Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2503.02648 · Physical Review A

Practical unclonable encryption with continuous variables

Arpan Akash Ray, Boris Škorić

Published Jul 15, 2026• 0 citations
arXivHTMLPDF

Abstract

We propose the first continuous-variable (CV) unclonable encryption scheme, extending the paradigm of quantum encryption of classical messages to CV systems. In our construction, a classical message is first encrypted classically and then encoded using an error-correcting code. Each bit of the codeword is mapped to a CV mode by creating a coherent state which is squeezed in the q or p quadrature direction, with a small displacement that encodes the bit. The squeezing directions are part of the encryption key. We prove unclonability in the framework introduced by Broadbent and Lord, via a reduction of the cloning game to a CV monogamy-of-entanglement game. Furthermore, we demonstrate that our scheme can be readily implemented with current technology. By incorporating realistic imperfections such as channel noise and detector inefficiencies, we show that the protocol remains robust under these conditions.

DOI
10.1103/kkzp-w2hc

Related papers

Continuous-variable approximate unitary 2-design, with applications to unclonable encryption

Arpan Akash Ray, Boris Skoric

We introduce an $\varepsilon$-approximate unitary 2-design that is compatible with the structure of p- and q-quadratures in continuous-variable (CV) quantum systems. The design unitaries are defined on a finite-dimensional discretisation of the CV space and can be physically implemented as operations on the full CV space. This establishes the first approximate unitary design for CV systems. The design alternatingly acts with unitaries based on the quadrature operators $\hat q$ and $\hat p$. We prove that the parameter $\varepsilon$ is given by $1/d^\ell$, where $d$ is the dimension of the truncated Hilbert space and $\ell$ is the number of iterations. We propose an Unclonable Encryption scheme in which the encryption operators are given by the unitaries which constitute the approximate unitary design. We prove its security using recent results on decoupling. This establishes unclonable-indistinguishable security for a CV encryption for the first time.

quant-pharXiv:2603.06393•Mar 9, 2026•0 citations

Unconditional Unclonable Encryption

Prabhanjan Ananth, Seyoon Ragavan, Amit Sahai

We give an unconditional construction of information-theoretically secure one-time private-key unclonable encryption for one-bit messages, with efficient encryption and decryption and exponentially small unclonable-indistinguishability advantage. Previous work by Bhattacharyya and Culf (Nature Physics, 2026) and Bhattacharyya, Broadbent, and Culf (arXiv:2603.08916) either only showed inverse-polynomial security loss or required inefficient encryption/decryption operations; we avoid both of these caveats. Our scheme's key is a uniformly random non-identity phase-free Pauli on $n$ qubits, and bit $a$ is encrypted as a random $(-1)^a$ eigenstate of that Pauli. We prove that the probability that both receivers recover the bit is at most $1/2 + O\left(2^{-n/2}\right).$ By a lower bound due to Broadbent, Culf, and Rochette (arXiv:2510.00903), this is the best probability bound achievable with $n$-qubit ciphertexts while ensuring perfect correctness (up to the constant hidden in the $O(\cdot)$).

quant-pharXiv:2607.21551•Jul 24, 2026•0 citations

Authentication of continuous-variable quantum messages

Mehmet Hüseyin Temel, Boris Škorić

We introduce the first quantum authentication scheme for continuous-variable (CV) states. Our scheme is based on trap states, and is an adaptation of a discrete-variable scheme by Broadbent et al. [ 15 ], but with more freedom in choosing the number of traps.The CV traps are squeezed states.As the CV variant of quantum one-time pad (QOTP) encryption we introduce gaussian-distributed displacements.We provide a security proof, mostly following the approach of Broadbent and Wainewright [ 13 ]. We take into account the inevitable imperfections due to the finite squeezing and the finite width of the gaussian QOTP distribution.As a necessary ingredient for the proof we derive the CV analogue of the Pauli Twirl. Since CV quantum systems fit well with existing optical communication infrastructure, they provide a promising platform for implementing quantum-cryptographic schemes and distributed quantum-computational tasks. This work expands the toolbox for securing CV quantum communication.

