I wonder if there is a computational class of problems which is easy for a quantum computer to compute forwards, but hard to invert, while also being hard to compute forwards on a classical computer.