We present a security analysis of conference key agreement (CKA) in the most adversarial model of device independence (DI). Our protocol can be implemented by any experimental setup that is capable of performing Bell tests [specifically, the Mermin-Ardehali-Belinskii-Klyshko (MABK) inequality], and security can in principle be obtained for any violation of the MABK inequality that detects genuine multipartite entanglement among the
N parties involved in the protocol. As our main tool, we derive a direct physical connection between the
N-partite MABK inequality and the Clauser-Horne-Shimony-Holt (CHSH) inequality, showing that certain violations of the MABK inequality correspond to a violation of the CHSH inequality between one of the parties and the other $N\ensuremath{-}1$. We compare the asymptotic key rate for device-independent conference key agreement (DICKA) to the case where the parties use $N\ensuremath{-}1$ device-independent quantum key distribution protocols in order to generate a common key. We show that for some regime of noise the DICKA protocol leads to better rates.
Device-independent conference key agreement (DI-CKA) enables
N>2 distant parties to establish a common secret key without detailed characterization of the source or measurement devices. Many existing protocols rely on full-body Bell correlators, whose measurement can be demanding for a large number of parties. Here, we show that two-body correlators alone suffice for DI-CKA using balanced Dicke states for every even
N≥4. We construct two-body Bell inequalities and derive a tight analytical lower bound on the conditional von Neumann entropy by comparing their Bell operators with those of asymmetric Clauser-Horne-Shimony-Holt inequalities. In the ideal setting, certified key rates can approach
1−h[(N−2)/(4(N−1))], where
h is the binary entropy function. This rate remains bounded away from zero as
N→∞, tending to
1−h(1/4)≈0.189 bits per key-generation round. We show that the honest implementation of our protocol is invariant under collective phase noise. Moreover, a complementary full-body Bell construction certifies positive conference-key rates from correlations arbitrarily close to the local set.
Device-independent quantum key distribution (DI-QKD) enables two remote parties to share an information-theoretically secure key without any assumptions on the inner workings of the devices used. Device-independent conference key agreement (DI-CKA) is multipartite DI-QKD in which more than two parties share a common secure key. The performance of DI-CKA, however, is strictly limited because of its susceptibility to losses due to, e.g., imperfect detection efficiency and channel transmission. Here, we propose a DI-CKA protocol which reduces this limitation by using a heralding scheme to distribute multipartite entanglement. We analyze key rates of our protocol for two different measurement scenarios, and we show that our protocol outperforms a previous DI-CKA protocol even with an experimentally feasible measurement.
In this work, we develop upper bounds on key rates for device-independent quantum key distribution (DI-QKD) protocols and devices. We study the reduced
cc-squashed entanglement and show that it is a convex functional. As a result, we show that the convex hull of the currently known bounds is a tighter upper bound on the device-independent key rates of the standard Clauser-Horne-Shimony-Holt (CHSH)-based protocol. We further provide tighter bounds for DI-QKD key rates achievable by any protocol applied to the CHSH-based device. This bound is based on reduced relative entropy of entanglement optimized over decompositions into local and nonlocal parts. In the dynamical scenario of quantum channels, we obtain upper bounds for device-independent private capacity for the CHSH-based protocols. We show that the device-independent private capacity for the CHSH-based protocols on depolarizing and erasure channels is limited by the secret key capacity of dephasing channels.
Device-independent conference key agreement (DI-CKA) lets a group of parties establish a shared secret key from untrusted quantum devices, with security certified by non-locality. Existing DI-CKA protocols are each built around a single Bell inequality, typically a multiparty variant of the CHSH game. DI-QKD protocols, in contrast, have been built from a much richer landscape of non-local games, and it has remained unclear how to carry this landscape over to the conference setting. We introduce $\textit{Parity-$G$ games}$, which extend any two-player game
G to
N players, for every
N, provided
G has an optimal strategy in which one player measures Pauli observables. The extension preserves the quantum and classical values of
G, and the security of the resulting
N-party protocol follows from an analysis of the two-player game alone. Our framework recovers the Parity-CHSH game of Ribeiro, Murta and Wehner (Phys. Rev. A, 2018) as a special case. Applied to the Mermin--Peres Magic Square Game, it yields a new
N-player pseudo-telepathy game, the
Parity Magic Square Game, which ideal devices win in every round. We use it to construct the
first DI-CKA protocol based on a pseudo-telepathy game. We prove the protocol secure against coherent attacks. It produces up to two key bits per round, and at low noise its key rate exceeds that of the DI-CKA protocol based on the Parity-CHSH game.
We initiate a systematic study to provide upper bounds on device-independent key, secure against a non-signaling adversary (NSDI), distilled by a wide class of operations, currently used in both quantum and non-signaling device-independent protocols. These operations consist of a direct measurements on the devices followed by Local Operations and Public Communication (MDLOPC). We employ the idea of squashing on the secrecy monotones, which provide upper bounds on the key rate in secret key agreement (SKA) scenario, and show that secrecy monotones are the upper bounds on NSDI key. As an important instance, an upper bound on NSDI key rate called squashed non-locality, has been constructed. It exhibits several important properties, including convexity, monotonicity, additivity on tensor products, and asymptotic continuity. Using this bound, we identify numerically a domain of two binary inputs and two binary outputs non-local devices for which the non-locality is zero, and therefore one can not distil key from them via MDLOPC operations. These are mixtures of Popescu-Rohrlich (PR) and anti-PR box with the weight of PR box less than
80%. This example confirms the intuition that non-locality need not imply secrecy in the non-signaling scenario. The approach is general, describing how to construct other tighter yet possibly less computable upper bounds. Our technique for obtaining upper bounds is based on the non-signaling analog of quantum purification: the complete extension, which yields equivalent security conditions as previously known in the literature.