Showing 201–230 of 230 results for author: Lo, H

Efficient Quantum Key Distribution Scheme And Proof of Its Unconditional Security

Authors: Hoi-Kwong Lo, H. F. Chau, M. Ardehali

Abstract: We devise a simple modification that essentially doubles the efficiency of the BB84 quantum key distribution scheme proposed by Bennett and Brassard. We also prove the security of our modified scheme against the most general eavesdrop** attack that is allowed by the laws of physics. The first major ingredient of our scheme is the assignment of significantly different probabilities to the diffe… ▽ More We devise a simple modification that essentially doubles the efficiency of the BB84 quantum key distribution scheme proposed by Bennett and Brassard. We also prove the security of our modified scheme against the most general eavesdrop** attack that is allowed by the laws of physics. The first major ingredient of our scheme is the assignment of significantly different probabilities to the different polarization bases during both transmission and reception, thus reducing the fraction of discarded data. A second major ingredient of our scheme is a refined analysis of accepted data: We divide the accepted data into various subsets according to the basis employed and estimate an error rate for each subset *separately*. We then show that such a refined data analysis guarantees the security of our scheme against the most general eavesdrop** strategy, thus generalizing Shor and Preskill's proof of security of BB84 to our new scheme. Up till now, most proposed proofs of security of single-particle type quantum key distribution schemes have relied heavily upon the fact that the bases are chosen uniformly, randomly and independently. Our proof removes this symmetry requirement. △ Less

Submitted 8 July, 2005; v1 submitted 13 November, 2000; originally announced November 2000.

Comments: Paper published in J. of Cryptology. Preprint version: 46 pages

Journal ref: J. of Cryptology, 18, Number 2, (2005) 133-165

Will Quantum Cryptography ever become a successful technology in the marketplace?

Authors: Hoi-Kwong Lo

Abstract: We assess the potential of quantum cryptography as a technology. We highlight the fact that academia and real world have rather different perspectives and interests. Then, we describe the various real life forces (different types of users, vendors of crypto-systems, conventional cryptographers, governments) behind the decision of the adoption (or rejection) of quantum cryptography and their diff… ▽ More We assess the potential of quantum cryptography as a technology. We highlight the fact that academia and real world have rather different perspectives and interests. Then, we describe the various real life forces (different types of users, vendors of crypto-systems, conventional cryptographers, governments) behind the decision of the adoption (or rejection) of quantum cryptography and their different interests. Various roadblocks to the widespread application of quantum cryptography are discussed. Those roadblocks can be fundamental, technological, psychological, commercial or political and many of them have nothing to do with the security of quantum key distribution. We argue that the future success of quantum cryptography as a technology in the marketplace lies in our ability to appreciate and to overcome those roadblocks and to answer real world criticisms on the subject. △ Less

Submitted 2 December, 1999; originally announced December 1999.

Comments: 6 pages, RevTex, two-column format

Journal ref: A substantially shortened and edited version appeared in Physics World, June 2000, p. 17

Classical Communication Cost in Distributed Quantum Information Processing - A generalization of Quantum Communication Complexity

Authors: Hoi-Kwong Lo

Abstract: We study the amount of classical communication needed for distributed quantum information processing. In particular, we introduce the concept of "remote preparation" of a quantum state. Given an ensemble of states, Alice's task is to help Bob in a distant laboratory to prepare a state of her choice. We find several examples of an ensemble with an entropy S where the remote preparation can be don… ▽ More We study the amount of classical communication needed for distributed quantum information processing. In particular, we introduce the concept of "remote preparation" of a quantum state. Given an ensemble of states, Alice's task is to help Bob in a distant laboratory to prepare a state of her choice. We find several examples of an ensemble with an entropy S where the remote preparation can be done with a communication cost lower than the amount (2S) required by standard teleportation. We conjecture that, for an arbitrary N-dimensional pure state, its remote preparation requires 2log_2 N bits of classical communication, as in standard teleportation. △ Less

Submitted 14 April, 2000; v1 submitted 2 December, 1999; originally announced December 1999.

Comments: Revised Version. Accepted on March 31 for publication in Physical Review A. Proof of Theorem 3 clarified. A Proviso added to the statement of Conjecture 4. Related results on randomization and private quantum channel noted

A simple proof of the unconditional security of quantum key distribution

Authors: Hoi-Kwong Lo

Abstract: Quantum key distribution is the most well-known application of quantum cryptography. Previous proposed proofs of security of quantum key distribution contain various technical subtleties. Here, a conceptually simpler proof of security of quantum key distribution is presented. The new insight is the invariance of the error rate of a teleportation channel: We show that the error rate of a teleport… ▽ More Quantum key distribution is the most well-known application of quantum cryptography. Previous proposed proofs of security of quantum key distribution contain various technical subtleties. Here, a conceptually simpler proof of security of quantum key distribution is presented. The new insight is the invariance of the error rate of a teleportation channel: We show that the error rate of a teleportation channel is independent of the signals being transmitted. This is because the non-trivial error patterns are permuted under teleportation. This new insight is combined with the recently proposed quantum to classical reduction theorem. Our result shows that assuming that Alice and Bob have fault-tolerant quantum computers, quantum key distribution can be made unconditionally secure over arbitrarily long distances even against the most general type of eavesdrop** attacks and in the presence of all types of noises. △ Less

Submitted 27 April, 1999; originally announced April 1999.

