arXiv

Ordinary computers can use untrusted quantum servers as their own

A proof showed that a cryptographic protocol lets standard machines run private computations and store hidden memory on a remote quantum server.

A large blue server holds layered, partly concealed shapes inside a black curve, beside a small gray computer and scattered dark blue-green pieces.
Preprint: theory

Edited by Boris Djordjevic · Paperfoot

Researchers proved in a theoretical preprint that a classical client with no quantum hardware can use a single untrusted quantum server as its own trusted quantum computer. The paper constructed a general-purpose two-party protocol, a cryptographic method for secure interaction between two participants. The protocol assumes only that a problem called learning with errors remains hard for quantum machines. Under this protocol, the client can privately choose and run quantum computations. It can also prepare and process quantum states, the configurations that carry quantum data. The client can store quantum memory on the server while keeping that memory hidden from the server. This state persists across rounds of interaction for later computations. With this technique, the authors resolved two open theoretical problems: classical verification of quantum sampling and remote state preparation.

Why it matters

The mathematical proof shows that ordinary computers can act as full quantum participants in interactive protocols without owning quantum hardware. This settles two open questions about verifying quantum sampling and remotely preparing quantum states.

Caveats

The finding is a theoretical proof rather than an evaluation on physical hardware, and its security relies on the assumption that learning with errors is hard for quantum computers. The paper is also a preprint that has not yet undergone formal peer review.

In this paper

delegated quantum computation for a classical client

Methods
general-purpose, maliciously secure two-party computation protocol (this paper)classical commitment to quantum states with continual ideal binding (this paper)noisy trapdoor claw-free function (NTCF)quantum fully-homomorphic encryption (QFHE)

What it shows

A classical client with no quantum hardware can use a single untrusted and potentially malicious quantum server as if it were its own trusted quantum computer.

We show that a classical client with no quantum hardware can use a single untrusted and potentially malicious quantum server as if it were its own trusted quantum computer.

Abstract

A maliciously secure two-party computation protocol between a classical client and a quantum server can be constructed assuming only the post-quantum hardness of learning with errors.

Underlying all of these results is a general-purpose, maliciously secure two-party computation protocol between a classical client and a quantum server, which we construct assuming only the post-quantum hardness of learning with errors.

Abstract

The commitment scheme achieves ideal binding with overwhelming probability whenever the commitment phase passes.

Notably, the committed state is defined with overwhelming probability whenever the commitment phase passes; prior works allow an adversary to cause a \sqrt{\delta} extraction error by giving invalid openings with probability \delta.

Ensuring Commitment Continuity.

Temporary extraction causes an O(epsilon) statistical disturbance of the state due to an epsilon^2 extraction error.

Since there is an \epsilon^{2} error in extraction, temporary extraction in this way causes an O(\epsilon) statistical disturbance of the state.

Indistinguishable Temporary Extraction and \epsilon -Simulation.

Quoted word for word from the full text on arXiv.

The paper

The Entire Quantum Computer on a Classical Leash

arXiv, Oct 22, 2026, Open access, CC BY, Preprint, not peer-reviewed

doi.org/10.48550/arxiv.2610.31775

arXiv:2610.31775v1 in quant-ph, also cs.CR

AbstractPDFHTML

Cite as BibTeX
@misc{kalai2026entire,
  title = {The Entire Quantum Computer on a Classical Leash},
  author = {Kalai, Yael Tauman and Khurana, Dakshita and Raizes, Justin},
  year = {2026},
  eprint = {2610.31775},
  archivePrefix = {arXiv},
  primaryClass = {quant-ph},
  doi = {10.48550/arxiv.2610.31775},
  url = {https://arxiv.org/abs/2610.31775}
}