Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:1305.0848 · Physical Review Letters

Bound Entangled States with a Private Key and their Classical Counterpart

Māris Ozols, Graeme Smith, John A. Smolin

Published Mar 18, 2014• 25 citations
arXivHTMLPDF

Abstract

Entanglement is a fundamental resource for quantum information processing. In its pure form, it allows quantum teleportation and sharing classical secrets. Realistic quantum states are noisy and their usefulness is only partially understood. Bound-entangled states are central to this question--they have no distillable entanglement, yet sometimes still have a private classical key. We present a construction of bound-entangled states with a private key based on classical probability distributions. From this emerge states possessing a new classical analogue of bound entanglement, distinct from the long-sought bound information. We also find states of smaller dimensions and higher key rates than previously known. Our construction has implications for classical cryptography: we show that existing protocols are insufficient for extracting private key from our distributions due to their "bound-entangled" nature. We propose a simple extension of existing protocols that can extract a key from them.

DOI
10.1103/physrevlett.112.110502

Related papers

General Paradigm for Distilling Classical Key From Quantum States

Karol Horodecki, Michał Horodecki, Paweł Horodecki +1 more

In this paper, we develop a formalism for distilling a classical key from a quantum state in a systematic way, expanding on our previous work on a secure key from bound entanglement (Horodecki, 2005). More detailed proofs, discussion, and examples are provided of the main results. Namely, we demonstrate that all quantum cryptographic protocols can be recast in a way which looks like entanglement theory, with the only change being that instead of distilling Einstein–Podolsky–Rosen (EPR) pairs, the parties distill private states. The form of these general private states are given, and we show that there are a number of useful ways of expressing them. Some of the private states can be approximated by certain states, which are bound entangled. Thus, distillable entanglement is not a requirement for a private key. We find that such bound entangled states are useful for a cryptographic primitive we call a controlled private quantum channel (PQC). We also find a general class of states, which have negative partial transpose (are NPT), but which appear to be bound entangled. The relative entropy distance is shown to be an upper bound on the rate of a key. This allows us to compute theexactvalue of a distillable key for a certain class of private states.

arXiv:quant-ph/0506189•IEEE Transactions on Information Theory•Mar 19, 2009•147 citations

Linking Classical and Quantum Key Agreement: Is There "Bound Information"?

Nicolas Gisin, Stefan Wolf

Abstract. After carrying out a protocol for quantum key agreement over a noisy quantum channel, the parties Alice and Bob must process the raw key in order to end up with identical keys about which the adversary has virtually no information. In principle, both classical and quantum protocols can be used for this processing. It is a natural question which type of protocols is more powerful. We show that the limits of tolerable noise are identical for classical and quantum protocols in many cases. More specifically, we prove that a quantum state between two parties is entangled if and only if the classical random variables resulting from optimal measurements provide some mutual classical information between the parties. In addition, we present evidence which strongly suggests that the potentials of classical and of quantum protocols are equal in every situation. An important consequence, in the purely classical regime, of such a correspondence would be the existence of a classical counterpart of so-called bound entanglement, namely “bound information” that cannot be used for generating a secret key by any protocol. This stands in sharp contrast to what was previously believed. Keywords. Secret-key agreement, intrinsic information, secret-key rate, quantum privacy amplification, purification, entanglement. 1

•May 11, 2000•6 citations

Bipartite Bound Information Exists

Jef Pauwels, Nicolas Gisin, Renato Renner

There exist bipartite quantum states that cost entanglement to create, yet from which no singlet can be distilled. This extreme irreversibility is known as bound entanglement. A quarter-century ago, Gisin and Wolf asked whether classical information theory admits the same phenomenon. Are there correlations, shared by two parties and an eavesdropper, that cost secret bits to create, yet from which none can be distilled? This question is part of a broader program exploring the relation between quantum and classical information theory. We answer it in the affirmative, providing a simple example, a distribution of two bits and a trit. Bound entanglement thus has a classical counterpart, bound information. An even more direct correspondence was originally conjectured, namely that measuring purifications of bound-entangled states yields distributions with bound information. The very states that motivated the conjecture, however, yield no bound information when measured in the standard basis, whereas suitable measurements of purifications of separable states do. The analogy between bound entanglement and bound information thus lies in the accounting of resources, not in a correspondence between individual quantum states and the classical probability distributions induced by measuring them.

quant-pharXiv:2607.25838•Jul 29, 2026•0 citations

Linking Classical and Quantum Key Agreement: Is There "Bound Information"?

