Quantum Money is an old proposal that solves the forgeability problem of traditional banknotes, by leveraging the No-Cloning Theorem.

Recently, blockchains solved the Double-Spending problem allowing them to be de facto usable as money. Indeed even though on a blockchain you can forge as many coins as you wish, the other participants will not accept your claims.

Are there any aspect which make quantum money a superior alternative to blockchain digital currencies?

  • 2
    $\begingroup$ Lack of massive energy consumption with quantum money, as opposed to Nakamoto-style consensus on blockchains, is the first thing that comes to mind. $\endgroup$
    – Mark S
    Mar 28 '20 at 18:41
  • $\begingroup$ Yea, I was thinking to that too. Admittedly that's not negligible, even though many new "green" consensus algorithm are being studied. $\endgroup$
    – Rexcirus
    Mar 28 '20 at 19:00
  • 1
    $\begingroup$ Also security of Wiesner-style private-key quantum money has security guarantees that aren't based on the computational difficulty of inverting a hash function. $\endgroup$
    – Mark S
    Mar 28 '20 at 19:27
  • $\begingroup$ I would compare these two concepts on their level of practical maturity and security: PoW blockchains are available and secure today at some level of cost. Quantum money, which requires carrying a coherent quantum state around as a banknote, is not practical today and has a certain cost w.r.t. keeping the banknote coherent. Once quantum money and computers become available, cheap, and small enough to carry around, they may also be strong enough to make the public-key cryptography used in PoW blockchains insecure, thus requiring significant upgrades, where quantum money may play a role. $\endgroup$ May 20 '20 at 6:47

I propose the following advantages to quantum money, over and above blockchain-based cryptocurrencies.

  1. The security of Nakomoto-style cryptocurrencies (read, Bitcoin) is based on computational assumptions, at least in that there is a assumption that inverting SHA256 hashes is likely computationally difficult. However, Wiesner-style private-key based quantum money is based on more information-theoretic assumptions, namely the no-cloning theorem/no signaling theorem/etc. Accepting that the no-cloning theorem is a better assumption than the difficulty of inverting hash functions may not be for everyone, but at least it's a difference.

  2. Nakomoto-style blockchains have a famous problem in their energy usage, which appears to grow exponentially with acceptance of the cryptocurrency. But both Wiesner-style ("private-key"), and even "public-key" quantum money schemes such as those based on knots don't appear to have a lot of similar disadvantages in energy usage; there is no "proof-of-work" at play in quantum money.

  3. Investigating schemes for quantum money may also provide schemes for digital signatures/commitment. For example, for certain public-key systems, if a scheme cannot easily be used as quantum money then it may be used for commitment. Bitcoin doesn't seem to have similar win-win opportunities.

  4. For me, quantum money is fun to think about, and proposes some interesting problems in-and-of themselves, that are orthogonal to that of bitcoin. For example, I would like to learn more about Kane's proposal on modular forms, and Shor has recently teased quantum money based on lattices. Does anyone seriously envision quantum money with valuations/market capitalization similar to that of bitcoin ($120B), say, in the next 10 years? I doubt it, but still, fun to think about.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.