Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2002.09005 · Physical Review A

Quantum weak coin flipping with a single photon

Mathieu Bozzio, Ulysse Chabaud, Iordanis Kerenidis, Eleni Diamanti

Published Aug 19, 2020• 19 citations
arXivHTMLPDF

Abstract

Weak coin flipping is among the fundamental cryptographic primitives which ensure the security of modern communication networks. It allows two mistrustful parties to remotely agree on a random bit when they favor opposite outcomes. Unlike other two-party computations, one can achieve information-theoretic security using quantum mechanics only: both parties are prevented from biasing the flip with probability higher than $1/2+\ensuremath{\epsilon}$, where $\ensuremath{\epsilon}$ is arbitrarily low. Classically, the dishonest party can always cheat with probability 1 unless computational assumptions are used. Despite its importance, no physical implementation has been proposed for quantum weak coin flipping. Here, we present a practical protocol that requires a single photon and linear optics only. We show that it is fair and balanced even when threshold single-photon detectors are used, and reaches a bias as low as $\ensuremath{\epsilon}=1/\sqrt{2}\ensuremath{-}1/2\ensuremath{\approx}0.207$. We further show that the protocol may display a quantum advantage over a few-hundred meters with state-of-the-art technology.

DOI
10.1103/physreva.102.022414

Related papers

Experimental cheat-sensitive quantum weak coin flipping

Simon Neves, Verena Yacoub, Ulysse Chabaud +3 more

As in modern communication networks, the security of quantum networks will rely on complex cryptographic tasks that are based on a handful of fundamental primitives. Weak coin flipping (WCF) is a significant such primitive which allows two mistrustful parties to agree on a random bit while they favor opposite outcomes. Remarkably, perfect information-theoretic security can be achieved in principle for quantum WCF. Here, we overcome conceptual and practical issues that have prevented the experimental demonstration of this primitive to date, and demonstrate how quantum resources can provide cheat sensitivity, whereby each party can detect a cheating opponent, and an honest party is never sanctioned. Such a property is not known to be classically achievable with information-theoretic security. Our experiment implements a refined, loss-tolerant version of a recently proposed theoretical protocol and exploits heralded single photons generated by spontaneous parametric down conversion, a carefully optimized linear optical interferometer including beam splitters with variable reflectivities and a fast optical switch for the verification step. High values of our protocol benchmarks are maintained for attenuation corresponding to several kilometers of telecom optical fiber.

arXiv:2211.03472•Nov 7, 2022•0 citations

Security and implementation of advanced quantum cryptography : quantum money and quantum weak coin flipping

Mathieu Bozzio

Harnessing the laws of quantum theory can drastically boost the security of modern communication networks, from public key encryption to electronic voting and online banking. In this thesis, we bridge the gap between theory and experiment regarding two quantum-cryptographic tasks: quantum money and quantum weak coin flipping. Quantum money exploits the no-cloning property of quantum physics to generate unforgeable tokens, banknotes, and credit cards. We provide the first proof-of-principle implementation of this task, using photonic systems at telecom wavelengths. We then develop a practical security proof for quantum credit card schemes, in which the bank can remotely verify a card even in the presence of a malicious payment terminal. We finally propose a setup for secure quantum storage of the credit card, using electromagnetically-induced transparency in a cloud of cold cesium atoms. Quantum weak coin flipping is a fundamental cryptographic primitive, which helps construct more complex tasks such as bit commitment and multiparty computation. It allows two distant parties to flip a coin when they both desire opposite outcomes. Using quantum entanglement then prevents any party from biasing the outcome of the flip beyond a certain probability. We propose the first implementation for quantum weak coin flipping, which requires a single photon and linear optics only. We provide the complete security analysis in the presence of noise and losses, and show that the protocol is implementable on the scale of a small city with current technology. We finally propose a linear-optical extension of the protocol to lower the coin bias.

•Dec 10, 2019•0 citations

Experimental cheat-sensitive quantum weak coin flipping

Simon Neves, Verena Yacoub, Ulysse Chabaud +3 more

As in modern communication networks, the security of quantum networks will rely on complex cryptographic tasks that are based on a handful of fundamental primitives. Weak coin flipping (WCF) is a significant such primitive which allows two mistrustful parties to agree on a random bit while they favor opposite outcomes. Remarkably, perfect information-theoretic security can be achieved in principle for quantum WCF. Here, we overcome conceptual and practical issues that have prevented the experimental demonstration of this primitive to date, and demonstrate how quantum resources can provide cheat sensitivity, whereby each party can detect a cheating opponent, and an honest party is never sanctioned. Such a property is not known to be classically achievable with information-theoretic security. Our experiment implements a refined, loss-tolerant version of a recently proposed theoretical protocol and exploits heralded single photons generated by spontaneous parametric down conversion, a carefully optimized linear optical interferometer including beam splitters with variable reflectivities and a fast optical switch for the verification step. High values of our protocol benchmarks are maintained for attenuation corresponding to several kilometers of telecom optical fiber.