Nicolas Gisin, Stefan Wolf

After carrying out a protocol for quantum key agreement over a noisy quantum channel, the parties Alice and Bob must process the raw key in order to end up with identical keys about which the adversary has virtually no information. In principle, both classical and quantum protocols can be used for this processing. It is a natural question which type of protocols is more powerful. We prove for general states but under the assumption of incoherent eavesdropping that Alice and Bob share some so-called intrinsic information in their classical random variables, resulting from optimal measurements, if and only if the parties' quantum systems are entangled. In addition, we provide evidence that the potentials of classical and of quantum protocols are equal in every situation. Consequently, many techniques and results from quantum information theory directly apply to problems in classical information theory, and vice versa. For instance, it was previously believed that two parties can carry out unconditionally secure key agreement as long as they share some intrinsic information in the adversary's view. The analysis of this purely classical problem from the quantum information-theoretic viewpoint shows that this is true in the binary case, but false in general. More explicitly, bound entanglement, i.e., entanglement that cannot be purified by any quantum protocol, has a classical counterpart. This "bound intrinsic information" cannot be distilled to a secret key by any classical protocol. As another application we propose a measure for entanglement based on classical information-theoretic quantities.

arXiv:quant-ph/0005042•May 11, 2000•3 citations

Bound Information: The Classical Analog to Bound Quantum Entanglemen

Nicolas Gisin, Renato Renner, Stefan Wolf

It was recently pointed out that there is a close connection between information-theoretic key agreement and quantum entanglement purification. This suggests that the concept of bound entanglement (entanglement which cannot be purified) has a classical counterpart: bound information, which cannot be used to generate a secret key by any protocol. We analyse a probability distribution which results when a specific bound entangled quantum state is measured. We show strong evidence for the fact that the corresponding mutual information is indeed bound. The probable existence of such information stands in contrast to previous beliefs in classical information theory. These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

Birkhäuser Basel eBooks•Jan 1, 2001•7 citations

Gaussian multipartite bound information

Ladislav Mišta, Natalia Korolkova

We demonstrate the existence of Gaussian multipartite bound information which is a classical analog of Gaussian multipartite bound entanglement. We construct a tripartite Gaussian distribution from which no secret key can be distilled, but which cannot be created by local operations and public communication. Further, we show that the presence of bound information is conditional on the presence of a part of the adversary's information creatable only by private communication. Existence of this part of the adversary's information is found to be a more generic feature of classical analogs of quantum phenomena obtained by mapping of nonclassically correlated separable quantum states.

