Cryptanalysis of three quantum money schemes

DOI10.1007/S11128-023-03919-0OpenAlexW4366368346MaRDI QIDQ6043565FDOQ6043565

Authors: Andriyan Bilyk, Javad Doliskani, Zhiyong Gong 

Publication date: 23 May 2023

Published in: Quantum Information Processing (Search for Journal in Brave)

Abstract: We investigate the security assumptions behind three public-key quantum money schemes. Aaronson and Christiano proposed a scheme based on hidden subspaces of the vector space $mathbb{F}_2^n$ in 2012. It was conjectured by Pena et al in 2015 that the hard problem underlying the scheme can be solved in quasi-polynomial time. We confirm this conjecture by giving a polynomial time quantum algorithm for the underlying problem. Our algorithm is based on computing the Zariski tangent space of a random point in the hidden subspace. Zhandry proposed a scheme based on multivariate hash functions in 2017. We give a polynomial time quantum algorithm for cloning a money state with high probability. Our algorithm uses the verification circuit of the scheme to produce a banknote from a given serial number. Kane, Sharif and Silverberg proposed a scheme based on quaternion algebras in 2021. The underlying hard problem in their scheme is cloning a quantum state that represents an eigenvector of a set of Hecke operators. We give a polynomial time quantum reduction from this hard problem to a linear algebra problem. The latter problem is much easier to understand, and we hope that our reduction opens new avenues to future cryptanalyses of this scheme.

Full work available at URL: https://arxiv.org/abs/2205.10488

Recommendations

• Algebraic cryptanalysis of a quantum money scheme: the noise-free case
• Quantum money from knots
• Another round of breaking and making quantum money: how to not build it from lattices, and more

zbMATH Keywords

quantum cryptographycryptanalysisquantum money

Mathematics Subject Classification ID

Quantum computation (81P68)

Cites Work

• Title not available (Why is that?)
• Title not available (Why is that?)
• Title not available (Why is that?)
• Title not available (Why is that?)
• Algebraic cryptanalysis of a quantum money scheme: the noise-free case
• Computational Aspects of Modular Forms and Galois Representations
• Distinguishing newforms
• Effective equidistribution of eigenvalues of Hecke operators
• La conjecture de Weil. I
• Modular forms, a computational approach. With an appendix by Paul E. Gunnells
• Multivariates Polynomials for Hashing
• Number of Points of Varieties in Finite Fields
• On the space of theta functions for a prime level
• Quantum lightning never strikes the same state twice
• Quantum money from knots
• Quaternion algebras
• Rational points on varieties
• Security analysis of quantum lightning
• Summation methods and distribution of eigenvalues of Hecke operators
• The theory of quantum information

Cited In (3)

• On the (im)plausibility of public-key quantum money from collision-resistant hash functions
• Public-key Quantum money with a classical bank
• Bitcoin Crypto–Bounties for Quantum Capable Adversaries

This page was built for publication: Cryptanalysis of three quantum money schemes

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q6043565)