Comments: 13 pages, extended abstract. Comments will be appreciated

Journal ref: J.Phys.A34:6957-6968,2001

The classical communication cost of entanglement manipulation: Is entanglement an inter-convertible resource?

Authors: Hoi-Kwong Lo, Sandu Popescu

Abstract: Entanglement bits or ``ebits'' have been proposed as a quantitative measure of a fundamental resource in quantum information processing. For such an interpretation to be valid, it is important to show that the same number of ebits in different forms or concentrations are inter-convertible in the asymptotic limit. Here we draw attention to a very important but hitherto unnoticed aspect of entangl… ▽ More Entanglement bits or ``ebits'' have been proposed as a quantitative measure of a fundamental resource in quantum information processing. For such an interpretation to be valid, it is important to show that the same number of ebits in different forms or concentrations are inter-convertible in the asymptotic limit. Here we draw attention to a very important but hitherto unnoticed aspect of entanglement manipulation --- the classical communication cost. We construct an explicit procedure which demonstrates that for bi-partite pure states, in the asymptotic limit, entanglement can be concentrated or diluted with vanishing classical communication cost. Entanglement of bi-partite pure states is thus established as a truly inter-convertible resource. △ Less

Submitted 7 July, 1999; v1 submitted 10 February, 1999; originally announced February 1999.

Comments: 8 pages, RevTex, Accepted for Publication in Physical Review Letters

How to share a quantum secret

Authors: Richard Cleve, Daniel Gottesman, Hoi-Kwong Lo

Abstract: We investigate the concept of quantum secret sharing. In a ((k,n)) threshold scheme, a secret quantum state is divided into n shares such that any k of those shares can be used to reconstruct the secret, but any set of k-1 or fewer shares contains absolutely no information about the secret. We show that the only constraint on the existence of threshold schemes comes from the quantum "no-cloning… ▽ More We investigate the concept of quantum secret sharing. In a ((k,n)) threshold scheme, a secret quantum state is divided into n shares such that any k of those shares can be used to reconstruct the secret, but any set of k-1 or fewer shares contains absolutely no information about the secret. We show that the only constraint on the existence of threshold schemes comes from the quantum "no-cloning theorem", which requires that n < 2k, and, in all such cases, we give an efficient construction of a ((k,n)) threshold scheme. We also explore similarities and differences between quantum secret sharing schemes and quantum error-correcting codes. One remarkable difference is that, while most existing quantum codes encode pure states as pure states, quantum secret sharing schemes must use mixed states in some cases. For example, if k <= n < 2k-1 then any ((k,n)) threshold scheme must distribute information that is globally in a mixed state. △ Less

Submitted 11 January, 1999; originally announced January 1999.

Comments: 5 pages, REVTeX, submitted to PRL

Report number: LAUR98-5842

Journal ref: Phys.Rev.Lett. 83 (1999) 648-651

A quantum analog of Huffman coding

Authors: Samuel L. Braunstein, Christopher A. Fuchs, Daniel Gottesman, Hoi-Kwong Lo

Abstract: We analyze a generalization of Huffman coding to the quantum case. In particular, we notice various difficulties in using instantaneous codes for quantum communication. Nevertheless, for the storage of quantum information, we have succeeded in constructing a Huffman-coding inspired quantum scheme. The number of computational steps in the encoding and decoding processes of N quantum signals can b… ▽ More We analyze a generalization of Huffman coding to the quantum case. In particular, we notice various difficulties in using instantaneous codes for quantum communication. Nevertheless, for the storage of quantum information, we have succeeded in constructing a Huffman-coding inspired quantum scheme. The number of computational steps in the encoding and decoding processes of N quantum signals can be made to be of polylogarithmic depth by a massively parallel implementation of a quantum gate array. This is to be compared with the O (N^3) computational steps required in the sequential implementation by Cleve and DiVincenzo of the well-known quantum noiseless block coding scheme of Schumacher. We also show that O(N^2(log N)^a) computational steps are needed for the communication of quantum information using another Huffman-coding inspired scheme where the sender must disentangle her encoding device before the receiver can perform any measurements on his signals. △ Less

Submitted 18 May, 1999; v1 submitted 27 May, 1998; originally announced May 1998.

