Abstract Physical unclonable functions (PUFs) have been proposed as a way to identify and authenticate electronic devices. Recently, several ideas have been presented to that aim to achieve the same for quantum devices. Some of these constructions apply single-qubit gates in order to provide a secure fingerprint of the quantum device. In this work, we formalize the class of classical readout quantum PUFs (CR-QPUFs) using the statistical query (SQ) model and explicitly show insufficient security for CR-QPUFs based on single-qubit rotation gates, when the adversary has SQ access to the CR-QPUF. We demonstrate how a malicious party can learn the CR-QPUF characteristics and forge the signature of a quantum device through a modelling attack using a simple regression of low-degree polynomials. The proposed modelling attack was successfully implemented in a real-world scenario on real IBM Q quantum machines. We thoroughly discuss the prospects and problems of CR-QPUFs where quantum device imperfections are used as a secure fingerprint.
Abstract Physical unclonable functions (PUFs) have been proposed as a way to identify and authenticate electronic devices. Recently, several ideas have been presented to that aim to achieve the same for quantum devices. Some of these constructions apply single-qubit gates in order to provide a secure fingerprint of the quantum device. In this work, we formalize the class of classical readout quantum PUFs (CR-QPUFs) using the statistical query (SQ) model and explicitly show insufficient security for CR-QPUFs based on single-qubit rotation gates, when the adversary has SQ access to the CR-QPUF. We demonstrate how a malicious party can learn the CR-QPUF characteristics and forge the signature of a quantum device through a modelling attack using a simple regression of low-degree polynomials. The proposed modelling attack was successfully implemented in a real-world scenario on real IBM Q quantum machines. We thoroughly discuss the prospects and problems of CR-QPUFs where quantum device imperfections are used as a secure fingerprint.
ABSTRACT Quantum Physical Unclonable Functions (QPUFs) offer a physically grounded approach to secure authentication, extending the capabilities of classical PUFs. This review covers their theoretical foundations and key implementation challenges—such as quantum memories and Haar‐randomness—, and distinguishes QPUFs from Quantum Readout PUFs (QR‐PUFs), more experimentally accessible yet less robust against quantum‐capable adversaries. A co‐citation‐based selection method is employed to trace the evolution of QPUF architectures, from early QR‐PUFs to more recent Hybrid PUFs (HPUFs). This method further supports a discussion on the role of information‐theoretic analysis in mitigating inconsistencies in QPUF responses, underscoring the deep connection between secret‐key generation and authentication. Despite notable advances, achieving practical and robust QPUF‐based authentication remains an open challenge.
Quantum Physical Unclonable Functions (QPUFs) offer a physically grounded approach to secure authentication, extending the capabilities of classical PUFs. This review covers their theoretical foundations and key implementation challenges—such as quantum memories and Haar‐randomness—, and distinguishes QPUFs from Quantum Readout PUFs (QR‐PUFs), more experimentally accessible yet less robust against quantum‐capable adversaries. A co‐citation‐based selection method is employed to trace the evolution of QPUF architectures, from early QR‐PUFs to more recent Hybrid PUFs (HPUFs). This method further supports a discussion on the role of information‐theoretic analysis in mitigating inconsistencies in QPUF responses, underscoring the deep connection between secret‐key generation and authentication. Despite notable advances, achieving practical and robust QPUF‐based authentication remains an open challenge.
A Physical Unclonable Function (PUF) is a device with unique behaviour that is hard to clone hence providing a secure fingerprint. A variety of PUF structures and PUF-based applications have been explored theoretically as well as being implemented in practical settings. Recently, the inherent unclonability of quantum states has been exploited to derive the quantum analogue of PUF as well as new proposals for the implementation of PUF. We present the first comprehensive study of quantum Physical Unclonable Functions (qPUFs) with quantum cryptographic tools. We formally define qPUFs, encapsulating all requirements of classical PUFs as well as introducing a new testability feature inherent to the quantum setting only. We use a quantum game-based framework to define different levels of security for qPUFs: quantum exponential unforgeability, quantum existential unforgeability and quantum selective unforgeability. We introduce a new quantum attack technique based on the universal quantum emulator algorithm of Marvin and Lloyd to prove no qPUF can provide quantum existential unforgeability. On the other hand, we prove that a large family of qPUFs (called unitary PUFs) can provide quantum selective unforgeability which is the desired level of security for most PUF-based applications.
