Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2503.14872

Design of Quantum Stream Cipher: Part-I -Lifting the Shannon Impossibility Theorem-

Osamu Hirota

Published Mar 19, 2025• 0 citations
arXivHTMLPDF

Abstract

This paper is dedicated to the late Professor H.P. Yuen in commemoration to our 50-year friendship. He invented the concept of quantum stream cipher. It is designed based on a completely different concept from conventional ciphers. The purpose of this cipher is to provide information-theoretic security of long data and secret key with short key length. It is based on hiding the ciphertext of mathematical cipher with quantum noise, achieving unprecedented information-theoretic security in any cipher. The protocol corresponds to randomizing the ciphertext by means of differentiating the receiving performance of Bob with key and Eve without key according to the principle of quantum communication theory. In this paper, we introduce some progress on the specific method to develop from the standard type to generalized quantum stream cipher (Quantum Enigma Cipher). There are two methods for generalization. One is the additional randomization method by the product cipher form and the other is the M-th order extended quantum coding method. Here we discuss the former. The results proved that it has sufficient information-theoretic security against known plaintext attack on key in comparison with quantum data locking. The latter method will be reported in Part II.

DOI
10.48550/arxiv.2503.14872

Related papers

Quantum stream cipher and Quantum block cipher -The Era of 100 Gbit/sec real-time encryption-

Osamu Hirota

This paper is the part-II of the previous paper and introduces the world of Yuen's concept. In the theory of cryptology, the Shannon impossibility theorem states that the upper bound of the security of a plaintext against a ciphertext-only attack is the entropy of the secret key. At the same time, it gives the upper bound of the unicity distance against a known plaintext attack. Hence the development of a new symmetric key cipher requires finding a way to undo or lift this theorem. Such challenges have been attempted with quantum stream cipher and quantum data locking as block cipher. Both ciphers are designed by means of differentiating the receiving performance of Bob with key and Eve without key according to the principle of quantum communication theory. Thus, the origin of security of both ciphers come from the principle of keyed communication in quantum noise (KCQ) proposed by Yuen. In this paper, we explain and compare the principles and features of both cipher and assist to improve the quantum data locking scheme. Then we will introduce experimental research on quantum stream cipher towards commercialization, which has performance superior to conventional cipher.

arXiv:2504.17240•Apr 24, 2025•0 citations

Quantum Stream Cipher Based on Holevo–Yuen Theory: Part II

Osamu Hirota, Masaki Sohma

This paper discusses the foundation of security theory for the Quantum stream cipher based on the Holevo-Yuen theory, which allows the use of "optical amplifiers". This type of cipher is a technology that provides information-theoretic security (ITS) to optical data transmission by randomizing ultrafast optical communication signals with quantum noise. In general, the quantitative security of ITS is evaluated in terms of the unicity distance in Shannon theory. However, the quantum version requires modeling beyond the Shannon model of a random cipher to utilize the characteristics of the physical layer. Therefore, as the first step, one has to develop a generalized unicity distance theory and apply it to the evaluation of security. Although a complete theoretical formulation has not yet been established, this paper explains a primitive structure of a generalization of the Shannon random cipher and shows that the realization of this is the generalized quantum stream cipher. In addition, we present several implementation methods of generalized quantum stream ciphers and their security.