Comments: Revised version, 7 pages, two-column, RevTex. Presented at 1998 IEEE International Symposium on Information Theory

Efficient Quantum Key Distribution

Authors: M. Ardehali, H. F. Chau, Hoi-Kwong Lo

Abstract: We devise a simple modification that essentially doubles the efficiency of a well-known quantum key distribution scheme proposed by Bennett and Brassard (BB84). Our scheme assigns significantly different probabilities for the different polarization bases during both transmission and reception to reduce the fraction of discarded data. The actual probabilities used in the scheme are announced in p… ▽ More We devise a simple modification that essentially doubles the efficiency of a well-known quantum key distribution scheme proposed by Bennett and Brassard (BB84). Our scheme assigns significantly different probabilities for the different polarization bases during both transmission and reception to reduce the fraction of discarded data. The actual probabilities used in the scheme are announced in public. As the number of transmitted signals increases, the efficiency of our scheme can be made to approach 100%. An eavesdropper may try to break such a scheme by eavesdrop** mainly along the predominant basis. To defeat such an attack, we perform a refined analysis of accepted data: Instead of lum** all the accepted data together to estimate a single error rate, we separate the accepted data into various subsets according to the basis employed and estimate an error rate for each subset {\it individually}. △ Less

Submitted 29 January, 1999; v1 submitted 2 March, 1998; originally announced March 1998.

Comments: Minor revisions for clarification. One author dropped

Unconditional Security Of Quantum Key Distribution Over Arbitrarily Long Distances

Authors: Hoi-Kwong Lo, H. F. Chau

Abstract: Quantum key distribution is widely thought to offer unconditional security in communication between two users. Unfortunately, a widely accepted proof of its security in the presence of source, device and channel noises has been missing. This long-standing problem is solved here by showing that, given fault-tolerant quantum computers, quantum key distribution over an arbitrarily long distance of… ▽ More Quantum key distribution is widely thought to offer unconditional security in communication between two users. Unfortunately, a widely accepted proof of its security in the presence of source, device and channel noises has been missing. This long-standing problem is solved here by showing that, given fault-tolerant quantum computers, quantum key distribution over an arbitrarily long distance of a realistic noisy channel can be made unconditionally secure. The proof is reduced from a noisy quantum scheme to a noiseless quantum scheme and then from a noiseless quantum scheme to a noiseless classical scheme, which can then be tackled by classical probability theory. △ Less

Submitted 6 December, 1999; v1 submitted 2 March, 1998; originally announced March 1998.

Comments: This reprint version contains the same material as the one published in Science 283, 2050-2056 (1999). We also include the refereed supplementary Notes (as in http://www.sciencemag.org/feature/data/984035.shl) explicitly in the appendix for easy reference

Journal ref: Science 283 (1999) 2050-2056

Why Quantum Bit Commitment And Ideal Quantum Coin Tossing Are Impossible

Authors: H. -K. Lo, H. F. Chau

Abstract: There had been well known claims of unconditionally secure quantum protocols for bit commitment. However, we, and independently Mayers, showed that all proposed quantum bit commitment schemes are, in principle, insecure because the sender, Alice, can almost always cheat successfully by using an Einstein-Podolsky-Rosen (EPR) type of attack and delaying her measurements. One might wonder if secure… ▽ More There had been well known claims of unconditionally secure quantum protocols for bit commitment. However, we, and independently Mayers, showed that all proposed quantum bit commitment schemes are, in principle, insecure because the sender, Alice, can almost always cheat successfully by using an Einstein-Podolsky-Rosen (EPR) type of attack and delaying her measurements. One might wonder if secure quantum bit commitment protocols exist at all. We answer this question by showing that the same type of attack by Alice will, in principle, break any bit commitment scheme. The cheating strategy generally requires a quantum computer. We emphasize the generality of this ``no-go theorem'': Unconditionally secure bit commitment schemes based on quantum mechanics---fully quantum, classical or quantum but with measurements---are all ruled out by this result. Since bit commitment is a useful primitive for building up more sophisticated protocols such as zero-knowledge proofs, our results cast very serious doubt on the security of quantum cryptography in the so-called ``post-cold-war'' applications. We also show that ideal quantum coin tossing is impossible because of the EPR attack. This no-go theorem for ideal quantum coin tossing may help to shed some lights on the possibility of non-ideal protocols. △ Less

Submitted 26 November, 1997; originally announced November 1997.