arXiv:2507.00095•Quantum Information Processing•Nov 14, 2025•0 citations

A Continuous-Variable Quantum Secure Direct Communication Protocol with Squeezed States

Iris Paparelle, S. Faezeh Mousavi, Francesco Scazza +3 more

Quantum secure direct communication (QSDC) is a recently developed practical solution, which transmits secret messages between legitimate parties, without setting up a cryptographic key. The QSDC protocols are mainly classified into entanglement-based and single photon-based approaches. Their security has been analyzed using Wyner's wiretap channel theory, and their secrecy capacity has been calculated [1]. Hitherto, QSDC protocols have been implemented on optical fiber and free-space channels, all in discrete-variable (DV) encoding that employs single-photon detectors [1]–[2]. However, the implementation of continuous-variable (CV) QSDC, in which the keys are encoded into the quadratures of quantized electromagnetic fields (e.g., coherent states) and detected via homodyne techniques, is preferred due to: its lower costs, excellent integrability with existing optical communication systems, easy implementation from state preparation to measurement, and fast experimental realization. Furthermore, it has been proved that CV-QSDC protocols using squeezed states show higher tolerance in purely lossy channels and enhanced robustness against highly noisy ones, as well [3]. Nevertheless, none of the CV-QSDC protocols employing either coherent or squeezed quantum states have been implemented yet.

Conference on Lasers and Electro-Optics Europe & European Quantum Electronics Conference (CLEO/Europe-EQEC)•Jun 26, 2023•9 citations

Efficient Unclonable Encryption from Pauli Eigenstates

Seyoon Ragavan

We give, to our knowledge, the first plain-model, one-time information-theoretically secure, efficient unclonable encryption scheme for one classical bit. Previous work by Bhattacharyya and Culf (Nature Physics, 2026) and Bhattacharyya, Broadbent, and Culf either only showed $1/\mathsf{poly}(λ)$ security loss or required inefficient encryption/decryption operations. We avoid both of these caveats; in doing so, we obtain (to our knowledge) the first plain-model construction of many-time secure $1 \to 2$ unclonable encryption for arbitrary polynomial-length messages, assuming the existence of pseudorandom function-like states (Bartusek and Goldin). The key is a uniformly random non-identity phase-free Pauli on $n$ qubits, and bit $a$ is encrypted as a random $(-1)^a$ eigenstate of that Pauli. The scheme is exponentially secure; we prove that the probability that both receivers recover the bit is at most $\frac{1}{2}+\frac{1}{2}\sqrt{{2^n}/({4^n-1})} = \frac{1}{2} + O\left(2^{-n/2}\right).$ By a lower bound due to Broadbent, Culf, and Rochette, this is the best probability bound achievable with $n$-qubit ciphertexts (up to the constant hidden in the $O(\cdot)$). The main conceptual idea is to leverage, in a precise spectral sense, the balanced commutation-anticommutation structure of the Pauli group. The proof is intricate but completely elementary and makes use of standard spectral bound techniques. The main technical workhorse is a standalone linear-algebraic lemma that informally relates the positivity of two different operators, each capturing the intuition that if the two receivers can individually decrypt unusually often then they must also disagree often. GPT-5.6 Sol Ultra found this proof in an extended conversation with the author and drafted a preliminary version of this paper. The author is fully accountable for the correctness of this paper.

quant-pharXiv:2607.21811•Jul 27, 2026•0 citations

Towards Unconditional Uncloneable Encryption

Pierre Botteron, Anne Broadbent, Eric Culf +3 more

Uncloneable encryption is a cryptographic primitive which encrypts a classical message into a quantum ciphertext, such that two quantum adversaries are limited in their capacity of being able to simultaneously decrypt, given the key and quantum side-information produced from the ciphertext. Since its initial proposal and scheme in the random oracle model by Broadbent and Lord [TQC 2020], uncloneable encryption has developed into an important primitive at the foundation of quantum uncloneability for cryptographic primitives. Despite sustained efforts, however, the question of unconditional uncloneable encryption (and in particular of the simplest case, called an uncloneable bit) has remained elusive. Here, we propose a candidate for the unconditional uncloneable bit problem, and provide strong evidence that the adversary's success probability in the related security game converges quadratically as 1 / 2 + 1 / ( 2 K ) , where K represents the number of keys and 1 / 2 is trivially achievable. We prove this bound's validity for K ranging from 2 to 7 and demonstrate the validity up to K = 17 using computations based on the NPA hierarchy. We furthemore provide compelling heuristic evidence towards the general case. In addition, we prove an asymptotic upper bound of 5 / 8 and give a numerical upper bound of ∼ 0.5980 , which to our knowledge is the best-known value in the unconditional model.