Entropy•Nov 15, 2024•0 citations

Towards Quantum Enigma Cipher

Osamu Hirota

This research note suggests a new way to realize a high speed direct encryption based on quantum detection theory. The conventional cipher is designed by a mathematical algorithm and its security is evaluated by the complexity of the algorithm for cryptanalysis and ability of computers. This kind of cipher cannot exceed the Shannon limit of cryptography,and it can be decrypted with probability one in principle by trying all the possible keys against the data length equal to the secret key length. A cipher with quantum effect in physical layer may exceed the Shannon limit of cryptography. The quantum stream cipher by $α/η$ or Yuen-2000 protocol (Y-00) which operates at Gbit/sec is a typical example of such a cipher. That is, ciphertext of mathematical cipher with a secret key is masked by quantum noise of laser light when an eavesdropper observes optical signals as a ciphertext of the mathematical cipher, while the legitimate receiver does not suffer the quantum noise effect. As a result, the inherent difference of accuracy of ciphertext between eavesdropper and legitimate receiver arises. This is a necessary condition to exceed the Shannon limit of cryptography. In this note, we present a new method to generate an inherent difference of accuracy of the ciphertext, taking into account a fundamental properties of quantum detection schemes.

arXiv:1510.05209•Oct 18, 2015•0 citations

Towards Quantum Enigma Cipher -A protocol for G bit/sec encryption based on discrimination property of non-orthogonal quantum states-

Osamu Hirota

This research note suggests a new way to realize a high speed direct encryption based on quantum detection theory. The conventional cipher is designed by a mathematical algorithm and its security is evaluated by the complexity of the algorithm for cryptanalysis and ability of computers. This kind of cipher cannot exceed the Shannon limit of cryptography, and it can be decrypted with proba- bility one in principle by trying all the possible keys against the data length equal to the secret key length. A cipher with quantum effect in physical layer may exceed the Shannon limit of cryptography. The quantum stream cipher by α/η or Yuen-2000 protocol (Y-00) which operates at Gbit/sec is a typical example of such a cipher. That is, ciphertext of mathematical cipher with a secret key is masked by quantum noise of laser light when an eavesdropper observes optical signals as a ciphertext of the mathematical cipher, while the legitimate receiver does not suffer the quantum noise effect. As a result, the inherent difference of accuracy of ciphertext between eavesdropper and legitimate receiver arises. This is a necessary condition to exceed the Shannon limit of cryptography. In this note, we present a new method to generate an inherent difference of accuracy of the ciphertext, taking into account a fundamental properties of quantum detection schemes.

•Jan 1, 2015•2 citations

Towards a New Way of Quantum Communication : Getting Around the Shannon Limit of Cryptography

Osamu Hirota, Masaki Sohma

This paper surveys a new way for research of quantum cryptography. The conventional cipher is designed by a mathematical algorithm and its security is evaluated by the complexity of the algorithm for the cryptanalysis and ability of computers. This kind of cipher cannot exceed the Shannon limit of cryptography, and it can be decrypted with probability one in principle by trying all the possible keys against the data length equal to the secret key length. A cipher based on quantum effect so called physical cipher may exceed the Shannon limit of the cryptography. The quantum stream cipher by �/� or Yuen-2000 protocol (Y- 00) which operates at Gbit/sec is a typical example of such a cipher, and may exceed the Shannon limit. In this paper, we show an existence of cipher which exceeds the Shannon limit, and discuss practical realization methods for them. First, the conditions to exceed the Shannon limit are summarized. Then we discuss the generalized secret capacity of the wiretap channel model supported by a secret key to discuss an existence of cipher exceeding the Shannon limit. The generalized secret capacities for space communication and fiber communication are given. In gen- eral, one needs quantum optimum receiver to realize such capacity. But when bandwidth limitation of users is deleted or the eavesdropper has a device limit, a cipher scheme exceeding the Shannon limit may be realized merely by the conventional optical communication devices which are affected by quantum noise at optical signal measurement.