arXiv:1108.0578•Physical Review A•Oct 25, 2012•4 citations
Entanglement is a fundamental resource for quantum information processing. In its pure form, it allows quantum teleportation and sharing classical secrets. Realistic quantum states are noisy and their usefulness is only partially understood. Bound-entangled states are central to this question--they have no distillable entanglement, yet sometimes still have a private classical key. We present a construction of bound-entangled states with a private key based on classical probability distributions. From this emerge states possessing a new classical analogue of bound entanglement, distinct from the long-sought bound information. We also find states of smaller dimensions and higher key rates than previously known. Our construction has implications for classical cryptography: we show that existing protocols are insufficient for extracting private key from our distributions due to their "bound-entangled" nature. We propose a simple extension of existing protocols that can extract a key from them.
In this paper, we develop a formalism for distilling a classical key from a quantum state in a systematic way, expanding on our previous work on a secure key from bound entanglement (Horodecki, 2005). More detailed proofs, discussion, and examples are provided of the main results. Namely, we demonstrate that all quantum cryptographic protocols can be recast in a way which looks like entanglement theory, with the only change being that instead of distilling Einstein–Podolsky–Rosen (EPR) pairs, the parties distill private states. The form of these general private states are given, and we show that there are a number of useful ways of expressing them. Some of the private states can be approximated by certain states, which are bound entangled. Thus, distillable entanglement is not a requirement for a private key. We find that such bound entangled states are useful for a cryptographic primitive we call a controlled private quantum channel (PQC). We also find a general class of states, which have negative partial transpose (are NPT), but which appear to be bound entangled. The relative entropy distance is shown to be an upper bound on the rate of a key. This allows us to compute theexactvalue of a distillable key for a certain class of private states.
Abstract. After carrying out a protocol for quantum key agreement over a noisy quantum channel, the parties Alice and Bob must process the raw key in order to end up with identical keys about which the adversary has virtually no information. In principle, both classical and quantum protocols can be used for this processing. It is a natural question which type of protocols is more powerful. We show that the limits of tolerable noise are identical for classical and quantum protocols in many cases. More specifically, we prove that a quantum state between two parties is entangled if and only if the classical random variables resulting from optimal measurements provide some mutual classical information between the parties. In addition, we present evidence which strongly suggests that the potentials of classical and of quantum protocols are equal in every situation. An important consequence, in the purely classical regime, of such a correspondence would be the existence of a classical counterpart of so-called bound entanglement, namely “bound information” that cannot be used for generating a secret key by any protocol. This stands in sharp contrast to what was previously believed. Keywords. Secret-key agreement, intrinsic information, secret-key rate, quantum privacy amplification, purification, entanglement. 1
There exist bipartite quantum states that cost entanglement to create, yet from which no singlet can be distilled. This extreme irreversibility is known as bound entanglement. A quarter-century ago, Gisin and Wolf asked whether classical information theory admits the same phenomenon. Are there correlations, shared by two parties and an eavesdropper, that cost secret bits to create, yet from which none can be distilled? This question is part of a broader program exploring the relation between quantum and classical information theory. We answer it in the affirmative, providing a simple example, a distribution of two bits and a trit. Bound entanglement thus has a classical counterpart, bound information. An even more direct correspondence was originally conjectured, namely that measuring purifications of bound-entangled states yields distributions with bound information. The very states that motivated the conjecture, however, yield no bound information when measured in the standard basis, whereas suitable measurements of purifications of separable states do. The analogy between bound entanglement and bound information thus lies in the accounting of resources, not in a correspondence between individual quantum states and the classical probability distributions induced by measuring them.
After carrying out a protocol for quantum key agreement over a noisy quantum channel, the parties Alice and Bob must process the raw key in order to end up with identical keys about which the adversary has virtually no information. In principle, both classical and quantum protocols can be used for this processing. It is a natural question which type of protocols is more powerful. We prove for general states but under the assumption of incoherent eavesdropping that Alice and Bob share some so-called intrinsic information in their classical random variables, resulting from optimal measurements, if and only if the parties' quantum systems are entangled. In addition, we provide evidence that the potentials of classical and of quantum protocols are equal in every situation. Consequently, many techniques and results from quantum information theory directly apply to problems in classical information theory, and vice versa. For instance, it was previously believed that two parties can carry out unconditionally secure key agreement as long as they share some intrinsic information in the adversary's view. The analysis of this purely classical problem from the quantum information-theoretic viewpoint shows that this is true in the binary case, but false in general. More explicitly, bound entanglement, i.e., entanglement that cannot be purified by any quantum protocol, has a classical counterpart. This "bound intrinsic information" cannot be distilled to a secret key by any classical protocol. As another application we propose a measure for entanglement based on classical information-theoretic quantities.
It was recently pointed out that there is a close connection between information-theoretic key agreement and quantum entanglement purification. This suggests that the concept of bound entanglement (entanglement which cannot be purified) has a classical counterpart: bound information, which cannot be used to generate a secret key by any protocol. We analyse a probability distribution which results when a specific bound entangled quantum state is measured. We show strong evidence for the fact that the corresponding mutual information is indeed bound. The probable existence of such information stands in contrast to previous beliefs in classical information theory. These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.
We demonstrate the existence of Gaussian multipartite bound information which is a classical analog of Gaussian multipartite bound entanglement. We construct a tripartite Gaussian distribution from which no secret key can be distilled, but which cannot be created by local operations and public communication. Further, we show that the presence of bound information is conditional on the presence of a part of the adversary's information creatable only by private communication. Existence of this part of the adversary's information is found to be a more generic feature of classical analogs of quantum phenomena obtained by mapping of nonclassically correlated separable quantum states.