arXiv:2410.23064•Quantum•Jul 8, 2026•1 citation
We propose the first continuous-variable (CV) unclonable encryption scheme, extending the paradigm of quantum encryption of classical messages to CV systems. In our construction, a classical message is first encrypted classically and then encoded using an error-correcting code. Each bit of the codeword is mapped to a CV mode by creating a coherent state which is squeezed in the q or p quadrature direction, with a small displacement that encodes the bit. The squeezing directions are part of the encryption key. We prove unclonability in the framework introduced by Broadbent and Lord, via a reduction of the cloning game to a CV monogamy-of-entanglement game. Furthermore, we demonstrate that our scheme can be readily implemented with current technology. By incorporating realistic imperfections such as channel noise and detector inefficiencies, we show that the protocol remains robust under these conditions.
We introduce an ε\varepsilonε-approximate unitary 2-design that is compatible with the structure of p- and q-quadratures in continuous-variable (CV) quantum systems. The design unitaries are defined on a finite-dimensional discretisation of the CV space and can be physically implemented as operations on the full CV space. This establishes the first approximate unitary design for CV systems. The design alternatingly acts with unitaries based on the quadrature operators q^\hat qq^​ and p^\hat pp^​. We prove that the parameter ε\varepsilonε is given by 1/dℓ1/d^\ell1/dℓ, where ddd is the dimension of the truncated Hilbert space and ℓ\ellℓ is the number of iterations. We propose an Unclonable Encryption scheme in which the encryption operators are given by the unitaries which constitute the approximate unitary design. We prove its security using recent results on decoupling. This establishes unclonable-indistinguishable security for a CV encryption for the first time.
We give an unconditional construction of information-theoretically secure one-time private-key unclonable encryption for one-bit messages, with efficient encryption and decryption and exponentially small unclonable-indistinguishability advantage. Previous work by Bhattacharyya and Culf (Nature Physics, 2026) and Bhattacharyya, Broadbent, and Culf (arXiv:2603.08916) either only showed inverse-polynomial security loss or required inefficient encryption/decryption operations; we avoid both of these caveats. Our scheme's key is a uniformly random non-identity phase-free Pauli on nnn qubits, and bit aaa is encrypted as a random (−1)a(-1)^a(−1)a eigenstate of that Pauli. We prove that the probability that both receivers recover the bit is at most 1/2+O(2−n/2).1/2 + O\left(2^{-n/2}\right).1/2+O(2−n/2). By a lower bound due to Broadbent, Culf, and Rochette (arXiv:2510.00903), this is the best probability bound achievable with nnn-qubit ciphertexts while ensuring perfect correctness (up to the constant hidden in the O(⋅)O(\cdot)O(⋅)).
We introduce the first quantum authentication scheme for continuous-variable (CV) states. Our scheme is based on trap states, and is an adaptation of a discrete-variable scheme by Broadbent et al. [ 15 ], but with more freedom in choosing the number of traps.The CV traps are squeezed states.As the CV variant of quantum one-time pad (QOTP) encryption we introduce gaussian-distributed displacements.We provide a security proof, mostly following the approach of Broadbent and Wainewright [ 13 ]. We take into account the inevitable imperfections due to the finite squeezing and the finite width of the gaussian QOTP distribution.As a necessary ingredient for the proof we derive the CV analogue of the Pauli Twirl. Since CV quantum systems fit well with existing optical communication infrastructure, they provide a promising platform for implementing quantum-cryptographic schemes and distributed quantum-computational tasks. This work expands the toolbox for securing CV quantum communication.
