Insecurity of a relativistic quantum commitment scheme

Guang Ping He

DOI: https://doi.org/10.1016/j.rinp.2023.106568

2023-07-23

Abstract:We propose a cheating strategy to a relativistic quantum commitment scheme [Sci Rep 2014;4:6774] which was claimed to be unconditionally secure. It is shown that the sender Alice can cheat successfully with probability 100%, thus disproving the security claim.

Quantum Physics

What problem does this paper attempt to address?

Security bound of cheat sensitive quantum bit commitment

Guang Ping He

DOI: https://doi.org/10.1038/srep09398

IF: 4.6

2015-03-23

Scientific Reports

Abstract:AbstractCheat sensitive quantum bit commitment (CSQBC) loosens the security requirement of quantum bit commitment (QBC), so that the existing impossibility proofs of unconditionally secure QBC can be evaded. But here we analyze the common features in all existing CSQBC protocols and show that in any CSQBC having these features, the receiver can always learn a non-trivial amount of information on the sender's committed bit before it is unveiled, while his cheating can pass the security check with a probability not less than 50%. The sender's cheating is also studied. The optimal CSQBC protocols that can minimize the sum of the cheating probabilities of both parties are found to be trivial, as they are practically useless. We also discuss the possibility of building a fair protocol in which both parties can cheat with equal probabilities.

multidisciplinary sciences
The existance of unconditionally secure quantum bit commitment

Chuan-Feng Li,Guang-Can Guo

2001-01-01

Abstract:This paper has been withdrawn by the author(s).The scheme presented is insecure.
Secure Quantum Bit Commitment Using Unstable Particles

Chi-Yee Cheung

DOI: https://doi.org/10.48550/arXiv.quant-ph/0603154

2006-03-28

Abstract:Using unstable particles which decay by emitting neutrinos, we propose a quantum bit commitment protocol that is humanly impossible to break. Neutrinos carry away quantum information, but their interaction with matter is so weak that it would take an astronomically-sized machine just to catch them, not to mention performing controlled unitary operations on them. As a result quantum information is lost, and cheating is not possible even if the participants had access to the most powerful quantum computers that could ever be built. Therefore, for all practical purposes, our new protocol is as good as unconditionally secure.

Quantum Physics
Experimental Unconditionally Secure Bit Commitment

Yang Liu,Yuan Cao,Marcos Curty,Sheng-Kai Liao,Jian Wang,Ke Cui,Yu-Huai Li,Ze-Hong Lin,Qi-Chao Sun,Dong-Dong Li,Hong-Fei Zhang,Yong Zhao,Teng-Yun Chen,Cheng-Zhi Peng,Qiang Zhang,Adan Cabello,Jian-Wei Pan

DOI: https://doi.org/10.1103/physrevlett.112.010504

IF: 8.6

2014-01-01

Physical Review Letters

Abstract:Quantum physics allows for unconditionally secure communication between parties that trust each other. However, when the parties do not trust each other such as in the bit commitment scenario, quantum physics is not enough to guarantee security unless extra assumptions are made. Unconditionally secure bit commitment only becomes feasible when quantum physics is combined with relativistic causality constraints. Here we experimentally implement a quantum bit commitment protocol with relativistic constraints that offers unconditional security. The commitment is made through quantum measurements in two quantum key distribution systems in which the results are transmitted via free-space optical communication to two agents separated with more than 20 km. The security of the protocol relies on the properties of quantum information and relativity theory. In each run of the experiment, a bit is successfully committed with less than 5.68×10(-2) cheating probability. This demonstrates the experimental feasibility of quantum communication with relativistic constraints.
Reexamination of Quantum Bit Commitment: the Possible and the Impossible

Giacomo Mauro D'Ariano,Dennis Kretschmann,Dirk Schlingemann,Reinhard F. Werner

DOI: https://doi.org/10.1103/PhysRevA.76.032328

2007-10-15

Abstract:Bit commitment protocols whose security is based on the laws of quantum mechanics alone are generally held to be impossible. In this paper we give a strengthened and explicit proof of this result. We extend its scope to a much larger variety of protocols, which may have an arbitrary number of rounds, in which both classical and quantum information is exchanged, and which may include aborts and resets. Moreover, we do not consider the receiver to be bound to a fixed "honest" strategy, so that "anonymous state protocols", which were recently suggested as a possible way to beat the known no-go results are also covered. We show that any concealing protocol allows the sender to find a cheating strategy, which is universal in the sense that it works against any strategy of the receiver. Moreover, if the concealing property holds only approximately, the cheat goes undetected with a high probability, which we explicitly estimate. The proof uses an explicit formalization of general two party protocols, which is applicable to more general situations, and a new estimate about the continuity of the Stinespring dilation of a general quantum channel. The result also provides a natural characterization of protocols that fall outside the standard setting of unlimited available technology, and thus may allow secure bit commitment. We present a new such protocol whose security, perhaps surprisingly, relies on decoherence in the receiver's lab.

