The security of quantum cryptography is guaranteed by the no-cloning theorem, which implies that an eavesdropper copying transmitted qubits in unknown states causes their disturbance. Nevertheless, in real cryptographic systems some level of disturbance has to be allowed to cover, e.g., transmission losses. An eavesdropper can attack such systems by replacing a noisy channel by a better one and by performing approximate cloning of transmitted qubits which disturb them but below the noise level assumed by legitimate users. We experimentally demonstrate such symmetric individual eavesdropping on the quantum key distribution protocols of Bennett and Brassard (BB84) and the trine-state spherical code of Renes (R04) with two-level probes prepared using a recently developed photonic multifunctional quantum cloner [Lemr et al., Phys. Rev. A 85, 050307(R) (2012)]. We demonstrated that our optimal cloning device with high-success rate makes the eavesdropping possible by hiding it in usual transmission losses. We believe that this experiment can stimulate the quest for other operational applications of quantum cloning.
The security of quantum cryptography is guaranteed by the no-cloning theorem, which implies that an eavesdropper copying transmitted qubits in unknown states causes their disturbance. Nevertheless, in real cryptographic systems some level of disturbance has to be allowed to cover, e.g., transmission losses. An eavesdropper can attack such systems by replacing a noisy channel by a better one and by performing approximate cloning of transmitted qubits which disturb them but below the noise level assumed by legitimate users. We experimentally demonstrate such symmetric individual eavesdropping on the quantum key distribution protocols of Bennett and Brassard (BB84) and the trine-state spherical code of Renes (R04) with two-level probes prepared using a recently developed photonic multifunctional quantum cloner [Lemr et al., Phys. Rev. A 85, 050307(R) (2012)]. We demonstrated that our optimal cloning device with high-success rate makes the eavesdropping possible by hiding it in usual transmission losses. We believe that this experiment can stimulate the quest for other operational applications of quantum cloning.
Attempts at cloning a quantum system result in the introduction of imperfections in the state of the copies. This is a consequence of the no-cloning theorem, which is a fundamental law of quantum physics and the backbone of security for quantum communications. Although perfect copies are prohibited, a quantum state may be copied with maximal accuracy via various optimal cloning schemes. Optimal quantum cloning, which lies at the border of the physical limit imposed by the no-signaling theorem and the Heisenberg uncertainty principle, has been experimentally realized for low-dimensional photonic states. However, an increase in the dimensionality of quantum systems is greatly beneficial to quantum computation and communication protocols. Nonetheless, no experimental demonstration of optimal cloning machines has hitherto been shown for high-dimensional quantum systems. We perform optimal cloning of high-dimensional photonic states by means of the symmetrization method. We show the universality of our technique by conducting cloning of numerous arbitrary input states and fully characterize our cloning machine by performing quantum state tomography on cloned photons. In addition, a cloning attack on a Bennett and Brassard (BB84) quantum key distribution protocol is experimentally demonstrated to reveal the robustness of high-dimensional states in quantum cryptography.
We investigate the connection between the optimal collective eavesdropping attack and the optimal cloning attack where the eavesdropper employs an optimal cloner to attack the quantum key distribution (QKD) protocol. The analysis is done in the context of the security proof in Refs. [Proc. R. Soc. London A 461, 207 (2005); Phys. Rev. Lett. 95, 080501 (2005)] for discrete variable protocols in d-dimensional Hilbert spaces. We consider a scenario in which the protocols and cloners are equipped with symmetries. These symmetries are used to define a quantum cloning scenario. We find that, in general, it does not hold that the optimal attack is an optimal cloner. However, there are classes of protocols, where we can identify an optimal attack by an optimal cloner. We analyze protocols with 2, d and d+1 mutually unbiased bases where d is a prime, and show that for the protocols with 2 and d+1 mutually unbiased bases (MUBs) the optimal attack is an optimal cloner but, for the protocols with d MUBs, it is not. Finally, we give criteria to identify protocols which have different signal states, but the same optimal attack. Using these criteria, we present qubit protocols which have the same optimal attack as the Bennett-Brassard 1984 (BB84) protocol or the 6-state protocol.
