QUANTUM COMPUTING

Wiesner's Quantum Money: Engineering Unforgeable Tokens and Conjugate State Verification Via the No-Cloning Theorem

By Quantum Mechanics & Information Theory Desk • Published Wednesday, 19 August 2026 at 15:11 CEST

### QUANTUM INFORMATION SCIENCE | THE GUARDIAN LONG READ

Key Takeaway

Essential takeaway summary for Wiesner's Quantum Money: Engineering Unforgeable Tokens and Conjugate State Verification Via the No-Cloning Theorem.

================================================================================
                               EXECUTIVE BRIEFING
--------------------------------------------------------------------------------
• THE CORE BREAKTHROUGH: In 1970, Stephen Wiesner proposed "conjugate coding," 
  encoding information into non-orthogonal quantum states that cannot be cloned 
  without physical destruction.
• THE SECURITY METRIC: An adversary attempting to duplicate an n-qubit Wiesner 
  banknote faces an exponential failure probability; counterfeit detection 
  scales as P_detect = 1 - (3/4)^n.
• THE CURRENT HORIZON: While cryogenic coherence limits physical banknotes, 
  Wiesner's mechanics underpin metropolitan quantum key networks, post-quantum 
  cryptographic tokens, and fault-tolerant quantum memories.
================================================================================

1. Opening Hook — Why You Should Care

Every security system humanity has ever built, from the wax seal of a Roman magistrate to the 2048-bit RSA encryption keys guarding interbank wire transfers, rests on a fragile presumption: computational or physical difficulty. We do not prevent forgery because it is fundamentally impossible; we prevent it because it is currently too expensive, too complex, or too slow for an adversary to achieve. A counterfeiter with sufficient metallurgical precision can stamp a flawless gold sovereign. A supercomputer with sufficient processing power—or a fault-tolerant quantum processor executing Shor’s algorithm—can factor the prime products shielding a global bank account in a matter of hours. The entirety of modern digital commerce is built upon a ledger of unproven mathematical conjectures that time and technology will inevitably erode.

In the late 1960s, a reclusive graduate student at Columbia University named Stephen Wiesner realized that this paradigm was flawed at its foundation. Wiesner asked a question that seemed to border on science fiction: Can we create an object whose duplication is forbidden not by civil law or computational complexity, but by the physical laws of the universe?

Wiesner’s answer was the invention of quantum money. By minting banknotes embedded with isolated subatomic particles, he proved that the fundamental principles of quantum mechanics could guarantee absolute, unforgeable authenticity. Counterfeiting a quantum banknote does not require evading the police or cracking an algorithm; it requires violating the quantum fabric of reality itself. Though his seminal manuscript was initially rejected by mainstream physics journals for being too radical, Wiesner’s framework of "conjugate coding" quietly fathered the entire discipline of modern quantum cryptography. Today, as quantum computers edge closer to breaking classical public-key infrastructure, Wiesner’s decades-old blueprint has re-emerged as the mathematical bedrock for securing global digital assets, decentralized ledgers, and national quantum communication backbones.

2. The Idea in Plain English

To understand why a quantum banknote cannot be copied, one must discard the classical intuition of how information exists in the physical world. In daily life, information is passive. A printed document reflects light into your eyes; reading the ink does not alter the text on the page. Because reading a classical message leaves the original object undisturbed, an observer can record every feature of the object and construct an identical duplicate. Classical computing treats information as an abstract string of binary digits—zeros and ones—which can be reproduced infinitely across hard drives and fiber-optic cables without degradation.

Quantum physics destroys this assumption through two interconnected principles: the nature of quantum superposition and the No-Cloning Theorem.

Consider a physical analogy. Imagine a magical coin suspended inside an opaque chamber. The coin is not resting flat on a table as either "Heads" or "Tails." Instead, it is spinning continuously in mid-air. In quantum terminology, this spinning object is a quantum bit, or qubit—a physical system that does not sit stubbornly in a state of 0 or 1, but exists in a simultaneous, probabilistic blend of both states at once.