Quantum Physics
Unconditionally secure quantum bit commitment is simply possible

Arindam Mitra

DOI: https://doi.org/10.48550/arXiv.physics/0007089

2001-02-06

Abstract:Mayers, Lo and Chau proved unconditionally secure quantum bit commitment is impossible. It is shown that their proof is valid only for a particular model of quantum bit commitment encoding, in general it does not hold good. A different model of unconditionally secure quantum bit commitment - both entanglement and disentanglement-based - is presented. Even cheating can be legally proved with some legal evidences. Unconditionally secure quantum bit commitment can be established on the top of unconditionally secure quantum coin tossing, which is also claimed to be two-way impossible.

General Physics
Unconditionally Secure Commitments with Quantum Auxiliary Inputs

Tomoyuki Morimae,Barak Nehoran,Takashi Yamakawa

DOI: https://doi.org/10.1007/978-3-031-68394-7_3

2024-09-06

Abstract:We show the following unconditional results on quantum commitments in two related yet different models: 1. We revisit the notion of quantum auxiliary-input commitments introduced by Chailloux, Kerenidis, and Rosgen (Comput. Complex. 2016) where both the committer and receiver take the same quantum state, which is determined by the security parameter, as quantum auxiliary inputs. We show that computationally-hiding and statistically-binding quantum auxiliary-input commitments exist unconditionally, i.e., without relying on any unproven assumption, while Chailloux et al. assumed a complexity-theoretic assumption, ${\bf QIP}\not\subseteq{\bf QMA}$. On the other hand, we observe that achieving both statistical hiding and statistical binding at the same time is impossible even in the quantum auxiliary-input setting. To the best of our knowledge, this is the first example of unconditionally proving computational security of any form of (classical or quantum) commitments for which statistical security is impossible. As intermediate steps toward our construction, we introduce and unconditionally construct post-quantum sparse pseudorandom distributions and quantum auxiliary-input EFI pairs which may be of independent interest. 2. We introduce a new model which we call the common reference quantum state (CRQS) model where both the committer and receiver take the same quantum state that is randomly sampled by an efficient setup algorithm. We unconditionally prove that there exist statistically hiding and statistically binding commitments in the CRQS model, circumventing the impossibility in the plain model. We also discuss their applications to zero-knowledge proofs, oblivious transfers, and multi-party computations.

Quantum Physics,Cryptography and Security
Quantum bit commitment with cheat sensitive binding and approximate sealing

Yan-Bing Li,Sheng-Wei Xu,Wei Huang,Zhong-Jie Wan

DOI: https://doi.org/10.1088/1751-8113/48/13/135302

2014-07-25

Abstract:This paper proposes a cheat sensitive quantum bit commitment (CSQBC) scheme based on single photons, in which Alice commits a bit to Bob. Here, Bob only can cheat the committed bit with probability close to $0$ with the increasing of used single photons' amount. And if Alice altered her committed bit after commitment phase, she will be detected with probability close to $1$ with the increasing of used single photons' amount. The scheme is easy to be realized with nowadays technology.

Quantum Physics
Unconditionally Secure Relativistic Quantum Qubit Commitment

Houquan Liu,Libo Yuan

DOI: https://doi.org/10.3390/app112311416

2021-12-02

Applied Sciences

Abstract:Quantum qubit commitment is a stronger version of the quantum bit commitment. It is impossible to realize unconditionally secure quantum qubit commitment in nonrelativistic domain. In this paper, we propose an unconditionally secure relativistic quantum qubit commitment protocol for the first time, which will have some unique applications in the upcoming era of quantum network.
Insecurity of Quantum Two-Party Computation with Applications to Cheat-Sensitive Protocols and Oblivious Transfer Reductions

Esther Hänggi,Severin Winkler

2024-07-15

Abstract:Oblivious transfer (OT) is a fundamental primitive for secure two-party computation. It is well known that OT cannot be implemented with information-theoretic security if the two players only have access to noiseless communication channels, even in the quantum case. As a result, weaker variants of OT have been studied. In this work, we rigorously establish the impossibility of cheat-sensitive OT, where a dishonest party can cheat, but risks being detected. We construct a general attack on any quantum protocol that allows the receiver to compute all inputs of the sender and provide an explicit upper bound on the success probability of this attack. This implies that cheat-sensitive quantum Symmetric Private Information Retrieval cannot be implemented with statistical information-theoretic security. Leveraging the techniques devised for our proofs, we provide entropic bounds on primitives needed for secure function evaluation. They imply impossibility results for protocols where the players have access to OT as a resource. This result significantly improves upon existing bounds and yields tight bounds for reductions of 1-out-of-n OT to a resource primitive. Our results hold in particular for transformations between a finite number of primitives and for any error.

