Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:1507.02889 · Physical Review Letters

Secrecy in Prepare-and-Measure Clauser-Horne-Shimony-Holt Tests with a Qubit Bound

Erik Woodhead, Stefano Pironio

Published Oct 6, 2015• 45 citations
arXivHTMLPDF

Abstract

The security of device-independent (DI) quantum key distribution (QKD) protocols relies on the violation of Bell inequalities. As such, their security can be established based on minimal assumptions about the devices, but their implementation necessarily requires the distribution of entangled states. In a setting with fully trusted devices, any entanglement-based protocol is essentially equivalent to a corresponding prepare-and-measure protocol. This correspondence, however, is not generally valid in the DI setting unless one makes extra assumptions about the devices. Here we prove that a known tight lower bound on the min entropy in terms of the Clauser-Horne-Shimony-Holt Bell correlator, which has featured in a number of entanglement-based DI QKD security proofs, also holds in a prepare-and-measure setting, subject only to the assumption that the source is limited to a two-dimensional Hilbert space.

DOI
10.1103/physrevlett.115.150501

Related papers

Finite-key bound for semi-device-independent quantum key distribution

Chun Hua Zhou, Peng Xu, Wan‐Su Bao +4 more

The device-independent (DI) quantum key distribution (QKD) protocol requires minimal assumptions about the devices and its security relies on the violation of Bell inequalities, making it hard to realize in real world. Semi-device-independent (SDI) QKD protocol confines quantum state within finite dimensional Hilbert space, thus easier for implementation with existing experimental technology. In this paper, we propose a practical SDI prepare-and-measure BB84 protocol. By introducing min entropy for security proof, we obtain a security bound under the practical condition with finite resources. Numerical simulations imply the finite-key effect can not be ignored in the forthcoming SDI QKD experiment.

Optics Express•Jul 10, 2017•21 citations

Decoy-state measurement-device-independent quantum key distribution based on the Clauser-Horne-Shimony-Holt inequality

Chun-Mei Zhang, Mo Li, Hong-Wei Li +10 more

The measurement-device-independent quantum key distribution (MDI-QKD) protocol is proposed to remove the detector side channel attacks, while its security relies on the assumption that the encoding systems are perfectly characterized. In contrast, the MDI-QKD protocol based on the Clauser-Horne-Shimony-Holt inequality (CHSH-MDI-QKD) weakens this assumption, which only requires the quantum state to be prepared in the two-dimensional Hilbert space and the devices are independent. In experimental realizations, the weak coherent state, which is always used in QKD systems due to the lack of an ideal single-photon source, may be prepared in the high-dimensional space. In this paper, we investigate the decoy-state CHSH-MDI-QKD protocol with $s(3\ensuremath{\le}s\ensuremath{\le}5)$ intensities, including one signal state and $s\ensuremath{-}1$ decoy states, and we also consider the finite-size effect on the decoy-state CHSH-MDI-QKD protocol with five intensities. Simulation results show that this scheme is very practical.

arXiv:1408.0592•Physical Review A•Sep 17, 2014•18 citations

Device-Independent Quantum Key Distribution with Arbitrarily Small Nonlocality

Lewis Wooltorton, Peter J. Brown, Roger Colbeck

Device-independent quantum key distribution allows two users to set up shared cryptographic key without the need to trust the quantum devices used. Doing so requires nonlocal correlations between the users. However, in Farkas et al. [Phys. Rev. Lett. 127, 050503 (2021)PRLTAO0031-900710.1103/PhysRevLett.127.050503] it was shown that for known protocols nonlocality is not always sufficient, leading to the question of whether there is a fundamental lower bound on the minimum amount of nonlocality needed for any device-independent quantum key distribution implementation. Here, we show that no such bound exists, giving schemes that achieve key with correlations arbitrarily close to the local set. Furthermore, some of our constructions achieve the maximum of 1 bit of key per pair of entangled qubits. We achieve this by studying a family of Bell inequalities that constitute all self-tests of the maximally entangled state with a single linear Bell expression. Within this family there exist nonlocal correlations with the property that one pair of inputs yield outputs arbitrarily close to perfect key. Such correlations exist for a range of Clauser-Horne-Shimony-Holt values, including those arbitrarily close to the classical bound. Finally, we show the existence of quantum correlations that can generate both perfect key and perfect randomness simultaneously, while also displaying arbitrarily small Clauser-Horne-Shimony-Holt violation. This opens up the possibility of a new class of cryptographic protocol.