The critical catch lies in how the universe permits us to look at this spinning coin. To determine its state, you must reach into the chamber with a measurement apparatus. However, your measurement is inherently invasive. If you insert a horizontal filter to catch the coin, the act of touching it forces the coin to snap instantly and irreversibly into either Heads or Tails. The delicate, spinning motion that defined its original identity is permanently destroyed.

Wiesner took this phenomenon a step further by introducing what physicists call mutually unbiased bases, an approach he termed conjugate coding. He realized that a qubit could be prepared in different geometric orientations. You could spin the coin vertically (which we might call the Rectilinear orientation), or you could spin it diagonally at a 45-degree angle (the Diagonal orientation).

If an inspector knows which orientation was used to prepare the coin, they can align their detector perfectly, observe the coin without introducing errors, and verify its exact identity. But if an eavesdropper or counterfeiter attempts to inspect the coin without knowing its original orientation, they face an impossible dilemma: * If they choose the Rectilinear detector to measure a Diagonally prepared coin, the measurement scrambles the coin’s diagonal orientation into a random vertical state. * The original information is vaporized by the very act of observation.

Because an adversary cannot measure the qubit without guessing its basis, and because guessing incorrectly irreparably alters the particle, they cannot extract the full information required to fabricate a second copy. This absolute physical barrier is formalised mathematically in the No-Cloning Theorem on Wikipedia, which proves that it is impossible to create an identical copy of an arbitrary, unknown quantum state.

3. How It Actually Works — The Mechanics

To translate this physical intuition into a robust financial and cryptographic architecture, Wiesner formulated an explicit mathematical protocol for minting, circulating, and authenticating quantum bank tokens. The mechanics operate through an asymmetric verification architecture divided between a minting authority (the Central Bank), a token holder (the merchant or user), and a potential counterfeiter.

The Minting Protocol

When the Central Bank issues a quantum banknote, it manufactures a hybrid object containing both classical and quantum information: 1. Classical Serial Number: The bank prints a standard, unique classical identification string, denoted as $s$, directly on the note. 2. Quantum Payload: Embedded within an isolated physical substrate inside the note is a register of $n$ isolated qubits: $$\vert\psi\rangle = \bigotimes_{i=1}^n \vert\psi_i\rangle$$ 3. Random Basis Selection: For each qubit index $i \in {1, 2, \dots, n}$, the bank independently and uniformly chooses a basis $\theta_i \in {Z, X}$, where $Z$ represents the standard computational basis and $X$ represents the diagonal Hadamard basis. 4. State Preparation: The bank chooses a random classical data bit $x_i \in {0, 1}$ and prepares the qubit $\vert\psi_i\rangle$ in one of four non-orthogonal eigenstates: - In the $Z$-basis ($\theta_i = Z$): $\vert0\rangle$ (representing bit 0) or $\vert1\rangle$ (representing bit 1). - In the $X$-basis ($\theta_i = X$): $\vert+\rangle = \frac{1}{\sqrt{2}}(\vert0\rangle + \vert1\rangle)$ (bit 0) or $\vert-\rangle = \frac{1}{\sqrt{2}}(\vert0\rangle - \vert1\rangle)$ (bit 1). 5. The Secret Ledger: Crucially, the bank records the triplet $(s, \mathbf{\theta}, \mathbf{x})$ in a highly secure, private classical database, where $\mathbf{\theta} = (\theta_1, \dots, \theta_n)$ and $\mathbf{x} = (x_1, \dots, x_n)$. The banknote is then released into circulation. The public knows the serial number $s$, but nobody except the Central Bank knows the secret basis vector $\mathbf{\theta}$ or the underlying bit string $\mathbf{x}$.

The Verification Algorithm

When a merchant receives the banknote, they cannot authenticate it locally because reading the qubits without the secret basis vector $\mathbf{\theta}$ would destroy them. Instead, this original scheme operates as a private-key quantum asset. The merchant transmits the physical banknote (or routes its quantum register via a quantum communication channel) back to the Central Bank for redemption.