Quantum secure direct communication (QSDC) is a recently developed practical solution, which transmits secret messages between legitimate parties, without setting up a cryptographic key. The QSDC protocols are mainly classified into entanglement-based and single photon-based approaches. Their security has been analyzed using Wyner's wiretap channel theory, and their secrecy capacity has been calculated [1]. Hitherto, QSDC protocols have been implemented on optical fiber and free-space channels, all in discrete-variable (DV) encoding that employs single-photon detectors [1]–[2]. However, the implementation of continuous-variable (CV) QSDC, in which the keys are encoded into the quadratures of quantized electromagnetic fields (e.g., coherent states) and detected via homodyne techniques, is preferred due to: its lower costs, excellent integrability with existing optical communication systems, easy implementation from state preparation to measurement, and fast experimental realization. Furthermore, it has been proved that CV-QSDC protocols using squeezed states show higher tolerance in purely lossy channels and enhanced robustness against highly noisy ones, as well [3]. Nevertheless, none of the CV-QSDC protocols employing either coherent or squeezed quantum states have been implemented yet.
We give, to our knowledge, the first plain-model, one-time information-theoretically secure, efficient unclonable encryption scheme for one classical bit. Previous work by Bhattacharyya and Culf (Nature Physics, 2026) and Bhattacharyya, Broadbent, and Culf either only showed 1/poly(λ)1/\mathsf{poly}(λ)1/poly(λ) security loss or required inefficient encryption/decryption operations. We avoid both of these caveats; in doing so, we obtain (to our knowledge) the first plain-model construction of many-time secure 1→21 \to 21→2 unclonable encryption for arbitrary polynomial-length messages, assuming the existence of pseudorandom function-like states (Bartusek and Goldin). The key is a uniformly random non-identity phase-free Pauli on nnn qubits, and bit aaa is encrypted as a random (−1)a(-1)^a(−1)a eigenstate of that Pauli. The scheme is exponentially secure; we prove that the probability that both receivers recover the bit is at most 12+122n/(4n−1)=12+O(2−n/2).\frac{1}{2}+\frac{1}{2}\sqrt{{2^n}/({4^n-1})} = \frac{1}{2} + O\left(2^{-n/2}\right).21​+21​2n/(4n−1)​=21​+O(2−n/2). By a lower bound due to Broadbent, Culf, and Rochette, this is the best probability bound achievable with nnn-qubit ciphertexts (up to the constant hidden in the O(⋅)O(\cdot)O(⋅)). The main conceptual idea is to leverage, in a precise spectral sense, the balanced commutation-anticommutation structure of the Pauli group. The proof is intricate but completely elementary and makes use of standard spectral bound techniques. The main technical workhorse is a standalone linear-algebraic lemma that informally relates the positivity of two different operators, each capturing the intuition that if the two receivers can individually decrypt unusually often then they must also disagree often. GPT-5.6 Sol Ultra found this proof in an extended conversation with the author and drafted a preliminary version of this paper. The author is fully accountable for the correctness of this paper.
Uncloneable encryption is a cryptographic primitive which encrypts a classical message into a quantum ciphertext, such that two quantum adversaries are limited in their capacity of being able to simultaneously decrypt, given the key and quantum side-information produced from the ciphertext. Since its initial proposal and scheme in the random oracle model by Broadbent and Lord [TQC 2020], uncloneable encryption has developed into an important primitive at the foundation of quantum uncloneability for cryptographic primitives. Despite sustained efforts, however, the question of unconditional uncloneable encryption (and in particular of the simplest case, called an uncloneable bit) has remained elusive. Here, we propose a candidate for the unconditional uncloneable bit problem, and provide strong evidence that the adversary's success probability in the related security game converges quadratically as 1 / 2 + 1 / ( 2 K ) , where K represents the number of keys and 1 / 2 is trivially achievable. We prove this bound's validity for K ranging from 2 to 7 and demonstrate the validity up to K = 17 using computations based on the NPA hierarchy. We furthemore provide compelling heuristic evidence towards the general case. In addition, we prove an asymptotic upper bound of 5 / 8 and give a numerical upper bound of ∼ 0.5980 , which to our knowledge is the best-known value in the unconditional model.