arXiv:2309.09650•Physical Review Letters•May 22, 2024•27 citations

Prepare-and-measure quantum key distribution from a bound on information leakage

Abhishek Mishra, Michele Masini, Maria Balanzó-Juandó +2 more

Every quantum key distribution (QKD) protocol must limit the information available outside the users' laboratories. In device-independent QKD this is essentially the only assumption made on the devices. In a prepare-and-measure setting it cannot be imposed strictly, since the sender's device must emit a signal that depends on her private input. The natural replacement, and a minimal one, is a leakage bound: a bound on how much information about the input leaves the sender's laboratory, through the intended signal or through any side channel. We ask how far this unavoidable requirement can replace a detailed model of the source. We show that this single bound, quantified by the probability of guessing the input from everything the source emits, suffices to prove security against collective attacks. In our analysis, nothing is assumed about the precise form of the emitted states, their dimension, energy or purity, nor about the receiver's measurement device, beyond the standard requirement that it does not leak Bob's data. The standard B92 and BB84 protocols do not certify any key under this minimal leakage bound assumption. But closely related protocols can and, in the ideal limit, achieve one secret bit per key round. For noisy implementations, we compute key rates using semidefinite programming relaxations. Our best protocols tolerate visibilities down to 0.84, corresponding to an 8% quantum bit error rate, compared with the 11% threshold of standard device-dependent BB84.

quant-pharXiv:2610.37296•Oct 28, 2026•0 citations

Security limitation on a class of device-independent quantum key distribution

Guang Ping He

Recently there were many proposals on device-independent (DI) quantum key distribution protocol whose security is based on the violation of the Clauser-Horne-Shimony-Holt inequality. However, as a statistical law, a certain extent of fluctuation has to be allowed. We show that the eavesdropper can make use of this property to obtain a remarkable part of the secret key by replacing some of the DI nonlocal boxes with local ones. On the contrary, the same cheating strategy does not apply to the device-dependent (DD) version of the protocol. Thus such kind of DI protocol is less secure than its DD counterpart.

arXiv:1308.2212•Aug 9, 2013•0 citations

Security of a practical semi-device-independent quantum key distribution protocol against collective attacks

Yang Wang, Wan‐Su Bao, Hong-Wei Li +2 more

Similar to device-independent quantum key distribution (DI-QKD), semi-device-independent quantum key distribution (SDI-QKD) provides secure key distribution without any assumptions about the internal workings of the QKD devices. The only assumption is that the dimension of the Hilbert space is bounded. But SDI-QKD can be implemented in a one-way prepare-and-measure configuration without entanglement compared with DI-QKD. We propose a practical SDI-QKD protocol with four preparation states and three measurement bases by considering the maximal violation of dimension witnesses and specific processes of a QKD protocol. Moreover, we prove the security of the SDI-QKD protocol against collective attacks based on the min-entropy and dimension witnesses. We also show a comparison of the secret key rate between the SDI-QKD protocol and the standard QKD.

