Abstract:Quantum information allows us to build quantum money schemes, where a bank can issue banknotes in the form of authenticatable quantum states that cannot be cloned or counterfeited. Similar to paper banknotes, in existing quantum money schemes, a banknote consists of an unclonable quantum state and a classical serial number, signed by bank. Thus, they lack one of the most fundamental properties cryptographers look for in a currency scheme: privacy. In this work, we first further develop the formal definitions of privacy for quantum money schemes. Then, we construct the first public-key quantum money schemes that satisfy these security notions. Namely, - Assuming existence of indistinguishability obfuscation (iO) and hardness of Learning with Errors (LWE), we construct a public-key quantum money scheme with anonymity against users and traceability by authorities. Since it is a policy choice whether authorities should be able to track banknotes or not, we also construct an untraceable money scheme from the same cryptographic assumptions, where no one (not even the authorities) can track banknotes. Further, we show that the no-cloning principle, a result of quantum mechanics, allows us to construct schemes, with security guarantees that are classically impossible, for a seemingly unrelated application: voting! - Assuming iO and LWE, we construct a universally verifiable quantum voting scheme with classical votes. Finally, as a technical tool, we introduce the notion of publicly rerandomizable encryption with strong correctness, where no adversary is able to produce a malicious ciphertext and a malicious randomness such that the ciphertext before and after rerandomization decrypts to different values! We believe this might be of independent interest. - Assuming LWE, we construct a (post-quantum) classical publicly rerandomizable encryption scheme with strong correctness.

Experimental quantum forgery of quantum optical money

Experimental investigation of practical unforgeable quantum money

Experimental Preparation and Verification of Quantum Money

Quantum Copy-Protection and Quantum Money

An adaptive attack on Wiesner's quantum money

Breaking and making quantum money: toward a new quantum cryptographic protocol

Another Round of Breaking and Making Quantum Money: How to Not Build It from Lattices, and More

Anonymous Public-Key Quantum Money and Quantum Voting

How to make unforgeable money in generalised probabilistic theories

Quantum Money Generated by Multiple Untrustworthy Banks

Noise-tolerant public-key quantum money from a classical oracle

On the (Im)plausibility of Public-Key Quantum Money from Collision-Resistant Hash Functions

An online attack against Wiesner's quantum money

Pseudorandom States, Non-Cloning Theorems and Quantum Money

Experimental quantum money

Franchised Quantum Money

Experimental cheat-sensitive quantum weak coin flipping

Almost Public Quantum Coins

Demonstration of quantum-digital payments

Forging quantum data: classically defeating an IQP-based quantum test

Quantum Money with Classical Verification