Agile and Versatile Quantum Communication: Signatures and Secrets
Stefan Richter, Matthew Thornton, Imran Khan, Hannah Scott, Kevin Jaksch, Ulrich Vogl, Birgit Stiller, Gerd Leuchs, Christoph Marquardt, Natalia Korolkova
Agile cryptography allows for a resource-efficient swap of a cryptographic core in case the security of an underlying classical cryptographic algorithm becomes compromised.Conversely, versatile cryptography allows the user to switch the cryptographic task without requiring any knowledge of its inner workings.In this paper, we suggest how these related principles can be applied to the field of quantum cryptography by explicitly demonstrating two quantum cryptographic protocols, quantum digital signatures (QDS) and quantum secret sharing (QSS), on the same hardware sender and receiver platform.Crucially, the protocols differ only in their classical postprocessing.The system is also suitable for quantum key distribution (QKD) and is highly compatible with deployed telecommunication infrastructures, since it uses standard quadrature phase-shift keying encoding and heterodyne detection.For the first time, QDS protocols are modified to allow for postselection at the receiver, enhancing protocol performance.The cryptographic primitives QDS and QSS are inherently multipartite, and we prove that they are secure not only when a player internal to the task is dishonest, but also when (external) eavesdropping on the quantum channel is allowed.In our first proof-of-principle demonstration of an agile and versatile quantum communication system, the quantum states are distributed at GHz rates.A 1-bit message may be securely signed using our QDS protocols in less than 0.05 ms over a 2-km fiber link and in less than 0.2 s over a 20-km fiber link.To our knowledge, this also marks the first demonstration of a continuous-variable direct QSS protocol.
Agile cryptography allows for a resource-efficient swap of a cryptographic core in case the security of an underlying classical cryptographic algorithm becomes compromised.Conversely, versatile cryptography allows the user to switch the cryptographic task without requiring any knowledge of its inner workings.In this paper, we suggest how these related principles can be applied to the field of quantum cryptography by explicitly demonstrating two quantum cryptographic protocols, quantum digital signatures (QDS) and quantum secret sharing (QSS), on the same hardware sender and receiver platform.Crucially, the protocols differ only in their classical postprocessing.The system is also suitable for quantum key distribution (QKD) and is highly compatible with deployed telecommunication infrastructures, since it uses standard quadrature phase-shift keying encoding and heterodyne detection.For the first time, QDS protocols are modified to allow for postselection at the receiver, enhancing protocol performance.The cryptographic primitives QDS and QSS are inherently multipartite, and we prove that they are secure not only when a player internal to the task is dishonest, but also when (external) eavesdropping on the quantum channel is allowed.In our first proof-of-principle demonstration of an agile and versatile quantum communication system, the quantum states are distributed at GHz rates.A 1-bit message may be securely signed using our QDS protocols in less than 0.05 ms over a 2-km fiber link and in less than 0.2 s over a 20-km fiber link.To our knowledge, this also marks the first demonstration of a continuous-variable direct QSS protocol.
Agile cryptography allows for a resource-efficient swap of a cryptographic core in case the security of an underlying classical cryptographic algorithm becomes compromised. Conversely, versatile cryptography allows the user to switch the cryptographic task without requiring any knowledge of its inner workings. In this paper, we suggest how these related principles can be applied to the field of quantum cryptography by explicitly demonstrating two quantum cryptographic protocols, quantum digital signatures (QDS) and quantum secret sharing (QSS), on the same hardware sender and receiver platform. Crucially, the protocols differ only in their classical postprocessing. The system is also suitable for quantum key distribution (QKD) and is highly compatible with deployed telecommunication infrastructures, since it uses standard quadrature phase-shift keying encoding and heterodyne detection. For the first time, QDS protocols are modified to allow for postselection at the receiver, enhancing protocol performance. The cryptographic primitives QDS and QSS are inherently multipartite, and we prove that they are secure not only when a player internal to the task is dishonest, but also when (external) eavesdropping on the quantum channel is allowed. In our first proof-of-principle demonstration of an agile and versatile quantum communication system, the quantum states are distributed at GHz rates. A 1-bit message may be securely signed using our QDS protocols in less than 0.05 ms over a 2-km fiber link and in less than 0.2 s over a 20-km fiber link. To our knowledge, this also marks the first demonstration of a continuous-variable direct QSS protocol.
In the first half of this Thesis, we introduce a framework of “quantum cryptographic agility,” which allows for a resource-efficient swap of an underlying cryptographic protocol. Specifically, we introduce several schemes which perform the tasks of Digital Signatures and Secret Sharing. Our first achievement is an investigation of Quantum Digital Signatures (QDS) over a continuous-variables platform, consisting of phase-encoded coherent states and heterodyne phase detection. QDS allows for secure authentication of a classical message, while guaranteeing message transferability. For the first time, we prove security of CV QDS in the presence of an eavesdropper on the quantum channels. We then introduce a continuous variable (CV) Quantum Secret Sharing (QSS) protocol. Our security proof allows for classical information to be split and shared between multiple potentially dishonest recipients, while retaining security against collective beamsplitter and entangling-cloner attacks. In the last chapter of this half, we introduce another QDS scheme which runs over identical hardware setup to our QSS protocol. We analyse experimental data in which quantum coherent states were distributed at a rate of 1 GHz, which for QDS allows us to securely sign a message in less than 0.05 ms. In the second half of this Thesis we suggest and discuss a deterministic source of nonclassical light, which we call “PhoG”. Our source is based on the coherent diffusive photonics, relying on both coherent and dissipative evolution of the quantum state, and may be realised in an array of dissipatively-coupled laser-inscribed waveguides in a χ⁽³⁾ glass. We analyse the PhoG device with several analytical and numerical models and demonstrate that a coherent state input leads to a bright output state with strong photon-number squeezing. With minor reconfiguration our system can generate entanglement between spatially separated modes via a process analogous to four-wave mixing.
