Bitcoin Forum

Bitcoin => Development & Technical Discussion => Topic started by: chsados on January 30, 2012, 07:33:16 AM



Title: Will Bitcoin Bennefit From "Blind Quantum Computing" ?
Post by: chsados on January 30, 2012, 07:33:16 AM
What do you think?  How do you see bitcoin implementing this technology once it evolves/is proven?  Wouldn't this negate the need for traditional miners?
Article: http://www.bbc.co.uk/news/science-environment-16636580

Quote
Quantum computing will use the inherent uncertainties in quantum physics to carry out fast, complex computations.

A report in Science shows the trick can extend to "cloud" services such as Google Docs without loss of security.

This "blind quantum computing" can be carried out without a cloud computer ever knowing what the data is.

Quantum computing has been heralded as the most powerful potential successor to traditional, electronics-based computing.

One of the peculiarities of the branch of physics called quantum mechanics is that objects can be in more than one state at once, with the states of different objects tied together in ways that even Albert Einstein famously referred to as "spooky".

Instead of the 0 and 1 "bits" of digital computing, quantum computing aims to make use of these mixed and entangled states to perform calculations at comparatively breathtaking speeds.

Other quantum trickery comes in cryptography, the art of encrypting data. Data is encoded in delicately prepared states - most often those of single particles of light called photons - and the data cannot be "read" without destroying them.

Quantum cryptography uses this feature to send the "keys" to decrypting messages with high security.


Title: Re: Will Bitcoin Bennefit From "Blind Quantum Computing" ?
Post by: punningclan on January 30, 2012, 07:47:35 AM
What do you think?  How do you see bitcoin implementing this technology once it evolves/is proven?  Wouldn't this negate the need for traditional miners?
Article: http://www.bbc.co.uk/news/science-environment-16636580

Quote
Quantum computing will use the inherent uncertainties in quantum physics to carry out fast, complex computations.

A report in Science shows the trick can extend to "cloud" services such as Google Docs without loss of security.

This "blind quantum computing" can be carried out without a cloud computer ever knowing what the data is.

Quantum computing has been heralded as the most powerful potential successor to traditional, electronics-based computing.

One of the peculiarities of the branch of physics called quantum mechanics is that objects can be in more than one state at once, with the states of different objects tied together in ways that even Albert Einstein famously referred to as "spooky".

Instead of the 0 and 1 "bits" of digital computing, quantum computing aims to make use of these mixed and entangled states to perform calculations at comparatively breathtaking speeds.

Other quantum trickery comes in cryptography, the art of encrypting data. Data is encoded in delicately prepared states - most often those of single particles of light called photons - and the data cannot be "read" without destroying them.

Quantum cryptography uses this feature to send the "keys" to decrypting messages with high security.

I'm my opinion Bitcoin will absorb Quantum Computing since cryptography is one of the methods strong hands. With Moore's law quantum miners will become popular and inexpensive earlier than general purpose Quantum machines and will allow for unprecedented transaction volume and security. I vote we change the name at that point to QBit heralding a new age of complete financial autonomy for the common man.


Title: Re: Will Bitcoin Bennefit From "Blind Quantum Computing" ?
Post by: chsados on January 30, 2012, 08:08:31 AM
Quote
With Moore's law quantum miners will become popular and inexpensive earlier than general purpose Quantum machines

how so?  wouldn't it make more sense that these quantum computers will be in massive buildings where any user from around the world can "jack into" it, thats pretty much what the article alluded to.


Title: Re: Will Bitcoin Bennefit From "Blind Quantum Computing" ?
Post by: Matthew N. Wright on January 30, 2012, 08:31:59 AM
I'm no expert (although Quantum Mechanics and Quantum Physics are my hobby) but I'd say Quantum Computers are currently not feasible for anything more than adding 1+1, and the effort required for that is too much to even bother.


Title: Re: Will Bitcoin Bennefit From "Blind Quantum Computing" ?
Post by: punningclan on January 31, 2012, 01:24:49 AM
Quote
With Moore's law quantum miners will become popular and inexpensive earlier than general purpose Quantum machines

how so?  wouldn't it make more sense that these quantum computers will be in massive buildings where any user from around the world can "jack into" it, thats pretty much what the article alluded to.

