Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:quant-ph/9810068 · Physical Review Letters

Unconditionally Secure Bit Commitment

Adrian Kent

Published Aug 16, 1999• 178 citations
arXivHTMLPDF

Abstract

We describe a new classical bit commitment protocol based on cryptographic constraints imposed by special relativity. The protocol is unconditionally secure against classical or quantum attacks. It evades the no-go results of Mayers, Lo, and Chau by requiring from Alice a sequence of communications, including a postrevelation verification, each of which is guaranteed to be independent of its predecessor.

DOI
10.1103/physrevlett.83.1447

Related papers

A feasible and practically secure quantum bit commitment protocol

Li Li, Runhua Shi

As a fundamental cryptographic primitive, bit commitment has lots of important and practical applications in modern cryptography. All previously proposed non-relativistic quantum bit commitment protocols cannot evade the Lo–Chau and Mayers attacks. Furthermore, relativistic quantum bit commitment protocols require rigorous spacetime constraints. In this paper, we present a simple, feasible but practically secure quantum bit commitment protocol without any spacetime constraint. The security of the proposed protocol is based on non-relativistic quantum mechanics, but it can resist all known attacks, including the Lo–Chau and Mayers attacks in practice.

Modern Physics Letters A•Nov 10, 2021•3 citations

Unconditionally secure bit commitment by causally independent encryptions

Chi-Yee Cheung

We propose a new classical bit commitment protocol using the relativistic constraint that signals cannot travel faster than the speed of light $c$. This protocol is unconditionally secure against both classical or quantum attacks. The sender (Alice) and the receiver (Bob) each controls two secure stations separated by a large distance $d$, and they communicate by exchanging classical information only. Alice commits by sending from her stations two causally independent encrypted messages to the neighboring Bob's stations, after that the protocol is out of her control and she plays no role in the unveiling phase. The commitment remains concealed for a period of $Δt=d/2c$. This protocol requires only limited communication resources and is readily implementable with current technologies.

arXiv:1404.6925•Apr 28, 2014•0 citations

An Unconditionally Secure Quantum Bit Commitment Scheme

Xin Lü, Zhi Ma, Dengguo Feng

This paper has been withdrawn by the authors,because the proposed protocol is still coverd by the no-go theorem of Mayers, Lo and Chau. We thank H-K. Lo and HF Chau for helpful correspondences.

arXiv:quant-ph/0403036•Mar 4, 2004•2 citations

Secure Classical Bit Commitment over Finite Channels

Adrian Kent

If mistrustful parties A and B control two or more appropriately located sites, special relativity can be used to guarantee that a pair of messages exchanged by A and B are independent. Using this fact, an unconditionally secure relativistic bit commitment protocol, RBC1, was recently defined. Security is maintained in RBC1 by exchanging a sequence of messages whose transmission rate increases exponentially in time. We define here a variant, RBC2, which requires a constant transmission rate and can in practice be securely maintained for long periods. We also introduce a zero-knowledge proof protocol which allows A to convince B of the value of any function of $N$ relativistic bit commitments without giving any further information. Applying this to the XOR of two bit commitments made by RBC1 or RBC2, we define two further relativistic bit commitment protocols, RBC3 and RBC4. These two protocols are permanently unconditionally secure against classical attack and require only a constant transmission rate. We conjecture that they are also unconditionally secure against quantum attack.

•Jan 1, 1999•6 citations

Quantum Bit Commitment Using Entangled States

Guang-Ping He

Based on the fact that the entanglement can not be created locally, we proposed a quantum bit commitment protocol, in which entangled states and quantum algorithms is used. The bit is not encoded with the form of the quantum states, and delaying the measurement is required. Therefore the protocol will not be denied by the Mayers-Lo-Chau no-go theorem, and unconditional security is achieved.

arXiv:quant-ph/0303107•Mar 18, 2003•0 citations

Impossibility of unconditionally secure commitment of a certified classical bit

Adrian Kent

In a secure bit commitment protocol involving only classical physics, A commits either a $0$ or a $1$ to B. If quantum information is used in the protocol, A may be able to commit a state of the form $\ensuremath{\alpha}|0〉+\ensuremath{\beta}|1〉.$ If so, she can also commit mixed states in which the committed bit is entangled with other quantum states under her control. We introduce here a quantum cryptographic primitive, bit commitment with a certificate of classicality (BCCC), which differs from standard bit commitment in that it guarantees that the committed state has a fixed classical value. We show that no unconditionally secure BCCC protocol based on special relativity and quantum theory exists. We also propose complete definitions of security for quantum and relativistic bit commitment.

arXiv:quant-ph/9910087•Physical Review A•Mar 2, 2000•23 citations
We describe a new classical bit commitment protocol based on cryptographic constraints imposed by special relativity. The protocol is unconditionally secure against classical or quantum attacks. It evades the no-go results of Mayers, Lo, and Chau by requiring from Alice a sequence of communications, including a postrevelation verification, each of which is guaranteed to be independent of its predecessor.
As a fundamental cryptographic primitive, bit commitment has lots of important and practical applications in modern cryptography. All previously proposed non-relativistic quantum bit commitment protocols cannot evade the Lo–Chau and Mayers attacks. Furthermore, relativistic quantum bit commitment protocols require rigorous spacetime constraints. In this paper, we present a simple, feasible but practically secure quantum bit commitment protocol without any spacetime constraint. The security of the proposed protocol is based on non-relativistic quantum mechanics, but it can resist all known attacks, including the Lo–Chau and Mayers attacks in practice.
We propose a new classical bit commitment protocol using the relativistic constraint that signals cannot travel faster than the speed of light ccc. This protocol is unconditionally secure against both classical or quantum attacks. The sender (Alice) and the receiver (Bob) each controls two secure stations separated by a large distance ddd, and they communicate by exchanging classical information only. Alice commits by sending from her stations two causally independent encrypted messages to the neighboring Bob's stations, after that the protocol is out of her control and she plays no role in the unveiling phase. The commitment remains concealed for a period of Δt=d/2cΔt=d/2cΔt=d/2c. This protocol requires only limited communication resources and is readily implementable with current technologies.
If mistrustful parties A and B control two or more appropriately located sites, special relativity can be used to guarantee that a pair of messages exchanged by A and B are independent. Using this fact, an unconditionally secure relativistic bit commitment protocol, RBC1, was recently defined. Security is maintained in RBC1 by exchanging a sequence of messages whose transmission rate increases exponentially in time. We define here a variant, RBC2, which requires a constant transmission rate and can in practice be securely maintained for long periods. We also introduce a zero-knowledge proof protocol which allows A to convince B of the value of any function of NNN relativistic bit commitments without giving any further information. Applying this to the XOR of two bit commitments made by RBC1 or RBC2, we define two further relativistic bit commitment protocols, RBC3 and RBC4. These two protocols are permanently unconditionally secure against classical attack and require only a constant transmission rate. We conjecture that they are also unconditionally secure against quantum attack.
In a secure bit commitment protocol involving only classical physics, A commits either a 000 or a 111 to B. If quantum information is used in the protocol, A may be able to commit a state of the form $\ensuremath{\alpha}|0〉+\ensuremath{\beta}|1〉.$ If so, she can also commit mixed states in which the committed bit is entangled with other quantum states under her control. We introduce here a quantum cryptographic primitive, bit commitment with a certificate of classicality (BCCC), which differs from standard bit commitment in that it guarantees that the committed state has a fixed classical value. We show that no unconditionally secure BCCC protocol based on special relativity and quantum theory exists. We also propose complete definitions of security for quantum and relativistic bit commitment.