Gottesman and Chuang Quantum Digital Signature: Difference between revisions

Line 49: Line 49:
*'''Input''' L
*'''Input''' L
*'''Output''' Seller: <math>\{k_0^i, k_1^i\}</math>, <math>1\le i\ge M</math>, <math>\{f_{k_0^i}, f_{k_1^i}\}</math>
*'''Output''' Seller: <math>\{k_0^i, k_1^i\}</math>, <math>1\le i\ge M</math>, <math>\{f_{k_0^i}, f_{k_1^i}\}</math>
**'''Key Distribution:'''
#For m = 0,1
#For k = 0,1
##For i=0,M
##For i=0,M
##Seller
###Seller generates k_m^i
**'''State Elimination:'''
###Seller performs <math>k_m^i\rightarrow f_{k_m^i}</math>
#For k = 0,1
Method 1: Trusted Party
##For l = 1,2,...,L
### Buyer chooses <math>b^k_l \epsilon_R {0,1}</math>
###If <math>b^k_l=0</math>, Buyer measures his qubit in X basis <math>\{|+\rangle,|-\rangle\}</math>
###If <math>b^k_l=0</math>, Buyer measures his qubit in Z basis <math>\{|0\rangle,|1\rangle\}</math>
###'''return''' <math>m_{b^k_l}</math>
###<math>B^k_l=1-m_{b^k_l}</math>
 
**Verifier repeats steps 2(a)-2(b) with randomly chosen basis <math>v^k_l</math> to get his eliminated signature elements <math>V^k_l</math>


**'''Symmetrisation'''
**'''Symmetrisation'''
Write, autoreview, editor, reviewer
3,125

edits