# Tag Info

Aaronson and Christiano proved the security of their scheme in an oracle model, where they assume the verifier has access to a membership oracle to some subspace $A$. In order to turn this into actual quantum money, it is "sufficient" to implement "such an oracle". How would one do that? And what is "such an oracle"? Well, the simplest question is to ...