Chinese Physics B•Jul 31, 2014•11 citations
The security of device-independent (DI) quantum key distribution (QKD) protocols relies on the violation of Bell inequalities. As such, their security can be established based on minimal assumptions about the devices, but their implementation necessarily requires the distribution of entangled states. In a setting with fully trusted devices, any entanglement-based protocol is essentially equivalent to a corresponding prepare-and-measure protocol. This correspondence, however, is not generally valid in the DI setting unless one makes extra assumptions about the devices. Here we prove that a known tight lower bound on the min entropy in terms of the Clauser-Horne-Shimony-Holt Bell correlator, which has featured in a number of entanglement-based DI QKD security proofs, also holds in a prepare-and-measure setting, subject only to the assumption that the source is limited to a two-dimensional Hilbert space.
The device-independent (DI) quantum key distribution (QKD) protocol requires minimal assumptions about the devices and its security relies on the violation of Bell inequalities, making it hard to realize in real world. Semi-device-independent (SDI) QKD protocol confines quantum state within finite dimensional Hilbert space, thus easier for implementation with existing experimental technology. In this paper, we propose a practical SDI prepare-and-measure BB84 protocol. By introducing min entropy for security proof, we obtain a security bound under the practical condition with finite resources. Numerical simulations imply the finite-key effect can not be ignored in the forthcoming SDI QKD experiment.
The measurement-device-independent quantum key distribution (MDI-QKD) protocol is proposed to remove the detector side channel attacks, while its security relies on the assumption that the encoding systems are perfectly characterized. In contrast, the MDI-QKD protocol based on the Clauser-Horne-Shimony-Holt inequality (CHSH-MDI-QKD) weakens this assumption, which only requires the quantum state to be prepared in the two-dimensional Hilbert space and the devices are independent. In experimental realizations, the weak coherent state, which is always used in QKD systems due to the lack of an ideal single-photon source, may be prepared in the high-dimensional space. In this paper, we investigate the decoy-state CHSH-MDI-QKD protocol with $s(3\ensuremath{\le}s\ensuremath{\le}5)$ intensities, including one signal state and $s\ensuremath{-}1$ decoy states, and we also consider the finite-size effect on the decoy-state CHSH-MDI-QKD protocol with five intensities. Simulation results show that this scheme is very practical.
Device-independent quantum key distribution allows two users to set up shared cryptographic key without the need to trust the quantum devices used. Doing so requires nonlocal correlations between the users. However, in Farkas et al. [Phys. Rev. Lett. 127, 050503 (2021)PRLTAO0031-900710.1103/PhysRevLett.127.050503] it was shown that for known protocols nonlocality is not always sufficient, leading to the question of whether there is a fundamental lower bound on the minimum amount of nonlocality needed for any device-independent quantum key distribution implementation. Here, we show that no such bound exists, giving schemes that achieve key with correlations arbitrarily close to the local set. Furthermore, some of our constructions achieve the maximum of 1 bit of key per pair of entangled qubits. We achieve this by studying a family of Bell inequalities that constitute all self-tests of the maximally entangled state with a single linear Bell expression. Within this family there exist nonlocal correlations with the property that one pair of inputs yield outputs arbitrarily close to perfect key. Such correlations exist for a range of Clauser-Horne-Shimony-Holt values, including those arbitrarily close to the classical bound. Finally, we show the existence of quantum correlations that can generate both perfect key and perfect randomness simultaneously, while also displaying arbitrarily small Clauser-Horne-Shimony-Holt violation. This opens up the possibility of a new class of cryptographic protocol.
Every quantum key distribution (QKD) protocol must limit the information available outside the users' laboratories. In device-independent QKD this is essentially the only assumption made on the devices. In a prepare-and-measure setting it cannot be imposed strictly, since the sender's device must emit a signal that depends on her private input. The natural replacement, and a minimal one, is a leakage bound: a bound on how much information about the input leaves the sender's laboratory, through the intended signal or through any side channel. We ask how far this unavoidable requirement can replace a detailed model of the source. We show that this single bound, quantified by the probability of guessing the input from everything the source emits, suffices to prove security against collective attacks. In our analysis, nothing is assumed about the precise form of the emitted states, their dimension, energy or purity, nor about the receiver's measurement device, beyond the standard requirement that it does not leak Bob's data. The standard B92 and BB84 protocols do not certify any key under this minimal leakage bound assumption. But closely related protocols can and, in the ideal limit, achieve one secret bit per key round. For noisy implementations, we compute key rates using semidefinite programming relaxations. Our best protocols tolerate visibilities down to 0.84, corresponding to an 8% quantum bit error rate, compared with the 11% threshold of standard device-dependent BB84.
Recently there were many proposals on device-independent (DI) quantum key distribution protocol whose security is based on the violation of the Clauser-Horne-Shimony-Holt inequality. However, as a statistical law, a certain extent of fluctuation has to be allowed. We show that the eavesdropper can make use of this property to obtain a remarkable part of the secret key by replacing some of the DI nonlocal boxes with local ones. On the contrary, the same cheating strategy does not apply to the device-dependent (DD) version of the protocol. Thus such kind of DI protocol is less secure than its DD counterpart.
Similar to device-independent quantum key distribution (DI-QKD), semi-device-independent quantum key distribution (SDI-QKD) provides secure key distribution without any assumptions about the internal workings of the QKD devices. The only assumption is that the dimension of the Hilbert space is bounded. But SDI-QKD can be implemented in a one-way prepare-and-measure configuration without entanglement compared with DI-QKD. We propose a practical SDI-QKD protocol with four preparation states and three measurement bases by considering the maximal violation of dimension witnesses and specific processes of a QKD protocol. Moreover, we prove the security of the SDI-QKD protocol against collective attacks based on the min-entropy and dimension witnesses. We also show a comparison of the secret key rate between the SDI-QKD protocol and the standard QKD.