In modern cryptography, block encryption is a fundamental cryptographic primitive. However, it is impossible for block encryption to achieve the same security as one-time pad. Quantum mechanics has changed the modern cryptography, and lots of researches have shown that quantum cryptography can outperform the limitation of traditional cryptography.This article proposes a new constructive mode for private quantum encryption, named E HE, which is a very simple method to construct quantum encryption from classical primitive. Based on E HE mode, we construct a quantum block encryption (QBE) scheme from pseudorandom functions. If the pseudorandom functions are standard secure, our scheme is indistinguishable encryption under chosen plaintext attack. If the pseudorandom functions are permutation on the key space, our scheme can achieve perfect security. In our scheme, the key can be reused and the randomness cannot, so a 2n-bit key can be used in an exponential number of encryptions, where the randomness will be refreshed in each time of encryption. Thus 2n-bit key can perfectly encrypt O(n2 n ) qubits, and the perfect secrecy would not be broken if the 2n-bit key is reused for only exponential times.Comparing with quantum one-time pad (QOTP), our scheme can be the same secure as QOTP, and the secret key can be reused (no matter whether the eavesdropping exists or not). Thus, the limitation of perfectly secure encryption (Shannon's theory) is broken in the quantum setting. Moreover, our scheme can be viewed as a positive answer to the open problem in quantum cryptography "how to unconditionally reuse or recycle the whole key of private-key quantum encryption". In order to physically implement the QBE scheme, we only need to implement two kinds of single-qubit gates (Pauli X gate and Hadamard gate), so it is within reach of current quantum technology.
Index TermsQuantum cryptography, quantum encryption, block encryption, quantum pseudorandom functions, perfect security.
I. INTRODUCTIONT HE combination of quantum mechanics and information science forms a new science -quantum information science, in which the information extends to quantum information. The requirement of processing quantum information occurs, and we have to develop quantum cryptographic technology for quantum information, e.g. encryption of quantum information. Since the quantum information can be seen as an extension of classical information in complex Hilbert space, the cryptographic schemes for quantum information are suitable for classical information, but not vice versa.Quantum information encryption is a kind of basic quantum cryptographic primitive, especially the quantum one-time pad (QOTP), which has been applied in various quantum cryptographic schemes. For example, the quantum message authentication (QMA) is applied in the constructions of secure multiparty quantum computation [1] and quantum interactive proof [2], and the authenticity of QMA can be guaranteed by quantum encryption [3].QOTP (or private quantum channel) [4]-[7] is the first kind ...