•Jan 1, 2011•1 citation

Quantum stream cipher beyond the Shannon limit of symmetric key cipher and the possibility of experimental demonstration

Osamu Hirota, Takehisa Iwakoshi, Masaki Sohma +1 more

The security in the next generation optical network which realizes "Cloud Computing System Service with data center" is one of the most important problems. In such a network, the encryption in physical layer which provide super security and small delay is a preferable. It has to be applicable, however, to very high speed data because the basic link is operated at 2.5 Gbit/sec ~ 10 Gbit/sec. The quantum stream cipher by Yuen-2000 protocol (Y00) is a completely new type of random cipher, which can exceed the Shannon limit of the symmetric key cipher. This paper extends some theoretical results on the security for quantum stream cipher such as Y00 protocol and generalized Y00. First, the conditions to exceed the Shannon limit are summarized. We formulate a generalized secret capacity in the sense of wire tap channel supported by secret key to clarify a cipher exceeding the Shannon limit. The generalized secret capacities for space communication and fiber communication based on the generalized Y00 are given. When the relaxation of physical constraint or device limit of the eavesdropper is allowed, we point out that a cipher scheme exceeding the Shannon limit can be realized only by the conventional optical system.

Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE•Jul 29, 2010•4 citations
This paper is dedicated to the late Professor H.P. Yuen in commemoration to our 50-year friendship. He invented the concept of quantum stream cipher. It is designed based on a completely different concept from conventional ciphers. The purpose of this cipher is to provide information-theoretic security of long data and secret key with short key length. It is based on hiding the ciphertext of mathematical cipher with quantum noise, achieving unprecedented information-theoretic security in any cipher. The protocol corresponds to randomizing the ciphertext by means of differentiating the receiving performance of Bob with key and Eve without key according to the principle of quantum communication theory. In this paper, we introduce some progress on the specific method to develop from the standard type to generalized quantum stream cipher (Quantum Enigma Cipher). There are two methods for generalization. One is the additional randomization method by the product cipher form and the other is the M-th order extended quantum coding method. Here we discuss the former. The results proved that it has sufficient information-theoretic security against known plaintext attack on key in comparison with quantum data locking. The latter method will be reported in Part II.
This paper is the part-II of the previous paper and introduces the world of Yuen's concept. In the theory of cryptology, the Shannon impossibility theorem states that the upper bound of the security of a plaintext against a ciphertext-only attack is the entropy of the secret key. At the same time, it gives the upper bound of the unicity distance against a known plaintext attack. Hence the development of a new symmetric key cipher requires finding a way to undo or lift this theorem. Such challenges have been attempted with quantum stream cipher and quantum data locking as block cipher. Both ciphers are designed by means of differentiating the receiving performance of Bob with key and Eve without key according to the principle of quantum communication theory. Thus, the origin of security of both ciphers come from the principle of keyed communication in quantum noise (KCQ) proposed by Yuen. In this paper, we explain and compare the principles and features of both cipher and assist to improve the quantum data locking scheme. Then we will introduce experimental research on quantum stream cipher towards commercialization, which has performance superior to conventional cipher.
This paper discusses the foundation of security theory for the Quantum stream cipher based on the Holevo-Yuen theory, which allows the use of "optical amplifiers". This type of cipher is a technology that provides information-theoretic security (ITS) to optical data transmission by randomizing ultrafast optical communication signals with quantum noise. In general, the quantitative security of ITS is evaluated in terms of the unicity distance in Shannon theory. However, the quantum version requires modeling beyond the Shannon model of a random cipher to utilize the characteristics of the physical layer. Therefore, as the first step, one has to develop a generalized unicity distance theory and apply it to the evaluation of security. Although a complete theoretical formulation has not yet been established, this paper explains a primitive structure of a generalization of the Shannon random cipher and shows that the realization of this is the generalized quantum stream cipher. In addition, we present several implementation methods of generalized quantum stream ciphers and their security.
