Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2408.17349 · Quantum

Phase error rate estimation in QKD with imperfect detectors

Devashish Tupkary, Shlok Nahar, Pulkit Sinha, Norbert Lütkenhaus

Published Dec 11, 2025• 11 citations
arXivHTMLPDF

Abstract

We present a finite-size security proof of the decoy-state BB84 QKD protocol against coherent attacks, using entropic uncertainty relations, for imperfect detectors. We apply this result to the case of detectors with imperfectly characterized basis-efficiency mismatch. Our proof works by obtaining a suitable bound on the phase error rate, without requiring any new modifications to the protocol steps or hardware. It is applicable to imperfectly characterized detectors, and only requires the maximum relative difference in detection efficiencies and dark count rates of the detectors to be characterized. Moreover, our proof allows Eve to choose detector efficiencies and dark count rates in their allowed ranges in each round, thereby addressing an important problem of detector side channels. We prove security in the variable-length framework, where users are allowed to adaptively determine the length of key to be produced, and number of bits to be used for error-correction, based on observations made during the protocol. We quantitatively demonstrate the effect of basis-efficiency mismatch by applying our results to the decoy-state BB84 protocol.

DOI
10.22331/q-2025-12-11-1937

Related papers

Phase error estimation for passive detection setups with imperfections and memory effects

Wang, Zhiyao, Devashish Tupkary, Shlok Nahar

We develop a generic framework to bound the phase error rate for quantum key distribution protocols using passive detection setups with imperfections and memory effects. This framework can be used in proof techniques based on the entropic uncertainty relation or phase error correction, to prove security in the finite-size regime against coherent attacks. Our framework can incorporate on-the-fly announcements of click/no-click outcomes on Bob's side. In the case of imperfections without memory effects, it can be combined with proofs addressing source imperfections in a modular manner. We apply our framework to compute key rates for the decoy-state BB84 protocol, when the beam splitting ratio, the detection efficiency, and dark counts of the detectors are only known to be within some ranges. We also compute key rates in the presence of memory effects in the detectors. In this case, our results allow for protocols to be run at higher repetition rates, resulting in a significant improvement in the secure key generation rate.

arXiv:2508.21486•Aug 29, 2025•0 citations

Security of quantum key distribution with source and detector imperfections through phase-error estimation

Guillermo Currás-Lorenzo, Margarida Pereira, Shlok Nahar +1 more

Quantum key distribution promises information-theoretic security, but practical implementations face vulnerabilities due to device imperfections. Existing security proofs typically address source and detector imperfections separately and cannot be directly combined, while the few attempts to handle both simultaneously have assumed idealized scenarios with infinitely many protocol rounds, which is insufficient to certify the security of real-world systems. Here, we close this gap by introducing a modular lifting theorem that extends any (present or future) phase-error-based security proof for active-basis-choice BB84-type protocols to incorporate detector efficiency mismatches. By applying this theorem to a state-of-the-art analysis for source imperfections, we obtain the first finite-key security proof against general coherent attacks that simultaneously addresses both source and detector imperfections.

arXiv:2507.03549•npj Quantum Information•May 18, 2026•3 citations

Security of decoy-state quantum key distribution with correlated bit-and-basis encoders

Guillermo Currás-Lorenzo, Margarida Pereira, Alessandro Marcomini +2 more

Practical quantum key distribution (QKD) modulators inevitably introduce correlations, causing the state emitted in a given round to depend on the setting choices made in previous rounds. These correlations break the round-by-round independence structure on which many widely used security proof techniques rely, leaving a significant gap between available theoretical guarantees and the reality of practical implementations. In this work, we develop a fully analytical finite-key security proof for decoy-state BB84 against general coherent attacks that rigorously incorporates correlations introduced by Alice's bit-and-basis encoder, while requiring only partial characterization of such correlations. Crucially, it does so without requiring the round partitioning of the data used for phase-error estimation introduced in previous works, showing that this technique is not indispensable for dealing with correlated encoders, and resulting in improved finite-key performance. Moreover, we also analyze the case of ideal single-photon sources, and our results reveal a counterintuitive effect: in the presence of strong encoding correlations, decoy-state BB84 can outperform single-photon implementations.

quant-pharXiv:2605.11767•May 13, 2026•0 citations

The finite key effect of side-channel-secure quantum key distribution beyond post-selection technique

