Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2501.07351 · Physical Review A

Honest-binding quantum bit commitment from separable operations

Ziad Chaoui, Anna Pappa, Matteo Rosati

Published May 5, 2026• 1 citation
arXivHTMLPDF

Abstract

Bit commitment is a fundamental cryptographic primitive and a cornerstone for numerous two-party cryptographic protocols, including zero-knowledge proofs. However, it has been proven that unconditionally secure bit commitment, both classical and quantum, is impossible. In this work, we demonstrate that imposing a restriction on the committing party to perform only separable operations enables secure quantum bit-commitment schemes. Specifically, we prove that in any perfectly hiding bit-commitment protocol, an honestly committing party limited to separable operations will be detected with high probability if they attempt to alter their commitment. To illustrate our findings, we present an example protocol.

DOI
10.1103/58t8-dj5y

Related papers

A Secured Quantum Two-Bit Commitment Protocol for Communication Systems

Manal Khawasik, Wagdy Gomaa El-Sayed, Magdi Z. Rashad +1 more

Bit commitment is an essential primitive in quantum cryptography. It is the basic building block of many cryptographic protocols in which it provides security over distrustful parties. This paper proposes a secured quantum two-bit commitment protocol for any two classical bits. The protocol contains two parties - a committer and a receiver - who share both quantum and classical communication channels. The main phases of this protocol are commitment and revealing phases where the concealing and binding conditions are proved in order to accept the commitment message. The proposed framework utilizes different security layers to hide specific quantum states in a superposition alongside trivial one qubit operations. The secured unitary transformations are applied by the two parties to meet the concealing and binding conditions. To verify the success of the proposed protocol, the measured output of the two parties are compared. The protocol operates under the assumption that the two parties might cheat and the possible existence of an eavesdropper.

IEEE Access•Jan 1, 2022•8 citations

Quantum Bit Commitment Without Quantum Memory

Lidong Xu, Mingqiang Wang, Jing Qin

Abstract Commitment scheme is a fundamental cryptographic primitive that serve as building blocks for many other two-party protocols. In this paper, we propose a novel quantum bit commitment scheme, which is secure and does not require quantum memory. Our scheme processes the quantum information using coherent states and unambiguous state discrimination (USD) measurements, which can be experimentally realized by linear optics and photon detectors. We ensure the unconditionally hiding and binding property by preventing both Alice and Bob from obtaining complete information about the commitment in committing stage, and eliminate the requirement for quantum memory by performing USD measurements and phase shifts immediately after receiving the coherent states.

The Computer Journal•May 17, 2023•5 citations

Revisiting the security of quantum bit commitment schemes

Medhioub, Khaireddine

Bit commitment is one of the cornerstones of both classical and quantum cryptography. In the classical world, security analysis is straightforward because both hiding and binding each admit a single natural interpretation. In the quantum world, however, security notions can be defined in different ways that are not necessarily equivalent. Over three decades, several works have introduced numerous binding notions whose precise statements and mu- tual implications remain scattered across the literature. This thesis clarifies that ambiguity. We study quantum binding notions within the framework of canonical purified quantum bit commitment (QBC) schemes, a class that captures both the theoretical generality and the practical mechanisms of recent constructions. In the statistical setting, we examine six binding notions: strong-binding, honest-binding, sum-binding, collapse-binding, extractor- binding, and arbitrary-binding. We prove that all these definitions except strong-binding are equivalent for the class of canonical purified schemes. In the computational setting, we establish that honest-binding, sum-binding, and collapse-binding are equivalent for the same class of schemes. Moreover, we introduce a quantitative framework based on the work of Ref. [26] to quantify the tradeoff between hiding and binding properties, and we use it to provide a geometric proof of the impossibility theorem of Mayers [21] and Lo & Chau [20], for canonical purified schemes. We next revisit the quantum notion of hiding, which is far less ambiguous than binding. Finally, we survey some technical tools that can be used to construct secure QBC schemes.

•Aug 1, 2025•0 citations

Unconditionally Secure Quantum Bit Commitment

Horace P. Yuen

The ``impossibility proof'' on unconditionally secure quantum bit commitment is examined. It is shown that the possibility of juxtaposing quantum and classical randomness has not been properly taken into account. A specific protocol that beats entanglement cheating with entanglement is proven to be unconditionally secure.

arXiv:quant-ph/0505132•May 18, 2005•6 citations

Using quantum oblivious transfer to cheat sensitive quantum bit commitment

Andreas Jakoby, Maciej Liśkiewicz, Aleksander Mądry

It is well known that unconditionally secure bit commitment is impossible even in the quantum world. In this paper a weak variant of quantum bit commitment, introduced independently by Aharonov et al. [STOC, 2000] and Hardy and Kent [Phys. Rev. Lett. 92 (2004)] is investigated. In this variant, the parties require some nonzero probability of detecting a cheating, i.e. if Bob, who commits a bit b to Alice, changes his mind during the revealing phase then Alice detects the cheating with a positive probability (we call this property binding); and if Alice gains information about the committed bit before the revealing phase then Bob discovers this with positive probability (sealing). In our paper we give quantum bit commitment scheme that is simultaneously binding and sealing and we show that if a cheating gives epsilon advantage to a malicious Alice then Bob can detect the cheating with a probability Omega(epsilon^2). If Bob cheats then Alice's probability of detecting the cheating is greater than some fixed constant lambda>0. This improves the probabilities of cheating detections shown by Hardy and Kent and the scheme by Aharonov et al. who presented a protocol that is either binding or sealing, but not simultaneously both. To construct a cheat sensitive quantum bit commitment scheme we use a protocol for a weak quantum one-out-of-two oblivious transfer.

