Unconditionally Secure Commitment of a Certified Classical Bit is Impossible

Abstract

In a secure bit commitment protocol involving only classical physics, A commits either a 0 or a 1 to B. If quantum information is used in the protocol, A may be able to commit a state of the form $\alpha |0⟩+\beta |1⟩$. If so, she can also commit mixed states in which the committed bit is entangled with other quantum states under her control. We introduce here a quantum cryptographic primitive, {\it bit commitment with a certificate of classicality} (BCCC), which differs from standard bit commitment in that it guarantees that the committed state has a fixed classical value. We show that no unconditionally secure BCCC protocol based on special relativity and quantum theory exists. We also propose complete definitions of security for quantum and relativistic bit commitment.

5 pages, RevTeX. Minor clarification made distinguishing proper and improper mixed state commitments

Cited by in corpus (15)

• Unconditionally Secure Bit Commitment by Transmitting Measurement Outcomes
• Cheat Sensitive Quantum Bit Commitment
• Unconditionally Secure Bit Commitment with Flying Qudits
• Quantum Bit String Commitment
• Device-Independent Relativistic Quantum Bit Commitment
• The quantum bit commitment theorem
• Quantum key distribution based on orthogonal states allows secure quantum bit commitment
• Deterministic Relativistic Quantum Bit Commitment
• Why Classical Certification is Impossible in a Quantum World
• Quantum bit commitment and the reality of the quantum state
• Can relativistic bit commitment lead to secure quantum oblivious transfer?
• A proposal for founding mistrustful quantum cryptography on coin tossing
• Secure and Robust Transmission and Verification of Unknown Quantum States in Minkowski Space
• An optical implementation of quantum bit commitment using infinite-dimensional systems
• Cryptanalysis and improvement of Wu-Cai-Wu-Zhang's quantum private comparison protocol