Algebraic Cryptanalysis of a Quantum Money Scheme The Noise-Free Case - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year :

Algebraic Cryptanalysis of a Quantum Money Scheme The Noise-Free Case

Jean-Charles Faugère
Ludovic Perret
  • Function : Author
  • PersonId : 935330


We investigate the Hidden Subspace Problem (HSPq) over Fq: Input : p1, . . . , pm, q1, . . . , qm ∈ Fq[x1, . . . , xn] of degree d ≥ 3 (and n ≤ m ≤ 2n). Find : a subspace A ⊂ Fq n of dimension n/2 (n is even) such that pi(A) = 0 ∀i ∈ {1, . . . , m} and qj(A ⊥) = 0 ∀j ∈ {1, . . . , m}, where A ⊥ denotes the orthogonal complement of A with respect to the usual scalar product in Fq. This problem underlies the security of the first public-key quantum money scheme that is proved to be cryptographically secure under a non quantum but classic hardness assumption. This scheme was proposed by S. Aaronson and P. Christiano [1] at STOC'12. In particular, it depends upon the hardness of HSP. More generally, Aaronson and Christiano left as an open problem to study the security of the scheme for a general field Fq. We present a randomized polynomial-time algorithm that solves the HSPq for q > 2 with success probability ≈ 1 − 1/q. So, the quantum money scheme extended to Fq is not secure. Finally, based on experimental results and a structural property of the polynomials that we prove, we conjecture that there is also a randomized polynomial-time algorithm solving the HSP2 with high probability. To support our theoretical results, we also present several experimental results confirming that our algorithms are very efficient in practice. We emphasize that [1] proposes a non-noisy and a noisy version of the public-key quantum money scheme. The noisy version of the quantum money scheme remains secure.
Fichier principal
Vignette du fichier
hidd_subs.pdf (386.23 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01098223 , version 1 (23-12-2014)


  • HAL Id : hal-01098223 , version 1


Marta Conde Pena, Jean-Charles Faugère, Ludovic Perret. Algebraic Cryptanalysis of a Quantum Money Scheme The Noise-Free Case. IACR International Conference on Practice and Theory of Public-Key Cryptography (PKC'15), Mar 2015, Maryland, United States. ⟨hal-01098223⟩
261 View
1392 Download


Gmail Facebook Twitter LinkedIn More