arXiv:quant-ph/0605150•May 17, 2006•1 citation

Unconditional Security From Noisy Quantum Storage

Robert König, Stephanie Wehner, Jürg Wullschleger

We consider the implementation of two-party cryptographic primitives based on the sole assumption that no large-scale reliable quantum storage is available to the cheating party. We construct novel protocols for oblivious transfer and bit commitment, and prove that realistic noise levels provide security even against the most general attack. Such unconditional results were previously only known in the so-called bounded-storage model which is a special case of our setting. Our protocols can be implemented with present-day hardware used for quantum key distribution. In particular, no quantum storage is required for the honest parties.

arXiv:0906.1030•IEEE Transactions on Information Theory•Feb 28, 2012•168 citations
Bit commitment is a fundamental cryptographic primitive and a cornerstone for numerous two-party cryptographic protocols, including zero-knowledge proofs. However, it has been proven that unconditionally secure bit commitment, both classical and quantum, is impossible. In this work, we demonstrate that imposing a restriction on the committing party to perform only separable operations enables secure quantum bit-commitment schemes. Specifically, we prove that in any perfectly hiding bit-commitment protocol, an honestly committing party limited to separable operations will be detected with high probability if they attempt to alter their commitment. To illustrate our findings, we present an example protocol.
Bit commitment is an essential primitive in quantum cryptography. It is the basic building block of many cryptographic protocols in which it provides security over distrustful parties. This paper proposes a secured quantum two-bit commitment protocol for any two classical bits. The protocol contains two parties - a committer and a receiver - who share both quantum and classical communication channels. The main phases of this protocol are commitment and revealing phases where the concealing and binding conditions are proved in order to accept the commitment message. The proposed framework utilizes different security layers to hide specific quantum states in a superposition alongside trivial one qubit operations. The secured unitary transformations are applied by the two parties to meet the concealing and binding conditions. To verify the success of the proposed protocol, the measured output of the two parties are compared. The protocol operates under the assumption that the two parties might cheat and the possible existence of an eavesdropper.
Abstract Commitment scheme is a fundamental cryptographic primitive that serve as building blocks for many other two-party protocols. In this paper, we propose a novel quantum bit commitment scheme, which is secure and does not require quantum memory. Our scheme processes the quantum information using coherent states and unambiguous state discrimination (USD) measurements, which can be experimentally realized by linear optics and photon detectors. We ensure the unconditionally hiding and binding property by preventing both Alice and Bob from obtaining complete information about the commitment in committing stage, and eliminate the requirement for quantum memory by performing USD measurements and phase shifts immediately after receiving the coherent states.
Bit commitment is one of the cornerstones of both classical and quantum cryptography. In the classical world, security analysis is straightforward because both hiding and binding each admit a single natural interpretation. In the quantum world, however, security notions can be defined in different ways that are not necessarily equivalent. Over three decades, several works have introduced numerous binding notions whose precise statements and mu- tual implications remain scattered across the literature. This thesis clarifies that ambiguity. We study quantum binding notions within the framework of canonical purified quantum bit commitment (QBC) schemes, a class that captures both the theoretical generality and the practical mechanisms of recent constructions. In the statistical setting, we examine six binding notions: strong-binding, honest-binding, sum-binding, collapse-binding, extractor- binding, and arbitrary-binding. We prove that all these definitions except strong-binding are equivalent for the class of canonical purified schemes. In the computational setting, we establish that honest-binding, sum-binding, and collapse-binding are equivalent for the same class of schemes. Moreover, we introduce a quantitative framework based on the work of Ref. [26] to quantify the tradeoff between hiding and binding properties, and we use it to provide a geometric proof of the impossibility theorem of Mayers [21] and Lo & Chau [20], for canonical purified schemes. We next revisit the quantum notion of hiding, which is far less ambiguous than binding. Finally, we survey some technical tools that can be used to construct secure QBC schemes.
It is well known that unconditionally secure bit commitment is impossible even in the quantum world. In this paper a weak variant of quantum bit commitment, introduced independently by Aharonov et al. [STOC, 2000] and Hardy and Kent [Phys. Rev. Lett. 92 (2004)] is investigated. In this variant, the parties require some nonzero probability of detecting a cheating, i.e. if Bob, who commits a bit b to Alice, changes his mind during the revealing phase then Alice detects the cheating with a positive probability (we call this property binding); and if Alice gains information about the committed bit before the revealing phase then Bob discovers this with positive probability (sealing). In our paper we give quantum bit commitment scheme that is simultaneously binding and sealing and we show that if a cheating gives epsilon advantage to a malicious Alice then Bob can detect the cheating with a probability Omega(epsilon^2). If Bob cheats then Alice's probability of detecting the cheating is greater than some fixed constant lambda>0. This improves the probabilities of cheating detections shown by Hardy and Kent and the scheme by Aharonov et al. who presented a protocol that is either binding or sealing, but not simultaneously both. To construct a cheat sensitive quantum bit commitment scheme we use a protocol for a weak quantum one-out-of-two oblivious transfer.
We consider the implementation of two-party cryptographic primitives based on the sole assumption that no large-scale reliable quantum storage is available to the cheating party. We construct novel protocols for oblivious transfer and bit commitment, and prove that realistic noise levels provide security even against the most general attack. Such unconditional results were previously only known in the so-called bounded-storage model which is a special case of our setting. Our protocols can be implemented with present-day hardware used for quantum key distribution. In particular, no quantum storage is required for the honest parties.