Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2507.04248 · Physical Review Applied

Security of the BB84 protocol with passive biased basis choice by the receiver

Shun Kawakami, Atsushi Taniguchi, Yoshihide Tonomura, Koichi Takasugi, Koji Azuma

Published Nov 24, 2025• 1 citation
arXivHTMLPDF

Abstract

The Bennett-Brassard 1984 (BB84) protocol is one of the simplest protocols for implementing quantum key distribution (QKD). In the protocol, the sender and the receiver iteratively choose one of two complementary measurement bases. Regarding the basis choice by the receiver, a passive setup has been adopted in a number of its implementations, including satellite QKD and time-bin encoding. However, conventional theoretical techniques to prove the security of the BB84 protocol are not applicable if the receiver chooses their measurement basis passively, rather than actively, with a biased probability, followed by measurement with threshold detectors. Here we present a fully analytical security proof against coherent attacks for such a decoy-state BB84 protocol with the receiver’s passive basis choice and measurement with threshold detectors. Numerical simulations under practical situations show that the difference in secure key rate between the active and passive implementations of the protocol is negligible except for long communication distances.

DOI
10.1103/2pzb-ssrs

Related papers

Finite-key security analysis of the decoy-state BB84 QKD with passive measurement

Akihiro Mizutani, Shun Kawakami, Go Kato

The decoy-state Bennett-Brassard 1984 (BB84) quantum key distribution (QKD) protocol is widely regarded as the de facto standard for practical implementations. On the receiver side, passive basis choice is attractive because it significantly reduces the need for random number generators and eliminates the need for optical modulators. Despite these advantages, a finite-key analytical security proof for the decoy-state BB84 protocol, where the basis is chosen passively with a biased probability, has been lacking. In this work, we present a simple analytical finite-key security proof for this setting, yielding a closed-form secret-key rate formula that can be directly evaluated using experimentally accessible parameters. Numerical simulations show that the key rates of passiveand active-measurement implementations are nearly identical, indicating that passive measurement does not compromise key-generation efficiency in practical QKD systems.

quant-pharXiv:2511.21253•Quantum Science and Technology•Nov 27, 2025•2 citations

Security of passive entanglement-based key distribution protocols

Shun Kawakami, Koichi Takasugi, Koji Azuma

Entanglement-based key distribution protocols, such as the Bennett-Brassard-Mermin 1992 (BBM92) protocol and quantum conference key agreement (QCKA), are promising applications of quantum networks. In practical implementations, passive measurement setups are widely adopted because of their simplicity. However, the security analysis of passive protocols with biased basis choice is highly nontrivial, since standard proof techniques for threshold detectors are generally not applicable in this setting. In this work, we establish the security of passive entanglement-based key distribution protocols in the asymptotic regime. Specifically, we prove the security of passive BBM92 with biased basis choice and extend the proof to passive QCKA with an arbitrary number of parties. In addition, we numerically show that the key generation rate of passive BBM92 is almost identical to that of the corresponding active protocol. Our results provide a theoretical foundation for practical passive implementations of entanglement-based key distribution protocols.

quant-pharXiv:2607.10659•Jul 14, 2026•0 citations

Security of quantum key distribution with passive basis choice and detection-efficiency mismatch for a realistic satellite setup

Egor Ivchenko, Aleksandr Khmelev, Vladimir Kurochkin +1 more

Detection-efficiency mismatch is a common problem in realistic quantum key distribution (QKD) systems. The existing security proofs for the case of the passive basis choice provide a nonzero secret key rate only for a small detection-efficiency mismatch. Unfortunately, in realistic setups, the detection-efficiency mismatch can be significant. Here we present a more precise estimation of the secret key rate for the BB84 protocol with the passive basis choice, which accounts for the detection-efficiency mismatch between four threshold detectors as well as an adaptation of the decoy-state method. The suggested approach is used to estimate the secret key rate in a QKD experiment between the Micius satellite and the Zvenigorod ground station.

quant-pharXiv:2608.09793•Entropy•Aug 11, 2026•0 citations

Secrecy of quantum key distribution with passive basis choice and detection efficiency mismatch

