Assume that classical one-way functions secure against quantum adversaries exist. Is it possible, given a quantum state $Q$ and classical secret key $k$, produce a quantum state $AuthQ$ such that:
- One who knows $k$ can recover $Q$, provided that $AuthQ$ has not been altered.
- If $AuthQ$ has been altered, this can be detected with high probability.
It may or may not be possible to recover the original state without the secret key. What matters is that, given the secret key, one can be confident that:
- The creator of the quantum state had the secret key
- The message has not been tampered with since.