Quantum Physics,Cryptography and Security
Relativistic quantum cryptography

Jędrzej Kaniewski

DOI: https://doi.org/10.48550/arXiv.1512.00602

2015-12-02

Abstract:In this thesis we explore the benefits of relativistic constraints for cryptography. We first revisit non-communicating models and its applications in the context of interactive proofs and cryptography. We propose bit commitment protocols whose security hinges on communication constraints and investigate its limitations. We explain how some non-communicating models can be justified by special relativity and study the limitations of such models. In particular, we present a framework for analysing security of multiround relativistic protocols. The second part of the thesis is dedicated to analysing specific protocols. We start by considering a recently proposed two-round quantum bit commitment protocol. We propose a fault-tolerant variant of the protocol, present a complete security analysis and report on an experimental implementation performed in collaboration with an experimental group at the University of Geneva. We also propose a new, multiround classical bit commitment protocol and prove its security against classical adversaries. This demonstrates that in the classical world an arbitrarily long commitment can be achieved even if the agents are restricted to occupy a finite region of space. Moreover, the protocol is easy to implement and we report on an experiment performed in collaboration with the Geneva group.

Quantum Physics
A Practical Quantum Bit Commitment Protocol

S. Arash Sheikholeslam,T. Aaron Gulliver

DOI: https://doi.org/10.48550/arXiv.1111.6311

2012-05-11

Abstract:In this paper, we introduce a new quantum bit commitment protocol which is practically secure against entanglement attacks. A general cheating strategy is discussed and shown to be practically ineffective against the proposed approach.

Quantum Physics
Comment on "quantum Key Distribution Without Alternative Measurements" [phys. Rev. A 61, 052312 (2000)]

YS Zhang,CF Li,GC Guo

DOI: https://doi.org/10.1103/physreva.63.036301

IF: 2.971

2001-01-01

Physical Review A

Abstract:In a recent paper [A. Cabello, Phys. Rev. A 61, 052312 (2000)], a quantum key distribution protocol based on entanglement swapping was proposed. However, in this Comment, it is shown that this protocol is insecure if Eve uses a special strategy to attack.
Is entanglement necessary to have unconditional security in quantum bit commitment ?

Arindam Mitra

DOI: https://doi.org/10.48550/arXiv.cs/0503048

2006-03-31

Abstract:A simple un-entanglement based quantum bit commitment scheme is presented. Although commitment is unconditionally secure but concealment is not.

Cryptography and Security
Resonance contributions to HBT correlation radii

Urs Achim Wiedemann,Ulrich Heinz

DOI: https://doi.org/10.1103/PhysRevC.56.3265

1998-01-12

Abstract:We study the effect of resonance decays on intensity interferometry for heavy ion collisions. Collective expansion of the source leads to a dependence of the two-particle correlation function on the pair momentum K. This opens the possibility to reconstruct the dynamics of the source from the K-dependence of the measured HBT radii. Here we address the question to what extent resonance decays can fake such a flow signal. Within a simple parametrization for the emission function we present a comprehensive analysis of the interplay of flow and resonance decays on the one- and two-particle spectra. We discuss in detail the non-Gaussian features of the correlation function introduced by long-lived resonances and the resulting problems in extracting meaningful HBT radii. We propose to define them in terms of the second order q-moments of the correlator C(q, K). We show that this yields a more reliable characterisation of the correlator in terms of its width and the correlation strength `lambda' than other commonly used fit procedures. The normalized fourth-order q-moments (kurtosis) provide a quantitative measure for the non-Gaussian features of the correlator. At least for the class of models studied here, the kurtosis helps separating effects from expansion flow and resonance decays, and provides the cleanest signal to distinguish between scenarios with and without transverse flow.

Nuclear Theory,High Energy Physics - Phenomenology
Security Details for Bit Commitment by Transmitting Measurement Outcomes

Sarah Croke,Adrian Kent

DOI: https://doi.org/10.1103/PhysRevA.86.052309

2012-08-08

Abstract:We spell out details of a simple argument for a security bound for the secure relativistic quantum bit commitment protocol of Ref. [1].