Comments: We emphasize the generality of this "no-go theorem". All bit commitment schemes---fully quantum, classical and quantum but with measurements---are shown to be necessarily insecure. Accepted for publication in a special issue of Physica D. About 18 pages in elsart.sty. This is an extended version of an earlier manuscript (quant-ph/9605026) which has appeared in the proceedings of PHYSCOMP'96

Journal ref: Physica D120 (1998) 177-187

Making An Empty Promise With A Quantum Computer

Authors: H. F. Chau, H. -K. Lo

Abstract: Alice has made a decision in her mind. While she does not want to reveal it to Bob at this moment, she would like to convince Bob that she is committed to this particular decision and that she cannot change it at a later time. Is there a way for Alice to get Bob's trust? Until recently, researchers had believed that the above task can be performed with the help of quantum mechanics. And the secu… ▽ More Alice has made a decision in her mind. While she does not want to reveal it to Bob at this moment, she would like to convince Bob that she is committed to this particular decision and that she cannot change it at a later time. Is there a way for Alice to get Bob's trust? Until recently, researchers had believed that the above task can be performed with the help of quantum mechanics. And the security of the quantum scheme lies on the uncertainty principle. Nevertheless, such optimism was recently shattered by Mayers and by us, who found that Alice can always change her mind if she has a quantum computer. Here, we survey this dramatic development and its implications on the security of other quantum cryptographic schemes. △ Less

Submitted 7 October, 1997; v1 submitted 27 September, 1997; originally announced September 1997.

Comments: We have revised our paper to emphasize that the result applies to all bit commitment schemes (including ones with measurements). Besides, some minor inaccuracy was corrected

Report number: HKUPHYS-HFC-03

Journal ref: Fortsch.Phys. 46 (1998) 507-520

Concentrating entanglement by local actions---beyond mean values

Authors: Hoi-Kwong Lo, Sandu Popescu

Abstract: Suppose two distant observers Alice and Bob share a pure bipartite quantum state. By applying local operations and communicating with each other using a classical channel, Alice and Bob can manipulate it into some other states. Previous investigations of entanglement manipulations have been largely limited to a small number of strategies and their average outcomes. Here we consider a general ent… ▽ More Suppose two distant observers Alice and Bob share a pure bipartite quantum state. By applying local operations and communicating with each other using a classical channel, Alice and Bob can manipulate it into some other states. Previous investigations of entanglement manipulations have been largely limited to a small number of strategies and their average outcomes. Here we consider a general entanglement manipulation strategy and go beyond the average property. For a pure entangled state shared between two separated persons Alice and Bob, we show that the mathematical interchange symmetry of the Schmidt decomposition can be promoted into a physical symmetry between the actions of Alice and Bob. Consequently, the most general (multi-step two-way-communications) strategy of entanglement manipulation of a pure state is, in fact, equivalent to a strategy involving only a single (generalized) measurement by Alice followed by one-way communications of its result to Bob. We also prove that strategies with one-way communications are generally more powerful than those without communications. In summary, one-way communications is necessary and sufficient for the entanglement manipulations of a pure bipartite state. The supremum probability of obtaining a maximally entangled state (of any dimension) from an arbitrary state is determined and a strategy for achieving this probability is constructed explicitly. One important question is whether collective manipulations in quantum mechanics can greatly enhance the probability of large deviations from the average behavior. We answer this question in the negative for a specific problem. △ Less

Submitted 8 July, 1999; v1 submitted 20 July, 1997; originally announced July 1997.

Comments: Substantially revised for clarity, Results unchanged, RevTex, 16 pages. Warning: The abstract posted on quant-ph is a truncated version which satisfies the 24-line limit

Insecurity of Quantum Secure Computations

Authors: Hoi-Kwong Lo

Abstract: It had been widely claimed that quantum mechanics can protect private information during public decision in for example the so-called two-party secure computation. If this were the case, quantum smart-cards could prevent fake teller machines from learning the PIN (Personal Identification Number) from the customers' input. Although such optimism has been challenged by the recent surprising discov… ▽ More It had been widely claimed that quantum mechanics can protect private information during public decision in for example the so-called two-party secure computation. If this were the case, quantum smart-cards could prevent fake teller machines from learning the PIN (Personal Identification Number) from the customers' input. Although such optimism has been challenged by the recent surprising discovery of the insecurity of the so-called quantum bit commitment, the security of quantum two-party computation itself remains unaddressed. Here I answer this question directly by showing that all ``one-sided'' two-party computations (which allow only one of the two parties to learn the result) are necessarily insecure. As corollaries to my results, quantum one-way oblivious password identification and the so-called quantum one-out-of-two oblivious transfer are impossible. I also construct a class of functions that cannot be computed securely in any ``two-sided'' two-party computation. Nevertheless, quantum cryptography remains useful in key distribution and can still provide partial security in ``quantum money'' proposed by Wiesner. △ Less

Submitted 28 April, 1997; v1 submitted 19 November, 1996; originally announced November 1996.

