Semiquantum key distribution (SQKD) allows two parties (Alice and Bob) to create a shared secret key, even if one of these parties (say, Alice) is classical. However, most SQKD protocols suffer from severe practical security problems when implemented using photons. The recently developed “Mirror protocol” [1] is an experimentally feasible SQKD protocol overcoming those drawbacks. The Mirror protocol was proven robust (namely, it was proven secure against a limited class of attacks including all noiseless attacks), but its security in case some noise is allowed (natural or due to eavesdropping) has not been proved yet. Here we prove security of the Mirror protocol against a wide class of quantum attacks (the “collective attacks”), and we evaluate the allowed noise threshold and the resulting key rate.
Semiquantum key distribution (SQKD) allows two parties (Alice and Bob) to create a shared secret key, even if one of these parties (say, Alice) is classical. However, most SQKD protocols suffer from severe practical security problems when implemented using photons. The recently developed “Mirror protocol” [1] is an experimentally feasible SQKD protocol overcoming those drawbacks. The Mirror protocol was proven robust (namely, it was proven secure against a limited class of attacks including all noiseless attacks), but its security in case some noise is allowed (natural or due to eavesdropping) has not been proved yet. Here we prove security of the Mirror protocol against a wide class of quantum attacks (the “collective attacks”), and we evaluate the allowed noise threshold and the resulting key rate.
A semiquantum key distribution (SQKD) protocol makes it possible for a quantum party and a classical party to generate a secret shared key. However, many existing SQKD protocols are not experimentally feasible in a secure way using current technology. An experimentally feasible SQKD protocol, "classical Alice with a controllable mirror" (the "Mirror protocol"), has recently been presented and proved completely robust, but it is more complicated than other SQKD protocols. Here we prove a simpler variant of the Mirror protocol (the "simplified Mirror protocol") to be completely non-robust by presenting two possible attacks against it. Our results show that the complexity of the Mirror protocol is at least partly necessary for achieving robustness.
The counter-intuitive features of quantum mechanics make it possible to solve problems and perform tasks that are beyond the abilities of non-quantum (classical) computers and communication devices. The field of quantum information processing studies how we can achieve such improvements by representing information as quantum states.One of the early achievements of quantum information processing is the development of quantum key distribution (QKD). QKD protocols allow two participants (Alice and Bob) to achieve the classically-impossible task of generating a secret shared key even if their adversary is computationally unlimited.Unfortunately, the security promises of QKD are true only in theory; practical implementations of QKD deviate from the theoretical protocols, and many of these deviations give rise to practical attacks. In this research thesis, we study the security properties of various QKD protocols in many practical settings:First, we study practical security of semiquantum key distribution (SQKD) protocols, where either Alice or Bob is non-quantum (classical). Following practical security problems in previous SQKD protocols, we suggest a new SQKD protocol (the "Mirror protocol") which can be securely implemented, and we prove it robust and secure against a wide range of attacks (the "uniform collective attacks").Then, we study "composable security" of the first QKD protocol created by Bennett and Brassard (BB84). BB84 has its unconditional security proved against adversaries performing the most general attacks in a theoretical (idealized) setting; however, some security approaches do not prove "composable security", which requires the secret key to remain secret even when Alice and Bob actually use it for cryptographic purposes. We generalize an algebraic security approach for BB84, making it prove composable security of BB84 (and many variants of BB84) against the most general attacks.Finally, we analyze an important practical attack (named "Bright Illumination"), showing how it can be modeled as a theoretical "Reversed-Space" attack.Overall, all results aim to enhance our understanding on how to bridge the gap between theory and practice in various sub-fields of QKD, and they may help solve a major open problem in the field of QKD: constructing a realistic QKD implementation that can be proved truly and unconditionally secure against any possible attack.
Quantum key distribution (QKD) protocols make it possible for two quantum parties to generate a secret shared key. Semiquantum key distribution (SQKD) protocols, such as ``QKD with classical Bob'' and ``QKD with classical Alice'' (that have both been proven robust), achieve this goal even if one of the parties is classical. However, existing SQKD protocols are not experimentally feasible with current technology. Here we suggest a protocol, ``Classical Alice with a controllable mirror,'' that can be experimentally implemented with current technology (using four-level systems instead of qubits), and we prove it to be robust.
Semiquantum key distribution protocols are designed to allow two parties to establish a shared secret key, secure against an all-powerful adversary, even when one of the users is restricted to measuring and preparing quantum states in one single basis. While interesting from a theoretical standpoint, these protocols have the disadvantage that a two-way quantum communication channel is necessary which generally limits their theoretical efficiency and noise tolerance. In this paper, we construct a semiquantum key distribution (SQKD) protocol which actually takes advantage of this necessary two-way channel, and, after performing an information theoretic security analysis against collective attacks, we show it is able to tolerate a channel noise level higher than any prior SQKD protocol to date. We also compare the noise tolerance of our protocol to other two-way fully quantum protocols, along with BB84 with classical advantage distillation. We also comment on some practical issues involving semiquantum key distribution (in particular, concerning the potential complexity in physical implementation of our protocol as compared with other standard QKD protocols). Finally, we develop techniques that can be applied to the security analysis of other (S)QKD protocols reliant on a two-way quantum communication channel.
Abstract In this paper, a novel semiquantum key distribution (SQKD) protocol is proposed by using Bell state, where quantum Alice can sharesecret bits with classical Bob via quantum channel. Classical Bob is required to measure particles with thebasis, produce fresh particles within thebasis and send particles via quantum channel. Security analysis turns out that this protocol is immune to various attacks launched by the outside eavesdropper. Compared with present SQKD protocols using Bell states without a third party, on one hand, this protocol has the highest qubit efficiency; and on the other hand, the reflecting operations of the classical user in this protocol contribute to the generation of final shared key.
Abstract Semiquantum key distribution (SQKD) facilitates the establishment of secure keys even when one user (designated as the classical user) is constrained to performing quantum state preparation and measurement only within a fixed computational basis. From a resource-theoretic perspective, this approach presents both novelty and theoretical significance. Recently, a novel SQKD protocol based on Bell states, where the classical user’s REFLECT operations directly contribute to the generation of the final shared key was proposed [ Laser Physics Letters , 21 (9):095201, 2024]. However, our analysis reveals that this protocol is vulnerable to double CNOT attacks, posing security risks. To address this, we propose an improved SQKD protocol that maintains resistance to double CNOT attacks while preserving the classical user’s REFLECT operations as a functional component for key generation. Notably, we rigorously prove the unconditional security of the improved protocol and derive a maximum allowable error rate of 8.92% in depolarizing channels. This work serves two purposes: (1) it alerts SQKD protocol designers to the identified security vulnerability, and (2) it provides a foundational reference for establishing unconditional security proofs in SQKD protocols where REFLECT operations contribute to key generation.