Quantum Money based on Lattices
summary
Proposal constructs money states as Gaussian superpositions of lattice points centered on dual-lattice serial numbers, created by Gaussian sampling then a lattice quantum Fourier transform and verified by interference between paired balls separated by a chosen vector l. Verification uses bounded-distance decoding and statistical repetition so tests approach probability 1. Broken simpler variants allow extracting lattice points and finding short vectors; security of the working scheme reduces to the shortest-vector hardness in lattices (polynomial factors), paper pending.
AI-written summary · about
chapters (16)
- 0:00Start
- 0:33Outline
- 3:19Proposals for Quantum Money
- 4:37History
- 6:00Cryptography Background and Motivation
- 7:52Task: Quantum Money
- 13:15How does our quantum money protocol work?
- 15:15Bounded Distance Decoding
- 15:48Gaussian Sampling
- 16:25Gaussian superposition
- 17:16Subclass of lattices
- 18:13Dual of these lattices
- 19:59Quantum Fourier transform on Z (Eldar and Shor)
- 21:00Properties of Quantum Fourier transform on 2
- 33:04Why shouldn't you be able to copy?
- 34:32Why doesn't this protocol work?








