Quantum-average-hardness of the GapK problem implies the existence of one-way puzzles, a fundamental primitive in quantum cryptography.
