<p>Collision resistance is one of the most fundamental properties in cryptography. With the development of quantum computing, significant attention has been directed toward understanding the quantum query complexity of collision-finding problems in hash functions. The quantum query complexity of collision-finding in general non-uniform random functions remained an open problem until the recent work of Peng et al. (ASIACRYPT 2025), who nearly resolved it by introducing a novel parameter <InlineEquation ID="IEq1"> <EquationSource Format="TEX">\(\gamma\)</EquationSource> <EquationSource Format="MATHML"><math> <mi>γ</mi> </math></EquationSource> </InlineEquation>. Based on this parameter, they established an upper bound of <InlineEquation ID="IEq2"> <EquationSource Format="TEX">\(O(\gamma ^{1/6})\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mi>O</mi> <mo stretchy="false">(</mo> <msup> <mi>γ</mi> <mrow> <mn>1</mn> <mo stretchy="false">/</mo> <mn>6</mn> </mrow> </msup> <mo stretchy="false">)</mo> </mrow> </math></EquationSource> </InlineEquation> and a matching lower bound of <InlineEquation ID="IEq3"> <EquationSource Format="TEX">\(\tilde{\Omega }(\gamma ^{1/6})\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mover accent="true"> <mi mathvariant="normal">Ω</mi> <mo stretchy="false">~</mo> </mover> <mrow> <mo stretchy="false">(</mo> <msup> <mi>γ</mi> <mrow> <mn>1</mn> <mo stretchy="false">/</mo> <mn>6</mn> </mrow> </msup> <mo stretchy="false">)</mo> </mrow> </mrow> </math></EquationSource> </InlineEquation>. However, the quantum query complexity of finding multi-collisions in non-uniform random functions has remained open. A <i>s</i>-collision to a function <i>f</i> is a set of distinct input <InlineEquation ID="IEq4"> <EquationSource Format="TEX">\(x_1,\dots , x_s\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <msub> <mi>x</mi> <mn>1</mn> </msub> <mo>,</mo> <mo>⋯</mo> <mo>,</mo> <msub> <mi>x</mi> <mi>s</mi> </msub> </mrow> </math></EquationSource> </InlineEquation> such that <InlineEquation ID="IEq5"> <EquationSource Format="TEX">\(f(x_1)=f(x_2)\dots =f(x_s)\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mi>f</mi> <mrow> <mo stretchy="false">(</mo> <msub> <mi>x</mi> <mn>1</mn> </msub> <mo stretchy="false">)</mo> </mrow> <mo>=</mo> <mi>f</mi> <mrow> <mo stretchy="false">(</mo> <msub> <mi>x</mi> <mn>2</mn> </msub> <mo stretchy="false">)</mo> </mrow> <mo>⋯</mo> <mo>=</mo> <mi>f</mi> <mrow> <mo stretchy="false">(</mo> <msub> <mi>x</mi> <mi>s</mi> </msub> <mo stretchy="false">)</mo> </mrow> </mrow> </math></EquationSource> </InlineEquation>. In this work, we address this challenge by similarly introducing a new generalized parameter <InlineEquation ID="IEq6"> <EquationSource Format="TEX">\(\gamma _s\)</EquationSource> <EquationSource Format="MATHML"><math> <msub> <mi>γ</mi> <mi>s</mi> </msub> </math></EquationSource> </InlineEquation>. Based on this parameter, we establish nearly tight bounds—an upper bound of <InlineEquation ID="IEq7"> <EquationSource Format="TEX">\(O(\gamma _s)\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mi>O</mi> <mo stretchy="false">(</mo> <msub> <mi>γ</mi> <mi>s</mi> </msub> <mo stretchy="false">)</mo> </mrow> </math></EquationSource> </InlineEquation> and a lower bound of <InlineEquation ID="IEq8"> <EquationSource Format="TEX">\(\tilde{\Omega }(\gamma _s)\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mover accent="true"> <mi mathvariant="normal">Ω</mi> <mo stretchy="false">~</mo> </mover> <mrow> <mo stretchy="false">(</mo> <msub> <mi>γ</mi> <mi>s</mi> </msub> <mo stretchy="false">)</mo> </mrow> </mrow> </math></EquationSource> </InlineEquation>—thereby nearly resolving this open problem. Moreover, although the existing results for 2-collisions do not generalize straightforwardly to the case of <i>s</i>-collision (<InlineEquation ID="IEq9"> <EquationSource Format="TEX">\(s&gt;2\)</EquationSource> <EquationSource Format="MATHML"><math> <mrow> <mi>s</mi> <mo>&gt;</mo> <mn>2</mn> </mrow> </math></EquationSource> </InlineEquation>), we demonstrate that the result of Peng et al. can be viewed as a special case of our more general framework. This clearly establishes our work as a direct generalization of their contribution.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

On finding quantum multi-collisions in non-uniform random functions

  • Tianci Peng,
  • Rui Xue

摘要

Collision resistance is one of the most fundamental properties in cryptography. With the development of quantum computing, significant attention has been directed toward understanding the quantum query complexity of collision-finding problems in hash functions. The quantum query complexity of collision-finding in general non-uniform random functions remained an open problem until the recent work of Peng et al. (ASIACRYPT 2025), who nearly resolved it by introducing a novel parameter \(\gamma\) γ . Based on this parameter, they established an upper bound of \(O(\gamma ^{1/6})\) O ( γ 1 / 6 ) and a matching lower bound of \(\tilde{\Omega }(\gamma ^{1/6})\) Ω ~ ( γ 1 / 6 ) . However, the quantum query complexity of finding multi-collisions in non-uniform random functions has remained open. A s-collision to a function f is a set of distinct input \(x_1,\dots , x_s\) x 1 , , x s such that \(f(x_1)=f(x_2)\dots =f(x_s)\) f ( x 1 ) = f ( x 2 ) = f ( x s ) . In this work, we address this challenge by similarly introducing a new generalized parameter \(\gamma _s\) γ s . Based on this parameter, we establish nearly tight bounds—an upper bound of \(O(\gamma _s)\) O ( γ s ) and a lower bound of \(\tilde{\Omega }(\gamma _s)\) Ω ~ ( γ s ) —thereby nearly resolving this open problem. Moreover, although the existing results for 2-collisions do not generalize straightforwardly to the case of s-collision ( \(s>2\) s > 2 ), we demonstrate that the result of Peng et al. can be viewed as a special case of our more general framework. This clearly establishes our work as a direct generalization of their contribution.