Paper 2020/1401

Quantum Garbled Circuits

Zvika Brakerski and Henry Yuen


We present a garbling scheme for quantum circuits, thus achieving a decomposable randomized encoding scheme for quantum computation. Specifically, we show how to compute an encoding of a given quantum circuit and quantum input, from which it is possible to derive the output of the computation and nothing else. In the classical setting, garbled circuits (and randomized encodings in general) are a versatile cryptographic tool with many applications such as secure multiparty computation, delegated computation, depth-reduction of cryptographic primitives, complexity lower-bounds, and more. However, a quantum analogue for garbling general circuits was not known prior to this work. We hope that our quantum randomized encoding scheme can similarly be useful for applications in quantum computing and cryptography. To illustrate the usefulness of quantum randomized encoding, we use it to design a conceptually-simple zero-knowledge (ZK) $\Sigma$-protocol for the complexity class QMA. Our protocol has a single-bit challenge, and allows the inputs to be delayed to the last round. The only previously-known ZK $\Sigma$-protocol for QMA is due to Broadbent and Grilo (FOCS 2020), which does not have the aforementioned properties.

Available format(s)
Publication info
Preprint. MINOR revision.
Randomized EncodingGarbled CircuitsQuantum ComputingZero-Knowledge
Contact author(s)
zvika brakerski @ weizmann ac il
2020-11-10: received
Short URL
Creative Commons Attribution


      author = {Zvika Brakerski and Henry Yuen},
      title = {Quantum Garbled Circuits},
      howpublished = {Cryptology ePrint Archive, Paper 2020/1401},
      year = {2020},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.