Engelsk: *Quantum Public-Key Encryption*, a.k.a. QPKE. Usikker på hva dette er for noe—og jeg mistenker svaret varierer basert på hvem du spør. ### Litteratur - Alex Grilo med venner preprinten [EPRINT:GriSatVu23 - Encryption with Quantum Public Keys](https://eprint.iacr.org/2023/345): - > It is an important[^1] question to find constructions of quantum cryptographic protocols which rely on weaker computational assumptions than classical protocols. Recently, it has been shown that oblivious transfer and multi-party computation can be constructed from one-way functions, whereas this is impossible in the classical setting in a black-box way. In this work, we study the question of building quantum public-key encryption schemes from one-way functions and even weaker assumptions. Firstly, we revisit the definition of IND-CPA security to this setting. Then, we propose three schemes for quantum public-key encryption from one-way functions, pseudorandom function-like states with proof of deletion and pseudorandom function-like states, respectively. - Barotti, Malavolta, Walter: [Eprint:BarMalWal23 – A Simple Construction of Quantum Public-Key Encryption from Quantum-Secure One-Way Functions](https://eprint.iacr.org/2023/306) - Malavolta og Walter (igjen): [EPRINT:MalWal23 - Robust Quantum Public-Key Encryption with Applications to Quantum Key Distribution](https://eprint.iacr.org/2023/500) hevder å ha benyttet primitivet til å konstruere en variant av [[Kvante-nøkkelutvidelse]] som bare krever to (heller enn tre) meldinger. Mener de QPKE i samme betydning som Grilo et al. over, eller har de sin egen definisjon? [^1]: Er det?