arXiv:2601.02846

Quantum key distribution without authentication and information leakage

Zixuan Hu, Zhenyu Li

quant-phSubmitted Jan 6, 2026• Announced Jan 7, 2026• 0 citations

Abstract

Quantum key distribution (QKD) is the most widely studied quantum cryptographic model that exploits quantum effects to achieve information-theoretically secure key establishment. Conventional QKD contains public classical post-processing steps that require authentication to prevent impersonation and maintain security. However, a major limitation of QKD is it cannot perform authentication by itself, and thus requires a separate authentication mechanism. In addition, these public classical steps also have information leakage which subjects QKD to additional attack strategies and reduces the final key rate. In this work, we propose a new QKD variant that removes the need for a separate authentication mechanism, eliminates information leakage, and achieves a substantially higher key rate. By having two more protocol keys than conventional QKD and no public classical steps, our design achieves (almost) perfect information-theoretic security with the protocol keys reusable.

Related papers

A new secure model for quantum key distribution protocol

Rishi Dutt Sharma, Асок Де

All Classical cryptographic methods used in our life based on mathematical ideas & computational assumption are actually unsafe, so quantum cryptography is proposed nowadays Quantum key distribution (QKD) promises secure key agreement by using quantum mechanical systems. QKD will be an important part of future cryptographic infrastructures. It can provide long-term confidentiality for encrypted information without reliance on computational assumptions. Although QKD still requires authentication to prevent man-in-the-middle attacks. Firstly, In this paper At quantum key distribution protocol process is introduced. Secondly, several improvements to the basic steps of two references are reviewed because of its defects, mainly about identity authentication in order to prevent communication partners' counterfeit, including errors removing, estimating Attacker's information, secrecy enhancement, etc. At last, based upon original improvements reserved selectively, the whole process of quantum key distribution protocol after improvement & then comparison is introduced in detail.

IEEE International Conference on Industrial and Information Systems (ICIIS)Aug 1, 201113 citations

Authenticated Quantum Key Distribution Protocol

Jincheng Zhang

This paper proposes a novel protocol for authenticated quantum key distribution (QKD) that addresses the inherent vulnerabilities of traditional, centralized key management systems. The core concept leverages the security of QKD to establish a shared secret key, then integrates this key with a classical authentication protocol to verify the identities of the communicating parties. The protocol, denoted as AQKD, aims to enhance overall communication security by combining the unique properties of quantum key distribution with robust classical authentication mechanisms. The design incorporates a multi-round key exchange utilizing Bennett-May-Crabtree (BMC) protocol and incorporates a challenge-response mechanism for authentication. The proposed protocol mitigates risks associated with compromised central servers and provides a more resilient security posture. The primary contribution lies in the synergistic integration of these two established cryptographic paradigms, resulting in a more secure and adaptable communication system. The protocol's security is analyzed, considering potential attacks and demonstrating its resilience. The simulation results highlight the effectiveness of AQKD in establishing secure communication channels, particularly against eavesdropping and identity forgery attempts.

Aug 31, 20260 citations

Quantum Key Distribution Protocols with Classical Authentication

Jincheng Zhang

Quantum Key Distribution (QKD) offers theoretically unbreakable key exchange, but is vulnerable to man-in-the-middle attacks if the identities of the communicating parties are not rigorously verified. This paper proposes a novel QKD protocol integrating classical authentication to provide a layered security approach. The core concept involves utilizing a QKD system alongside a robust classical authentication mechanism. This layered approach significantly reduces the risk of successful attacks by ensuring that both parties are who they claim to be before key exchange occurs. The protocol's security relies on the assumption that the classical authentication system is itself secure. We detail the protocol's components, focusing on the integration of Bennett-Brassard (BB84) or a similar QKD scheme with a practical authentication protocol, and analyze its security properties. The proposed system is designed to mitigate the threats posed by adversaries who can intercept and manipulate the quantum key exchange without compromising the authentication process. The potential for improved security and resilience is demonstrated, representing a significant advancement in the practical application of QKD.

Sep 3, 20260 citations

Authentication of quantum key distribution with post-quantum cryptography and replay attacks

Liujun Wang, You-Yang Zhou, Jian-Ming Yin +1 more

With the development of quantum computers, traditional cryptographic systems are facing more and more serious security threats. Fortunately, quantum key distribution (QKD) and post-quantum cryptography (PQC) are two cryptographic mechanisms with quantum-resistant security, and both will become important solutions for future information security. However, neither of them is perfect, and they are complementary. Quantum key distribution has unconditional security that post-quantum cryptography does not have, and PQC can provide secure and convenient authentication for QKD networks. In this paper, we propose two protocols based on PQC to realize the full authentication of the QKD data post-processing, and we only need to assume the short-term security of PQC algorithm to ensure the long-term quantum resistant security of distributed keys. We found that for the above two authentication protocols, attackers cannot successfully implement replay attacks. These authentication protocols can solve the problems of the current pre-shared key authentication in the application of large-scale quantum key distribution networks, and are expected to realize a key distribution mechanism with practical operability and quantum resistant security, which will be beneficial to promote the deployment and application of quantum key distribution networks.

arXiv:2206.01164Jun 2, 202210 citations

PU-QKD: Enhancing Authentication of Quantum Key Distribution via Physical Unclonable Function

Mieszko Ferens, Edlira Dushku, Simon Rommel +2 more

The rapid advances in quantum computing pressure the existing essential cryptographic algorithms. In this context, Quantum Key Distribution (QKD) has been proposed as a quantum safe solution for key distribution. However, current QKD systems require an authenticated classical channel which relies on pre-shared symmetric keys that are manually distributed and do not guarantee the identity of the hardware that hosts them. This paper proposes a novel scheme, the Physically Unclonable Quantum Key Distribution (PU-QKD) system, to intrinsically authenticate the communicating endpoints in QKD. The PU-QKD scheme leverages classical Physical Unclonable Functions (PUFs) to encode the data transmission in discrete variable QKD protocols (e.g., BB84). Our scheme maintains the information-theoretic security of QKD protocols by integrating the PUF as an additional layer. Authentication is bound to hardware, providing a robust fingerprint, while lower post-processing overhead increases key rates. Additionally, the proposed scheme is resilient against state-of-the-art PUF vulnerabilities, such as modeling attacks.

GlobecomDec 8, 20252 citations

Post-Quantum Secure Authentication Methods Suitable For Quantum Key Distribution

Mohammad Zamani

QKD occurs over two communication channels: classical and quantum. While the quantum channel is somewhat secure by quantum principles, the classical channel need to be authenticated using cryptographic algorithms. Unfortunately, the authentication algorithms and the methods suggested are not taking into consideration the problems practical implementations are facing. Moreover, there are areas which has not been discussed by the literature such as the quantum application layer in communication over classical channel. This study identifies the hurdles practical implementations of QKD are facing and proposes a solution which take into consideration these needs. Moreover, it suggests new protocols and approaches suitable for QKD post processing authentication.

Jan 1, 20180 citations