Bitcoin Forum
May 09, 2024, 03:19:44 AM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Quantum Money from Hidden Subspaces  (Read 1059 times)
hashman (OP)
Legendary
*
Offline Offline

Activity: 1264
Merit: 1008


View Profile
November 08, 2012, 12:21:04 AM
 #1

I'm not sure where to put this but I'd like to hear what people think of some of the claims in this paper:

http://arxiv.org/abs/1203.4740


    Forty years ago, Wiesner pointed out that quantum mechanics raises the striking possibility of money that cannot be counterfeited according to the laws of physics. We propose the first quantum money scheme that is (1) public-key, meaning that anyone can verify a banknote as genuine, not only the bank that printed it, and (2) cryptographically secure, under a "classical" hardness assumption that has nothing to do with quantum money. Our scheme is based on hidden subspaces, encoded as the zero-sets of random multivariate polynomials. A main technical advance is to show that the "black-box" version of our scheme, where the polynomials are replaced by classical oracles, is unconditionally secure. Previously, such a result had only been known relative to a quantum oracle (and even there, the proof was never published). Even in Wiesner's original setting -- quantum money that can only be verified by the bank -- we are able to use our techniques to patch a major security hole in Wiesner's scheme. We give the first private-key quantum money scheme that allows unlimited verifications and that remains unconditionally secure, even if the counterfeiter can interact adaptively with the bank. Our money scheme is simpler than previous public-key quantum money schemes, including a knot-based scheme of Farhi et al. The verifier needs to perform only two tests, one in the standard basis and one in the Hadamard basis -- matching the original intuition for quantum money, based on the existence of complementary observables. Our security proofs use a new variant of Ambainis's quantum adversary method, and several other tools that might be of independent interest.


  Authors seem to be unaware of block chain money or think it is irrelevant? 




"You Asked For Change, We Gave You Coins" -- casascius
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction.
1715224784
Hero Member
*
Offline Offline

Posts: 1715224784

View Profile Personal Message (Offline)

Ignore
1715224784
Reply with quote  #2

1715224784
Report to moderator
1715224784
Hero Member
*
Offline Offline

Posts: 1715224784

View Profile Personal Message (Offline)

Ignore
1715224784
Reply with quote  #2

1715224784
Report to moderator
1715224784
Hero Member
*
Offline Offline

Posts: 1715224784

View Profile Personal Message (Offline)

Ignore
1715224784
Reply with quote  #2

1715224784
Report to moderator
Esoteric
Newbie
*
Offline Offline

Activity: 12
Merit: 0


View Profile WWW
November 08, 2012, 12:36:11 AM
 #2

My first fear was that they hadn't heard of Bitcoin, but on the first page of their paper they make a reference to Bitcoin. This wouldn't rule out negligence on their part but (also in the first paragraph) they state that they which to avoid any, and all, third parties. That would include the block chain which is essentially a distributed third party.

This is quite a lengthy document so not sure I'll digest it in a day, but I'll dive into it and see what I find. Good find though.
obisunk
Newbie
*
Offline Offline

Activity: 23
Merit: 0



View Profile
November 08, 2012, 01:55:04 AM
 #3

Quantum money usually discusses impossible to forge bank notes and the verification thereof.

There are a few key things that came to my mind regarding quantum money.

1.  There will still be some entity (central or decentral) that will act as the issuer.
2.  Computational power is not linked to the security of the currency.

Number 2 would be superior to the way bitcoins is done but it also requires that we can send quantum bits through some quantum internet which is still far far far away.  Otherwise, the quantum bits have to reside in the physical notes themselves.
Esoteric
Newbie
*
Offline Offline

Activity: 12
Merit: 0


View Profile WWW
November 08, 2012, 02:32:01 AM
 #4

1.  There will still be some entity (central or decentral) that will act as the issuer.

Yep, that's part of this research but it isn't obvious that they refer to a decentralized system. They refer to banks and banknotes, essentially suggesting that each bank should issue its own notes. Can confer that idea with gold receipts but it would be preferable to eliminate such counter-party risk, while anyone can verify the authenticity of the notes it doesn't say that the overall supply would necessarily be limited or follow a well understood trend. On the latter point you'd need all the transactions to be transparent (pseudo-anonymous or not) like bitcoin in order to maintain trust. I don't know if they have considered that.
obisunk
Newbie
*
Offline Offline

Activity: 23
Merit: 0



View Profile
November 08, 2012, 02:53:25 AM
 #5

1.  There will still be some entity (central or decentral) that will act as the issuer.

Yep, that's part of this research but it isn't obvious that they refer to a decentralized system. They refer to banks and banknotes, essentially suggesting that each bank should issue its own notes. Can confer that idea with gold receipts but it would be preferable to eliminate such counter-party risk, while anyone can verify the authenticity of the notes it doesn't say that the overall supply would necessarily be limited or follow a well understood trend. On the latter point you'd need all the transactions to be transparent (pseudo-anonymous or not) like bitcoin in order to maintain trust. I don't know if they have considered that.

The federal reserve bank and the european central bank are "banks" too.  =)  I didn't quite get the hint that the authors meant decentralized on a scale that we're more familiar with.
hashman (OP)
Legendary
*
Offline Offline

Activity: 1264
Merit: 1008


View Profile
November 08, 2012, 06:01:47 PM
 #6

Thanks for your comments.
Somebody sent me a previous paper on the topic:

http://www.scottaaronson.com/papers/noclone-ccc.pdf

 and when I went to post it here I put this updated one.  Similar material, this time mentions bitcoins.

I like the concept and it is interesting research, but I can't help but think that a lot of the problems he is trying to solve are already solvable in a "classical" manner with digital signatures and a public log-structured database. 

Mousepotato
Hero Member
*****
Offline Offline

Activity: 896
Merit: 1000


Seal Cub Clubbing Club


View Profile
November 08, 2012, 06:11:51 PM
 #7

wait... *takes a puff and passes it*

wat?

Mousepotato
FuzzyBear
Legendary
*
Offline Offline

Activity: 1420
Merit: 1010



View Profile WWW
November 08, 2012, 06:33:20 PM
 #8

wait... *takes a puff and passes it*

wat?

y thanks for passing Smiley .... *takes a puff and passes it*

eh?

***** Earn DEV at http://devtome.com *****
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!