This research note suggests a new way to realize a high speed direct encryption based on quantum detection theory. The conventional cipher is designed by a mathematical algorithm and its security is evaluated by the complexity of the algorithm for cryptanalysis and ability of computers. This kind of cipher cannot exceed the Shannon limit of cryptography,and it can be decrypted with probability one in principle by trying all the possible keys against the data length equal to the secret key length. A cipher with quantum effect in physical layer may exceed the Shannon limit of cryptography. The quantum stream cipher by α/ηα/ηα/η or Yuen-2000 protocol (Y-00) which operates at Gbit/sec is a typical example of such a cipher. That is, ciphertext of mathematical cipher with a secret key is masked by quantum noise of laser light when an eavesdropper observes optical signals as a ciphertext of the mathematical cipher, while the legitimate receiver does not suffer the quantum noise effect. As a result, the inherent difference of accuracy of ciphertext between eavesdropper and legitimate receiver arises. This is a necessary condition to exceed the Shannon limit of cryptography. In this note, we present a new method to generate an inherent difference of accuracy of the ciphertext, taking into account a fundamental properties of quantum detection schemes.
This research note suggests a new way to realize a high speed direct encryption based on quantum detection theory. The conventional cipher is designed by a mathematical algorithm and its security is evaluated by the complexity of the algorithm for cryptanalysis and ability of computers. This kind of cipher cannot exceed the Shannon limit of cryptography, and it can be decrypted with proba- bility one in principle by trying all the possible keys against the data length equal to the secret key length. A cipher with quantum effect in physical layer may exceed the Shannon limit of cryptography. The quantum stream cipher by α/η or Yuen-2000 protocol (Y-00) which operates at Gbit/sec is a typical example of such a cipher. That is, ciphertext of mathematical cipher with a secret key is masked by quantum noise of laser light when an eavesdropper observes optical signals as a ciphertext of the mathematical cipher, while the legitimate receiver does not suffer the quantum noise effect. As a result, the inherent difference of accuracy of ciphertext between eavesdropper and legitimate receiver arises. This is a necessary condition to exceed the Shannon limit of cryptography. In this note, we present a new method to generate an inherent difference of accuracy of the ciphertext, taking into account a fundamental properties of quantum detection schemes.
This paper surveys a new way for research of quantum cryptography. The conventional cipher is designed by a mathematical algorithm and its security is evaluated by the complexity of the algorithm for the cryptanalysis and ability of computers. This kind of cipher cannot exceed the Shannon limit of cryptography, and it can be decrypted with probability one in principle by trying all the possible keys against the data length equal to the secret key length. A cipher based on quantum effect so called physical cipher may exceed the Shannon limit of the cryptography. The quantum stream cipher by �/� or Yuen-2000 protocol (Y- 00) which operates at Gbit/sec is a typical example of such a cipher, and may exceed the Shannon limit. In this paper, we show an existence of cipher which exceeds the Shannon limit, and discuss practical realization methods for them. First, the conditions to exceed the Shannon limit are summarized. Then we discuss the generalized secret capacity of the wiretap channel model supported by a secret key to discuss an existence of cipher exceeding the Shannon limit. The generalized secret capacities for space communication and fiber communication are given. In gen- eral, one needs quantum optimum receiver to realize such capacity. But when bandwidth limitation of users is deleted or the eavesdropper has a device limit, a cipher scheme exceeding the Shannon limit may be realized merely by the conventional optical communication devices which are affected by quantum noise at optical signal measurement.
The security in the next generation optical network which realizes "Cloud Computing System Service with data center" is one of the most important problems. In such a network, the encryption in physical layer which provide super security and small delay is a preferable. It has to be applicable, however, to very high speed data because the basic link is operated at 2.5 Gbit/sec ~ 10 Gbit/sec. The quantum stream cipher by Yuen-2000 protocol (Y00) is a completely new type of random cipher, which can exceed the Shannon limit of the symmetric key cipher. This paper extends some theoretical results on the security for quantum stream cipher such as Y00 protocol and generalized Y00. First, the conditions to exceed the Shannon limit are summarized. We formulate a generalized secret capacity in the sense of wire tap channel supported by secret key to clarify a cipher exceeding the Shannon limit. The generalized secret capacities for space communication and fiber communication based on the generalized Y00 are given. When the relaxation of physical constraint or device limit of the eavesdropper is allowed, we point out that a cipher scheme exceeding the Shannon limit can be realized only by the conventional optical system.