As quantum technologies advance, ensuring secure authentication of quantum devices has become increasingly important. Existing methods, often relying on stored cryptographic keys, are vulnerable to physical and side-channel attacks. Quantum Physical Unclonable Functions (QPUFs) offer a promising alternative by leveraging quantum phenomena such as superposition, entanglement, and quantum noise to produce unique, unclonable responses. However, many existing QPUF designs are based on simulations or report only idealized, best-case results. This work presents and evaluates a set of QPUF circuits on IBM’s real quantum hardware, assessing their performance in terms of instability, randomness, and uniqueness to identify the most effective configurations. Our results show that specific configurations can achieve a positive balance between stability and device distinguishability, reaching 0.05 instability, 0.48 uniqueness, and 0.75 randomness. These findings provide a solid foundation for implementing robust authentication protocols tailored for quantum devices in real-world settings.
Physical Unclonable Functions (PUFs) provide hardware-level security by exploiting intrinsic randomness to produce device-unique responses. However, machine learning and side-channel attacks increasingly undermine their classical assumptions, calling for new approaches to ensure unforgeability. Quantum mechanics naturally supports this goal through intrinsic randomness and the no-cloning theorem, motivating the study of Quantum Physical Unclonable Functions (QPUFs). Yet, existing QPUF models often assume ideal unitary dynamics, neglecting non-unitary effects such as decoherence and dissipation that arise in real quantum devices. This work introduces a new class of non-unitary QPUFs that leverage open quantum system dynamics as a foundation for security. Three architectures are proposed: the Dissipative QPUF (D-QPUF), which uses amplitude damping as an entropy source; the Measurement-Feedback QPUF (MF-QPUF), which employs mid-circuit measurements and conditional unitaries; and the Lindbladian QPUF (L-QPUF), which models Markovian noise via the Lindblad master equation and Trotter-Suzuki decomposition. Simulation results show that these non-unitary designs achieve strong uniqueness, uniformity, and unforgeability, with controllable reliability trade-offs from stochastic noise. The L-QPUF, in particular, exhibits exponential modeling resistance under limited challenge-response access. By reframing environmental noise as a constructive resource, this work establishes a framework for noise-aware quantum hardware authentication and highlights non-unitary evolution as a viable foundation for post-quantum security.
Quantum Physical Unclonable Functions (QPUFs) are hardware-based cryptographic primitives with strong theoretical security. This security stems from their modeling as Haar-random unitaries. However, implementing such unitaries on Intermediate-Scale Quantum devices is challenging due to exponential simulation complexity. Previous work tackled this using pseudo-random unitary designs but only under limited adversarial models with only black-box query access. In this paper, we propose a new QPUF construction based on chaotic quantum dynamics. We modeled the QPUF as a unitary time evolution under a chaotic Hamiltonian and proved that this approach offers security comparable to Haar-random unitaries. Intuitively, we show that while chaotic dynamics generate less randomness than ideal Haar unitaries, the randomness is still sufficient to make the QPUF unclonable in polynomial time. Moreover, we show that the evolution time required to achieve security scales linearly with number of qudits used in the scheme and can be kept public. We identified the Sachdev-Ye-Kitaev (SYK) model as a candidate for the QPUF Hamiltonian. Recent experiments using nuclear spins and cold atoms have shown progress toward achieving this goal. Inspired by recent experimental advances, we present a schematic architecture for realizing our proposed QPUF device based on optical Kagome Lattice with disorder. For adversaries with only query access, we also introduce an efficiently simulable pseudo-chaotic QPUF. Our results lay the preliminary groundwork for bridging the gap between theoretical security and the practical implementation of QPUFs for the first time.