Quantum Physics,Cryptography and Security
Device-Independent Relativistic Quantum Bit Commitment

Emily Adlam,Adrian Kent

DOI: https://doi.org/10.1103/PhysRevA.92.022315

2015-04-04

Abstract:We examine the possibility of device-independent relativistic quantum bit commitment. We note the potential threat of {\it location attacks}, in which the behaviour of untrusted devices used in relativistic quantum cryptography depends on their space-time location. We describe relativistic quantum bit commitment schemes that are immune to these attacks, and show that these schemes offer device-independent security against hypothetical post-quantum adversaries subject only to the no-signalling principle. We compare a relativistic classical bit commitment scheme with similar features, and note some possible advantages of the quantum schemes.

Quantum Physics,Cryptography and Security
Comment on "A short impossibility proof of quantum bit commitment"

Guang Ping He

DOI: https://doi.org/10.48550/arXiv.1306.5357

2013-06-23

Abstract:In a recent letter (Phys. Lett. A 377 (2013) 1076, <a class="link-https" data-arxiv-id="0905.3801" href="https://arxiv.org/abs/0905.3801">arXiv:0905.3801</a>), the authors presented an impossibility proof of quantum bit commitment, which attempted to cover all possible protocols that involve both quantum and classical information. Here we show that there are many errors in the proof, thus it fails to exhaust all conceivable protocols.

Quantum Physics
Fully Distrustful Quantum Cryptography

J. Silman,A. Chailloux,N. Aharon,I. Kerenidis,S. Pironio,S. Massar

DOI: https://doi.org/10.1103/PhysRevLett.106.220501

2011-01-27

Abstract:In the distrustful quantum cryptography model the different parties have conflicting interests and do not trust one another. Nevertheless, they trust the quantum devices in their labs. The aim of the device-independent approach to cryptography is to do away with the necessity of making this assumption, and, consequently, significantly increase security. In this paper we enquire whether the scope of the device-independent approach can be extended to the distrustful cryptography model, thereby rendering it `fully' distrustful. We answer this question in the affirmative by presenting a device-independent (imperfect) bit-commitment protocol, which we then use to construct a device-independent coin flipping protocol.

Quantum Physics
Perfect cheating is impossible for single-qubit position verification

Carl A. Miller,Yusuf Alnawakhtha

2024-06-29

Abstract:In quantum position verification, a prover certifies her location by performing a quantum computation and returning the results (at the speed of light) to a set of trusted verifiers. One of the very first protocols for quantum position verification was proposed in (Kent, Munro, Spiller 2011): the prover receives a qubit $Q$ from one direction, receives an orthogonal basis $\{ v, v^\perp \}$ from the opposite direction, then measures $Q$ in $\{ v, v^\perp \}$ and broadcasts the result. A number of variants of this protocol have been proposed and analyzed, but the question of whether the original protocol itself is secure has never been fully resolved. In this work we show that there is no perfect finite-dimensional cheating strategy for the original KMS measurement protocol. Our approach makes use of tools from real algebraic geometry.

Quantum Physics,Algebraic Geometry

Insecurity of a relativistic quantum commitment scheme

Security bound of cheat sensitive quantum bit commitment

The existance of unconditionally secure quantum bit commitment

Secure Quantum Bit Commitment Using Unstable Particles

Experimental Unconditionally Secure Bit Commitment

Reexamination of Quantum Bit Commitment: the Possible and the Impossible

Unconditionally secure quantum bit commitment is simply possible

Unconditionally Secure Commitments with Quantum Auxiliary Inputs

Quantum bit commitment with cheat sensitive binding and approximate sealing

Unconditionally Secure Relativistic Quantum Qubit Commitment

Insecurity of Quantum Two-Party Computation with Applications to Cheat-Sensitive Protocols and Oblivious Transfer Reductions

Relativistic quantum cryptography

A Practical Quantum Bit Commitment Protocol

Comment on "quantum Key Distribution Without Alternative Measurements" [phys. Rev. A 61, 052312 (2000)]

Is entanglement necessary to have unconditional security in quantum bit commitment ?

Resonance contributions to HBT correlation radii

Security Details for Bit Commitment by Transmitting Measurement Outcomes

Device-Independent Relativistic Quantum Bit Commitment

Comment on "A short impossibility proof of quantum bit commitment"

Fully Distrustful Quantum Cryptography

Perfect cheating is impossible for single-qubit position verification