Cryptanalysis of three quantum money schemes

Andriyan, Bilyk,; Doliskani, Javad; Gong, Zizheng

doi:10.1007/s11128-023-03919-0

Cited by 2 publications

(2 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Zhandry also gave a construction of quantum lightning in [Zha19], though, as noted in a later version of the paper [Zha21], a weakness in the underlying hardness assumption was detected in [Rob21]. A full attack on the scheme was eventually found in [BDG23]. Also in [Zha19], Zhandry instantiated the oracles in [AC12] by using indistiguishability obfuscation (iO) [BGI + 12, GGH + 13, SW14].…”

Section: Further Background On Quantum Moneymentioning

confidence: 99%

See 1 more Smart Citation

Quantum Versus Classical Noise Cryptography

Yuen¹

Quantum Communication, Computing, and Measurement 2

View full text Add to dashboard Cite

Quantum money is the task of verifying the validity of banknotes while ensuring that they cannot be counterfeited. Public-key quantum money allows anyone to perform verification, while the private-key setting restricts the ability to verify to banks, as in Wiesner's original scheme. The current state of technological progress means that errors are impossible to entirely suppress, hence the requirement for noise-tolerant schemes. We show for the first time how to achieve noise-tolerance in the public-key setting. Our techniques follow Aaronson and Christiano's oracle model, where we use the ideas of quantum error correction to extend their scheme: a valid banknote is now a subspace state possibly affected by noise, and verification is performed by using classical oracles to check for membership in "larger spaces." Additionally, a banknote in our scheme is minted by preparing conjugate coding states and applying a unitary that permutes the standard basis vectors.

show abstract

Section: Further Background On Quantum Moneymentioning

confidence: 99%

“…A particularly well-known example is a scheme from [FGH + 12] that relies on knot theory; while the scheme remains unbroken, it is difficult to analyze and lacks a security proof. Also in this category are the schemes presented in [Kan18,KSS21], though some analysis on [KSS21] has been done in [BDG23].…”

Section: Further Background On Quantum Moneymentioning

confidence: 99%