Table of Contents
Fetching ...

Quantum Automating $\mathbf{TC}^0$-Frege Is LWE-Hard

Noel Arteche, Gaia Carenini, Matthew Gray

TL;DR

The paper defines quantum automatability for propositional proof systems and proves a conditional hardness result: if there exists a polynomial-time quantum algorithm that weakly automates $ ext{$TC^0$-Frege}$, then the lattice-based Learning with Errors ($LWE$) problem can be solved by polynomial-size quantum circuits. Extending the argument, a weak automatizer for $ ext{$AC^0$-Frege}$ would break $LWE$ in subexponential quantum time. The authors develop quantum feasible interpolation, build injective lattice-based one-way functions with succinct injectivity certificates, and formalize the requisite linear-algebra reasoning inside a conservative extension $ ext{$LA_ extbf{Q}$}$ that translates to short $ ext{$TC^0$-Frege}$ proofs. This work generalizes classical cryptography-based non-automatability results to the quantum setting, establishing the first conditional hardness results for quantum proof search and suggesting directions for future exploration of generic hardness assumptions and limitations of quantum speedups in proof complexity.

Abstract

We prove the first hardness results against efficient proof search by quantum algorithms. We show that under Learning with Errors (LWE), the standard lattice-based cryptographic assumption, no quantum algorithm can weakly automate $\mathbf{TC}^0$-Frege. This extends the line of results of Krajíček and Pudlák (Information and Computation, 1998), Bonet, Pitassi, and Raz (FOCS, 1997), and Bonet, Domingo, Gavaldà, Maciel, and Pitassi (Computational Complexity, 2004), who showed that Extended Frege, $\mathbf{TC}^0$-Frege and $\mathbf{AC}^0$-Frege, respectively, cannot be weakly automated by classical algorithms if either the RSA cryptosystem or the Diffie-Hellman key exchange protocol are secure. To the best of our knowledge, this is the first interaction between quantum computation and propositional proof search.

Quantum Automating $\mathbf{TC}^0$-Frege Is LWE-Hard

TL;DR

The paper defines quantum automatability for propositional proof systems and proves a conditional hardness result: if there exists a polynomial-time quantum algorithm that weakly automates TC^0, then the lattice-based Learning with Errors () problem can be solved by polynomial-size quantum circuits. Extending the argument, a weak automatizer for AC^0 would break in subexponential quantum time. The authors develop quantum feasible interpolation, build injective lattice-based one-way functions with succinct injectivity certificates, and formalize the requisite linear-algebra reasoning inside a conservative extension LA_ extbf{Q} that translates to short TC^0 proofs. This work generalizes classical cryptography-based non-automatability results to the quantum setting, establishing the first conditional hardness results for quantum proof search and suggesting directions for future exploration of generic hardness assumptions and limitations of quantum speedups in proof complexity.

Abstract

We prove the first hardness results against efficient proof search by quantum algorithms. We show that under Learning with Errors (LWE), the standard lattice-based cryptographic assumption, no quantum algorithm can weakly automate -Frege. This extends the line of results of Krajíček and Pudlák (Information and Computation, 1998), Bonet, Pitassi, and Raz (FOCS, 1997), and Bonet, Domingo, Gavaldà, Maciel, and Pitassi (Computational Complexity, 2004), who showed that Extended Frege, -Frege and -Frege, respectively, cannot be weakly automated by classical algorithms if either the RSA cryptosystem or the Diffie-Hellman key exchange protocol are secure. To the best of our knowledge, this is the first interaction between quantum computation and propositional proof search.
Paper Structure (26 sections, 25 theorems, 35 equations)

This paper contains 26 sections, 25 theorems, 35 equations.

Key Result

Theorem 1

If there exists a polynomial-time quantum algorithm that weakly automates $\TC^0$-Frege, then LWE can be broken in polynomial time by a quantum machine.

Theorems & Definitions (53)

  • Theorem : Main theorem, informal
  • Corollary
  • Lemma 2.1
  • Lemma 2.2: Full-rank modular lattices have $q$-ary lattice bases
  • Theorem 2.3: Transference Theorem banaszczyk1993new
  • Lemma 2.4
  • Definition 2.5
  • Definition 3.1: Quantum and randomized automatability
  • Definition 3.2: Circuit automatability
  • Definition 3.3
  • ...and 43 more