Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:1712.00743 · Physical Review Letters

Parameter Estimation with Almost No Public Communication for Continuous-Variable Quantum Key Distribution

Cosmo Lupo, Carlo Ottaviani, Panagiotis Papanastasiou, Stefano Pirandola

Published Jun 1, 2018• 49 citations
arXivHTMLPDF

Abstract

One crucial step in any quantum key distribution (QKD) scheme is parameter estimation. In a typical QKD protocol the users have to sacrifice part of their raw data to estimate the parameters of the communication channel as, for example, the error rate. This introduces a trade-off between the secret key rate and the accuracy of parameter estimation in the finite-size regime. Here we show that continuous-variable QKD is not subject to this constraint as the whole raw keys can be used for both parameter estimation and secret key generation, without compromising the security. First, we show that this property holds for measurement-device-independent (MDI) protocols, as a consequence of the fact that in a MDI protocol the correlations between Alice and Bob are postselected by the measurement performed by an untrusted relay. This result is then extended beyond the MDI framework by exploiting the fact that MDI protocols can simulate device-dependent one-way QKD with arbitrarily high precision.

DOI
10.1103/physrevlett.120.220505

Related papers

Simultaneous measurement-device-independent continuous variable quantum key distribution with realistic detector compensation

Xiaodong Wu, Yi-Jun Wang, Duan Huang +1 more

We propose a novel scheme for measurement-device-independent (MDI) continuous-variable quantum key distribution (CVQKD) by simultaneously conducting classical communication and QKD, which is called “simultaneous MDI-CVQKD” protocol. In such protocol, each sender (Alice, Bob) can superimpose random numbers for QKD on classical information by taking advantage of the same weak coherent pulse and an untrusted third party (Charlie) decodes it by using the same coherent detectors, which could be appealing in practice due to that multiple purposes can be realized by employing only single communication system. What is more, the proposed protocol is MDI, which is immune to all possible side-channel attacks on practical detectors. Security results illustrate that the simultaneous MDI-CVQKD protocol can secure against arbitrary collective attacks. In addition, we employ phase-sensitive optical amplifiers to compensate the imperfection existing in practical detectors. With this technology, even common practical detectors can be used for detection through choosing a suitable optical amplifier gain. Furthermore, we also take the finite-size effect into consideration and show that the whole raw keys can be taken advantage of to generate the final secret key instead of sacrificing part of them for parameter estimation. Therefore, an enhanced performance of the simultaneous MDI-CVQKD protocol can be obtained in finite-size regime.

Frontiers of Physics•Mar 6, 2020•16 citations

One-sided device-independent quantum key distribution for two independent parties

Jun Xin, Xiao-Ming Lu, Xingmin Li +1 more

Remote distribution of secret keys is a challenging task in quantum cryptography. A significant step in this direction is the measurement-device independence quantum key distribution (MDI-QKD). For two remote (or independent) parties Alice and Bob who initially no share secret information, the MDI-QKD enables them to share a secret key by the measurement of an untrusted relay. Unfortunately, the MDI-QKD yields the assumption that the devices of both Alice and Bob have to be trusted. Here, we show that QKD between two independent parties can also be realized even if the device of either Alice or Bob is untrusted. We tackle the problem by resorting to the recently developed one-sided device-independent QKD protocol. We derive conditions on the extracted secret key to be unconditionally secure against arbitary attacks in the limit of asymptotic keys. In the presence of Gaussian states and measurements, we theoretically demonstrate our scheme is feasible, which could be an attractive candidate for long distance secret communication.

Optics Express•Mar 27, 2020•14 citations

Finite-size analysis of continuous-variable measurement-device-independent quantum key distribution

Xueying Zhang, Yichen Zhang, Yijia Zhao +3 more

We study the impact of the finite-size effect on the continuous-variable measurement-device-independent quantum key distribution (CV-MDI QKD) protocol, mainly considering the finite-size effect on the parameter estimation procedure. The central-limit theorem and maximum likelihood estimation theorem are used to estimate the parameters. We also analyze the relationship between the number of exchanged signals and the optimal modulation variance in the protocol. It is proved that when Charlie's position is close to Bob, the CV-MDI QKD protocol has the farthest transmission distance in the finite-size scenario. Finally, we discuss the impact of finite-size effects related to the practical detection in the CV-MDI QKD protocol. The overall results indicate that the finite-size effect has a great influence on the secret-key rate of the CV-MDI QKD protocol and should not be ignored.

