<p>Howard Barnum, Claude Crepeau, Daniel Gottesman, Adam Smith, Alain Tapp. "Authentication of Quantum Messages", FOCS 2002.</p>

<p><a href="http://www.cse.psu.edu/~ads22/pubs/PS-CSAIL/BCGST02-focs-final.pdf" rel="nofollow">http://www.cse.psu.edu/~ads22/pubs/PS-CSAIL/BCGST02-focs-final.pdf</a></p>

<p>As with encryption, there is a protocol that requires no computational assumptions. It uses a key of length about 2n+2k to authenticate n qubits with security level 2^{-k}.</p>

CC BY-SA 3.0
2016-04-11T02:13:35.927Z
2016-04-12T01:44:08.333Z
2016-04-12T01:44:08.333Z
Adam Smith
<p>Assume that classical one-way functions secure against quantum adversaries exist.  Is it possible, given a quantum state $Q$ and classical secret key $k$, produce a quantum state $AuthQ$ such that:</p>

<ul>
<li>One who knows $k$ can recover $Q$, provided that $AuthQ$ has not been altered.</li>
<li>If $AuthQ$ has been altered, this can be detected with high probability.</li>
</ul>

<p>It may or may not be possible to recover the original state without the secret key.  What matters is that, given the secret key, one can be confident that:</p>

<ul>
<li>The creator of the quantum state had the secret key</li>
<li>The message has not been tampered with since.</li>
</ul>

CC BY-SA 3.0
2016-04-11T00:11:29.610Z
How are you given this quantum state *Q*? Is it an arbitrary quantum state?
Peter Shor 
<quantum-computing><cr.crypto-security><quantum-information>
Is it possible to MAC a quantum state with a classical key under reasonable assumption?
Demi
# Is it possible to MAC a quantum state with a classical key under reasonable assumption?

(Asked by: username_0 on 2016-04-10)

Assume that classical one-way functions secure against quantum adversaries exist. Is it possible, given a quantum state $Q$ and classical secret key $k$, produce a quantum state $AuthQ$ such that:

* One who knows $k$ can recover $Q$, provided that $AuthQ$ has not been altered.
* If $AuthQ$ has been altered, this can be detected with high probability.

It may or may not be possible to recover the original state without the secret key. What matters is that, given the secret key, one can be confident that:

* The creator of the quantum state had the secret key
* The message has not been tampered with since.

**Tags:** quantum-computing, cr.crypto-security, quantum-information

> **Comments:**
> **username_1**: How are you given this quantum state *Q*? Is it an arbitrary quantum state?  

---

## 1 answers

### Answer by username_2 on 2016-04-11. Score: 5 | Accepted answer

Howard Barnum, Claude Crepeau, Daniel Gottesman, username_2, Alain Tapp. "Authentication of Quantum Messages", FOCS 2002.

<http://www.cse.psu.edu/~ads22/pubs/PS-CSAIL/BCGST02-focs-final.pdf>

As with encryption, there is a protocol that requires no computational assumptions. It uses a key of length about 2n+2k to authenticate n qubits with security level 2^{-k}.


---