Comments: The discussion on the insecurity of even non-ideal protocols has been greatly extended. Other technical points are also clarified. Version accepted for publication in Phys. Rev. A

Why quantum bit commitment and ideal quantum coin tossing are impossible

Authors: Hoi-Kwong Lo, H. F. Chau

Abstract: There had been well known claims of ``provably unbreakable'' quantum protocols for bit commitment and coin tossing. However, we, and independently Mayers, showed that all proposed quantum bit commitment (and therefore coin tossing) schemes are, in principle, insecure because the sender, Alice, can always cheat successfully by using an EPR-type of attack and delaying her measurements. One might w… ▽ More There had been well known claims of ``provably unbreakable'' quantum protocols for bit commitment and coin tossing. However, we, and independently Mayers, showed that all proposed quantum bit commitment (and therefore coin tossing) schemes are, in principle, insecure because the sender, Alice, can always cheat successfully by using an EPR-type of attack and delaying her measurements. One might wonder if secure quantum bit commitment and coin tossing protocols exist at all. Here we prove that an EPR-type of attack by Alice will, in principle, break {\em any} realistic quantum bit commitment and {\em ideal} coin tossing scheme. Therefore, provided that Alice has a quantum computer and is capable of storing quantum signals for an arbitrary length of time, all those schemes are insecure. Since bit commitment and coin tossing are useful primitives for building up more sophisticated protocols such as zero-knowledge proofs, our results cast very serious doubt on the security of quantum cryptography in the so-called ``post-cold-war'' applications. △ Less

Submitted 22 August, 1996; v1 submitted 16 May, 1996; originally announced May 1996.

Comments: Replaced to give appropriate reference to D. Mayers' works and to fix a crucial bug in the original proof of the impossibility of ideal quantum coin tossing. Other minor changes are also made to clarify the discussion

Report number: IASSNS-HEP-96/50

How much does it cost to teleport?

Authors: H. F. Chau, H. -K. Lo

Abstract: We show that the entropy of entanglement of a state characterizes its ability to teleport. In particular, in order to teleport faithfully an unknown quantum $N$-state, the two users must share an entangled state with at least $\log_2 N$ bits entropy of entanglement. We also note that the maximum capacity for a mixed state ${\cal M}$ to teleport equals the maximum amount of entanglement entropy t… ▽ More We show that the entropy of entanglement of a state characterizes its ability to teleport. In particular, in order to teleport faithfully an unknown quantum $N$-state, the two users must share an entangled state with at least $\log_2 N$ bits entropy of entanglement. We also note that the maximum capacity for a mixed state ${\cal M}$ to teleport equals the maximum amount of entanglement entropy that can be distilled out from ${\cal M}$. Our result, therefore, provides an alternative interpretation for entanglement purification. △ Less

Submitted 16 May, 1996; originally announced May 1996.

Comments: 5 pages, extended abstract submitted to PHYSCOMP96

Report number: IASSNS-HEP-96/51

Is Quantum Bit Commitment Really Possible?

Authors: Hoi-Kwong Lo, H. F. Chau

Abstract: We show that all proposed quantum bit commitment schemes are insecure because the sender, Alice, can almost always cheat successfully by using an Einstein-Podolsky-Rosen type of attack and delaying her measurement until she opens her commitment. We show that all proposed quantum bit commitment schemes are insecure because the sender, Alice, can almost always cheat successfully by using an Einstein-Podolsky-Rosen type of attack and delaying her measurement until she opens her commitment. △ Less

Submitted 2 April, 1997; v1 submitted 4 March, 1996; originally announced March 1996.

Comments: Major revisions to include a more extensive introduction and an example of bit commitment. Overlap with independent work by Mayers acknowledged. More recent works by Mayers, by Lo and Chau and by Lo are also noted. Accepted for publication in Phys. Rev. Lett

Journal ref: Phys. Rev. Lett. 78, 3410 (1997)

Quantum Cryptography in Noisy Channels

Authors: Hoi-Kwong Lo, H. F. Chau

Abstract: We provide a complete proof of the security of quantum cryptography against any eavesdrop** attack including coherent measurements even in the presence of noise. Polarization-based cryptographic schemes are shown to be equivalent to EPR-based schemes. We also show that the performance of a noisy channel approaches that of a noiseless one as the error rate tends to zero. (i.e., the secrecy capa… ▽ More We provide a complete proof of the security of quantum cryptography against any eavesdrop** attack including coherent measurements even in the presence of noise. Polarization-based cryptographic schemes are shown to be equivalent to EPR-based schemes. We also show that the performance of a noisy channel approaches that of a noiseless one as the error rate tends to zero. (i.e., the secrecy capacity $C_s (ε) \to C_s (0)$ as $ε\to 0$.) One implication of our results is that one can {\it double} the efficiency of a most well-known quantum cryptographic scheme proposed by Bennett and Brassard simply by assigning vastly different probabilities to the two conjugate bases. △ Less

Submitted 20 November, 1995; originally announced November 1995.

Comments: 22 pages, REVTEX

Report number: IASSNS-HEP-95/93

Primality Test Via Quantum Factorization

Authors: H. F. Chau, H. -K. Lo

Abstract: We consider a probabilistic quantum implementation of a variable of the Pocklington-Lehmer $N-1$ primality test using Shor's algorithm. O($\log^3 N \log\log N \log\log\log N$) elementary q-bit operations are required to determine the primality of a number $N$, making it (asymptotically) the fastest known primality test. Thus, the potential power of quantum mechanical computers is once again reve… ▽ More We consider a probabilistic quantum implementation of a variable of the Pocklington-Lehmer $N-1$ primality test using Shor's algorithm. O($\log^3 N \log\log N \log\log\log N$) elementary q-bit operations are required to determine the primality of a number $N$, making it (asymptotically) the fastest known primality test. Thus, the potential power of quantum mechanical computers is once again revealed. △ Less

Submitted 1 December, 1996; v1 submitted 5 August, 1995; originally announced August 1995.