Nature Communications•Apr 3, 2023•13 citations

Experimental quantum strong coin flipping using single-photon states

Daniel A. Vajner, Koray Kaymazlar, Fenja Drauschke +8 more

In quantum cryptography, fundamental laws of quantum physics are exploited to enhance the security of cryptographic tasks. Quantum key distribution (QKD) is by far the most studied protocol to date, enabling the establishment of a secret key between trusted parties. Many practical use-cases in communication networks, however, involve parties who do not know or trust each other. The most fundamental quantum cryptographic building block in such a distrustful setting is quantum coin flipping, which has been studied only in few experimental studies to date using probabilistic quantum light sources facing fundamental limitations. Here, we experimentally implement a quantum strong coin flipping protocol using single-photon states and demonstrate an advantage compared to both classical realizations and implementations using faint laser pulses. We achieve this by employing a state-of-the-art deterministic single-photon source based on the Purcell-enhanced emission of a semiconductor quantum dot in combination with fast polarization-state encoding with sufficiently low quantum bit error ratio. The reduced multi-photon emission of the single-photon source yields a smaller bias of the coin flipping protocol compared to an attenuated laser implementation, both in simulations and in the experiment. By demonstrating a single-photon quantum advantage in a cryptographic primitive beyond QKD, our work represents a major advance towards the implementation of complex cryptographic tasks in a future quantum internet.

Photonics for Quantum (PfQ)•Jul 18, 2025•0 citations

Cheat-Penalised Quantum Weak Coin-Flipping

Atul Singh Arora, Carl A. Miller, Mauro E. S. Morales +1 more

Coin-flipping is a fundamental task in two-party cryptography where two remote mistrustful parties wish to generate a shared uniformly random bit. While quantum protocols promising near-perfect security exist for weak coin-flipping -- when the parties want opposing outcomes -- it has been shown that they must be inefficient in terms of their round complexity, and it is an open question of how space efficient they can be. In this work, we consider a variant called cheat-penalised weak coin-flipping in which if a party gets caught cheating, they lose $Λ$ points (compared to $0$ in the standard definition). We find that already for a small cheating penalty, the landscape of coin-flipping changes dramatically. For example, with $Λ=0.01$, we exhibit a protocol where neither Alice nor Bob can bias the result in their favour beyond $1/2 + 10^{-8}$, which uses $24$ qubits and $10^{16}$ rounds of communication (provably $10^{7}$ times better than any weak coin-flipping protocol with matching security). For the same space requirements, we demonstrate how one can choose between lowering how much a malicious party can bias the result (down to $1/2 + 10^{-10}$) and reducing the rounds of communication (down to $25,180$), depending on what is preferred. To find these protocols, we make two technical contributions. First, we extend the point game-protocol correspondence introduced by Kitaev and Mochon, to incorporate: (i) approximate point games, (ii) the cheat-penalised setting, and (iii) round and space complexity. Second, we give the first (to the best of our knowledge) numerical algorithm for constructing (approximate) point games that correspond to high security and low complexity. Our results open up the possibility of having secure and practical quantum protocols for multiparty computation.

arXiv:2510.03218•Oct 3, 2025•0 citations

Single-photon advantage in quantum cryptography beyond QKD

Daniel A. Vajner, Koray Kaymazlar, Fenja Drauschke +8 more

Abstract In quantum cryptography, fundamental laws of quantum physics are exploited to enhance the security of cryptographic tasks. Quantum key distribution (QKD) is by far the most studied protocol to date, enabling the establishment of a secret key between trusted parties. Many practical use-cases in communication networks, however, involve parties who do not trust each other. The most fundamental quantum cryptographic building block in such a distrustful setting is quantum coin flipping, which has been studied only in few experimental studies to date, all of which used probabilistic quantum light sources facing fundamental limitations. Here, we experimentally implement a quantum strong coin flipping protocol using single-photon states and demonstrate an advantage compared to both classical realizations and implementations using faint laser pulses. We achieve this by employing a state-of-the-art deterministic single-photon source based on the Purcell-enhanced emission of a semiconductor quantum dot in combination with fast polarization-state encoding with sufficiently low quantum bit error ratio. The reduced multi-photon emission of the single-photon source yields a smaller bias of the coin flipping protocol compared to an attenuated laser implementation, both in simulations and in the experiment. By demonstrating a single-photon quantum advantage in a cryptographic primitive beyond QKD, our work represents a major advance towards the implementation of complex cryptographic tasks in a future quantum internet.

