Chapter

Cryptography and Coding

Volume 2898 of the series Lecture Notes in Computer Science pp 35-51

Commitment Capacity of Discrete Memoryless Channels

  • Andreas WinterAffiliated withDepartment of Computer Science, University of Bristol
  • , Anderson C. A. NascimentoAffiliated withImai Laboratory, Information and Systems, Institute of Industrial Science, University of Tokyo
  • , Hideki ImaiAffiliated withImai Laboratory, Information and Systems, Institute of Industrial Science, University of Tokyo

* Final gross prices may vary according to local VAT.

Get Access

Abstract

In extension of the bit commitment task and following work initiated by Crépeau, we introduce and solve the problem of characterising the optimal rate at which a discrete memoryless channel can be used to for bit commitment. It turns out that the answer is very intuitive: it is the maximum equivocation of the channel (after removing trivial redundancy), even when unlimited noiseless bidirectional side communication is allowed. By a well–known reduction, this result provides a lower bound on the channel’s capacity for implementing coin tossing.

The method of proving this relates the problem to Wyner’s wire–tap channel in an amusing way. There is also an extension to quantum channels.