Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:1010.2221 · Physical Review A

Comment on “Semiquantum-key distribution using less than four quantum states”

Michel Boyer, Tal Mor

Published Apr 11, 2011• 46 citations
arXivHTMLPDF

Abstract

For several decades it was believed that information-secure key distribution requires both the sender and receiver to have the ability to generate and/or manipulate quantum states. Earlier, we showed that quantum key distribution in which one party is classical is possible [Boyer, Kenigsberg, and Mor, Phys. Rev. Lett. 99, 140501 (2007)]. A surprising and very nice extension of that result was suggested by Zou, Qiu, Li, Wu, and Li [Phys. Rev. A 79, 052312 (2009)]. Their paper suggests that it is sufficient for the originator of the states (the person holding the quantum technology) to generate just one state. The resulting semiquantum key distribution, which we call here ``quantum key distribution with classical Alice'' is indeed completely robust against eavesdropping. However, their proof (that no eavesdropper can get information without being possibly detected) is faulty. We provide here a fully detailed and direct proof of their very important result.

DOI
10.1103/physreva.83.046301

Related papers

Semiquantum key distribution

Michel Boyer, Ran Gelles, Dan Kenigsberg +1 more

Secure key distribution between two remote parties is impossible when both are classical, unless some unproven (and arguably unrealistic) computation-complexity assumptions are made, such as the difficulty of factorizing large numbers. On the other hand, a secure key distribution is possible when both parties are quantum. What is possible when only one party (Alice) is quantum, yet the other (Bob) has only classical capabilities? Recently, a semiquantum key distribution protocol was presented [M. Boyer, D. Kenigsberg, and T. Mor, Phys. Rev. Lett. 99, 140501 (2007)], in which one of the parties (Bob) is classical, and yet, the protocol is proven to be completely robust against an eavesdropping attempt. Here we extend that result much further. We present two protocols with this constraint and prove their complete robustness against attacks: we prove that any attempt of an adversary to obtain information (and even a tiny amount of information) necessarily induces some errors that the legitimate parties could notice. One protocol presented here is identical to the one referred to above; however, its robustness is proven here in a much more general scenario. The other protocol is very different as it is based on randomization.

arXiv:0812.4835•Physical Review A•Mar 30, 2009•298 citations

Reply to “Comment on ‘Semiquantum-key distribution using less than four quantum states’ ”

Xiangfu Zou, Daowen Qiu

In the preceding Comment [Phys. Rev. A 83, 046301 (2011)], Boyer and Mor pointed out that the first conclusion of Lemma 1 in our paper [X. Zou, D. Qiu, L. Li, L. Wu, and L. Li, Phys. Rev. A 79, 052312 (2009)] is not correct, and therefore, the proof of Theorem 5 based on Lemma 1 is wrong. Furthermore, they gave a direct proof for Theorem 5 and affirmed the conclusions in our original paper. In this Reply, we admit the first conclusion of Lemma 1 is not correct, but we need to point out that the second conclusion of Lemma 1 is correct. Accordingly, all the proofs for Lemma 2, Lemma 3, and Theorems 3--6 are based only on the second conclusion of Lemma 1 and therefore are correct.

arXiv:1010.4233•Physical Review A•Apr 11, 2011•23 citations

Semiquantum-key distribution using less than four quantum states

Xiangfu Zou, Daowen Qiu, Lvzhou Li +2 more

Recently Boyer et al. [Phys. Rev. Lett. 99, 140501 (2007)] suggested the idea of semiquantum key distribution (SQKD) in which Bob is classical and they also proposed a semiquantum key distribution protocol (BKM2007). To discuss the security of the BKM2007 protocol, they proved that their protocol is completely robust. This means that nonzero information acquired by Eve on the information string implies the nonzero probability that the legitimate participants can find errors on the bits tested by this protocol. The BKM2007 protocol uses four quantum states to distribute a secret key. In this paper, we simplify their protocol by using less than four quantum states. In detail, we present five different SQKD protocols in which Alice sends three quantum states, two quantum states, and one quantum state, respectively. Also, we prove that all the five protocols are completely robust. In particular, we invent two completely robust SQKD protocols in which Alice sends only one quantum state. Alice uses a register in one SQKD protocol, but she does not use any register in the other. The information bit proportion of the SQKD protocol in which Alice sends only one quantum state but uses a register is the double as that in the BKM2007 protocol. Furthermore, the information bit rate of the SQKD protocol in which Alice sends only one quantum state and does not use any register is not lower than that of the BKM2007 protocol.