arXiv:2412.14993•Nature Communications•Feb 26, 2026•3 citations
Weak coin flipping is among the fundamental cryptographic primitives which ensure the security of modern communication networks. It allows two mistrustful parties to remotely agree on a random bit when they favor opposite outcomes. Unlike other two-party computations, one can achieve information-theoretic security using quantum mechanics only: both parties are prevented from biasing the flip with probability higher than 1/2+\ensuremathϵ1/2+\ensuremath{\epsilon}1/2+\ensuremathϵ, where \ensuremathϵ\ensuremath{\epsilon}\ensuremathϵ is arbitrarily low. Classically, the dishonest party can always cheat with probability 1 unless computational assumptions are used. Despite its importance, no physical implementation has been proposed for quantum weak coin flipping. Here, we present a practical protocol that requires a single photon and linear optics only. We show that it is fair and balanced even when threshold single-photon detectors are used, and reaches a bias as low as \ensuremathϵ=1/2\ensuremath−1/2\ensuremath≈0.207\ensuremath{\epsilon}=1/\sqrt{2}\ensuremath{-}1/2\ensuremath{\approx}0.207\ensuremathϵ=1/2​\ensuremath−1/2\ensuremath≈0.207. We further show that the protocol may display a quantum advantage over a few-hundred meters with state-of-the-art technology.
As in modern communication networks, the security of quantum networks will rely on complex cryptographic tasks that are based on a handful of fundamental primitives. Weak coin flipping (WCF) is a significant such primitive which allows two mistrustful parties to agree on a random bit while they favor opposite outcomes. Remarkably, perfect information-theoretic security can be achieved in principle for quantum WCF. Here, we overcome conceptual and practical issues that have prevented the experimental demonstration of this primitive to date, and demonstrate how quantum resources can provide cheat sensitivity, whereby each party can detect a cheating opponent, and an honest party is never sanctioned. Such a property is not known to be classically achievable with information-theoretic security. Our experiment implements a refined, loss-tolerant version of a recently proposed theoretical protocol and exploits heralded single photons generated by spontaneous parametric down conversion, a carefully optimized linear optical interferometer including beam splitters with variable reflectivities and a fast optical switch for the verification step. High values of our protocol benchmarks are maintained for attenuation corresponding to several kilometers of telecom optical fiber.
Harnessing the laws of quantum theory can drastically boost the security of modern communication networks, from public key encryption to electronic voting and online banking. In this thesis, we bridge the gap between theory and experiment regarding two quantum-cryptographic tasks: quantum money and quantum weak coin flipping. Quantum money exploits the no-cloning property of quantum physics to generate unforgeable tokens, banknotes, and credit cards. We provide the first proof-of-principle implementation of this task, using photonic systems at telecom wavelengths. We then develop a practical security proof for quantum credit card schemes, in which the bank can remotely verify a card even in the presence of a malicious payment terminal. We finally propose a setup for secure quantum storage of the credit card, using electromagnetically-induced transparency in a cloud of cold cesium atoms. Quantum weak coin flipping is a fundamental cryptographic primitive, which helps construct more complex tasks such as bit commitment and multiparty computation. It allows two distant parties to flip a coin when they both desire opposite outcomes. Using quantum entanglement then prevents any party from biasing the outcome of the flip beyond a certain probability. We propose the first implementation for quantum weak coin flipping, which requires a single photon and linear optics only. We provide the complete security analysis in the presence of noise and losses, and show that the protocol is implementable on the scale of a small city with current technology. We finally propose a linear-optical extension of the protocol to lower the coin bias.
As in modern communication networks, the security of quantum networks will rely on complex cryptographic tasks that are based on a handful of fundamental primitives. Weak coin flipping (WCF) is a significant such primitive which allows two mistrustful parties to agree on a random bit while they favor opposite outcomes. Remarkably, perfect information-theoretic security can be achieved in principle for quantum WCF. Here, we overcome conceptual and practical issues that have prevented the experimental demonstration of this primitive to date, and demonstrate how quantum resources can provide cheat sensitivity, whereby each party can detect a cheating opponent, and an honest party is never sanctioned. Such a property is not known to be classically achievable with information-theoretic security. Our experiment implements a refined, loss-tolerant version of a recently proposed theoretical protocol and exploits heralded single photons generated by spontaneous parametric down conversion, a carefully optimized linear optical interferometer including beam splitters with variable reflectivities and a fast optical switch for the verification step. High values of our protocol benchmarks are maintained for attenuation corresponding to several kilometers of telecom optical fiber.
