Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International Conference for Young Computer Scientists

Secure Relativistic Bit Commitment with Fixed Channel Capacity

Qin Li, Dongyang Long, Changji Wang

Published Nov 1, 2008• 0 citations
Publisher

Abstract

Special relativity can be useful for secure bit commitment when mutually mistrustful parties Alice and Bob control two separated laboratories. Kent has proposed two relativistic bit commitment protocols, RBC1 and RBC2. However, RBC1 has a severe practical problem, as its implementation requires channel capacity exponentially increasing in time. RBC2 solves the problem by combining the technique developed by Rudich with RBC1, but it is somewhat complicated. Therefore, we improve RBC1 by adding a way of random choice such that the improved protocol just needs fixed capacity channel and is simpler than RBC2. Analysis shows that the improved protocol, named RBC3, is valid and secure.

DOI
10.1109/icycs.2008.379

Related papers

Secure Classical Bit Commitment over Finite Channels

Adrian Kent

If mistrustful parties A and B control two or more appropriately located sites, special relativity can be used to guarantee that a pair of messages exchanged by A and B are independent. Using this fact, an unconditionally secure relativistic bit commitment protocol, RBC1, was recently defined. Security is maintained in RBC1 by exchanging a sequence of messages whose transmission rate increases exponentially in time. We define here a variant, RBC2, which requires a constant transmission rate and can in practice be securely maintained for long periods. We also introduce a zero-knowledge proof protocol which allows A to convince B of the value of any function of $N$ relativistic bit commitments without giving any further information. Applying this to the XOR of two bit commitments made by RBC1 or RBC2, we define two further relativistic bit commitment protocols, RBC3 and RBC4. These two protocols are permanently unconditionally secure against classical attack and require only a constant transmission rate. We conjecture that they are also unconditionally secure against quantum attack.

•Jan 1, 1999•6 citations

Experimental Bit Commitment Based on Quantum Communication and Special Relativity

Tommaso Lunghi, Jędrzej Kaniewski, Félix Bussières +6 more

Bit commitment is a fundamental cryptographic primitive in which Bob wishes to commit a secret bit to Alice. Perfectly secure bit commitment between two mistrustful parties is impossible through asynchronous exchange of quantum information. Perfect security is however possible when Alice and Bob split into several agents exchanging classical and quantum information at times and locations suitably chosen to satisfy specific relativistic constraints. Here we report on an implementation of a bit commitment protocol using quantum communication and special relativity. Our protocol is based on [A. Kent, Phys. Rev. Lett. 109, 130501 (2012)] and has the advantage that it is practically feasible with arbitrary large separations between the agents in order to maximize the commitment time. By positioning agents in Geneva and Singapore, we obtain a commitment time of 15 ms. A security analysis considering experimental imperfections and finite statistics is presented.

arXiv:1306.4801•Physical Review Letters•Nov 1, 2013•103 citations

Practical Relativistic Bit Commitment

Tommaso Lunghi, Jędrzej Kaniewski, Félix Bussières +4 more

Bit commitment is a fundamental cryptographic primitive in which Alice wishes to commit a secret bit to Bob. Perfectly secure bit commitment between two mistrustful parties is impossible through an asynchronous exchange of quantum information. Perfect security is, however, possible when Alice and Bob each split into several agents exchanging classical information at times and locations suitably chosen to satisfy specific relativistic constraints. In this Letter we first revisit a previously proposed scheme [C. Crépeau et al., Lect. Notes Comput. Sci. 7073, 407 (2011)] that realizes bit commitment using only classical communication. We prove that the protocol is secure against quantum adversaries for a duration limited by the light-speed communication time between the locations of the agents. We then propose a novel multiround scheme based on finite-field arithmetic that extends the commitment time beyond this limit, and we prove its security against classical attacks. Finally, we present an implementation of these protocols using dedicated hardware and we demonstrate a 2 ms-long bit commitment over a distance of 131 km. By positioning the agents on antipodal points on the surface of Earth, the commitment time could possibly be extended to 212 ms.