Comments: Using REVTEX 3.0, AMS fonts required. Typos corrected. To appear in Int.J.Mod.Phys.C

Report number: IASSNS-HEP-95/69

One-way Functions In Reversible Computations

Authors: H. F. Chau, H. -K. Lo

Abstract: One-way functions are used in modern cryto-systems as doortraps because their inverse functions are supposed to be difficult to compute. Nonetheless with the discovery of reversible computation, it seems that one may break a one-way function by running a reversible computer backward. Here, we argue that reversible computation alone poses no threat to the existence of one-way functions because of… ▽ More One-way functions are used in modern cryto-systems as doortraps because their inverse functions are supposed to be difficult to compute. Nonetheless with the discovery of reversible computation, it seems that one may break a one-way function by running a reversible computer backward. Here, we argue that reversible computation alone poses no threat to the existence of one-way functions because of the generation of ``garbage bits'' during computations. Consequently, we prove a necessary and sufficient condition for a one-to-one function to be a one-way in terms of the growth rate of the total number of possible garbage bit configurations with the input size. △ Less

Submitted 1 December, 1996; v1 submitted 8 June, 1995; originally announced June 1995.

Comments: In REVTEX 3.0, with one figure. Minor changes. To appear in Cryptologia

Report number: IASSNS-HEP-95/47

Wavefunctions for Non-Abelian Vortices

Authors: Kai-Ming Lee, Hoi-Kwong Lo

Abstract: We construct exact wavefunctions of two vortices on a plane, a single vortex on the cylinder and a vortex on the torus. In each case, the physics is shown to be equivalent to a particle moving in a covering space, something simple to solve in those examples. We describe how our solutions fit into the general theory of quantum mechanics of $N$ particles on a two-dimensional space and attribute ou… ▽ More We construct exact wavefunctions of two vortices on a plane, a single vortex on the cylinder and a vortex on the torus. In each case, the physics is shown to be equivalent to a particle moving in a covering space, something simple to solve in those examples. We describe how our solutions fit into the general theory of quantum mechanics of $N$ particles on a two-dimensional space and attribute our success to the fact that the fundamental groups are Abelian in those simple cases that we are considering. △ Less

Submitted 18 January, 1997; v1 submitted 17 May, 1995; originally announced May 1995.

Comments: Reference added

Report number: IASSNS-HEP-95/34 ; OUTP-95-20P

Quantum Coding Theorem for Mixed States

Authors: Hoi-Kwong Lo

Abstract: We prove a theorem for coding mixed-state quantum signals. For a class of coding schemes, the von Neumann entropy $S$ of the density operator describing an ensemble of mixed quantum signal states is shown to be equal to the number of spin-$1/2$ systems necessary to represent the signal faithfully. This generalizes previous works on coding pure quantum signal states and is analogous to the Shanno… ▽ More We prove a theorem for coding mixed-state quantum signals. For a class of coding schemes, the von Neumann entropy $S$ of the density operator describing an ensemble of mixed quantum signal states is shown to be equal to the number of spin-$1/2$ systems necessary to represent the signal faithfully. This generalizes previous works on coding pure quantum signal states and is analogous to the Shannon's noiseless coding theorem of classical information theory. We also discuss an example of a more general class of coding schemes which {\em beat} the limit set by our theorem. △ Less

Submitted 18 April, 1995; v1 submitted 4 April, 1995; originally announced April 1995.

Comments: Overlap with some unpublished work noted. Limitation clarified. 11 pages, REVTEX, amsfonts

Report number: IASSNS-HEP-95/23

Aharonov-Bohm Order Parameters for Non-Abelian Gauge Theories

Authors: Hoi-Kwong Lo

Abstract: The Aharonov-Bohm effect has been invoked to probe the phase structure of a gauge theory. Yet in the case of non-Abelian gauge theories, it proves difficult to formulate a general procedure that unambiguously specifies the realization of the gauge symmetry, e.g. the unbroken subgroup. In this paper, we propose a set of order parameters that will do the job. We articulate the fact that any useful… ▽ More The Aharonov-Bohm effect has been invoked to probe the phase structure of a gauge theory. Yet in the case of non-Abelian gauge theories, it proves difficult to formulate a general procedure that unambiguously specifies the realization of the gauge symmetry, e.g. the unbroken subgroup. In this paper, we propose a set of order parameters that will do the job. We articulate the fact that any useful Aharonov-Bohm experiment necessarily proceeds in two stages: calibration and measurement. World sheets of virtual cosmic string loops can wrap around test charges, thus changing their states relative to other charges in the universe. Consequently, repeated flux measurements with test charges will not necessarily agree. This was the main stumbling block to previous attempts to construct order parameters for non-Abelian gauge theories. In those works, the particles that one uses for calibration and subsequent measurement are stored in {\em separate} ``boxes''. By storing all test particles in the {\em same} ``box'', we show how quantum fluctuations can be overcome. The importance of gauge fixing is also emphasized. △ Less

Submitted 28 September, 1995; v1 submitted 14 February, 1995; originally announced February 1995.

