3 ms·
The protocol from the paper already includes a 'verify token' function. I don't see how teleporting the token, vs using a more typical quantum channel like a fi
by Strilanc 10y ago
The protocol from the paper already includes a 'verify token' function. I don't see how teleporting the token, vs using a more typical quantum channel like a fiber optic line, would increase any of the risks.
...
...
Maybe there are situations where an attacker could substitute their own EPR pairs into your token? EPR pairs aren't separately verifiable, so you wouldn't realize. And if the attacker intercepted the classical channel you used to send the measurement results for the teleportation then you would accidentally be sending the token to the attacker instead of the bank. Even if the attacker just listened in, and you or the bank realized the attack was happening when the verify failed, the protocol doesn't require checking with the bank before accepting a token and so the attacker can still spend the token.
- amluto 10y agoWhat I meant was: be careful when applying an operation involving secrets to untrusted input. It's very easy to leak your secrets. This doesn't matter with this scheme because verification doesn't use any secrets. (Well, sort of. If you're taking advantage of "everlasting security", then the public key is secret.)