Abstract Quantum homomorphic encryption (QHE) can allow directly computation on the encrypted data without need to decrypt it in advance. It is also necessary to provide another property of verifiability that the client should verify whether the evaluation result is correct. However, most existing QHE schemes did not consider it and only assumed servers to be honest. In this paper, we propose a verifiable QHE (vQHE) scheme by using different types of circuits indistinguishable to the server, where the client can detect whether the server is honest or not by verifying the results of test circuits. Furthermore, by designing the gadgets to implement and test T gates and H gates in a non-interactive way for the used circuits, the proposed vQHE scheme does not require interaction during the process of evaluation. Thus the proposed vQHE scheme has the potential to make clients prefer to use it for protecting their private data in future quantum cloud environments.
Abstract Quantum homomorphic encryption (QHE) can allow directly computation on the encrypted data without need to decrypt it in advance. It is also necessary to provide another property of verifiability that the client should verify whether the evaluation result is correct. However, most existing QHE schemes did not consider it and only assumed servers to be honest. In this paper, we propose a verifiable QHE (vQHE) scheme by using different types of circuits indistinguishable to the server, where the client can detect whether the server is honest or not by verifying the results of test circuits. Furthermore, by designing the gadgets to implement and test T gates and H gates in a non-interactive way for the used circuits, the proposed vQHE scheme does not require interaction during the process of evaluation. Thus the proposed vQHE scheme has the potential to make clients prefer to use it for protecting their private data in future quantum cloud environments.
Quantum homomorphic encryption (QHE) can allow clients to directly perform quantum computation on encrypted data with the assistance of a remote quantum server. However, existing QHE schemes often overlook the crucial property of verifiability which enables clients to validate the correctness of computation results provided by the server. In this paper, we propose a verifiable QHE scheme based on the universal quantum gate set {H,P,Toffoli}. At first, a specialized gadget is designed to eliminate the errors that may arise during the homomorphic evaluation of non-Clifford Toffoli gates in a non-interactive manner. Furthermore, the designed gadget is versatile and can be seamlessly integrated into an existing QHE scheme that implements quantum gates in another universal quantum gate set {H,T,CNOT} to homomorphically evaluate more quantum gates. Subsequently, a verifiable method is introduced to the QHE scheme based on {H,P,Toffoli} for the client to detect whether the server is honest during the homomorphic computation by employing three types of indistinguishable quantum circuits.
Cloud computing allows clients with limited computational resources to offload computations to more powerful remote servers. In this paradigm, homomorphic encryption (HE) schemes enable a server to run any computation on a client's encrypted data. These schemes are widely used in cloud computing protocols such as delegated computing, two-party secure computation, and zero-knowledge proofs. Quantum homomorphic encryption (QHE) aims to achieve the objectives of HE with quantum data and quantum circuits, enabling cloud quantum servers to compute on encrypted quantum data uploaded by clients. In this work, we consider a scenario where a client has access to a quantum “encryption/decryption device”, which allows the encryption, transmission, reception, and decryption of quantum states, but not universal quantum computation. In this setting, we provide a proof-of-concept software simulation of quantum homomorphic encryption. Our code implements the “EPR scheme” of Broadbent and Jeffery, which allows for the execution of universal quantum circuits by the server at the cost of requiring shared EPR pairs between the client and server. Our implementation explores the near-term viability of the EPR scheme. Perhaps unsurprisingly, our experiments indicate that the additional cost of homomorphic circuit evaluation is minor in comparison to the simulation cost of the quantum operations. Our simulation toolkit is implemented in Python and is open-source.
The significant advantage of the quantum homomorphic encryption scheme is to ensure the perfect security of quantum private data. In this paper, a novel secure multiparty quantum homomorphic encryption scheme is proposed, which can complete arbitrary quantum computation on the private data of multiple clients without decryption by an almost dishonest server. Firstly, each client obtains a secure encryption key through the measurement device independent quantum key distribution protocol and encrypts the private data by using the encryption operator and key. Secondly, with the help of the almost dishonest server, the non-maximally entangled states are pre-shared between the client and the server to correct errors in the homomorphic evaluation of T gates, so as to realize universal quantum circuit evaluation on encrypted data. Thirdly, from the perspective of the application scenario of secure multi-party computation, this work is based on the probabilistic quantum homomorphic encryption scheme, allowing multiple parties to delegate the server to perform the secure homomorphic evaluation. The operation and the permission to access the data performed by the client and the server are clearly pointed out. Finally, a concrete security analysis shows that the proposed multiparty quantum homomorphic encryption scheme can securely resist outside and inside attacks.
Homomorphic encryption has giant advantages in the protection of privacy information. In this paper, we present a new kind of probabilistic quantum homomorphic encryption scheme for the universal quantum circuit evaluation. Firstly, the pre-shared non-maximally entangled states are utilized as auxiliary resources, which lower the requirements of the quantum channel, to correct the errors in non-Clifford gate evaluation. By using the set synthesized by Clifford gates and T gates, it is feasible to perform the arbitrary quantum computation on the encrypted data. Secondly, our scheme is different from the previous scheme described by the quantum homomorphic encryption algorithm. From the perspective of application, a two-party probabilistic quantum homomorphic encryption scheme is proposed. It is clear what the computation and operation that the client and the server need to perform respectively, as well as the permission to access the data. Finally, the security of probabilistic quantum homomorphic encryption scheme is analyzed in detail. It demonstrates that the scheme has favorable security in three aspects, including privacy data, evaluated data and encryption and decryption keys.
Quantum homomorphic encryption (QHE), allows a quantum cloud server to compute on private data as uploaded by a client. We provide a proof-of-concept software simulation for QHE, according to the "EPR" scheme of Broadbent and Jeffery, for universal quantum circuits. We demonstrate the near-term viability of this scheme and provide verification that the additional cost of homomorphic circuit evaluation is minor when compared to the simulation cost of the quantum operations. Our simulation toolkit, py−qhe−epr package, is an open-source Python implementation, that serves as a step towards further hardware applications of quantum homomorphic encryption between networked quantum devices.
Homomorphic encryption is a cryptographic primitive that enables information processing on encrypted data. Such primitives are useful in a delegated computing setting in which a client delegates processing to a server, but does not trust the server fully with her information. Here, I discuss a way of performing quantum homomorphic encryption. A homomorphic encryption protocol comprises of four algorithms: random key generation, encryption, evaluation, and decryption. Our technique requires that a pair of commuting operators be used to implement the encryption and evaluation. The client randomly selects the former, while the server implements the latter. Then post-evaluation, if the client decrypts using the inverse of the encryption, he retrieves the input state with the desired computation implemented. The code space has to be chosen carefully so that non-trivial evaluations can be performed on the logical qubits. Since the encryption key is not known to the server, the randomness introduced by key generation hides some information about the encoded data despite it being put into the hands of the server. This framework is powerful because it gives a general description for implementing quantum homomorphic encryption. For example, families of commuting groups of operators are known to exist via the Schur-Weyl duality. However, it is limited by a no-go theorem that states that an exponential overhead is needed if arbitrary computation and perfect security are desired. Nonetheless, our protocols are still interesting as an application for near-term quantum computers, especially when the computational tasks require only low-depth circuits.