The bank executes a deterministic verification algorithm: 1. The bank reads the classical serial number $s$ from the banknote. 2. It queries its private ledger to retrieve the corresponding secret preparation parameters $\mathbf{\theta}$ and $\mathbf{x}$. 3. For each qubit index $i$, the bank configures its measurement apparatus to measure the physical qubit in its exact preparation basis $\theta_i$. 4. Deterministic Validation: Because the bank measures each qubit in the correct basis, the projection is purely deterministic. The bank observes outcome $x_i$ with a theoretical probability of exactly $1.0$ ($100\%$ fidelity under ideal conditions). 5. If every single qubit yields the exact bit value recorded in the ledger ($x_i' = x_i$ for all $i$), the bank certifies the banknote as genuine, re-prepares the pristine state, and returns it to circulation. If any qubit disagrees, the note is instantly flagged as a counterfeit and confiscated.

Counterfeiting Security and the Breidbart Measurement Proof

Now, consider an adversarial counterfeiter who possesses a genuine banknote and attempts to produce two valid banknotes from it. The counterfeiter possesses the serial number $s$ and the physical state $\vert\psi\rangle$, but has zero knowledge of the bank's secret basis vector $\mathbf{\theta}$.

To duplicate the banknote, the counterfeiter must perform some physical measurement on each qubit $\vert\psi_i\rangle$ to extract its state, and then attempt to prepare two identical qubits in that estimated state.

Scenario A: Random Basis Guessing

If the counterfeiter chooses to measure qubit $i$ by randomly guessing either the $Z$-basis or the $X$-basis: * With probability $1/2$, the counterfeiter guesses the correct basis ($\theta_{\text{forge}} = \theta_i$). Their measurement returns the correct bit $x_i$ without perturbing the state. They prepare two fresh qubits in that state. When the bank tests these notes in basis $\theta_i$, both pass with probability $1$. * With probability $1/2$, the counterfeiter guesses the incorrect basis ($\theta_{\text{forge}} \neq \theta_i$). The measurement projects the qubit into an orthogonal state in the wrong basis (e.g., measuring a $\vert0\rangle$ state in the $X$-basis collapses it to $\vert+\rangle$ or $\vert-\rangle$ with equal probability). When the counterfeiter prepares two forged notes based on this faulty result, and the bank subsequently measures them in the true basis $\theta_i$, each forged note has only a $1/2$ probability of yielding the original bit $x_i$. * Combining these probabilities, the expected probability that a single forged qubit passes the bank's verification test is: $$P_{\text{pass}} = \left(\frac{1}{2} \times 1\right) + \left(\frac{1}{2} \times \frac{1}{2}\right) = \frac{3}{4}$$

Scenario B: The Optimal Eavesdropping Attack (Breidbart Basis)

Can a sophisticated counterfeiter achieve a higher success rate by designing a clever intermediate measurement? In quantum estimation theory, the optimal strategy to distinguish between four symmetric states separated by $\pi/2$ on the Bloch sphere is to measure along an intermediate axis rotated by $\pi/8$ (known as the Breidbart basis).

When an adversary measures a state from ${ \vert0\rangle, \vert1\rangle, \vert+\rangle, \vert-\rangle }$ along the Breidbart axis, the maximum probability of correctly identifying the underlying state is given by the geometric projection: $$\cos^2\left(\frac{\pi}{8}\right) = \frac{1 + \frac{1}{\sqrt{2}}}{2} \approx 0.8536$$

While this measurement extracts the maximum possible classical information from a single copy, quantum mechanics demands a strict trade-off between information gain and state disturbance. When the counterfeiter prepares two daughter qubits based on their Breidbart measurement outcome and submits them to the bank, the joint probability that both notes simultaneously pass the bank's verification remains strictly bounded from above by $3/4$ per qubit.

