protocol with coherent states?
Lloyd, arXiv: 1307.0380Guha et al. PRX 4, 011016 (2014)Lupo et al. arXiv:1311.5212
DiVincenzo et al. PRL 92, 067902 (2004)Hayden et al. CMP 250, 371 (2004)Fawzi et al. J. ACM 60 44 (2013)
QU
ANTU
M K
RISP
Y KR
EME
SEM
INAR
--- L
ouis
iana
Sta
te U
nive
rsity
--- F
EB 1
7
![Page 31: Quantum data locking, enigma machines and entropic uncertainty relations Saikat Guha, Patrick Hayden, Hari Krovi, Seth Lloyd, Cosmo Lupo, Jeffrey H. Shapiro,](https://reader035.vdocuments.mx/reader035/viewer/2022062309/56649cbf5503460f94984550/html5/thumbnails/31.jpg)
Entanglement and Locking
Eve can measure her state and then recover Bob state
This implies that Eve’s accessible information cannot be lower than Bob’s one (data processing inequality)
Locking Capacity is zero for Entanglement Breaking Channels!
What channels have zero locking capacity?
Guha et al. PRX 4, 011016 (2014)
Entanglement breaking channels have 0 locking capacity
A BN A BEU
Entanglement