Egor I. Ivchenko, Anton Sergeevich Trushechkin, A. V. Khmelev +1 more

Subject of study. The effect of different quantum efficiencies of single-photon detectors in quantum key distribution (QKD) systems implementing the BB84 protocol with passive basis choice is investigated. Aim of study. The aim of this study is to determine the secret key generation rate and security of the final key in quantum cryptography systems as functions of detector efficiency mismatch. Additionally, an analytical equation is derived for estimating the secret key generation rate in quantum communication systems with passive basis choice while accounting for different detector efficiencies. Method. The secret key is calculated by dividing the received measurement data according to the measurement bases, followed by performing separate post-processing for each dataset, and finally summing the resulting estimates of the secret key. Main results. An analytical method for estimating the secret key generation rate in systems with passive basis choice and mismatched detector efficiencies is developed. A satellite-to-ground quantum communication channel is modeled using the parameters of the Zvenigorod Observatory in Russia. The proposed theory for accounting for the detector efficiency mismatch is applied to a model of a satellite QKD system, and the determined length of the secret key generated during a single communication session with the satellite is found to be 300 kbit. Practical significance. The obtained results account for the effect of detector efficiency mismatch when estimating the length of the secret key in QKD systems, thereby increasing their reliability in practical implementations.

Journal of Optical Technology•Jul 1, 2025•1 citation

Security proof for a simplified Bennett-Brassard 1984 quantum-key-distribution protocol

Davide Rusca, Alberto Boaron, Marcos Curty +2 more

The security of quantum key distribution (QKD) has been proven for different protocols, in particular for the BB84 protocol. It has been shown that this scheme is robust against eventual imperfections in the state preparation, and sending only three different states delivers the same secret key rate achievable with four states. In this work, we prove in a finite-key scenario that the security of this protocol can be maintained even with fewer measurement operators on the receiver. This allows us to implement a time-bin encoding scheme with a minimum amount of resources.

arXiv:1808.08259•Physical Review A•Nov 26, 2018•61 citations

Security proof for quantum-key-distribution systems with threshold detectors

Toyohiro Tsurumaru, Kiyoshi Tamaki

In this paper, we rigorously prove the intuition that in security proofs for the Bennett-Brassard 1984 (BB84) protocol, one may regard an incoming signal to Bob as a qubit state. From this result, it follows that all security proofs for BB84 protocol based on a virtual qubit entanglement distillation protocol, which was originally proposed by Lo and Chau [Science 283, 2050 (1999)] and by Shor and Preskill [Phys. Rev. Lett. 85, 441 (2000)], are all valid even if Bob's actual apparatus cannot distill a qubit state explicitly. As a consequence, especially, the well-known result that a higher bit error rate of 20% can be tolerated for BB84 protocol by using two-way classical communications is still valid even when Bob uses threshold detectors. Using the same technique, we also prove the security of Bennett-Brassard-Mermin 1992 (BBM92) protocol where Alice and Bob both use threshold detectors.