arXiv:1707.05931•Physical Review A•Oct 25, 2017•56 citations

Insecurity of Measurement-Device-Independent Quantum Key Distribution

Konstantin Zaitsev, Polina Acheva

The security of practical quantum key distribution (QKD) systems is fundamentally constrained by vulnerabilities of single-photon detectors. Measurement-device-independent quantum key distribution (MDI-QKD) was proposed to remove this limitation by allowing all measurements to be performed by a completely untrusted party, under the assumption that the measurement node can be treated as adversarial but does not compromise the security guarantees of the protocol. Here we show that this assumption is insufficient under realistic adversarial control of the measurement device. We present an attack in which an adversary exploits active control of the measurement node (Charlie) to obtain significant information about the secret key. The attack enables recovery of up to 70\% of the sifted key while introducing only 5.6\% quantum bit error rate. Unlike previously reported attacks targeting specific implementations of MDI-QKD, our results demonstrate a limitation of the standard security model underlying the protocol. These findings indicate that additional constraints on the measurement-device independence assumption, or refined security analyses incorporating stronger adversarial capabilities, are required to ensure the security of MDI-QKD in realistic scenarios.

quant-pharXiv:2607.01989•Jul 3, 2026•0 citations

Continuous-variable measurement-device-independent quantum key distribution with source-intensity errors

Pu Wang, Xuyang Wang, Yongmin Li

Continuous-variable measurement-device-independent quantum key distribution (CV-MDI-QKD) is immune to all detector side channel attacks, however its security requires trusted sources. We investigate the effects of source intensity errors, the most crucial source error, on the security of CV-MDI-QKD protocol with Gaussian-modulated coherent states. We establish a general source intensity errors model and derive the secret key rate based on different assumptions on the abilities of legal parties Alice and Bob. To avoid the adverse effects of the sources' intensity errors on CV-MDI-QKD, we present different data-processing schemes. We also assess the security of the protocol against collective Gaussian attacks in the finite-size scenario with composable security. Taking source intensity errors into consideration, we achieve improved security compared to previous demonstrations. Our results will provide a useful reference for practical implementations of CV-MDI-QKD.

Physical Review A•Aug 10, 2020•11 citations

Finite-size analysis of measurement-device-independent quantum cryptography with continuous variables

Panagiotis Papanastasiou, Carlo Ottaviani, Stefano Pirandola

We study the impact of finite-size effects on the key rate of continuous-variable (CV) measurement-device-independent (MDI) quantum key distribution (QKD), considering two-mode Gaussian attacks. Inspired by the parameter estimation technique developed in by Ruppert et al. [Phys. Rev. A 90, 062310 (2014)], we adapt it to study CV-MDI-QKD and, assuming realistic experimental conditions, we analyze the impact of finite-size effects on the key rate. We find that the performance of the protocol approaches the ideal one, increasing the block size, and, most importantly, that blocks between ${10}^{6}$ and ${10}^{9}$ data points may provide key rates $\ensuremath{\sim}{10}^{\ensuremath{-}2}$ bit/use over metropolitan distances.