arXiv:1411.4917•Physical Review Letters•Jul 13, 2015•52 citations

Robust relativistic bit commitment

Kaushik Chakraborty, André Chailloux, Anthony Leverrier

Relativistic cryptography exploits the fact that no information can travel faster than the speed of light in order to obtain security guarantees that cannot be achieved from the laws of quantum mechanics alone. Recently, Lunghi et al. [Phys. Rev. Lett. 115, 030502 (2015)] presented a bit-commitment scheme where each party uses two agents that exchange classical information in a synchronized fashion, and that is both hiding and binding. A caveat is that the commitment time is intrinsically limited by the spatial configuration of the players, and increasing this time requires the agents to exchange messages during the whole duration of the protocol. While such a solution remains computationally attractive, its practicality is severely limited in realistic settings since all communication must remain perfectly synchronized at all times. In this work, we introduce a robust protocol for relativistic bit commitment that tolerates failures of the classical communication network. This is done by adding a third agent to both parties. Our scheme provides a quadratic improvement in terms of expected sustain time compared with the original protocol, while retaining the same level of security.

arXiv:1608.03398•Physical Review A•Dec 12, 2016•1 citation

24-Hour Relativistic Bit Commitment

E. Verbanis, Anthony Martin, Raphaël Houlmann +3 more

Bit commitment is a fundamental cryptographic primitive in which a party wishes to commit a secret bit to another party. Perfect security between mistrustful parties is unfortunately impossible to achieve through the asynchronous exchange of classical and quantum messages. Perfect security can nonetheless be achieved if each party splits into two agents exchanging classical information at times and locations satisfying strict relativistic constraints. A relativistic multiround protocol to achieve this was previously proposed and used to implement a 2-millisecond commitment time. Much longer durations were initially thought to be insecure, but recent theoretical progress showed that this is not so. In this Letter, we report on the implementation of a 24-hour bit commitment solely based on timed high-speed optical communication and fast data processing, with all agents located within the city of Geneva. This duration is more than 6 orders of magnitude longer than before, and we argue that it could be extended to one year and allow much more flexibility on the locations of the agents. Our implementation offers a practical and viable solution for use in applications such as digital signatures, secure voting and honesty-preserving auctions.

arXiv:1605.07442•Physical Review Letters•Sep 30, 2016•31 citations

Unconditionally secure bit commitment by causally independent encryptions

Chi-Yee Cheung

We propose a new classical bit commitment protocol using the relativistic constraint that signals cannot travel faster than the speed of light $c$. This protocol is unconditionally secure against both classical or quantum attacks. The sender (Alice) and the receiver (Bob) each controls two secure stations separated by a large distance $d$, and they communicate by exchanging classical information only. Alice commits by sending from her stations two causally independent encrypted messages to the neighboring Bob's stations, after that the protocol is out of her control and she plays no role in the unveiling phase. The commitment remains concealed for a period of $Δt=d/2c$. This protocol requires only limited communication resources and is readily implementable with current technologies.

