← Latest papers
⚛️ quantum physics

Derivatives of Quantum Randomness: Separating Pseudorandom Unitaries from Pseudorandom (Function-like) States

This paper establishes a fundamental unitary oracle separation between pseudorandom function-like state generators (PRFSGs) and pseudorandom unitaries (PRUs) by demonstrating that even the strongest state-based pseudorandomness does not imply unitary pseudorandomness, a result proven by analyzing the inherently low-rank derivatives of the map from oracle states to implemented unitaries.

Original authors: Minki Hhan

Published 2026-09-15
📖 8 min read🧠 Deep dive

Original authors: Minki Hhan

Original paper licensed under CC BY 4.0 (http://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer

In the quiet, abstract world of quantum computing, researchers are constantly hunting for a specific kind of digital illusion: the ability to make something look completely random to an observer, even though it was created by a simple, hidden rule. This concept, known as pseudorandomness, is the backbone of modern cryptography. In the classical world, where computers process bits of information, we have well-understood tools to create these illusions. We can generate random-looking strings of numbers or functions that behave unpredictably, yet are reproducible if you know the secret key. These tools allow us to build secure locks for our digital lives.

However, the quantum world operates under different laws. Instead of simple bits, quantum computers manipulate delicate states of matter that can exist in multiple configurations at once. This opens the door to new types of randomness, but it also creates a confusing landscape. Scientists have discovered several ways to generate these quantum illusions. Some methods create random-looking quantum states, which are like snapshots of a system. Others create random-looking transformations, which are like the actions that change a system from one state to another. For a long time, it was unclear whether these two types of tools were fundamentally linked. Could a method that creates a random-looking snapshot be used to build a machine that performs a random-looking action? Or are they entirely separate phenomena, like apples and oranges, that cannot be converted into one another?

A researcher at the Korea Advanced Institute of Science and Technology, Minki Hhan, has now drawn a sharp line between these two concepts. In a new study, Hhan proves that it is possible to have a world where you can easily create random-looking quantum snapshots, but where it is mathematically impossible to build a machine that performs a random-looking action. This finding settles a long-standing question about the structure of quantum security. It reveals that the ability to generate a random state does not automatically grant the power to perform a random transformation. The two are distinct capabilities, and one does not imply the other, even when the researcher is allowed to use every trick in the quantum book, including extra memory space and complex, non-standard operations.

To understand how this separation was found, imagine a vast library of books. In this library, a "pseudorandom function-like state generator" is a machine that, when given a specific code, produces a single book that looks like it was written by a chaotic, random process. A "pseudorandom unitary," on the other hand, is a machine that, when given a code, performs a complex, random shuffle of the entire library's contents. The question was: if you have a machine that can produce these random-looking books, can you use it to build the shuffling machine? Intuitively, one might think that if you can create the parts, you can assemble the whole. But Hhan's work shows that this intuition fails in the quantum realm.

The proof relies on a clever mathematical perspective that treats the construction of these quantum machines as a smooth, continuous map. Instead of looking at the machine as a rigid block of code, Hhan viewed it as a landscape where small changes in the input lead to small changes in the output. By studying the "slope" or the rate of change of this landscape, the researcher discovered a hidden weakness in any attempt to build a random shuffling machine using only random state generators. The mathematical analysis showed that the slope of this landscape is inherently flat and limited. It is as if the machine is trying to climb a hill, but the terrain is so flat that it cannot gain enough height to reach the peak of true randomness.

This flatness is a direct consequence of how the machine interacts with the quantum states. The machine that generates random states only needs to operate on a tiny, low-dimensional slice of the vast quantum space. However, a true random shuffling machine must act on the entire, massive space. When the researcher tried to force the small-slice machine to act on the whole space, the mathematical "derivative"—the measure of how sensitive the output is to changes in the input—remained too small. This lack of sensitivity means the output of the machine is too predictable. It concentrates around a single, average behavior rather than spreading out into the wild, chaotic distribution that a truly random machine would produce.

To make this concrete, the researcher constructed a specific scenario using a "common-Haar function-like state" oracle. This is a theoretical tool that provides a supply of random quantum states. In this scenario, the researcher showed that while a machine could successfully generate random-looking states using this tool, any attempt to use those states to build a random shuffling machine would fail. The resulting machine would always behave in a way that a clever observer could distinguish from a truly random one. The observer could detect that the machine was not truly random because its behavior was too concentrated, too smooth, and lacking the necessary chaotic variation.

The study also addressed a potential loophole. Critics might argue that the failure only happens because the machine is restricted in how much extra memory it can use. Perhaps if the machine were allowed to use a massive amount of extra space, it could overcome the flatness of the landscape. Hhan's proof explicitly rules this out. The separation holds even when the machine is allowed to use an arbitrary number of extra memory units and even when the machine is allowed to be imperfect or non-unitary. The fundamental distinction remains: the ability to generate a random state does not imply the ability to perform a random transformation.

This result has significant implications for the future of quantum cryptography. For years, researchers have been trying to build secure quantum systems by linking these different types of randomness together, assuming that if one exists, the others must follow. This new finding suggests that the path to secure quantum systems is more fragmented than previously thought. It means that to build a truly secure quantum lock, we cannot simply rely on the tools that generate random states. We must find entirely new methods to create the random transformations that protect our data.

The work also highlights a deeper difference between preparing a quantum state and performing a quantum operation. In the quantum world, creating a specific, random-looking configuration is a fundamentally different task from creating a machine that can randomly rearrange any configuration. The paper demonstrates that these are not just different steps in the same process, but separate capabilities that require different resources. This distinction is not a minor technicality; it is a fundamental feature of how quantum information behaves.

By using a technique that analyzes the derivatives of these quantum maps, the researcher provided a new way to look at the structure of quantum randomness. This approach, which treats the construction of quantum algorithms as a geometric problem, offers a powerful new lens for studying the limits of what quantum computers can do. It suggests that there are inherent geometric constraints on how quantum information can be manipulated, constraints that prevent certain types of randomness from being generated from others.

The study does not claim that quantum pseudorandomness is impossible. On the contrary, it confirms that these tools exist. However, it clarifies the boundaries of their power. It tells us that we cannot assume that the existence of one type of quantum randomness guarantees the existence of another. This clarity is essential for building the next generation of quantum technologies. It forces researchers to be more precise about what they can and cannot build, ensuring that the foundations of quantum security are not built on shaky assumptions.

In the end, the paper reveals a landscape of quantum possibilities that is more complex and nuanced than a simple hierarchy. It shows that the quantum world is not a single, unified structure where one tool can be easily converted into another. Instead, it is a collection of distinct regions, each with its own rules and limitations. The ability to generate a random state is one region, and the ability to perform a random transformation is another. While they may look similar from a distance, they are separated by a deep, mathematical chasm that cannot be bridged by simply adding more memory or using more complex circuits. This discovery provides a clearer map for the future of quantum computing, guiding researchers toward the right tools for the right jobs and away from the false hope that one solution can solve all problems.

Drowning in papers in your field?

Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.

Try Digest →