Attempts at cloning a quantum system result in the introduction of imperfections in the state of the copies. This is a consequence of the no-cloning theorem, which is a fundamental law of quantum physics and the backbone of security for quantum communications. Although such perfect copies are prohibited, a quantum state may be copied with maximal accuracy via various optimal cloning schemes. Optimal quantum cloning, which lies at the border of the physical limit imposed by the no-signalling theorem and the Heisenberg uncertainty principle, has been experimentally realized for low dimensional photonic states. However, an increase in the dimensionality of quantum systems is greatly beneficial to quantum computation and communication protocols. Nonetheless, no experimental demonstration of optimal cloning machines has hitherto been shown for high-dimensional quantum systems. Here, we perform optimal cloning of high-dimensional photonic states by means of the symmetrization method. We show the universality of our technique by conducting cloning of numerous arbitrary input states, and fully characterize our cloning machine by performing quantum state tomography on \emph{cloned} photons. In addition, a cloning attack on a Bennett and Brassard (BB84) quantum key distribution protocol is experimentally demonstrated in order to reveal the robustness of high-dimensional states in quantum cryptography.
We present the first experimental implementation of a multifunctional device for the optimal cloning of one to two qubits. Previous implementations have always been designed to optimize the cloning procedure with respect to one single type of a priori information about the cloned state. In contrast, our ``all-in-one'' implementation is optimal for several prominent regimes such as universal cloning, phase-covariant cloning, and also the first ever realized mirror phase-covariant cloning, when the square of the expected value of Pauli's Z operator is known in advance. In all these regimes the experimental device yields clones with almost maximum achievable average fidelity (97.5 of theoretical limit). Our device has a wide range of possible applications in quantum information processing, especially in quantum communication. For instance, one can use it for incoherent and coherent attacks against a variety of cryptographic protocols, including the Bennett-Brassard 1984 protocol of quantum key distribution through the Pauli damping channels. It can be also applied as a state-dependent photon multiplier in practical quantum networks.
Since, in general, nonorthogonal states cannot be cloned, any eavesdropping attempt in a quantum-communication scheme using nonorthogonal states as carriers of information introduces some errors in the transmission, leading to the possibility of detecting the spy. Usually, orthogonal states are not used in quantum-cryptography schemes since they can be faithfully cloned without altering the transmitted data. Nevertheless, L. Goldberg and L. Vaidman [Phys. Rev. Lett. 75, 1239 (1995)] proposed a protocol in which, even if the data exchange is realized using two orthogonal states, any attempt to eavesdrop is detectable by the legal users. In this scheme the orthogonal states are superpositions of two localized wave packets traveling along separate channels. Here we present an experiment realizing this scheme.
Many modern classical encryption schemes, based on computational complexity, are threatened by quantum computers. Quantum Key Distribution (QKD) aims to address this threat, with security enforced by quantum-mechanical principles. The security of QKD protocols, like the six-state protocol (6QKD), relies on understanding all possible eavesdropping attacks. The optimal known individual eavesdropping attack on 6QKD in a noiseless channel is the Universal Quantum Cloning Machine (UQCM). However, the utility of quantum machine learning (QML) for QKD eavesdropping analysis is largely unexplored. The recent work by Decker et al. (2025) used QML to find new attacks on the four-state BB84 protocol, but this methodology has not yet been generalized to the more complex 6QKD protocol. This thesis generalizes the quantum circuit (QCL) learning framework to analyze individual eavesdropping attacks on 6QKD. We designed a parameterized quantum circuit (ansatz) appropriate for 6QKD, notably adapting our circuit to two ancilla, and expanding the measurement strategy to three bases. We used QCL to find the optimal attack parameters in a simulated noiseless, asymmetric (bit-flip, phase-flip), and symmetric (depolarizing) noise channels. In the noiseless quantum channel, the QCL successfully converges to and reproduces the theoretical performance of the UQCM, validating the adapted methodology. In the asymmetric bit-flip and phase-flip noise channels, the QCL discovers a novel "imbalanced cloner" attack that outperforms the standard UQCM in average fidelity. The model learns to exploit the noise asymmetry by sacrificing the fidelity in the degraded bases and gaining higher fidelity in the unaffected basis. In a symmetric depolarizing noise channel, the QCL performance converges exactly to the UQCM, demonstrating it finds no exploitable noise asymmetry. This work provides the first QCL-based security analysis of the 6QKD protocol. We demonstrate that the QCL is a generalizable tool for quantum security analysis. Furthermore, we present the first (to our knowledge) evidence of a 6QKD "imbalanced cloner" that outperforms UQCM in asymmetric noisy environments.