15 votes
Accepted

Rigorous security proof for Wiesner's quantum money

Abel Molina, Thomas Vidick, and I proved that the correct answer is $c=3/4$ in this paper: A. Molina, T. Vidick, and J. Watrous. Optimal counterfeiting attacks and generalizations for Wiesner's ...
John Watrous's user avatar
  • 5,693
7 votes

Rigorous security proof for Wiesner's quantum money

"I'm looking for an explicit upper bound on the probability of successful counterfeiting ...". In "An adaptive attack on Wiesner's quantum money", by Aharon Brodutch, Daniel Nagaj, Or Sattath, and ...
Rob's user avatar
  • 2,307
6 votes
Accepted

Has Blockchain made Quantum Money obsolete?

I propose the following advantages to quantum money, over and above blockchain-based cryptocurrencies. The security of Nakomoto-style cryptocurrencies (read, Bitcoin) is based on computational ...
Mark Spinelli's user avatar
5 votes

Has Blockchain made Quantum Money obsolete?

This work (which I'm a co-author) discusses the properties that different forms of money have. The paper discusses cryptocurrencies such as Bitcoin, and public quantum money. The following figure is ...
Or Sattath's user avatar
5 votes
Accepted

Quantum Bitcoin Subdivision

Why can you not subdivide a quantum bitcoin? Anyone can create a Cryptocurrency, how it works is up to them, how well it is received is up to the public, generally it is decided by: Utility, Scarcity,...
Rob's user avatar
  • 2,307
4 votes
Accepted

Can a merchant who accepts a knot-based quantum coin mint her own knot-based coin?

In complexity theory (quantum and classical) the distinction between construction and verification is very important, and the ability to verify certainly does not imply the ability to construct. For ...
John Watrous's user avatar
  • 5,693
4 votes
Accepted

Do we have to trust the bank in "Quantum Money from Hidden Subspaces?"

Aaronson and Christiano proved the security of their scheme in an oracle model, where they assume the verifier has access to a membership oracle to some subspace $A$. In order to turn this into actual ...
Shai Deshe's user avatar
4 votes
Accepted

How to calculate the spectral norm of the density operator used in Molina et al. 2012 paper?

The eigenvalues of a matrix are independent of the choice of basis in which we represent it. This remains true for choices of bases that are not orthogonal. Consider then a matrix $A=\sum_k P_k$, ...
glS's user avatar
  • 24.1k
3 votes

Can Wiesner's quantum money be realized (with logical qubits) today?

Today's logical memories are not good enough yet to realize Wiesner's quantum money scheme. Take a look at the screenshot below, taken from a recording of Shraddha Singh's QIP 2023 talk on Real-time ...
Peter-Jan's user avatar
  • 1,379
3 votes

How to calculate the spectral norm of the density operator used in Molina et al. 2012 paper?

Personally, I'd jump straight to Mathematica. It took me all of a minute: ...
DaftWullie's user avatar
3 votes

Can a merchant who accepts a knot-based quantum coin mint her own knot-based coin?

How would the market determine the value of a quantum coin, potentially from different merchants or minters? tl;dr: by trading! Disclaimer: I am working on a startup that is addressing this problem ...
user820789's user avatar
  • 3,302
2 votes

What role do Hecke operators and ideal classes perform in “Quantum Money from Modular Forms?”

CW from self-answer Reviewing Farhi et al. on quantum money from knots, one can say that the Markov chain applied by the verification algorithm that walks along the Reidemeister graph is far from ...
2 votes

Can quantum money be reliably "burned?"

If each coin is entangled w/ the ledger, burning a coin via measuring it in the 'burn' (or 'wrong') basis would create an update in the ledger which could then be verified by anyone who had access to ...
user820789's user avatar
  • 3,302

Only top scored, non community-wiki answers of a minimum length are eligible