Questions tagged [quantum-money]

For questions about money whose security is based on aspects of the No-Cloning Theorem.

Filter by
Sorted by
Tagged with
4 votes
1 answer
329 views

Can Wiesner's quantum money be realized (with logical qubits) today?

Consider Wiesner's quantum money scheme. With today's devices and today's error correction and mitigation schemes, how long can we hold $n$ logical qubits such that they are all (logically) in a ...
Mark Spinelli's user avatar
1 vote
0 answers
40 views

About how many qubits and how many T gates is needed to verify Quantum Money from Knots?

Dalzell, McArdle, Berta, Bienias, Chen, Gilyén, Hann, Kastoryano, Khabiboulline, Kubica, Salton, Wang, and Brandão have posted a comprehensive assessment of state-of-the-art end-to-end resources ...
Mark Spinelli's user avatar
5 votes
2 answers
188 views

How to calculate the spectral norm of the density operator used in Molina et al. 2012 paper?

In Molina et al (2012)'s article on quantum money, the proof of security of Wiesner's quantum money scheme depends on the fact that the density operator $$Q = \frac{1}{4}\sum_{k \in \{0, 1, +, -\}}\...
Malper's user avatar
  • 153
5 votes
2 answers
282 views

Has Blockchain made Quantum Money obsolete?

Quantum Money is an old proposal that solves the forgeability problem of traditional banknotes, by leveraging the No-Cloning Theorem. Recently, blockchains solved the Double-Spending problem ...
Rexcirus's user avatar
  • 153
7 votes
1 answer
266 views

What role do Hecke operators and ideal classes perform in “Quantum Money from Modular Forms?”

Cross-posted on MO The original ideas from the 70's/80's - that begat the [BB84] quantum key distribution - concerned quantum money that is unforgeable by virtue of the no-cloning theorem. A ...
Mark Spinelli's user avatar
8 votes
0 answers
92 views

Are non-secret-based quantum money mini-schemes susceptable to Jogenfors' "reuse attack?"

Aaronson and Christiano call public-key or private-key quantum mini-schemes $\mathcal M$ secret-based if a mint works by first uniformly generating a secret random classical strings $r$, and then ...
Mark Spinelli's user avatar
8 votes
1 answer
389 views

Do we have to trust the bank in "Quantum Money from Hidden Subspaces?"

What level of trust in the bank is needed in "Quantum Money from Hidden Subspaces" of Aaronson and Christiano? The bank's mint works by first generating a uniformly random classical secret string $...
Mark Spinelli's user avatar
6 votes
2 answers
217 views

Can a merchant who accepts a knot-based quantum coin mint her own knot-based coin?

Referring to Farhi, Gosset, Hassidim, Lutomirski, and Shor's "Quantum Money from Knots," a mint $\mathcal{M}$ generates a run of coins, including, say, $(s,|\$\rangle)$, using a quantum computer to ...
Mark Spinelli's user avatar
8 votes
1 answer
340 views

Can quantum money be reliably "burned?"

One of the novel features of Bitcoin and other cryptocurrencies is that coins can be irrefutably "burned" or destroyed, by creating a transaction to send the money to a junk burn address. ...
Mark Spinelli's user avatar
11 votes
2 answers
1k views

Rigorous security proof for Wiesner's quantum money

In his celebrated paper "Conjugate Coding" (written around 1970), Stephen Wiesner proposed a scheme for quantum money that is unconditionally impossible to counterfeit, assuming that the issuing bank ...
Didix's user avatar
  • 785
21 votes
1 answer
383 views

Quantum Bitcoin Subdivision

Background Recently I was reading the article "Quantum Bitcoin: An Anonymous and Distributed Currency Secured by the No-Cloning Theorem of Quantum Mechanics" which demonstrates how a quantum bitcoin ...
Daniel Burkhart's user avatar