================================================================================
                    MATHEMATICAL CALLOUT: FORGERY COLLAPSE
================================================================================
For an n-qubit banknote, because each qubit is prepared independently, the total 
probability that a counterfeiter successfully duplicates all n qubits is:

P_forge = (3/4)^n

Conversely, the Central Bank's probability of detecting the counterfeit is:

P_detect = 1 - (3/4)^n

For a banknote with n = 100 qubits:
    P_forge = (3/4)^100 ≈ 3.207 × 10^-13
    P_detect ≈ 99.999999999968%

Result: A banknote of modest length achieves near-absolute mathematical security.
================================================================================

The Transition to Public-Key Quantum Money

While Wiesner’s private-key protocol is mathematically unassailable, it suffers from a major practical drawback: only the Central Bank can verify the currency. Every commercial transaction requires contacting the central authority, creating a severe communications bottleneck and eliminating the anonymity of cash.

To overcome this, modern quantum cryptographers developed public-key quantum money. In a public-key scheme, anyone can verify that a quantum banknote is genuine using a publicly available verification algorithm, yet nobody can duplicate the note.

Pioneered in seminal works by researchers such as Scott Aaronson and Edward Farhi, modern public-key constructions leverage advanced mathematical structures from knot theory and cryptographic obfuscation. In these schemes, quantum states are entangled across intricate mathematical superpositions representing topological knot invariants or hidden vector spaces in high-dimensional lattices. A user can run a verification quantum circuit that computes polynomial knot invariants to confirm the state's structural integrity without collapsing its superposed secrets, proving authenticity while mathematically precluding duplication.

The Engineering Bottleneck: Quantum Decoherence

If the mathematics of quantum money is so elegant, why do we not carry quantum banknotes in our wallets today? The answer lies in the physics of quantum decoherence.

A classical banknote can sit in a leather wallet for twenty years at room temperature without losing its printed serial number. A quantum state, by contrast, is extraordinarily fragile. Qubits must be perfectly isolated from external thermal noise, magnetic fluctuations, and stray photons. The moment a qubit interacts with its ambient environment, its delicate superposition collapses into random classical noise—a process known as decoherence.

Current solid-state quantum memory technologies—such as rare-earth-doped optical crystals, nitrogen-vacancy (NV) diamond centers, and cryogenic superconducting resonators—can preserve quantum states for durations ranging from fractions of a second to, at best, a few hours under ultra-cold, laboratory-controlled conditions. Engineering a portable, room-temperature "quantum credit card" capable of preserving non-orthogonal qubit states for years remains one of the grandest unsolved challenges in materials science.

4. Real-World Applications Today

While physical quantum cash in leather wallets remains constrained by cryogenic limitations, Wiesner’s core principles of conjugate coding and non-cloning verification are driving transformative breakthroughs across multiple sectors between 2024 and 2026.

1. High-Frequency Quantum Key Distribution (QKD) in Financial Networks

Institutions: Toshiba Europe, British Telecom (BT), and JPMorgan Chase.
Objective: Securing critical metropolitan banking corridors against interception and future quantum decryption attacks.
Quantum Advantage: Directly descending from Wiesner's conjugate coding, the industry-standard BB84 protocol (invented by Charles Bennett and Gilles Brassard, who credited Wiesner as their primary inspiration) transmits cryptographic keys using non-orthogonal photon polarizations. In 2024–2026, financial consortia deployed high-speed QKD links across London and New York, transferring millions of encrypted interbank transactions daily. Any attempt by an adversary to tap the fiber optic cable scrambles the quantum states, alerting the bank instantaneously and guaranteeing provable, eavesdrop-proof settlement. Readers can explore the programmatic mechanics of these state measurements through the IBM Qiskit Learning Platform.