DWave has a system like that already and is planning on opening it's usage to developers. Bitcoin is not a general purpose machine, there are already quantum cryptography key distribution systems on the market, like http://www.idquantique.com/, with miniature quantum electronics already in the laboratory:

http://www.extremetech.com/extreme/108573-worlds-first-programmable-quantum-photonic-chip
http://www.examiner.com/la-in-los-angeles/quantum-computers-on-the-horizon-for-ohio-researchers

It might be overly simplistic for me to model the silicon past into the Quantum future but perhaps the overwhelming benefits of Quantum machines will push the industry to continue Moore's law and since they're really good at crypto it might not be such a leap to imagine miniaturized Quantum miners.


Title: Re: Will Bitcoin Bennefit From "Blind Quantum Computing" ?
Post by: punningclan on January 31, 2012, 01:28:50 AM
I'm no expert (although Quantum Mechanics and Quantum Physics are my hobby) but I'd say Quantum Computers are currently not feasible for anything more than adding 1+1, and the effort required for that is too much to even bother.
I think DWave's system is already 128 Qubit: http://www.dwavesys.com/en/dw_homepage.html


Title: Re: Will Bitcoin Bennefit From "Blind Quantum Computing" ?
Post by: gmaxwell on February 01, 2012, 02:18:04 AM
I think DWave's system is already 128 Qubit: http://www.dwavesys.com/en/dw_homepage.html

DWave's system, even believing 100% of their claims, is not a "quantum computer" by the definition used by scientists.  It can't be usefully applied to things like cryptographic puzzles because it just doesn't do that kind of computation.  It would be like calling a machine which can _only_ add integers a computer. Yes, it computes things, but it can't compute in the general sense.  Nor is their engineering approach actually applicable to build something which could properly be called a quantum computer.


Title: Re: Will Bitcoin Bennefit From "Blind Quantum Computing" ?
Post by: punningclan on February 01, 2012, 05:35:35 AM
I think DWave's system is already 128 Qubit: http://www.dwavesys.com/en/dw_homepage.html

DWave's system, even believing 100% of their claims, is not a "quantum computer" by the definition used by scientists.  It can't be usefully applied to things like cryptographic puzzles because it just doesn't do that kind of computation.  It would be like calling a machine which can _only_ add integers a computer. Yes, it computes things, but it can't compute in the general sense.  Nor is their engineering approach actually applicable to build something which could properly be called a quantum computer.

QBit only needs a Quantum calculator? I guess my question is will Quantum machines of any kind force a new branch of Bitcoin? Perhaps becoming Bitcoin's platinum, as Lightcoin is its silver?


Title: Re: Will Bitcoin Bennefit From "Blind Quantum Computing" ?
Post by: gmaxwell on February 01, 2012, 06:08:59 AM
QBit only needs a Quantum calculator? I guess my question is will Quantum machines of any kind force a new branch of Bitcoin? Perhaps becoming Bitcoin's platinum, as Lightcoin is its silver?

Unfortunately we can't answer that question yet.  People often drastically overstate the theoretical power of quantum computers. Since the actual power of quantum computers is currently zero (they don't exist), the actual threat is zero and it's hard to reason about how big the ones that might it exist may be because we don't know how to build them.

That said— A very large and fast true quantum computer of a scale which may turn out to not be physically possible could create problems for our ECDSA signatures.

The design of Bitcoin minimizes the exposure there:  If you use bitcoin addresses only once (as is intended for privacy reasons) then your ECDSA public key is only exposed right when you spend, which is just minutes before an ECDSA attack would no longer be effective— so an attacker wouldn't just have to be able to compromise ECDSA they'd have to do it fast.  It's likely that once ECDSA attacks became feasible they would be slow for a long time.

(E.g. even though RSA-512 is crackable (enough so that crazy over computing powered people like me have done it at home) Bitcoin would not be fatally insecure right now if we used RSA-512)

Secondly, our scripting system allows for some kinds of backwards compatible changes. If QC ECDSA attacks started becoming threatening looking we could extend Bitcoin with a resistant signature algorithm (like lamport (http://en.wikipedia.org/wiki/Lamport_signature)) and create transactions which require both ECC and Lamport keys. Old nodes would validate only the ECC key and ignore the lamport, new nodes would validate both. 

(The hash functions in bitcoin are probably secure— at least to QC specific threats— QC only provides a sqrt(n) for black box non-linear inversion— so a 256 bit hash has the same security under QC that as 128 bit hash has on classical computer, which is sufficient. This does imply that if miners got QC's which did as many operations per second as their classic computing hardware (a crazy assumption but whatever) then the difficulty would square— e.g. we'd go from difficulty 1,000,000 to 1,000,000,000,000)