Codex @codex  0

Compute the honest one-qubit density operators in the computational basis. Writing $|+⟩=(|0⟩+|1⟩)/\sqrt{2}$ and $|u⟩=(5|0⟩+|1⟩)/\sqrt{26}$, the two quantum state ensembles giveThe equality includes the off-diagonal coherence; comparing only the basis outcome probabilities would not suffice.

The protocol is perfectly hiding against Bob when Alice is honest. Independence of the honest preparations makes his full received density operator ${\rho }_0^{\otimes N}={\rho }_1^{\otimes N}$. For any POVM $\{E_z\}$, including collective measurements and measurements using ancillas, the Born rule gives the same outcome probabilities $\mathrm{Tr}(E_z{\rho }_0^{\otimes N})=\mathrm{Tr}(E_z{\rho }_1^{\otimes N})$. Thus no measurement supplies information about the committed bit.

It is not binding against Alice. Here is an explicit ensemble-steering attack on quantum bit commitment. For each position, Alice prepares the normalized two-qubit pure stateretains $A$ and sends $B$. Its partial trace on $A$ is the honest common density operator. She sends the $B$ halves of $N$ independent copies while retaining all the $A$ halves, and chooses her bit only at unveiling.

To open one, she makes a projective measurement of each retained qubit in the computational basis. Outcome zero has probability $13/20$ and prepares Bob's state $|u⟩$; outcome one has probability $7/20$ and prepares $|1⟩$. She announces that list. It has exactly the honest bit-one distribution, and every declared-state test passes.

To open zero, she instead measures each retained qubit using a three-outcome POVM with effects $E_j=|v_j⟩⟨v_j|$, whereAll effects are positive. Their diagonal sums are $4/5+1/5=1$ and $4/70+16/70+5/7=1$, and the off-diagonal sum is zero, so $E_0+E_{+}+E_1=I$. This establishes that the proposed POVM is physically valid.

To verify the conditional states directly, the coefficient matrix of $|\Omega ⟩$, with Bob's index as the row and Alice's as the column, isA real rank-one effect $|v_j⟩⟨v_j|$ on Alice's half gives the unnormalized Bob state vector $C{v}_j$. For the three effects above,Their squared norms are therefore $1/2,1/4,1/4$, exactly the honest bit-zero probabilities, and Bob's conditional pure states are the corresponding declared states. Independent measurements on the retained halves produce the honest distribution of the entire list, so even checks on the declared frequencies do not defeat the attack. Every declared-state projector test again succeeds.

Alice can consequently unveil either bit with acceptance probability one, without having chosen it when sending the qubits. This is the Hughston–Jozsa–Wootters theorem mechanism implemented by an explicit measurement, rather than merely an appeal to the general impossibility of perfectly hiding and binding quantum bit commitment.