Quantum Key Distribution (QKD) provides information-theoretic security guaranteed by the laws of physics rather than computational hardness -- making it the primary tool for quantum-secure communication against harvest-now-decrypt-later quantum threats. This paper proposes the Quantum Cryptographic Protocol Design and Analysis (QCPDA) framework, evaluating six quantum cryptographic protocols -- BB84, E91, MDI-QKD, Twin-Field QKD (TF-QKD), Quantum Digital Signatures (QDS), and Quantum Secret Sharing (QSS) -- across five dimensions: unconditional security, key generation rate, maximum secure distance, noise tolerance, and implementation complexity. TF-QKD achieves the longest secure distance (605 km on ultra-low-loss fibre) but lowest key rate. MDI-QKD eliminates all detector side-channels at moderate key rates. BB84 achieves the highest composite QCPDA score (8.24) due to commercial maturity. QCPDA provides a protocol selection guide mapping deployment scenarios (metropolitan, intercity, long-haul, multi-party) to optimal protocols, and discusses the complementary roles of QKD and NIST post-quantum cryptography standards for quantum-secure infrastructure.
Quantum digital signatures (QDSs), generating correlated bit strings among three remote parties for signatures through quantum law, can guarantee nonrepudiation, authenticity, and integrity of messages. Recently, a one-time universal-hashing QDS framework, exploiting the quantum asymmetric encryption and universal hash functions, has been proposed to significantly improve the signature rate and ensure unconditional security by directly signing the hash value of long messages. However, similar to quantum key distribution, this framework utilizes keys with perfect secrecy by performing privacy amplification that introduces cumbersome matrix operations, thereby consuming large computational resources, causing delays, and increasing failure probability. Here, we prove that, different from private communication, imperfect quantum keys with partial information leakage can be used for digital signatures and authentication without compromising the security while having eight orders of magnitude improvement on signature rate for signing a megabit message compared with conventional single-bit schemes. This study significantly reduces the delay for data postprocessing and is compatible with any quantum key generation protocols. In our simulation, taking two-photon twin-field key generation protocol as an example, QDS can be practically implemented over a fiber distance of 650 km between the signer and receiver. For the first time, this study offers a cryptographic application of quantum keys with imperfect secrecy and paves a way for the practical and agile implementation of digital signatures in a future quantum network.
Abstract A quantum digital signature (QDS) is guaranteed by the laws of quantum physics and can provide unconditional security to authenticate classical messages. Previous QDS protocols that shared secret keys could be realized using discrete-variable quantum key distribution (DV-QKD), for which the DV-QKD relied on extreme requirements like single-photon detection and extremely weak pulses of light. QDS protocols are mainly focused on how to sign a one-bit message rather than multi-bit messages. In this paper, we present a continuous-variable quantum digital signature (CV-QDS) protocol for signing multi-bit messages. The CV-QDS protocol has better compatibility with existing communication systems and the encoding strategy for multi-bit messages is simpler than before. We hope the continuous-variable protocol could further improve the performance of QDS.
Quantum cryptography uses the quantum properties of individual photons to provide two or more users with means to communicate securely and efficiently. Specifically, quantum key distribution (QKD) focuses on the secure communication between two distant parties and guarantees the security of a transmitted message between them. Although QKD is the most mature application of quantum cryptography, applications of quantum mechanics in communication systems are not limited to QKD and other cryptographic protocols can be implemented as well. This thesis focuses on the implementation of quantum cryptographic systems over deployed fiber. A first QKD system was built and used to demonstrate the BB84 protocol over deployed fiber between the University of Calgary and SAIT. The system implemented a novel tool called quantum frames that allow for the quantum signals to be routed, for clock synchronization, and for channel stabilization in a network scenario. The same system was used to examine the scalability of the secret key generation rate in different steps of the process in order to detect potential bottlenecks for key generation rate of high speed systems. A second QKD system was developed to demonstrate the measurement-device independent QKD protocol. The system worked over deployed fiber between the University of Calgary, SAIT, and Foothills Hospital in the City of Calgary. The advantage of the measurement-device independent QKD protocol over previous QKD protocols is that it eliminates the possibility of side-channel attacks that target single photon detectors used in QKD systems. This demonstration also involved the first demonstration of a Bell state measurement over deployed fiber. Bell state measurements were further studied by using novel single photon detectors, which allowed demonstrating a highly efficient Bell measurement. Finally, a cryptographic protocol known as private queries was demonstrated between the University of Calgary and SAIT. Quantum private queries were demonstrated for the first time over deployed fiber by developing and implementing an error correction scheme to make the protocol noise and loss tolerant.