Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Physical Review A

Communication channels analogous to one out of two oblivious transfers based on quantum uncertainty

Kaoru Shimizu, Nobuyuki Imoto

Published Nov 22, 2002• 10 citations
Publisher

Abstract

This paper proposes a cryptographic quantum communication scheme analogous to one out of two oblivious transfers based on quantum conjugate coding defined in a four-dimensional Hilbert space. The quantum uncertainty principle ensures that our scheme can satisfy the following two conditions: (i) a sender, Bob, can encode two bits of information $X\ensuremath{\in}{0,1}$ and $Y\ensuremath{\in}{0,1},$ but a receiver, Alice, can only obtain either X or Y dependent on her choice; and (ii) honest Bob, who attempts to encode $(X,Y),$ cannot reveal Alice's choice. By contrast, when malicious Bob tries to reveal her choice, honest Alice can detect malicious Bob with a finite probability. Moreover, by using our proposed scheme many times, we can construct a protocol for quantum bit commitment (QBC) from Alice to Bob. Contrary to common belief, the security of our QBC protocol may not be violated by the well-known no-go theorem of QBC. This is because our QBC protocol does not meet the assumptions in which the no-go theorem holds.

DOI
10.1103/physreva.66.052316

Related papers

Communication channels analogous to one out of two oblivious transfers based on quantum uncertainty. II. Closing EPR-type loopholes

Kaoru Shimizu, Nobuyuki Imoto

In a recent proposal for a quantum cryptographic scheme analogous to one out of two oblivious transfers [Phys. Rev. A 66, 052316 (2002)], a sender, Bob, can encode two bits of information (X,Y) in a quantum carrier but a receiver, Alice, can decode only either X or Y dependent on her choice. Although Bob can discover her choice whenever he desires, she can detect this with a 50% probability. This paper clarifies the amount of information that Bob can expect to obtain from Alice without being detected by her by means of an Einstein-Podolsky-Rosen (EPR) type of attack. We can show that Bob inevitably fails to discover her choice with a 50% probability even though he can always completely escape her detection.

Physical Review A•Mar 11, 2003•6 citations

Practical Quantum Bit Commitment Protocol Based on Quantum Oblivious Transfer

Yaqi Song, Li Yang

Oblivious transfer (OT) and bit commitment (BC) are two-party cryptographic protocols which play crucial roles in the construction of various cryptographic protocols. We propose three practical quantum cryptographic protocols in this paper. We first construct a practical quantum random oblivious transfer (R-OT) protocol based on the fact that non-orthogonal states cannot be reliably distinguished. Then, we construct a fault-tolerant one-out-of-two oblivious transfer ( O T 1 2 ) protocol based on the quantum R-OT protocol. Afterwards, we propose a quantum bit commitment (QBC) protocol which executes the fault-tolerant O T 1 2 several times. Mayers, Lo and Chau (MLC) no-go theorem proves that QBC protocol cannot be unconditionally secure. However, we find that computing the unitary transformation of no-go theorem attack needs so many resources that it is not realistically implementable. We give a definition of physical security for QBC protocols and prove that the practical QBC we proposed is physically secure and can be implemented in the real world.

Applied Sciences•Oct 19, 2018•8 citations

A quantum oblivious transfer protocol

Abhishek Parakh

We propose a quantum protocol for 1-out-of-2, 1-out-of-n and k-out-of-n oblivious transfer. Oblivious transfer is a counter-intuitive cryptographic primitive in which the receiver receives only the information he is authorized for, while the sender does not know what information receiver received. In 1-out-of-2 oblivious transfer, Alice sends two bits to Bob who can choose only one of them to read, while Alice does not know which bit Bob read. k-out-of-n oblivious transfer is an extension of this idea. The proposed protocols do not require any classical communication, are practical, secure and can be implemented using current technology.

Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE•Oct 1, 2013•2 citations

Incomplete quantum oblivious transfer with perfect one-sided security

David Reichmuth, Ittoop V. Puthoor, Petros Wallden +1 more

Oblivious transfer is a fundamental cryptographic primitive that is useful for secure multiparty computation. There are several variants of oblivious transfer. We consider 1-out-of-2 oblivious transfer, where a sender sends two bits of information to a receiver. The receiver receives only one of the two bits, while the sender does not know which bit the receiver has received. Perfect quantum oblivious transfer with information-theoretic security is known to be impossible. We aim to find the lowest possible cheating probabilities. Bounds on cheating probabilities have been investigated for “complete” protocols, where if both parties follow the protocol, the bit value obtained by the receiver matches the sender's bit value. We instead investigate incomplete protocols, where the receiver obtains an incorrect bit value with probability p f . We present optimal noninteractive protocols where Alice's bit values are encoded in four symmetric pure quantum states, and where she cannot cheat better than with a random guess. We find the protocols such that for a given p f , Bob's cheating probability p r is as low as possible, and vice versa. Furthermore, we show that noninteractive quantum protocols can outperform noninteractive classical protocols and give a lower bound on Bob's cheating probability in interactive quantum protocols. Importantly for optical implementations, our protocols do not require entanglement nor quantum memory.

arXiv:2409.17571•Physical Review Research•Jul 23, 2025•0 citations

A practical scheme for quantum oblivious transfer and private database sampling

David A. Fattal, Marco Fiorentino B, Raymond G. Beausoleil

We present an unconditionally secure Oblivious Transfer protocol relying on two rounds of entanglement-free quantum communication. When played honestly, the protocol only requires the ability to measure a single qubit in a fixed basis, and to perform a coherent bit-flip (Pauli X) operation. We present a generalization to a "Private Data Sampling" protocol, where a player (Bob) can obtain a random sample of fixed size from a classical database of size N, while the database owner (Alice) remains oblivious as to which bits were accessed. The protocol is efficient in the sense that the communication complexity per query scales at most linearly with the size of the database. It does not violate Lo's "no-go" theorem for one-sided two-party secure computation, since a given joint input by Alice and Bob can result in randomly different protocol outcomes. Finally it could be used to implement a practical bit string commitment protocol, among other applications.

Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE•Aug 28, 2008•1 citation

Quantum Oblivious Transfer Based on POVM Measurements.

Wei Yang, Liusheng Huang, Yonglong Luo +1 more

Abstract- Oblivious transfer (OT) is an important primitive in cryptography. In chosen one-out-of-two OT, Alice offers two bits, one of which Bob can choose to read, not learning any information about the other bit. Alice on the other hand does not obtain any information about Bob’s choice. We present a new technique for the same task in quantum environment, based on POVM measurements. It is shown that our method has two important advantages over the previous approaches. First, it is unconditionally secure without invoking a commitment scheme, and second, it is more efficient in terms of communication complexity. Key words: Oblivious transfer, POVM measurements, Unconditional security

