<p>According to this paper:</p>

<p><a href="https://arxiv.org/pdf/1509.09180.pdf" rel="nofollow noreferrer">https://arxiv.org/pdf/1509.09180.pdf</a></p>

<p>The client only needs the ability to prepare random single-qubit pure states.</p>

<p>You may also look at this paper for more information:</p>

<p><a href="https://link.springer.com/article/10.1007/s00224-018-9872-3" rel="nofollow noreferrer">https://link.springer.com/article/10.1007/s00224-018-9872-3</a></p>

CC BY-SA 4.0
2019-06-06T00:25:53.383Z
Thanks. I saw these papers. Can the client do with less quantum capabilities?
Avi Tal
CC BY-SA 4.0
2019-06-06T17:29:23.607Z
As per the second paper (Gheorghiu, Kapourniotis, Kashefi), there are also protocols where the client only needs single qubit measurements (but no preparation), or with purely classical client, but several server *which share entanglement bu are not allowed to communicate classically*, which is a rather strong constraint. There are also papers replacing qubit preparation with more realistic weak coherent pulses [arXiv:1108.5571](https://arxiv.org/abs/1108.5571). It is difficult to be less quantum, except going fully classical, as done very recently ...
Frédéric Grosshans
CC BY-SA 4.0
2019-06-06T17:38:07.670Z
...  A work by [Urmila Mahadev](https://www.quantamagazine.org/graduate-student-solves-quantum-verification-problem-20181008/) leverages postquantum cryptography to do (not unconditionally secure) blind QC with classical client:  [arxiv:1708.02130](https://arxiv.org/abs/1708.02130). It was followed by other works: [IACR:2018/338](https://ia.cr/2018/338) and [arXiv:1904.06303](https://arxiv.org/abs/1904.06303).
Frédéric Grosshans
CC BY-SA 4.0
2019-06-06T00:15:50.170Z
2019-06-06T00:15:50.170Z
Bassem Khoury
<p>It is conjectured that classical (BPP) client blind quantum computing is implausible according to Aaronson et al:</p>

<p><a href="https://www.researchgate.net/publication/316538667_On_the_implausibility_of_classical_client_blind_quantum_computing" rel="nofollow noreferrer">https://www.researchgate.net/publication/316538667_On_the_implausibility_of_classical_client_blind_quantum_computing</a></p>

<p>What are the minimal quantum capabilities that a classical client must have in order to verify a single BQP quantum prover with the following requirements?</p>

<ol>
<li>Information-secure communication (no cryptographic assumptions)</li>
<li>Only the size of the input is revealed to the quantum prover</li>
<li>Single prover server</li>
</ol>

<p>My understanding is that the paper above leaves this as an open problem.</p>

<quantum-computing><quantum-information><interactive-proofs>
QPIP minimal client quantum capabilities
Avi Tal
# QPIP minimal client quantum capabilities

(Asked by: username_0 on 2019-06-05)

It is conjectured that classical (BPP) client blind quantum computing is implausible according to Aaronson et al:

<https://www.researchgate.net/publication/316538667_On_the_implausibility_of_classical_client_blind_quantum_computing>

What are the minimal quantum capabilities that a classical client must have in order to verify a single BQP quantum prover with the following requirements?

1. Information-secure communication (no cryptographic assumptions)
2. Only the size of the input is revealed to the quantum prover
3. Single prover server

My understanding is that the paper above leaves this as an open problem.

**Tags:** quantum-computing, quantum-information, interactive-proofs

---

## 1 answers

### Answer by username_1 on 2019-06-06. Score: 2

According to this paper:

<https://arxiv.org/pdf/1509.09180.pdf>

The client only needs the ability to prepare random single-qubit pure states.

You may also look at this paper for more information:

<https://link.springer.com/article/10.1007/s00224-018-9872-3>

> **Comments:**
> **username_0**: Thanks. I saw these papers. Can the client do with less quantum capabilities?  
> **username_2**: As per the second paper (Gheorghiu, Kapourniotis, Kashefi), there are also protocols where the client only needs single qubit measurements (but no preparation), or with purely classical client, but several server *which share entanglement bu are not allowed to communicate classically*, which is a rather strong constraint. There are also papers replacing qubit preparation with more realistic weak coherent pulses [arXiv:1108.5571](https://arxiv.org/abs/1108.5571). It is difficult to be less quantum, except going fully classical, as done very recently ...  
> **username_2**: ...  A work by [Urmila Mahadev](https://www.quantamagazine.org/graduate-student-solves-quantum-verification-problem-20181008/) leverages postquantum cryptography to do (not unconditionally secure) blind QC with classical client:  [arxiv:1708.02130](https://arxiv.org/abs/1708.02130). It was followed by other works: [IACR:2018/338](https://ia.cr/2018/338) and [arXiv:1904.06303](https://arxiv.org/abs/1904.06303).  

---