arXiv:1707.04599•Physical Review A•Oct 23, 2017•79 citations
One crucial step in any quantum key distribution (QKD) scheme is parameter estimation. In a typical QKD protocol the users have to sacrifice part of their raw data to estimate the parameters of the communication channel as, for example, the error rate. This introduces a trade-off between the secret key rate and the accuracy of parameter estimation in the finite-size regime. Here we show that continuous-variable QKD is not subject to this constraint as the whole raw keys can be used for both parameter estimation and secret key generation, without compromising the security. First, we show that this property holds for measurement-device-independent (MDI) protocols, as a consequence of the fact that in a MDI protocol the correlations between Alice and Bob are postselected by the measurement performed by an untrusted relay. This result is then extended beyond the MDI framework by exploiting the fact that MDI protocols can simulate device-dependent one-way QKD with arbitrarily high precision.
We propose a novel scheme for measurement-device-independent (MDI) continuous-variable quantum key distribution (CVQKD) by simultaneously conducting classical communication and QKD, which is called “simultaneous MDI-CVQKD” protocol. In such protocol, each sender (Alice, Bob) can superimpose random numbers for QKD on classical information by taking advantage of the same weak coherent pulse and an untrusted third party (Charlie) decodes it by using the same coherent detectors, which could be appealing in practice due to that multiple purposes can be realized by employing only single communication system. What is more, the proposed protocol is MDI, which is immune to all possible side-channel attacks on practical detectors. Security results illustrate that the simultaneous MDI-CVQKD protocol can secure against arbitrary collective attacks. In addition, we employ phase-sensitive optical amplifiers to compensate the imperfection existing in practical detectors. With this technology, even common practical detectors can be used for detection through choosing a suitable optical amplifier gain. Furthermore, we also take the finite-size effect into consideration and show that the whole raw keys can be taken advantage of to generate the final secret key instead of sacrificing part of them for parameter estimation. Therefore, an enhanced performance of the simultaneous MDI-CVQKD protocol can be obtained in finite-size regime.
Remote distribution of secret keys is a challenging task in quantum cryptography. A significant step in this direction is the measurement-device independence quantum key distribution (MDI-QKD). For two remote (or independent) parties Alice and Bob who initially no share secret information, the MDI-QKD enables them to share a secret key by the measurement of an untrusted relay. Unfortunately, the MDI-QKD yields the assumption that the devices of both Alice and Bob have to be trusted. Here, we show that QKD between two independent parties can also be realized even if the device of either Alice or Bob is untrusted. We tackle the problem by resorting to the recently developed one-sided device-independent QKD protocol. We derive conditions on the extracted secret key to be unconditionally secure against arbitary attacks in the limit of asymptotic keys. In the presence of Gaussian states and measurements, we theoretically demonstrate our scheme is feasible, which could be an attractive candidate for long distance secret communication.
We study the impact of the finite-size effect on the continuous-variable measurement-device-independent quantum key distribution (CV-MDI QKD) protocol, mainly considering the finite-size effect on the parameter estimation procedure. The central-limit theorem and maximum likelihood estimation theorem are used to estimate the parameters. We also analyze the relationship between the number of exchanged signals and the optimal modulation variance in the protocol. It is proved that when Charlie's position is close to Bob, the CV-MDI QKD protocol has the farthest transmission distance in the finite-size scenario. Finally, we discuss the impact of finite-size effects related to the practical detection in the CV-MDI QKD protocol. The overall results indicate that the finite-size effect has a great influence on the secret-key rate of the CV-MDI QKD protocol and should not be ignored.
The security of practical quantum key distribution (QKD) systems is fundamentally constrained by vulnerabilities of single-photon detectors. Measurement-device-independent quantum key distribution (MDI-QKD) was proposed to remove this limitation by allowing all measurements to be performed by a completely untrusted party, under the assumption that the measurement node can be treated as adversarial but does not compromise the security guarantees of the protocol. Here we show that this assumption is insufficient under realistic adversarial control of the measurement device. We present an attack in which an adversary exploits active control of the measurement node (Charlie) to obtain significant information about the secret key. The attack enables recovery of up to 70\% of the sifted key while introducing only 5.6\% quantum bit error rate. Unlike previously reported attacks targeting specific implementations of MDI-QKD, our results demonstrate a limitation of the standard security model underlying the protocol. These findings indicate that additional constraints on the measurement-device independence assumption, or refined security analyses incorporating stronger adversarial capabilities, are required to ensure the security of MDI-QKD in realistic scenarios.
Continuous-variable measurement-device-independent quantum key distribution (CV-MDI-QKD) is immune to all detector side channel attacks, however its security requires trusted sources. We investigate the effects of source intensity errors, the most crucial source error, on the security of CV-MDI-QKD protocol with Gaussian-modulated coherent states. We establish a general source intensity errors model and derive the secret key rate based on different assumptions on the abilities of legal parties Alice and Bob. To avoid the adverse effects of the sources' intensity errors on CV-MDI-QKD, we present different data-processing schemes. We also assess the security of the protocol against collective Gaussian attacks in the finite-size scenario with composable security. Taking source intensity errors into consideration, we achieve improved security compared to previous demonstrations. Our results will provide a useful reference for practical implementations of CV-MDI-QKD.
We study the impact of finite-size effects on the key rate of continuous-variable (CV) measurement-device-independent (MDI) quantum key distribution (QKD), considering two-mode Gaussian attacks. Inspired by the parameter estimation technique developed in by Ruppert et al. [Phys. Rev. A 90, 062310 (2014)], we adapt it to study CV-MDI-QKD and, assuming realistic experimental conditions, we analyze the impact of finite-size effects on the key rate. We find that the performance of the protocol approaches the ideal one, increasing the block size, and, most importantly, that blocks between 106{10}^{6}106 and 109{10}^{9}109 data points may provide key rates $\ensuremath{\sim}{10}^{\ensuremath{-}2}$ bit/use over metropolitan distances.