As of May 31, 2023, we have updated our Code of Conduct.

Questions tagged [quantum-money]

For questions about money whose security is based on aspects of the No-Cloning Theorem.

Filter by
Sorted by
Tagged with
5 votes
2 answers
166 views

How to calculate the spectral norm of the density operator used in Molina et al. 2012 paper?

In Molina et al (2012)'s article on quantum money, the proof of security of Wiesner's quantum money scheme depends on the fact that the density operator $$Q = \frac{1}{4}\sum_{k \in \{0, 1, +, -\}}\...
Malper's user avatar
  • 153
5 votes
2 answers
221 views

Has Blockchain made Quantum Money obsolete?

Quantum Money is an old proposal that solves the forgeability problem of traditional banknotes, by leveraging the No-Cloning Theorem. Recently, blockchains solved the Double-Spending problem ...
Rexcirus's user avatar
  • 153
7 votes
1 answer
260 views

What role do Hecke operators and ideal classes perform in “Quantum Money from Modular Forms?”

Cross-posted on MO The original ideas from the 70's/80's - that begat the [BB84] quantum key distribution - concerned quantum money that is unforgeable by virtue of the no-cloning theorem. A ...
Mark Spinelli's user avatar
8 votes
0 answers
84 views

Are non-secret-based quantum money mini-schemes susceptable to Jogenfors' "reuse attack?"

Aaronson and Christiano call public-key or private-key quantum mini-schemes $\mathcal M$ secret-based if a mint works by first uniformly generating a secret random classical strings $r$, and then ...
Mark Spinelli's user avatar
8 votes
1 answer
362 views

Do we have to trust the bank in "Quantum Money from Hidden Subspaces?"

What level of trust in the bank is needed in "Quantum Money from Hidden Subspaces" of Aaronson and Christiano? The bank's mint works by first generating a uniformly random classical secret string $...
Mark Spinelli's user avatar
6 votes
2 answers
207 views

Can a merchant who accepts a knot-based quantum coin mint her own knot-based coin?

Referring to Farhi, Gosset, Hassidim, Lutomirski, and Shor's "Quantum Money from Knots," a mint $\mathcal{M}$ generates a run of coins, including, say, $(s,|\$\rangle)$, using a quantum computer to ...
Mark Spinelli's user avatar
8 votes
1 answer
318 views

Can quantum money be reliably "burned?"

One of the novel features of Bitcoin and other cryptocurrencies is that coins can be irrefutably "burned" or destroyed, by creating a transaction to send the money to a junk burn address. ...
Mark Spinelli's user avatar
11 votes
2 answers
1k views

Rigorous security proof for Wiesner's quantum money

In his celebrated paper "Conjugate Coding" (written around 1970), Stephen Wiesner proposed a scheme for quantum money that is unconditionally impossible to counterfeit, assuming that the issuing bank ...
DIDIx13's user avatar
  • 785
21 votes
1 answer
377 views

Quantum Bitcoin Subdivision

Background Recently I was reading the article "Quantum Bitcoin: An Anonymous and Distributed Currency Secured by the No-Cloning Theorem of Quantum Mechanics" which demonstrates how a quantum bitcoin ...
Daniel Burkhart's user avatar