Editing Quantum Bit Commitment

This [https://arxiv.org/abs/1108.2879 example protocol] achieves the task of [[bit commitment]] securely by using a relativistic scheme.
In bit commitment, the committer "commits" to a particular bit value.
The receiver knows nothing about the committed bit value until the committer chooses to do so (''hiding property'').
The receiver has a guarantee that once committed, the committer cannot change the committed bit value (''binding property'').
Information-theoretic secure bit commitment cannot be done with non-relativistic schemes see this review paper [https://arxiv.org/abs/quant-ph/9712023]. 


'''Tags:''' [[:Category:Two Party Protocols|Two Party Protocols]], [[:Category:Quantum Enhanced Classical Functionality|Quantum Enhanced Classical Functionality]], [[:Category:Specific Task|Specific Task]], 
[[:Category:Information-theoretic security|Information-theoretic security]],
[[Category:Two Party Protocols]] [[Category:Quantum Enhanced Classical Functionality]][[Category:Specific Task]]
[[Category:Information-theoretic security]]

==Assumptions==

* Quantum theory is correct.
* The background space-time is approximately Minkowski.
* The committer can signal at precisely light speed.
* All information processing is instantaneous.


==Outline==

The receiver securely pre-prepares a set of qubits randomly chosen from the BB84 states and sends them to the commiter.
To commit to the bit 0, the commiter measures the received qubits in the standard basis and in Hadamard basis to commit to 1.
The commiter then sends the outcomes to their agents over secure classical channels.
To unveil the committed bit, the commiter's agents reveal the outcomes to the receiver's agents.
The receiver's agents then check if the outcomes they have received are the same and consistent with the states sent to the commiter.
If the check passes, the receiver accepts the commitment.

==Notation==

* <math>N</math>: Number of random qubits used in the commitment.
* <math>|\psi_i\rangle</math>: Random BB84 qubit with index <math>i</math>.
* <math>P</math>: Space-time origin point for the Minkowski space which is the position of the committer.
* <math>Q_0</math>: Commiter's first agent.
* <math>Q_1</math>: Commiter's second agent.
* <math>Q^{'}_0</math>: Receiver's first agent.
* <math>Q^{'}_1</math>: Receiver's second agent.

==Requirements==

* Secure classical channels between the parties and their agents.
* Basic state preparation abilities for the receiver.
* Instantaneous measurement capabilities for the committer.

==Knowledge Graph==

{{graph}}

==Properties==

* There is no need of quantum memory for the parties.
* The protocol is unconditionally secure.


==Protocol Description==
[https://github.com/quantumprotocolzoo/protocols/tree/master/QuantumBitCommitment <u>Click here for Python code</u>]</br>
The committer and the receiver agree on the space-time origin point P and two light-like separated points where the two agents of each party will be stationed.

===Commitment Phase===

''Receiver''
# Prepare a set of <math>N</math> qubits <math>|\psi_i\rangle_{i=1}^N</math> chosen independently and randomly from the BB84 states - <math>\{|0\rangle, |1\rangle, |+\rangle, |-\rangle\}</math>.
# Send the qubits to the commiter at point P.

''Commiter''
# To commit to 0, measure in the <math>\{|0\rangle, |1\rangle\}</math> basis.
# To commit to 1, measure in the <math>\{|+\rangle, |-\rangle\}</math> basis.
# Send the measurement outcomes to the agents <math>Q_0</math> and <math>Q_1</math> via the secure classical channels.

===Unveiling Phase===    

''Committer''
# The committer's agents reveal the measurement outcomes to the receiver's agents <math>Q'_0</math> and <math>Q'_1</math>.

''Receiver''
# Check if the revealed outcomes of both the agents are same, if not, then abort.
# Check if the revealed outcomes are consistent with the sent states, if not, then abort.
# If the checks pass, accept the commitment.

==Further Information==
<div style='text-align: right;'>''*contributed by Natansh Mathur''</div>