论文标题
另一轮破裂和赚钱的钱：如何不从晶格中建造它，更多
Another Round of Breaking and Making Quantum Money: How to Not Build It from Lattices, and More
论文作者
论文摘要
自从威斯纳（Wiesner）使用量子力学建造钞票反对伪造的钞票以来，公开验证量子货币一直是量子加密的中心对象之一。到目前为止，我们还不知道任何可公开验证的量子货币计划可以从标准假设中获得。 在这项工作中，我们为公开可验证的量子资金提供负面和积极的结果。 **在第一部分中，我们给出了一般定理，表明来自格子的某种自然级别的量子货币方案不能安全。我们使用该定理打破了最近的量子货币计划，lu和shor。 **在第二部分中，我们提出了一个用于建造量子资金和量子闪电的框架，我们称之为不变的钱，该货币从Farhi等人的结（ITCS'12）中提取了一些量子资金的想法。除了对该框架进行正式化之外，我们还提供了由经典知识假设的启发的具体硬性计算问题，这些假设的强度将暗示量子闪电的安全性，加强了量子资金的加强，即使银行也无法复制钞票。 **我们讨论了我们框架的潜在实例，包括使用加密组动作的甲骨文结构以及可重复功能加密的实例化，椭圆曲线上的ISEGEN和结。
Public verification of quantum money has been one of the central objects in quantum cryptography ever since Wiesner's pioneering idea of using quantum mechanics to construct banknotes against counterfeiting. So far, we do not know any publicly-verifiable quantum money scheme that is provably secure from standard assumptions. In this work, we provide both negative and positive results for publicly verifiable quantum money. **In the first part, we give a general theorem, showing that a certain natural class of quantum money schemes from lattices cannot be secure. We use this theorem to break the recent quantum money scheme of Khesin, Lu, and Shor. **In the second part, we propose a framework for building quantum money and quantum lightning we call invariant money which abstracts some of the ideas of quantum money from knots by Farhi et al.(ITCS'12). In addition to formalizing this framework, we provide concrete hard computational problems loosely inspired by classical knowledge-of-exponent assumptions, whose hardness would imply the security of quantum lightning, a strengthening of quantum money where not even the bank can duplicate banknotes. **We discuss potential instantiations of our framework, including an oracle construction using cryptographic group actions and instantiations from rerandomizable functional encryption, isogenies over elliptic curves, and knots.