Comments: How quantum fluctuations destroy the coherence between various strings are discussed explicitly. That linked Wilson loops are useful order parameters for a Maxwell- Chern-Simons-Higgs theory is noted. The generality of our results is emphasized. Problems with figures have also been fixed. 43 pages, 13 figures, Revtex, accepted for publication in PRD

Report number: IASSNS-HEP-95/8

Journal ref: Phys.Rev. D52 (1995) 7247-7264

Elusive Order Parameters for Non-Abelian Gauge Theories

Authors: Hoi-Kwong Lo

Abstract: In this Letter, we construct a set of order parameters for non-Abelian gauge theories which probe directly the unbroken group and are free of the deficiencies caused by quantum fluctuations and gauge fixing which have plagued all previous attempts. These operators can be used to map out the phase diagram of a non-Abelian gauge theory. In this Letter, we construct a set of order parameters for non-Abelian gauge theories which probe directly the unbroken group and are free of the deficiencies caused by quantum fluctuations and gauge fixing which have plagued all previous attempts. These operators can be used to map out the phase diagram of a non-Abelian gauge theory. △ Less

Submitted 28 September, 1995; v1 submitted 14 February, 1995; originally announced February 1995.

Comments: companion paper to hep-th/9502080. Problem with figures fixed. 11 pages, 2 figures, Revtex

Report number: IASSNS-HEP-95/4

Order Parameters for Non-Abelian Gauge Theories

Authors: Hoi-Kwong Lo

Abstract: Owing to subtle issues concerning quantum fluctuations and gauge fixing, a formulation of a general procedure to specify the realization of non-Abelian gauge symmetry has evaded all earlier attempts. In this Letter, we discuss these subtleties and present two sets of order parameters for non-Abelian gauge theories. Such operators directly probe the manifest low energy symmetry group and are cruc… ▽ More Owing to subtle issues concerning quantum fluctuations and gauge fixing, a formulation of a general procedure to specify the realization of non-Abelian gauge symmetry has evaded all earlier attempts. In this Letter, we discuss these subtleties and present two sets of order parameters for non-Abelian gauge theories. Such operators directly probe the manifest low energy symmetry group and are crucial for the study of the phase diagram of a non-Abelian gauge theory. △ Less

Submitted 17 November, 1994; originally announced November 1994.

Comments: 10p, revtex, 3 figures available upon request

Report number: IASSNS-HEP-94/92

Is baryon number violated when electroweak strings intercommute?

Authors: Hoi-Kwong Lo

Abstract: We reexamine the self-helicity and the intercommutation of electroweak strings. A plausible argument for baryon number conservation when electroweak strings intercommute is presented. The connection between a segment of electroweak strings and a sphaleron is also discussed. We reexamine the self-helicity and the intercommutation of electroweak strings. A plausible argument for baryon number conservation when electroweak strings intercommute is presented. The connection between a segment of electroweak strings and a sphaleron is also discussed. △ Less

Submitted 14 October, 1994; v1 submitted 15 September, 1994; originally announced September 1994.

Comments: CALT-68-1948, 11 pages, 5 figures available upon request. Replaced with revised version. (Request should be sent to [email protected])

Journal ref: Phys. Rev. D 51, 7152 (1995)

Scattering from Electroweak Strings

Authors: Hoi-Kwong LO

Abstract: The scattering of a charged fermion from an electroweak string is studied. Owing to an amplification of the wave function at the core radius, the cross sections for helicity flip processes can be largely enhanced. For $0 <\sin^2 θ_w < 1/2 $ (where $θ_w$ is the Weinberg angle), $ω\sim k \sim m_e$ and $kR \ll 1$, we show that the helicity flip differential cross section for electrons is of the ord… ▽ More The scattering of a charged fermion from an electroweak string is studied. Owing to an amplification of the wave function at the core radius, the cross sections for helicity flip processes can be largely enhanced. For $0 <\sin^2 θ_w < 1/2 $ (where $θ_w$ is the Weinberg angle), $ω\sim k \sim m_e$ and $kR \ll 1$, we show that the helicity flip differential cross section for electrons is of the order $m_e^{-1}$ and is independent of angle. We compare our results with those obtained in calculations of rates for baryon number violating processes in the core of a cosmic string. In that case, while the enhancement is a general phenomenon, its actual magnitude is extremely sensitive to the fractional flux carried by the string core. Apart from showing the existence of a similar enhancement effect for non-topological strings, our results indicate that in some models the magnitude of enhancement can be rendered much less sensitive to the value of the parameters in the theories. Scattering of particles off semi-local strings and axion strings are also considered. △ Less

Submitted 26 April, 1994; v1 submitted 15 April, 1994; originally announced April 1994.

