π€ AI Summary
Analyzing security of quantum random permutations under the ideal cipher model remains challenging.
Method: We establish the first quantum lifting theorem applicable to both reversible permutations and ideal ciphers, tightly reducing the success probability of any quantum adversary to that of a classical algorithm requiring only a small number of classical queries. Our approach integrates quantum query complexity analysis, the random oracle model, and the ideal cipher model, and introduces a tight quantum hardness bound via a two-sided zero-search game.
Contribution/Results: We prove, for the first time, post-quantum preimage resistance, one-wayness, and multicollision resistance for constant-round Sponge constructions, as well as post-quantum collision resistance for the DaviesβMeyer construction. Our bounds significantly improve prior quantum query complexity upper bounds and provide a new paradigm for post-quantum security reductions in symmetric cryptography.
π Abstract
In this work, we derive the first lifting theorems for establishing security in the quantum random permutation and ideal cipher models. These theorems relate the success probability of an arbitrary quantum adversary to that of a classical algorithm making only a small number of classical queries. By applying these lifting theorems, we improve previous results and obtain new quantum query complexity bounds and post-quantum security results. Notably, we derive tight bounds for the quantum hardness of the double-sided zero search game and establish the post-quantum security for the preimage resistance, one-wayness, and multi-collision resistance of constant-round sponge, as well as the collision resistance of the Davies-Meyer construction.