Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Secure Classical Bit Commitment over Finite Channels

Adrian Kent

Published Jan 1, 1999• 6 citations
OpenAlex

Abstract

If mistrustful parties A and B control two or more appropriately located sites, special relativity can be used to guarantee that a pair of messages exchanged by A and B are independent. Using this fact, an unconditionally secure relativistic bit commitment protocol, RBC1, was recently defined. Security is maintained in RBC1 by exchanging a sequence of messages whose transmission rate increases exponentially in time. We define here a variant, RBC2, which requires a constant transmission rate and can in practice be securely maintained for long periods. We also introduce a zero-knowledge proof protocol which allows A to convince B of the value of any function of $N$ relativistic bit commitments without giving any further information. Applying this to the XOR of two bit commitments made by RBC1 or RBC2, we define two further relativistic bit commitment protocols, RBC3 and RBC4. These two protocols are permanently unconditionally secure against classical attack and require only a constant transmission rate. We conjecture that they are also unconditionally secure against quantum attack.

Related papers

Secure Relativistic Bit Commitment with Fixed Channel Capacity

Qin Li, Dongyang Long, Changji Wang

Special relativity can be useful for secure bit commitment when mutually mistrustful parties Alice and Bob control two separated laboratories. Kent has proposed two relativistic bit commitment protocols, RBC1 and RBC2. However, RBC1 has a severe practical problem, as its implementation requires channel capacity exponentially increasing in time. RBC2 solves the problem by combining the technique developed by Rudich with RBC1, but it is somewhat complicated. Therefore, we improve RBC1 by adding a way of random choice such that the improved protocol just needs fixed capacity channel and is simpler than RBC2. Analysis shows that the improved protocol, named RBC3, is valid and secure.

International Conference for Young Computer Scientists•Nov 1, 2008•0 citations

Unconditionally secure bit commitment by causally independent encryptions

Chi-Yee Cheung

We propose a new classical bit commitment protocol using the relativistic constraint that signals cannot travel faster than the speed of light $c$. This protocol is unconditionally secure against both classical or quantum attacks. The sender (Alice) and the receiver (Bob) each controls two secure stations separated by a large distance $d$, and they communicate by exchanging classical information only. Alice commits by sending from her stations two causally independent encrypted messages to the neighboring Bob's stations, after that the protocol is out of her control and she plays no role in the unveiling phase. The commitment remains concealed for a period of $Δt=d/2c$. This protocol requires only limited communication resources and is readily implementable with current technologies.

arXiv:1404.6925•Apr 28, 2014•0 citations

Practical Relativistic Bit Commitment

Tommaso Lunghi, Jędrzej Kaniewski, Félix Bussières +4 more

Bit commitment is a fundamental cryptographic primitive in which Alice wishes to commit a secret bit to Bob. Perfectly secure bit commitment between two mistrustful parties is impossible through an asynchronous exchange of quantum information. Perfect security is, however, possible when Alice and Bob each split into several agents exchanging classical information at times and locations suitably chosen to satisfy specific relativistic constraints. In this Letter we first revisit a previously proposed scheme [C. Crépeau et al., Lect. Notes Comput. Sci. 7073, 407 (2011)] that realizes bit commitment using only classical communication. We prove that the protocol is secure against quantum adversaries for a duration limited by the light-speed communication time between the locations of the agents. We then propose a novel multiround scheme based on finite-field arithmetic that extends the commitment time beyond this limit, and we prove its security against classical attacks. Finally, we present an implementation of these protocols using dedicated hardware and we demonstrate a 2 ms-long bit commitment over a distance of 131 km. By positioning the agents on antipodal points on the surface of Earth, the commitment time could possibly be extended to 212 ms.

arXiv:1411.4917•Physical Review Letters•Jul 13, 2015•52 citations

No Superluminal Signaling Implies Unconditionally Secure Bit Commitment

H. F. Chau, Chi‐Hang Fred Fung, Hoi‐Kwong Lo

Bit commitment (BC) is an important cryptographic primitive for an agent to convince a mutually mistrustful party that she has already made a binding choice of 0 or 1 but only to reveal her choice at a later time. Ideally, a BC protocol should be simple, reliable, easy to implement using existing technologies, and most importantly unconditionally secure in the sense that its security is based on an information-theoretic proof rather than computational complexity assumption or the existence of a trustworthy arbitrator. Here we report such a provably secure scheme involving only one-way classical communications whose unconditional security is based on no superluminal signaling (NSS). Our scheme is inspired by the earlier works by Kent, who proposed two impractical relativistic protocols whose unconditional securities are yet to be established as well as several provably unconditionally secure protocols which rely on both quantum mechanics and NSS. Our scheme is conceptually simple and shows for the first time that quantum communication is not needed to achieve unconditional security for BC. Moreover, with purely classical communications, our scheme is practical and easy to implement with existing telecom technologies. This completes the cycle of study of unconditionally secure bit commitment based on known physical laws.

arXiv:1405.0198•May 1, 2014•1 citation

Robust relativistic bit commitment

Kaushik Chakraborty, André Chailloux, Anthony Leverrier

Relativistic cryptography exploits the fact that no information can travel faster than the speed of light in order to obtain security guarantees that cannot be achieved from the laws of quantum mechanics alone. Recently, Lunghi et al. [Phys. Rev. Lett. 115, 030502 (2015)] presented a bit-commitment scheme where each party uses two agents that exchange classical information in a synchronized fashion, and that is both hiding and binding. A caveat is that the commitment time is intrinsically limited by the spatial configuration of the players, and increasing this time requires the agents to exchange messages during the whole duration of the protocol. While such a solution remains computationally attractive, its practicality is severely limited in realistic settings since all communication must remain perfectly synchronized at all times. In this work, we introduce a robust protocol for relativistic bit commitment that tolerates failures of the classical communication network. This is done by adding a third agent to both parties. Our scheme provides a quadratic improvement in terms of expected sustain time compared with the original protocol, while retaining the same level of security.

