Quantum and classical coin-flipping protocols based on bit-commitment and their point games

TL;DR

This paper analyzes quantum and classical coin-flipping protocols based on bit-commitment, simplifying their security analysis through semidefinite and linear programming, and explores their philosophical and security implications.

Contribution

It introduces simplified semidefinite programming models for quantum protocols, constructs point games for both quantum and classical protocols, and links optimization theory to physical theories.

Findings

Classical protocols allow one party to fully determine the coin flip.

Only classical protocols can saturate Kitaev's lower bound for strong coin-flipping.

Quantum protocols cannot attain the optimal security level due to their complexity.

Abstract

We focus on a family of quantum coin-flipping protocols based on bit-commitment. We discuss how the semidefinite programming formulations of cheating strategies can be reduced to optimizing a linear combination of fidelity functions over a polytope. These turn out to be much simpler semidefinite programs which can be modelled using second-order cone programming problems. We then use these simplifications to construct their point games as developed by Kitaev. We also study the classical version of these protocols and use linear optimization to formulate optimal cheating strategies. We then construct the point games for the classical protocols as well using the analysis for the quantum case. We discuss the philosophical connections between the classical and quantum protocols and their point games as viewed from optimization theory. In particular, we observe an analogy between a spectrum of physical theories (from classical to quantum) and a spectrum of convex optimization problems (from linear programming to semidefinite programming, through second-order cone programming). In this analogy, classical systems correspond to linear programming problems and the level of quantum features in the system is correlated to the level of sophistication of the semidefinite programming models on the optimization side. Concerning security analysis, we use the classical point games to prove that every classical protocol of this type allows exactly one of the parties to entirely determine the coin-flip. Using the relationships between the quantum and classical protocols, we show that only "classical" protocols can saturate Kitaev's lower bound for strong coin-flipping. Moreover, if the product of Alice and Bob's optimal cheating probabilities is 1/2, then one party can cheat with probability 1. This rules out quantum protocols of this type from attaining the optimal level of security.