Cong Jiang, Zong-Wen Yu, Xiang-Bin Wang

By applying the framework of entropic uncertainty relation (EUR) and the Quantum Leftover Hash Lemma (QLHL), we introduce a security-proof method for variable-length side-channel-secure (SCS) quantum key distribution (QKD) against coherent attacks. This method reframes composable security as a statistical fluctuation problem of phase errors, enabling direct proofs against coherent attacks through observables and virtual observables. It yields tight key rates for the SCS protocol and reduces pulse requirements by over two orders of magnitude compared to prior works that employ the post-selection technique. {Utilizing the characteristic of the SCS protocol that it has no untagged-bit bit-flip errors, we prove that the secure key length for the SCS protocol can be determined after Cascade error correction, using its actual parity disclosures. We also explain how the same argument extends to protocols with compatible bit-error-pattern and phase-error measurements.} We further identify sufficient conditions under which the final key length may be determined after error correction in a broader class of QKD protocols. Under the framework of EUR and QLHL, we clarify the applicability of several commonly used concentration bounds to variable-length QKD and the appropriate manner of their implementation. This work enhances the practical value of the SCS protocol and clarifies the security justification of key-rate formulas used in practical variable-length QKD implementations.

quant-pharXiv:2607.17465•Jul 21, 2026•0 citations

A consolidated and accessible security proof for finite-size decoy-state quantum key distribution

Jerome Wiesemann, Jan Krause, Devashish Tupkary +3 more

In recent years, quantum key distribution (QKD) has evolved from a scientific research field to a commercially available security solution, supported by mathematically formulated security proofs. However, since the knowledge required for a full understanding of a security proof is scattered across numerous publications, it has proven difficult to gain a comprehensive understanding of all steps involved in the process and their limitations without considerable effort and attention to detail. Our paper aims to address this issue by providing a rigorous and comprehensive security proof for the finite-size 1-decoy and 2-decoy BB84 protocols against coherent attacks within Renner's entropic uncertainty relation framework. We resolve important technical flaws found in previous works regarding the fixed-length treatment of protocols and the careful handling of acceptance testing. To this end, we provide various technical arguments, including an analysis accounting for the important distinction of the 1-decoy protocol where statistics are computed after error correction, along with a slight improvement of the secure-key length. We also explicitly clarify the aspect of conditioning on events, addressing a technical detail often overlooked and essential for rigorous proofs. We extensively consolidate and unify concepts from many works, thoroughly discussing the underlying assumptions and resolving technical inconsistencies. Therefore, our contribution represents a significant advancement towards a broader and deeper understanding of QKD security proofs.

arXiv:2405.16578•Quantum•Mar 23, 2026•5 citations

Phase-error estimation for quantum key distribution with leaky receivers

Álvaro Navarrete, Margarida Pereira, Guillermo Currás-Lorenzo +3 more

Practical quantum key distribution (QKD) receivers may leak information about their measurement outcomes and settings to the channel (e.g., through detector backflashes or back-reflected Trojan-horse light) that could compromise the protocol's security. Here we present a simple finite-key security proof based on phase-error estimation for prepare-and-measure QKD in the presence of either a priori information leakage about the basis choices and/or a posteriori information leakage about the measurement outcomes. The proof requires only a bound on the distinguishability of the side-channel states. Furthermore, the analysis is modular and compatible with existing security proofs that address detector and source imperfections, making it applicable to a wide range of practical QKD implementations.