2. Quantum Memory Buffers and Long-Distance Quantum Repeaters

Institutions: AWS Center for Quantum Networking, Harvard University, and QuEra Computing.
Objective: Building the memory nodes required for the global "Quantum Internet."
Quantum Advantage: Quantum networks cannot use classical signal amplifiers because the No-Cloning Theorem forbids copying unknown quantum states. To transmit quantum tokens and encryption keys across continental distances, researchers deploy solid-state quantum memory nodes based on nanophotonic diamond color centers. These devices store, synchronize, and verify conjugate-coded qubits without measurement, validating the initial storage mechanics Wiesner conceptualized fifty years ago.

3. Single-Use Unforgeable Tokens for Distributed Cloud Computing

Institutions: IBM Quantum, MIT Center for Theoretical Physics, and academic cloud consortia.
Objective: Creating revocable, single-use cryptographic authorization tokens for zero-trust cloud workloads.
Quantum Advantage: By encoding authentication tokens as multi-qubit entangled registers on cloud processors, cloud providers can issue access credentials that can be consumed exactly once. When the client executes an authorized task, the verification circuit measures and collapses the token state. Because of the no-cloning boundary, the client cannot clone the credential to run unauthorized duplicate compute jobs. Foundational educational materials on these state transformations are available via MIT OpenCourseWare Quantum Information Science.

4. Topological Knot and Lattice Verification on NISQ and Fault-Tolerant Architectures

Institutions: QuTech (Delft University of Technology), CNRS Paris, and European Quantum Flagship laboratories.
Objective: Benchmarking public-key quantum money verification routines on noisy intermediate-scale and early fault-tolerant quantum processors.
Quantum Advantage: Researchers are actively executing prototype public-key verification algorithms that evaluate knot invariants and subspace states. By demonstrating that a quantum processor can verify an entangled state’s geometric phase without collapsing its computational basis, these teams are establishing the algorithmic blueprints for trustless, decentralized quantum ledgers that operate entirely without central bank ledgers. Comprehensive reviews of these cryptographic frameworks can be found in Nature Physics review on Quantum Cryptography.

5. What This Means for You

For the non-physicist navigating an increasingly precarious digital world, Stephen Wiesner’s invention is far more than an intriguing theoretical puzzle. It represents a fundamental philosophical shift in how humanity manages trust, privacy, and digital ownership.

In today's digital landscape, you do not truly own your digital assets. Whether it is the money in your checking account, an electronic boarding pass, or a digital identity credential, your ownership is merely an entry in a database administered by a tech conglomerate or a central clearinghouse. These centralized systems are vulnerable to database manipulation, administrative overreach, identity theft, and the looming threat of "harvest now, decrypt later" surveillance—where malicious actors hoard encrypted personal records today, waiting for sufficiently powerful quantum machines to crack them tomorrow.

================================================================================
                     PERSONAL IMPACT: THE SHIFT IN TRUST
================================================================================
• ABSOLUTE DIGITAL SCARCITY: Physical cash cannot be duplicated digitally without 
  centralized intermediaries. Quantum money creates the first truly scarce, 
  tamper-proof digital object backed by physical law.
• COMPLETE FINANCIAL PRIVACY: Offline public-key quantum tokens allow private, 
  peer-to-peer digital transactions that do not require continuous surveillance 
  or centralized transaction logging.
• PROOF AGAINST ADVANCED COMPUTING: No increase in computational horsepower—
  classical, quantum, or artificial intelligence—can break the physical shield 
  of the No-Cloning Theorem.
================================================================================

When quantum memory technology matures, it will enable the creation of truly unforgeable, private digital cash: assets that can be handed directly from one person’s smartphone or hardware token to another's, completely offline, with absolute mathematical certainty that no duplicate copy remains in anyone’s hands. It restores the tactile finality and privacy of physical cash to the digital age, completely insulated from surveillance and computational compromise.

6. Today's Takeaway

Stephen Wiesner’s genius was to realize that what classical physics saw as an annoying barrier—the inescapable observer effect of quantum mechanics—was actually nature's ultimate cryptographic defense. By encoding value into non-orthogonal quantum states, Wiesner demonstrated that the fundamental laws of the universe can protect human privacy and financial integrity with an absolute mathematical certainty that no supercomputer can ever breach.