arXiv:1404.6925•Apr 28, 2014•0 citations
Special relativity can be useful for secure bit commitment when mutually mistrustful parties Alice and Bob control two separated laboratories. Kent has proposed two relativistic bit commitment protocols, RBC1 and RBC2. However, RBC1 has a severe practical problem, as its implementation requires channel capacity exponentially increasing in time. RBC2 solves the problem by combining the technique developed by Rudich with RBC1, but it is somewhat complicated. Therefore, we improve RBC1 by adding a way of random choice such that the improved protocol just needs fixed capacity channel and is simpler than RBC2. Analysis shows that the improved protocol, named RBC3, is valid and secure.
If mistrustful parties A and B control two or more appropriately located sites, special relativity can be used to guarantee that a pair of messages exchanged by A and B are independent. Using this fact, an unconditionally secure relativistic bit commitment protocol, RBC1, was recently defined. Security is maintained in RBC1 by exchanging a sequence of messages whose transmission rate increases exponentially in time. We define here a variant, RBC2, which requires a constant transmission rate and can in practice be securely maintained for long periods. We also introduce a zero-knowledge proof protocol which allows A to convince B of the value of any function of NNN relativistic bit commitments without giving any further information. Applying this to the XOR of two bit commitments made by RBC1 or RBC2, we define two further relativistic bit commitment protocols, RBC3 and RBC4. These two protocols are permanently unconditionally secure against classical attack and require only a constant transmission rate. We conjecture that they are also unconditionally secure against quantum attack.
Bit commitment is a fundamental cryptographic primitive in which Bob wishes to commit a secret bit to Alice. Perfectly secure bit commitment between two mistrustful parties is impossible through asynchronous exchange of quantum information. Perfect security is however possible when Alice and Bob split into several agents exchanging classical and quantum information at times and locations suitably chosen to satisfy specific relativistic constraints. Here we report on an implementation of a bit commitment protocol using quantum communication and special relativity. Our protocol is based on [A. Kent, Phys. Rev. Lett. 109, 130501 (2012)] and has the advantage that it is practically feasible with arbitrary large separations between the agents in order to maximize the commitment time. By positioning agents in Geneva and Singapore, we obtain a commitment time of 15 ms. A security analysis considering experimental imperfections and finite statistics is presented.
Bit commitment is a fundamental cryptographic primitive in which Alice wishes to commit a secret bit to Bob. Perfectly secure bit commitment between two mistrustful parties is impossible through an asynchronous exchange of quantum information. Perfect security is, however, possible when Alice and Bob each split into several agents exchanging classical information at times and locations suitably chosen to satisfy specific relativistic constraints. In this Letter we first revisit a previously proposed scheme [C. Crépeau et al., Lect. Notes Comput. Sci. 7073, 407 (2011)] that realizes bit commitment using only classical communication. We prove that the protocol is secure against quantum adversaries for a duration limited by the light-speed communication time between the locations of the agents. We then propose a novel multiround scheme based on finite-field arithmetic that extends the commitment time beyond this limit, and we prove its security against classical attacks. Finally, we present an implementation of these protocols using dedicated hardware and we demonstrate a 2 ms-long bit commitment over a distance of 131 km. By positioning the agents on antipodal points on the surface of Earth, the commitment time could possibly be extended to 212 ms.
Relativistic cryptography exploits the fact that no information can travel faster than the speed of light in order to obtain security guarantees that cannot be achieved from the laws of quantum mechanics alone. Recently, Lunghi et al. [Phys. Rev. Lett. 115, 030502 (2015)] presented a bit-commitment scheme where each party uses two agents that exchange classical information in a synchronized fashion, and that is both hiding and binding. A caveat is that the commitment time is intrinsically limited by the spatial configuration of the players, and increasing this time requires the agents to exchange messages during the whole duration of the protocol. While such a solution remains computationally attractive, its practicality is severely limited in realistic settings since all communication must remain perfectly synchronized at all times. In this work, we introduce a robust protocol for relativistic bit commitment that tolerates failures of the classical communication network. This is done by adding a third agent to both parties. Our scheme provides a quadratic improvement in terms of expected sustain time compared with the original protocol, while retaining the same level of security.
Bit commitment is a fundamental cryptographic primitive in which a party wishes to commit a secret bit to another party. Perfect security between mistrustful parties is unfortunately impossible to achieve through the asynchronous exchange of classical and quantum messages. Perfect security can nonetheless be achieved if each party splits into two agents exchanging classical information at times and locations satisfying strict relativistic constraints. A relativistic multiround protocol to achieve this was previously proposed and used to implement a 2-millisecond commitment time. Much longer durations were initially thought to be insecure, but recent theoretical progress showed that this is not so. In this Letter, we report on the implementation of a 24-hour bit commitment solely based on timed high-speed optical communication and fast data processing, with all agents located within the city of Geneva. This duration is more than 6 orders of magnitude longer than before, and we argue that it could be extended to one year and allow much more flexibility on the locations of the agents. Our implementation offers a practical and viable solution for use in applications such as digital signatures, secure voting and honesty-preserving auctions.
We propose a new classical bit commitment protocol using the relativistic constraint that signals cannot travel faster than the speed of light ccc. This protocol is unconditionally secure against both classical or quantum attacks. The sender (Alice) and the receiver (Bob) each controls two secure stations separated by a large distance ddd, and they communicate by exchanging classical information only. Alice commits by sending from her stations two causally independent encrypted messages to the neighboring Bob's stations, after that the protocol is out of her control and she plays no role in the unveiling phase. The commitment remains concealed for a period of Δt=d/2cΔt=d/2cΔt=d/2c. This protocol requires only limited communication resources and is readily implementable with current technologies.