We introduce a new setting for two-party cryptography by introducing the notion of temporarily trusted third parties. These third parties act honest-but-curious during the execution of the protocol. Once the protocol concludes and the trust period expires, these third parties may collaborate with an adversarial party. We implement a variant of the cryptographic primitive of bit commitment in this setting, which we call erasable bit commitment. In this primitive, the sender has the choice of either opening or erasing her commitment after the commit phase. For example, she can ask for an erase before the trust period expires in case the conditions for opening the commitment have not been met. The erasure prevents a future coalition of the trusted party and the receiver from extracting any information about the commitment. However, this option also weakens the cryptographic primitive relative to standard bit commitment. Furthermore, the committed information is not revealed to the trusted node at any stage during the protocol. Our protocol requires a constant number of third parties and can tolerate a small number of corrupt third parties as well as implementation errors.
We introduce a new setting for two-party cryptography by introducing the notion of temporarily trusted third parties. These third parties act honest-but-curious during the execution of the protocol. Once the protocol concludes and the trust period expires, these third parties may collaborate with an adversarial party. We implement a variant of the cryptographic primitive of bit commitment in this setting, which we call erasable bit commitment. In this primitive, the sender has the choice of either opening or erasing her commitment after the commit phase. For example, she can ask for an erase before the trust period expires in case the conditions for opening the commitment have not been met. The erasure prevents a future coalition of the trusted party and the receiver from extracting any information about the commitment. However, this option also weakens the cryptographic primitive relative to standard bit commitment. Furthermore, the committed information is not revealed to the trusted node at any stage during the protocol. Our protocol requires a constant number of third parties and can tolerate a small number of corrupt third parties as well as implementation errors.
The work in this thesis can be divided into three parts. The first two parts deal with optical quantum communication protocols and the third part deals with quantum cryptography. The first part of the thesis is a step towards reformulating quantum protocols in terms of coherent states. Quantum communication protocols are typically formulated in terms of abstract qudit states and operations. This leaves the question of an experimental realization open. Direct translation of these protocols, say into single photons with some d-dimensional degree of freedom, are typically challenging to realize. Multi-mode coherent states, on the other hand, can be easily generated experimentally. Reformulation of protocols in terms of these states has been a successful strategy for implementation of quantum protocols. Quantum key distribution and the quantum fingerprinting protocol have both followed this route. In Chapter 3, we characterize the Gram matrices of multi-mode coherent states in an attempt to understand the class of communication protocols, which can be implemented using these states. We also derive the closure of the Gram matrices, which can be implemented in this way, so that we also characterize those matrices, which can be approximated arbitrarily well using multi-mode coherent states. \n \nIn the second part of the thesis, Chapter 4, we describe our collaboration with an experimental group to implement the quantum fingerprinting protocol and examine the tradeoffs between the resources required to implement such protocols. It is seen that it is difficult to implement the quantum fingerprinting protocol experimentally for large input sizes. This leads us to study the tradeoff between the two resources expended during optically implemented simultaneous message passing communication protocols: the duration of the protocol and the energy required to run it. We derive general bounds on the growth of these quantities which are valid for all optical protocols. We also develop tighter bounds for the growth of these resources for protocols implementing quantum fingerprinting with coherent states. \n \nFinally in Chapter 5, we venture into quantum cryptography. We introduce a new setting for two-party cryptography with temporarily trusted third parties. In this setting, in addition to Alice and Bob, there are third parties, which Alice and Bob both trust to be honest during the course of the protocol. However, once the protocol concludes, there is no guarantee over the behaviour of these third parties. It is possible that they collaborate and act adversarially against the honest parties. We implement a variant of bit commitment in this setting, which we call erasable bit commitment. In this primitive, Alice has the choice of either opening or erasing her commitment after the commit phase. The ability to ask for an erasure allows Alice to ask the trusted nodes to erase her commitment in case the trust period is about to expire. However, this ability also makes erasable bit commitment weaker than the standard version of bit commitment. In addition to satisfying the security requirements of bit commitment, our protocol also does not reveal any information about the commitment to the third parties. Lastly, our protocol for this primitive requires a constant number of trusted third parties and can tolerate a small number of dishonest trusted nodes as well as implementation errors.
Bit commitment is a fundamental cryptographic primitive and a cornerstone for numerous two-party cryptographic protocols, including zero-knowledge proofs. However, it has been proven that unconditionally secure bit commitment, both classical and quantum, is impossible. In this work, we demonstrate that imposing a restriction on the committing party to perform only separable operations enables secure quantum bit-commitment schemes. Specifically, we prove that in any perfectly hiding bit-commitment protocol, an honestly committing party limited to separable operations will be detected with high probability if they attempt to alter their commitment. To illustrate our findings, we present an example protocol.
We initiate the study of two-party cryptographic primitives with unconditional security, assuming that the adversary's quantum memory is of bounded size. We show that oblivious transfer and bit commitment can be implemented in this model using protocols where honest parties need no quantum memory, whereas an adversarial player needs quantum memory of size at least n/2 in order to break the protocol, where n is the number of qubits transmitted. This is in sharp contrast to the classical bounded-memory model, where we can only tolerate adversaries with memory of size quadratic in honest players' memory size. Our protocols are efficient, non-interactive and can be implemented using today's technology. On the technical side, a new uncertainty relation is established
Bit commitment is an essential primitive in quantum cryptography. It is the basic building block of many cryptographic protocols in which it provides security over distrustful parties. This paper proposes a secured quantum two-bit commitment protocol for any two classical bits. The protocol contains two parties - a committer and a receiver - who share both quantum and classical communication channels. The main phases of this protocol are commitment and revealing phases where the concealing and binding conditions are proved in order to accept the commitment message. The proposed framework utilizes different security layers to hide specific quantum states in a superposition alongside trivial one qubit operations. The secured unitary transformations are applied by the two parties to meet the concealing and binding conditions. To verify the success of the proposed protocol, the measured output of the two parties are compared. The protocol operates under the assumption that the two parties might cheat and the possible existence of an eavesdropper.
We initiate the study of two-party cryptographic primitives \nwith unconditional security, assuming that the adversary’s \nquantum memory is of bounded size. We show that oblivious \ntransfer and bit commitment can be implemented in this \nmodel using protocols where honest parties need no quantum \nmemory, whereas an adversarial player needs quantum \nmemory of size at least n/2 in order to break the protocol, \nwhere n is the number of qubits transmitted. This is \nin sharp contrast to the classical bounded-memory model, \nwhere we can only tolerate adversaries with memory of size \nquadratic in honest players’ memory size. Our protocols \nare efficient, non-interactive and can be implemented using \ntoday’s technology. On the technical side, a new entropic \nuncertainty relation involving min-entropy is established.
Quantum bit commitment has been known to be impossible by the independent proofs of Mayers, and Lo and Chau, under the assumption that the whole quantum states right before the unveiling phase are static to users. We here provide an unconditionally secure non-static quantum bit commitment protocol with a trusted third party, which is not directly involved in any communications between users and can be limited not to get any information of commitment without being detected by users. We also prove that our quantum bit commitment protocol is not secure without the help of the trusted third party. The proof is basically different from the Mayers-Lo-Chau's no-go theorem, because we do not assume the staticity of the finally shared quantum states between users.