arXiv:1608.03398•Physical Review A•Dec 12, 2016•1 citation

Unconditionally Secure Bit Commitment

Adrian Kent

We describe a new classical bit commitment protocol based on cryptographic constraints imposed by special relativity. The protocol is unconditionally secure against classical or quantum attacks. It evades the no-go results of Mayers, Lo, and Chau by requiring from Alice a sequence of communications, including a postrevelation verification, each of which is guaranteed to be independent of its predecessor.

arXiv:quant-ph/9810068•Physical Review Letters•Aug 16, 1999•178 citations
If mistrustful parties A and B control two or more appropriately located sites, special relativity can be used to guarantee that a pair of messages exchanged by A and B are independent. Using this fact, an unconditionally secure relativistic bit commitment protocol, RBC1, was recently defined. Security is maintained in RBC1 by exchanging a sequence of messages whose transmission rate increases exponentially in time. We define here a variant, RBC2, which requires a constant transmission rate and can in practice be securely maintained for long periods. We also introduce a zero-knowledge proof protocol which allows A to convince B of the value of any function of NNN relativistic bit commitments without giving any further information. Applying this to the XOR of two bit commitments made by RBC1 or RBC2, we define two further relativistic bit commitment protocols, RBC3 and RBC4. These two protocols are permanently unconditionally secure against classical attack and require only a constant transmission rate. We conjecture that they are also unconditionally secure against quantum attack.
Special relativity can be useful for secure bit commitment when mutually mistrustful parties Alice and Bob control two separated laboratories. Kent has proposed two relativistic bit commitment protocols, RBC1 and RBC2. However, RBC1 has a severe practical problem, as its implementation requires channel capacity exponentially increasing in time. RBC2 solves the problem by combining the technique developed by Rudich with RBC1, but it is somewhat complicated. Therefore, we improve RBC1 by adding a way of random choice such that the improved protocol just needs fixed capacity channel and is simpler than RBC2. Analysis shows that the improved protocol, named RBC3, is valid and secure.
We propose a new classical bit commitment protocol using the relativistic constraint that signals cannot travel faster than the speed of light ccc. This protocol is unconditionally secure against both classical or quantum attacks. The sender (Alice) and the receiver (Bob) each controls two secure stations separated by a large distance ddd, and they communicate by exchanging classical information only. Alice commits by sending from her stations two causally independent encrypted messages to the neighboring Bob's stations, after that the protocol is out of her control and she plays no role in the unveiling phase. The commitment remains concealed for a period of Δt=d/2cΔt=d/2cΔt=d/2c. This protocol requires only limited communication resources and is readily implementable with current technologies.
Bit commitment is a fundamental cryptographic primitive in which Alice wishes to commit a secret bit to Bob. Perfectly secure bit commitment between two mistrustful parties is impossible through an asynchronous exchange of quantum information. Perfect security is, however, possible when Alice and Bob each split into several agents exchanging classical information at times and locations suitably chosen to satisfy specific relativistic constraints. In this Letter we first revisit a previously proposed scheme [C. Crépeau et al., Lect. Notes Comput. Sci. 7073, 407 (2011)] that realizes bit commitment using only classical communication. We prove that the protocol is secure against quantum adversaries for a duration limited by the light-speed communication time between the locations of the agents. We then propose a novel multiround scheme based on finite-field arithmetic that extends the commitment time beyond this limit, and we prove its security against classical attacks. Finally, we present an implementation of these protocols using dedicated hardware and we demonstrate a 2 ms-long bit commitment over a distance of 131 km. By positioning the agents on antipodal points on the surface of Earth, the commitment time could possibly be extended to 212 ms.
Bit commitment (BC) is an important cryptographic primitive for an agent to convince a mutually mistrustful party that she has already made a binding choice of 0 or 1 but only to reveal her choice at a later time. Ideally, a BC protocol should be simple, reliable, easy to implement using existing technologies, and most importantly unconditionally secure in the sense that its security is based on an information-theoretic proof rather than computational complexity assumption or the existence of a trustworthy arbitrator. Here we report such a provably secure scheme involving only one-way classical communications whose unconditional security is based on no superluminal signaling (NSS). Our scheme is inspired by the earlier works by Kent, who proposed two impractical relativistic protocols whose unconditional securities are yet to be established as well as several provably unconditionally secure protocols which rely on both quantum mechanics and NSS. Our scheme is conceptually simple and shows for the first time that quantum communication is not needed to achieve unconditional security for BC. Moreover, with purely classical communications, our scheme is practical and easy to implement with existing telecom technologies. This completes the cycle of study of unconditionally secure bit commitment based on known physical laws.
Relativistic cryptography exploits the fact that no information can travel faster than the speed of light in order to obtain security guarantees that cannot be achieved from the laws of quantum mechanics alone. Recently, Lunghi et al. [Phys. Rev. Lett. 115, 030502 (2015)] presented a bit-commitment scheme where each party uses two agents that exchange classical information in a synchronized fashion, and that is both hiding and binding. A caveat is that the commitment time is intrinsically limited by the spatial configuration of the players, and increasing this time requires the agents to exchange messages during the whole duration of the protocol. While such a solution remains computationally attractive, its practicality is severely limited in realistic settings since all communication must remain perfectly synchronized at all times. In this work, we introduce a robust protocol for relativistic bit commitment that tolerates failures of the classical communication network. This is done by adding a third agent to both parties. Our scheme provides a quadratic improvement in terms of expected sustain time compared with the original protocol, while retaining the same level of security.