Physical Review A•May 12, 2009•204 citations

Quantum secret sharing with classical Bobs

Lvzhou Li, Daowen Qiu, Paulo Mateus

Boyer, Kenigsberg, and Mor [Phys.Rev.Lett.99, 140501(2007)] proposed a novel idea of semi-quantum key distribution where a key can be securely distributed between Alice who can perform any quantum operation and Bob who is classical. Extending the idea of “semiquantum” to other tasks of quantum information processing is of interest and worth considering. In this article, we consider the issue of semi-quantum secret sharing where a quantum participant Alice can share a secret key with two classical participants Bobs. After analyzing the existing protocol, we propose a new protocol of semi-quantum secret sharing. Our protocol is more realistic, since it utilizes product states instead of entangled states. We prove that any attempt of an adversary to obtain information necessarily induces some errors that the legitimate users could notice. 1

Journal of Physics A Mathematical and Theoretical•Jan 10, 2013•125 citations

Semiquantum Key Distribution Using Entangled States

Jian Wang, Sheng Zhang, Quan Zhang +1 more

Recently, Boyer et al. presented a novel semiquantum key distribution protocol [ Phys. Rev. Lett. 99 (2007) 140501 ] by using four quantum states, each of which is randomly prepared in the Z or X basis. Here we present a semi-quantum key distribution protocol by using maximally entangled states in which quantum Alice shares a secret key with classical Bob. Quantum Alice has the ability to prepare Bell states and perform Bell basis or computational basis measurement. Classical Bob is restricted to measuring, preparing a particle in the computational basis, reflecting or reordering the particles. The qubit efficiency of the protocol improves to 50% and the protocol can be modified to a measure-resend protocol or a protocol without quantum memory. We also show that the protocol is secure against eavesdropping.

arXiv:1104.1267•Chinese Physics Letters•Oct 1, 2011•100 citations

Eavesdropping in Semiquantum Key Distribution Protocol: Classical vs. Hadamard Bob

Arpita Maitra, Goutam Paul

The quantum key distribution protocol with classical Bob, well known as semiquantum key distribution, has been proposed a few years back (Boyer et al., PRL 2007, PRA 2009). In this protocol Alice has the same capability as in the traditional BB84 protocol, but Bob is limited by the constraint that he can measure or prepare qubits only in $\{|0>, |1>\}$ basis and reflect any other qubit (or in other words, let it go undisturbed). In this scheme the qubits travel from Alice to Bob and then again from Bob to Alice. We study an eavesdropping strategy on this scheme that listens to the channel in both the directions. With the same level of disturbance induced in the channel, Eve can be extract more information using our two-way strategy than what can be obtained by the direct application of one-way eavesdropping in case of BB84 protocol. Towards resisting this eavesdropping strategy, we modify the semiquantum scheme by incorporating a Hadamard gate at Bob's end.