Comments: Replaced with revised version "Tex with phyzzx, 18 pages, CALT-68-1921 Non-trivial changes made: discussion on axion strings corrected. Overlap with a recently revised version of hep-ph/9311202 noted

Journal ref: Phys.Rev. D51 (1995) 802-809

Complementarity in Wormhole Chromodynamics

Authors: Hoi-Kwong Lo, Kai-Ming Lee, John Preskill

Abstract: The electric charge of a wormhole mouth and the magnetic flux ``linked'' by the wormhole are non-commuting observables, and so cannot be simultaneously diagonalized. We use this observation to resolve some puzzles in wormhole electrodynamics and chromodynamics. Specifically, we analyze the color electric field that results when a colored object traverses a wormhole, and we discuss the measuremen… ▽ More The electric charge of a wormhole mouth and the magnetic flux ``linked'' by the wormhole are non-commuting observables, and so cannot be simultaneously diagonalized. We use this observation to resolve some puzzles in wormhole electrodynamics and chromodynamics. Specifically, we analyze the color electric field that results when a colored object traverses a wormhole, and we discuss the measurement of the wormhole charge and flux using Aharonov-Bohm interference effects. We suggest that wormhole mouths may obey conventional quantum statistics, contrary to a recent proposal by Strominger. △ Less

Submitted 9 August, 1993; originally announced August 1993.

Comments: 12 pages and 2 figures, phyzzx, CALT-68-1880

Journal ref: Phys.Lett. B318 (1993) 287-292

Exact Wavefunctions for non-Abelian Chern-Simons Particles

Authors: Hoi-Kwong Lo

Abstract: Exact wavefunctions for N non-Abelian Chern-Simons (NACS) particles are obtained by the ladder operator approach. The same method has previously been applied to construct exact wavefunctions for multi-anyon systems. The two distinct base states of the NACS particles that we use are multi-valued and are defined in terms of path ordered line integrals. Only strings of operators that preserve the m… ▽ More Exact wavefunctions for N non-Abelian Chern-Simons (NACS) particles are obtained by the ladder operator approach. The same method has previously been applied to construct exact wavefunctions for multi-anyon systems. The two distinct base states of the NACS particles that we use are multi-valued and are defined in terms of path ordered line integrals. Only strings of operators that preserve the monodromy properties of these base states are allowed to act on them to generate new states. △ Less

Submitted 16 June, 1993; originally announced June 1993.

Comments: 19 pages, CALT-68-1875

Journal ref: Phys.Rev.D48:4999-5005,1993

Non-abelian vortices and non-abelian statistics

Authors: Hoi-Kwong Lo, John Preskill

Abstract: We study the interactions of non-abelian vortices in two spatial dimensions. These interactions have novel features, because the Aharonov-Bohm effect enables a pair of vortices to exchange quantum numbers. The cross section for vortex-vortex scattering is typically a multi-valued function of the scattering angle. There can be an exchange contribution to the vortex-vortex scattering amplitude tha… ▽ More We study the interactions of non-abelian vortices in two spatial dimensions. These interactions have novel features, because the Aharonov-Bohm effect enables a pair of vortices to exchange quantum numbers. The cross section for vortex-vortex scattering is typically a multi-valued function of the scattering angle. There can be an exchange contribution to the vortex-vortex scattering amplitude that adds coherently with the direct amplitude, even if the two vortices have distinct quantum numbers. Thus two vortices can be ``indistinguishable'' even though they are not the same. △ Less

Submitted 1 June, 1993; originally announced June 1993.

Comments: 38 pages and 6 figures, REVTEX (version 2) and epsf.tex, CALT-68-1867

Journal ref: Phys.Rev. D48 (1993) 4821-4834

Topological Approach to Alice Electrodynamics

Authors: Martin Bucher, Hoi-Kwong Lo, John Preskill

Abstract: We analyze the unlocalized ``Cheshire charge'' carried by ``Alice strings.'' The magnetic charge on a string loop is carefully defined, and the transfer of magnetic charge from a monopole to a string loop is analyzed using global topological methods. A semiclassical theory of electric charge transfer is also described. We analyze the unlocalized ``Cheshire charge'' carried by ``Alice strings.'' The magnetic charge on a string loop is carefully defined, and the transfer of magnetic charge from a monopole to a string loop is analyzed using global topological methods. A semiclassical theory of electric charge transfer is also described. △ Less

Submitted 16 December, 1991; originally announced December 1991.

Comments: (26 pp)

Journal ref: Nucl.Phys. B386 (1992) 3-26