arXiv:0803.4226•Physical Review A•Sep 2, 2008•103 citations
The Bennett-Brassard 1984 (BB84) protocol is one of the simplest protocols for implementing quantum key distribution (QKD). In the protocol, the sender and the receiver iteratively choose one of two complementary measurement bases. Regarding the basis choice by the receiver, a passive setup has been adopted in a number of its implementations, including satellite QKD and time-bin encoding. However, conventional theoretical techniques to prove the security of the BB84 protocol are not applicable if the receiver chooses their measurement basis passively, rather than actively, with a biased probability, followed by measurement with threshold detectors. Here we present a fully analytical security proof against coherent attacks for such a decoy-state BB84 protocol with the receiver’s passive basis choice and measurement with threshold detectors. Numerical simulations under practical situations show that the difference in secure key rate between the active and passive implementations of the protocol is negligible except for long communication distances.
The decoy-state Bennett-Brassard 1984 (BB84) quantum key distribution (QKD) protocol is widely regarded as the de facto standard for practical implementations. On the receiver side, passive basis choice is attractive because it significantly reduces the need for random number generators and eliminates the need for optical modulators. Despite these advantages, a finite-key analytical security proof for the decoy-state BB84 protocol, where the basis is chosen passively with a biased probability, has been lacking. In this work, we present a simple analytical finite-key security proof for this setting, yielding a closed-form secret-key rate formula that can be directly evaluated using experimentally accessible parameters. Numerical simulations show that the key rates of passiveand active-measurement implementations are nearly identical, indicating that passive measurement does not compromise key-generation efficiency in practical QKD systems.
Entanglement-based key distribution protocols, such as the Bennett-Brassard-Mermin 1992 (BBM92) protocol and quantum conference key agreement (QCKA), are promising applications of quantum networks. In practical implementations, passive measurement setups are widely adopted because of their simplicity. However, the security analysis of passive protocols with biased basis choice is highly nontrivial, since standard proof techniques for threshold detectors are generally not applicable in this setting. In this work, we establish the security of passive entanglement-based key distribution protocols in the asymptotic regime. Specifically, we prove the security of passive BBM92 with biased basis choice and extend the proof to passive QCKA with an arbitrary number of parties. In addition, we numerically show that the key generation rate of passive BBM92 is almost identical to that of the corresponding active protocol. Our results provide a theoretical foundation for practical passive implementations of entanglement-based key distribution protocols.
Detection-efficiency mismatch is a common problem in realistic quantum key distribution (QKD) systems. The existing security proofs for the case of the passive basis choice provide a nonzero secret key rate only for a small detection-efficiency mismatch. Unfortunately, in realistic setups, the detection-efficiency mismatch can be significant. Here we present a more precise estimation of the secret key rate for the BB84 protocol with the passive basis choice, which accounts for the detection-efficiency mismatch between four threshold detectors as well as an adaptation of the decoy-state method. The suggested approach is used to estimate the secret key rate in a QKD experiment between the Micius satellite and the Zvenigorod ground station.
Subject of study. The effect of different quantum efficiencies of single-photon detectors in quantum key distribution (QKD) systems implementing the BB84 protocol with passive basis choice is investigated. Aim of study. The aim of this study is to determine the secret key generation rate and security of the final key in quantum cryptography systems as functions of detector efficiency mismatch. Additionally, an analytical equation is derived for estimating the secret key generation rate in quantum communication systems with passive basis choice while accounting for different detector efficiencies. Method. The secret key is calculated by dividing the received measurement data according to the measurement bases, followed by performing separate post-processing for each dataset, and finally summing the resulting estimates of the secret key. Main results. An analytical method for estimating the secret key generation rate in systems with passive basis choice and mismatched detector efficiencies is developed. A satellite-to-ground quantum communication channel is modeled using the parameters of the Zvenigorod Observatory in Russia. The proposed theory for accounting for the detector efficiency mismatch is applied to a model of a satellite QKD system, and the determined length of the secret key generated during a single communication session with the satellite is found to be 300 kbit. Practical significance. The obtained results account for the effect of detector efficiency mismatch when estimating the length of the secret key in QKD systems, thereby increasing their reliability in practical implementations.
The security of quantum key distribution (QKD) has been proven for different protocols, in particular for the BB84 protocol. It has been shown that this scheme is robust against eventual imperfections in the state preparation, and sending only three different states delivers the same secret key rate achievable with four states. In this work, we prove in a finite-key scenario that the security of this protocol can be maintained even with fewer measurement operators on the receiver. This allows us to implement a time-bin encoding scheme with a minimum amount of resources.
In this paper, we rigorously prove the intuition that in security proofs for the Bennett-Brassard 1984 (BB84) protocol, one may regard an incoming signal to Bob as a qubit state. From this result, it follows that all security proofs for BB84 protocol based on a virtual qubit entanglement distillation protocol, which was originally proposed by Lo and Chau [Science 283, 2050 (1999)] and by Shor and Preskill [Phys. Rev. Lett. 85, 441 (2000)], are all valid even if Bob's actual apparatus cannot distill a qubit state explicitly. As a consequence, especially, the well-known result that a higher bit error rate of 20% can be tolerated for BB84 protocol by using two-way classical communications is still valid even when Bob uses threshold detectors. Using the same technique, we also prove the security of Bennett-Brassard-Mermin 1992 (BBM92) protocol where Alice and Bob both use threshold detectors.