•May 12, 2012•0 citations
For several decades it was believed that information-secure key distribution requires both the sender and receiver to have the ability to generate and/or manipulate quantum states. Earlier, we showed that quantum key distribution in which one party is classical is possible [Boyer, Kenigsberg, and Mor, Phys. Rev. Lett. 99, 140501 (2007)]. A surprising and very nice extension of that result was suggested by Zou, Qiu, Li, Wu, and Li [Phys. Rev. A 79, 052312 (2009)]. Their paper suggests that it is sufficient for the originator of the states (the person holding the quantum technology) to generate just one state. The resulting semiquantum key distribution, which we call here ``quantum key distribution with classical Alice'' is indeed completely robust against eavesdropping. However, their proof (that no eavesdropper can get information without being possibly detected) is faulty. We provide here a fully detailed and direct proof of their very important result.
Secure key distribution between two remote parties is impossible when both are classical, unless some unproven (and arguably unrealistic) computation-complexity assumptions are made, such as the difficulty of factorizing large numbers. On the other hand, a secure key distribution is possible when both parties are quantum. What is possible when only one party (Alice) is quantum, yet the other (Bob) has only classical capabilities? Recently, a semiquantum key distribution protocol was presented [M. Boyer, D. Kenigsberg, and T. Mor, Phys. Rev. Lett. 99, 140501 (2007)], in which one of the parties (Bob) is classical, and yet, the protocol is proven to be completely robust against an eavesdropping attempt. Here we extend that result much further. We present two protocols with this constraint and prove their complete robustness against attacks: we prove that any attempt of an adversary to obtain information (and even a tiny amount of information) necessarily induces some errors that the legitimate parties could notice. One protocol presented here is identical to the one referred to above; however, its robustness is proven here in a much more general scenario. The other protocol is very different as it is based on randomization.
In the preceding Comment [Phys. Rev. A 83, 046301 (2011)], Boyer and Mor pointed out that the first conclusion of Lemma 1 in our paper [X. Zou, D. Qiu, L. Li, L. Wu, and L. Li, Phys. Rev. A 79, 052312 (2009)] is not correct, and therefore, the proof of Theorem 5 based on Lemma 1 is wrong. Furthermore, they gave a direct proof for Theorem 5 and affirmed the conclusions in our original paper. In this Reply, we admit the first conclusion of Lemma 1 is not correct, but we need to point out that the second conclusion of Lemma 1 is correct. Accordingly, all the proofs for Lemma 2, Lemma 3, and Theorems 3--6 are based only on the second conclusion of Lemma 1 and therefore are correct.
Recently Boyer et al. [Phys. Rev. Lett. 99, 140501 (2007)] suggested the idea of semiquantum key distribution (SQKD) in which Bob is classical and they also proposed a semiquantum key distribution protocol (BKM2007). To discuss the security of the BKM2007 protocol, they proved that their protocol is completely robust. This means that nonzero information acquired by Eve on the information string implies the nonzero probability that the legitimate participants can find errors on the bits tested by this protocol. The BKM2007 protocol uses four quantum states to distribute a secret key. In this paper, we simplify their protocol by using less than four quantum states. In detail, we present five different SQKD protocols in which Alice sends three quantum states, two quantum states, and one quantum state, respectively. Also, we prove that all the five protocols are completely robust. In particular, we invent two completely robust SQKD protocols in which Alice sends only one quantum state. Alice uses a register in one SQKD protocol, but she does not use any register in the other. The information bit proportion of the SQKD protocol in which Alice sends only one quantum state but uses a register is the double as that in the BKM2007 protocol. Furthermore, the information bit rate of the SQKD protocol in which Alice sends only one quantum state and does not use any register is not lower than that of the BKM2007 protocol.
Boyer, Kenigsberg, and Mor [Phys.Rev.Lett.99, 140501(2007)] proposed a novel idea of semi-quantum key distribution where a key can be securely distributed between Alice who can perform any quantum operation and Bob who is classical. Extending the idea of “semiquantum” to other tasks of quantum information processing is of interest and worth considering. In this article, we consider the issue of semi-quantum secret sharing where a quantum participant Alice can share a secret key with two classical participants Bobs. After analyzing the existing protocol, we propose a new protocol of semi-quantum secret sharing. Our protocol is more realistic, since it utilizes product states instead of entangled states. We prove that any attempt of an adversary to obtain information necessarily induces some errors that the legitimate users could notice. 1
Recently, Boyer et al. presented a novel semiquantum key distribution protocol [ Phys. Rev. Lett. 99 (2007) 140501 ] by using four quantum states, each of which is randomly prepared in the Z or X basis. Here we present a semi-quantum key distribution protocol by using maximally entangled states in which quantum Alice shares a secret key with classical Bob. Quantum Alice has the ability to prepare Bell states and perform Bell basis or computational basis measurement. Classical Bob is restricted to measuring, preparing a particle in the computational basis, reflecting or reordering the particles. The qubit efficiency of the protocol improves to 50% and the protocol can be modified to a measure-resend protocol or a protocol without quantum memory. We also show that the protocol is secure against eavesdropping.
The quantum key distribution protocol with classical Bob, well known as semiquantum key distribution, has been proposed a few years back (Boyer et al., PRL 2007, PRA 2009). In this protocol Alice has the same capability as in the traditional BB84 protocol, but Bob is limited by the constraint that he can measure or prepare qubits only in {∣0>,∣1>}\{|0>, |1>\}{∣0>,∣1>} basis and reflect any other qubit (or in other words, let it go undisturbed). In this scheme the qubits travel from Alice to Bob and then again from Bob to Alice. We study an eavesdropping strategy on this scheme that listens to the channel in both the directions. With the same level of disturbance induced in the channel, Eve can be extract more information using our two-way strategy than what can be obtained by the direct application of one-way eavesdropping in case of BB84 protocol. Towards resisting this eavesdropping strategy, we modify the semiquantum scheme by incorporating a Hadamard gate at Bob's end.