FCS•Jan 1, 2006•0 citations
This paper proposes a cryptographic quantum communication scheme analogous to one out of two oblivious transfers based on quantum conjugate coding defined in a four-dimensional Hilbert space. The quantum uncertainty principle ensures that our scheme can satisfy the following two conditions: (i) a sender, Bob, can encode two bits of information X\ensuremath∈0,1X\ensuremath{\in}{0,1}X\ensuremath∈0,1 and Y\ensuremath∈0,1,Y\ensuremath{\in}{0,1},Y\ensuremath∈0,1, but a receiver, Alice, can only obtain either X or Y dependent on her choice; and (ii) honest Bob, who attempts to encode (X,Y),(X,Y),(X,Y), cannot reveal Alice's choice. By contrast, when malicious Bob tries to reveal her choice, honest Alice can detect malicious Bob with a finite probability. Moreover, by using our proposed scheme many times, we can construct a protocol for quantum bit commitment (QBC) from Alice to Bob. Contrary to common belief, the security of our QBC protocol may not be violated by the well-known no-go theorem of QBC. This is because our QBC protocol does not meet the assumptions in which the no-go theorem holds.
In a recent proposal for a quantum cryptographic scheme analogous to one out of two oblivious transfers [Phys. Rev. A 66, 052316 (2002)], a sender, Bob, can encode two bits of information (X,Y) in a quantum carrier but a receiver, Alice, can decode only either X or Y dependent on her choice. Although Bob can discover her choice whenever he desires, she can detect this with a 50% probability. This paper clarifies the amount of information that Bob can expect to obtain from Alice without being detected by her by means of an Einstein-Podolsky-Rosen (EPR) type of attack. We can show that Bob inevitably fails to discover her choice with a 50% probability even though he can always completely escape her detection.
Oblivious transfer (OT) and bit commitment (BC) are two-party cryptographic protocols which play crucial roles in the construction of various cryptographic protocols. We propose three practical quantum cryptographic protocols in this paper. We first construct a practical quantum random oblivious transfer (R-OT) protocol based on the fact that non-orthogonal states cannot be reliably distinguished. Then, we construct a fault-tolerant one-out-of-two oblivious transfer ( O T 1 2 ) protocol based on the quantum R-OT protocol. Afterwards, we propose a quantum bit commitment (QBC) protocol which executes the fault-tolerant O T 1 2 several times. Mayers, Lo and Chau (MLC) no-go theorem proves that QBC protocol cannot be unconditionally secure. However, we find that computing the unitary transformation of no-go theorem attack needs so many resources that it is not realistically implementable. We give a definition of physical security for QBC protocols and prove that the practical QBC we proposed is physically secure and can be implemented in the real world.
We propose a quantum protocol for 1-out-of-2, 1-out-of-n and k-out-of-n oblivious transfer. Oblivious transfer is a counter-intuitive cryptographic primitive in which the receiver receives only the information he is authorized for, while the sender does not know what information receiver received. In 1-out-of-2 oblivious transfer, Alice sends two bits to Bob who can choose only one of them to read, while Alice does not know which bit Bob read. k-out-of-n oblivious transfer is an extension of this idea. The proposed protocols do not require any classical communication, are practical, secure and can be implemented using current technology.
Oblivious transfer is a fundamental cryptographic primitive that is useful for secure multiparty computation. There are several variants of oblivious transfer. We consider 1-out-of-2 oblivious transfer, where a sender sends two bits of information to a receiver. The receiver receives only one of the two bits, while the sender does not know which bit the receiver has received. Perfect quantum oblivious transfer with information-theoretic security is known to be impossible. We aim to find the lowest possible cheating probabilities. Bounds on cheating probabilities have been investigated for “complete” protocols, where if both parties follow the protocol, the bit value obtained by the receiver matches the sender's bit value. We instead investigate incomplete protocols, where the receiver obtains an incorrect bit value with probability p f . We present optimal noninteractive protocols where Alice's bit values are encoded in four symmetric pure quantum states, and where she cannot cheat better than with a random guess. We find the protocols such that for a given p f , Bob's cheating probability p r is as low as possible, and vice versa. Furthermore, we show that noninteractive quantum protocols can outperform noninteractive classical protocols and give a lower bound on Bob's cheating probability in interactive quantum protocols. Importantly for optical implementations, our protocols do not require entanglement nor quantum memory.
We present an unconditionally secure Oblivious Transfer protocol relying on two rounds of entanglement-free quantum communication. When played honestly, the protocol only requires the ability to measure a single qubit in a fixed basis, and to perform a coherent bit-flip (Pauli X) operation. We present a generalization to a "Private Data Sampling" protocol, where a player (Bob) can obtain a random sample of fixed size from a classical database of size N, while the database owner (Alice) remains oblivious as to which bits were accessed. The protocol is efficient in the sense that the communication complexity per query scales at most linearly with the size of the database. It does not violate Lo's "no-go" theorem for one-sided two-party secure computation, since a given joint input by Alice and Bob can result in randomly different protocol outcomes. Finally it could be used to implement a practical bit string commitment protocol, among other applications.
Abstract- Oblivious transfer (OT) is an important primitive in cryptography. In chosen one-out-of-two OT, Alice offers two bits, one of which Bob can choose to read, not learning any information about the other bit. Alice on the other hand does not obtain any information about Bob’s choice. We present a new technique for the same task in quantum environment, based on POVM measurements. It is shown that our method has two important advantages over the previous approaches. First, it is unconditionally secure without invoking a commitment scheme, and second, it is more efficient in terms of communication complexity. Key words: Oblivious transfer, POVM measurements, Unconditional security