quant-pharXiv:2608.09674•Aug 11, 2026•0 citations
We present a finite-size security proof of the decoy-state BB84 QKD protocol against coherent attacks, using entropic uncertainty relations, for imperfect detectors. We apply this result to the case of detectors with imperfectly characterized basis-efficiency mismatch. Our proof works by obtaining a suitable bound on the phase error rate, without requiring any new modifications to the protocol steps or hardware. It is applicable to imperfectly characterized detectors, and only requires the maximum relative difference in detection efficiencies and dark count rates of the detectors to be characterized. Moreover, our proof allows Eve to choose detector efficiencies and dark count rates in their allowed ranges in each round, thereby addressing an important problem of detector side channels. We prove security in the variable-length framework, where users are allowed to adaptively determine the length of key to be produced, and number of bits to be used for error-correction, based on observations made during the protocol. We quantitatively demonstrate the effect of basis-efficiency mismatch by applying our results to the decoy-state BB84 protocol.
We develop a generic framework to bound the phase error rate for quantum key distribution protocols using passive detection setups with imperfections and memory effects. This framework can be used in proof techniques based on the entropic uncertainty relation or phase error correction, to prove security in the finite-size regime against coherent attacks. Our framework can incorporate on-the-fly announcements of click/no-click outcomes on Bob's side. In the case of imperfections without memory effects, it can be combined with proofs addressing source imperfections in a modular manner. We apply our framework to compute key rates for the decoy-state BB84 protocol, when the beam splitting ratio, the detection efficiency, and dark counts of the detectors are only known to be within some ranges. We also compute key rates in the presence of memory effects in the detectors. In this case, our results allow for protocols to be run at higher repetition rates, resulting in a significant improvement in the secure key generation rate.
Quantum key distribution promises information-theoretic security, but practical implementations face vulnerabilities due to device imperfections. Existing security proofs typically address source and detector imperfections separately and cannot be directly combined, while the few attempts to handle both simultaneously have assumed idealized scenarios with infinitely many protocol rounds, which is insufficient to certify the security of real-world systems. Here, we close this gap by introducing a modular lifting theorem that extends any (present or future) phase-error-based security proof for active-basis-choice BB84-type protocols to incorporate detector efficiency mismatches. By applying this theorem to a state-of-the-art analysis for source imperfections, we obtain the first finite-key security proof against general coherent attacks that simultaneously addresses both source and detector imperfections.
Practical quantum key distribution (QKD) modulators inevitably introduce correlations, causing the state emitted in a given round to depend on the setting choices made in previous rounds. These correlations break the round-by-round independence structure on which many widely used security proof techniques rely, leaving a significant gap between available theoretical guarantees and the reality of practical implementations. In this work, we develop a fully analytical finite-key security proof for decoy-state BB84 against general coherent attacks that rigorously incorporates correlations introduced by Alice's bit-and-basis encoder, while requiring only partial characterization of such correlations. Crucially, it does so without requiring the round partitioning of the data used for phase-error estimation introduced in previous works, showing that this technique is not indispensable for dealing with correlated encoders, and resulting in improved finite-key performance. Moreover, we also analyze the case of ideal single-photon sources, and our results reveal a counterintuitive effect: in the presence of strong encoding correlations, decoy-state BB84 can outperform single-photon implementations.
By applying the framework of entropic uncertainty relation (EUR) and the Quantum Leftover Hash Lemma (QLHL), we introduce a security-proof method for variable-length side-channel-secure (SCS) quantum key distribution (QKD) against coherent attacks. This method reframes composable security as a statistical fluctuation problem of phase errors, enabling direct proofs against coherent attacks through observables and virtual observables. It yields tight key rates for the SCS protocol and reduces pulse requirements by over two orders of magnitude compared to prior works that employ the post-selection technique. {Utilizing the characteristic of the SCS protocol that it has no untagged-bit bit-flip errors, we prove that the secure key length for the SCS protocol can be determined after Cascade error correction, using its actual parity disclosures. We also explain how the same argument extends to protocols with compatible bit-error-pattern and phase-error measurements.} We further identify sufficient conditions under which the final key length may be determined after error correction in a broader class of QKD protocols. Under the framework of EUR and QLHL, we clarify the applicability of several commonly used concentration bounds to variable-length QKD and the appropriate manner of their implementation. This work enhances the practical value of the SCS protocol and clarifies the security justification of key-rate formulas used in practical variable-length QKD implementations.
In recent years, quantum key distribution (QKD) has evolved from a scientific research field to a commercially available security solution, supported by mathematically formulated security proofs. However, since the knowledge required for a full understanding of a security proof is scattered across numerous publications, it has proven difficult to gain a comprehensive understanding of all steps involved in the process and their limitations without considerable effort and attention to detail. Our paper aims to address this issue by providing a rigorous and comprehensive security proof for the finite-size 1-decoy and 2-decoy BB84 protocols against coherent attacks within Renner's entropic uncertainty relation framework. We resolve important technical flaws found in previous works regarding the fixed-length treatment of protocols and the careful handling of acceptance testing. To this end, we provide various technical arguments, including an analysis accounting for the important distinction of the 1-decoy protocol where statistics are computed after error correction, along with a slight improvement of the secure-key length. We also explicitly clarify the aspect of conditioning on events, addressing a technical detail often overlooked and essential for rigorous proofs. We extensively consolidate and unify concepts from many works, thoroughly discussing the underlying assumptions and resolving technical inconsistencies. Therefore, our contribution represents a significant advancement towards a broader and deeper understanding of QKD security proofs.
Practical quantum key distribution (QKD) receivers may leak information about their measurement outcomes and settings to the channel (e.g., through detector backflashes or back-reflected Trojan-horse light) that could compromise the protocol's security. Here we present a simple finite-key security proof based on phase-error estimation for prepare-and-measure QKD in the presence of either a priori information leakage about the basis choices and/or a posteriori information leakage about the measurement outcomes. The proof requires only a bound on the distinguishability of the side-channel states. Furthermore, the analysis is modular and compatible with existing security proofs that address detector and source imperfections, making it applicable to a wide range of practical QKD implementations.