We show that all proposed quantum bit commitment schemes are insecure because the sender, Alice, can almost always cheat successfully by using an Einstein-Podolsky-Rosen–type of attack and delaying her measurement until she opens her commitment.

• Received 8 March 1996

DOI:https://doi.org/10.1103/PhysRevLett.78.3410