In quantum cryptography, fundamental laws of quantum physics are exploited to enhance the security of cryptographic tasks. Quantum key distribution (QKD) is by far the most studied protocol to date, enabling the establishment of a secret key between trusted parties. Many practical use-cases in communication networks, however, involve parties who do not know or trust each other. The most fundamental quantum cryptographic building block in such a distrustful setting is quantum coin flipping, which has been studied only in few experimental studies to date using probabilistic quantum light sources facing fundamental limitations. Here, we experimentally implement a quantum strong coin flipping protocol using single-photon states and demonstrate an advantage compared to both classical realizations and implementations using faint laser pulses. We achieve this by employing a state-of-the-art deterministic single-photon source based on the Purcell-enhanced emission of a semiconductor quantum dot in combination with fast polarization-state encoding with sufficiently low quantum bit error ratio. The reduced multi-photon emission of the single-photon source yields a smaller bias of the coin flipping protocol compared to an attenuated laser implementation, both in simulations and in the experiment. By demonstrating a single-photon quantum advantage in a cryptographic primitive beyond QKD, our work represents a major advance towards the implementation of complex cryptographic tasks in a future quantum internet.
Coin-flipping is a fundamental task in two-party cryptography where two remote mistrustful parties wish to generate a shared uniformly random bit. While quantum protocols promising near-perfect security exist for weak coin-flipping -- when the parties want opposing outcomes -- it has been shown that they must be inefficient in terms of their round complexity, and it is an open question of how space efficient they can be. In this work, we consider a variant called cheat-penalised weak coin-flipping in which if a party gets caught cheating, they lose ΛΛΛ points (compared to 000 in the standard definition). We find that already for a small cheating penalty, the landscape of coin-flipping changes dramatically. For example, with Λ=0.01Λ=0.01Λ=0.01, we exhibit a protocol where neither Alice nor Bob can bias the result in their favour beyond 1/2+10−81/2 + 10^{-8}1/2+10−8, which uses 242424 qubits and 101610^{16}1016 rounds of communication (provably 10710^{7}107 times better than any weak coin-flipping protocol with matching security). For the same space requirements, we demonstrate how one can choose between lowering how much a malicious party can bias the result (down to 1/2+10−101/2 + 10^{-10}1/2+10−10) and reducing the rounds of communication (down to 25,18025,18025,180), depending on what is preferred. To find these protocols, we make two technical contributions. First, we extend the point game-protocol correspondence introduced by Kitaev and Mochon, to incorporate: (i) approximate point games, (ii) the cheat-penalised setting, and (iii) round and space complexity. Second, we give the first (to the best of our knowledge) numerical algorithm for constructing (approximate) point games that correspond to high security and low complexity. Our results open up the possibility of having secure and practical quantum protocols for multiparty computation.
Abstract In quantum cryptography, fundamental laws of quantum physics are exploited to enhance the security of cryptographic tasks. Quantum key distribution (QKD) is by far the most studied protocol to date, enabling the establishment of a secret key between trusted parties. Many practical use-cases in communication networks, however, involve parties who do not trust each other. The most fundamental quantum cryptographic building block in such a distrustful setting is quantum coin flipping, which has been studied only in few experimental studies to date, all of which used probabilistic quantum light sources facing fundamental limitations. Here, we experimentally implement a quantum strong coin flipping protocol using single-photon states and demonstrate an advantage compared to both classical realizations and implementations using faint laser pulses. We achieve this by employing a state-of-the-art deterministic single-photon source based on the Purcell-enhanced emission of a semiconductor quantum dot in combination with fast polarization-state encoding with sufficiently low quantum bit error ratio. The reduced multi-photon emission of the single-photon source yields a smaller bias of the coin flipping protocol compared to an attenuated laser implementation, both in simulations and in the experiment. By demonstrating a single-photon quantum advantage in a cryptographic primitive beyond QKD, our work represents a major advance towards the implementation of complex cryptographic tasks in a future quantum internet.