Satellite based quantum key distribution (QKD) aims to establish secure key exchange over long distances despite significant technological challenges. To alleviate some of these challenges, Ghalaii et al. [PRX Quantum 4, 040320 (2023)] proposed that any airborne eavesdropper up to a certain size can be detected by classical monitoring techniques, limiting the transmission efficiencies of any undetected Eve. This creates a new QKD scenario in which some of the transmitted signal from Alice to Bob bypasses Eve entirely. In this manuscript, we develop a general framework for computing key rates in this "bypass" scenario for discrete variable protocols. We first numerically support a conjecture that the performance of BB84 with single photons does not improve under bypass constraints, and go on to find new regimes that do. Specifically, we find improvements when the receiver's detectors have an efficiency mismatch and when BB84 is implemented using weak coherent pulses under certain squashing assumptions. Technically, our framework is realized by including marginal constraints on the source to account for bypass effects, combined with existing numerical approaches for minimizing the key rate and squashing and dimension reduction techniques to handle photonic states of unbounded dimension.
Satellite based quantum key distribution (QKD) aims to establish secure key exchange over long distances despite significant technological challenges. To alleviate some of these challenges, Ghalaii et al. [PRX Quantum 4, 040320 (2023)] proposed that any airborne eavesdropper up to a certain size can be detected by classical monitoring techniques, limiting the transmission efficiencies of any undetected Eve. This creates a new QKD scenario in which some of the transmitted signal from Alice to Bob bypasses Eve entirely. In this manuscript, we develop a general framework for computing key rates in this "bypass" scenario for discrete variable protocols. We first numerically support a conjecture that the performance of BB84 with single photons does not improve under bypass constraints, and go on to find new regimes that do. Specifically, we find improvements when the receiver's detectors have an efficiency mismatch and when BB84 is implemented using weak coherent pulses under certain squashing assumptions. Technically, our framework is realized by including marginal constraints on the source to account for bypass effects, combined with existing numerical approaches for minimizing the key rate and squashing and dimension reduction techniques to handle photonic states of unbounded dimension.
The security of prepare-and-measure satellite-based quantum key distribution (QKD), under restricted eavesdropping scenarios, is addressed.We particularly consider cases where the eavesdropper, Eve, has limited access to the transmitted signal by Alice and/or Bob's receiver station.This restriction is modeled by lossy channels between relevant parties, where the transmissivity of such channels can, in principle, be bounded by monitoring techniques.An artifact of such lossy channels is the possibility of having bypass channels, those that are not accessible to Eve but that may not necessarily be characterized by the users either.This creates interesting unexplored scenarios for analyzing QKD security.In this paper, we obtain generic bounds on the key rate in the presence of bypass channels and apply them to continuousvariable QKD protocols with Gaussian encoding with direct and reverse reconciliation.We find regimes of operation in which the above restrictions on Eve can considerably improve system performance.We also develop customized bounds for several protocols in the BB84 family and show that, in certain regimes, even the simple protocol of BB84 with weak coherent pulses is able to offer positive key rates at high channel losses, which would otherwise be impossible under an unrestricted Eve.In this case, the limitation on Eve would allow Alice to send signals with larger intensities than the optimal value under an ideal Eve, which effectively reduces the effective channel loss.In all these cases, the part of the transmitted signal that does not reach Eve can play a nontrivial role in specifying the achievable key rate.Our work opens up new security frameworks for spaceborne quantum communications systems.
One of the challenges in practical quantum key distribution is dealing with efficiency mismatch between different threshold single-photon detectors. There are known bounds for the secret key rate for the BB84 protocol with detection-efficiency mismatch provided that the eavesdropper sends no more than one photon to the legitimate receiver. Here we improve these bounds and give tight bounds for the secret key rate with a constant detection-efficiency mismatch under the same single-photon assumption. We propose a method based on the analytical minimization of the relative entropy of coherence, which can be used in other problems in quantum key distribution. Also we propose an adaptation of the decoy state method to prove the security in the case of weak coherent pulses on the source side.
Quantum-key distribution (QKD) schemes employing quantum communication links are typically based on the transmission of weak optical pulses over optical fibers to setup a secret key between the transmitting and receiving nodes. Alice transmits optically a random bit stream to the receiver (Bob) through the photon polarizations or the quadrature components of the lightwaves associated with the photons, with a secret key remaining implicitly embedded therein. However, during the above transmission, some eavesdropper (Eve) might attempt to tap the passing-by photons from the optical fiber links to extract the key. In one of the popular QKD schemes, along with signal pulses, some additional decoy pulses are transmitted by Alice, while Eve might use photon-number splitting (PNS) for eavesdropping. In a typical PNS scheme, (i) the optical pulses with single photon are blocked by Eve, (ii) from the optical pulses with two photons, one photon is retained by Eve to carry out eavesdropping operation and the other is retransmitted to Bob, and (iii) all other pulses with more than two photons are retransmitted by Eve to Bob without retaining any photon from them. Extensive theoretical research has been carried out on such QKD schemes, by employing information-theoretic approach along with computer simulations and experimental studies. We present a novel event-by-event impairment enumeration approach to evaluate the overall performance of one such QKD scheme analytically with due consideration to the physical layer of the quantum communication links. The proposed approach monitors the impairments of the propagating optical pulses event-by-event at all possible locations along the optical fiber link using statistical approach, and provides estimates of the realizable key generation rate, while assuring an adequate yield ratio between signal and decoy pulses for the detection of possible eavesdropping.
Global quantum secure communication can be achieved using quantum key distribution (QKD) with orbiting satellites. Established techniques use attenuated lasers as weak coherent pulse (WCP) sources, with so-called decoy-state protocols, to generate the required single-photon-level pulses. While such approaches are elegant, they come at the expense of attainable final key due to inherent multi-photon emission, thereby constraining secure key generation over the high-loss, noisy channels expected for satellite transmissions. In this work we improve on this limitation by using true single-photon pulses generated from a semiconductor quantum dot (QD) embedded in a nanowire, possessing low multi-photon emission (<10−6) and an extraction system efficiency of -15 dB (or 3.1%). Despite the limited efficiency, the key generated by the QD source is greater than that generated by a WCP source under identical repetition rate and link conditions representative of a satellite pass. We predict that with realistic improvements of the QD extraction efficiency to -4.0 dB (or 40%), the quantum-dot QKD protocol outperforms WCP-decoy-state QKD by almost an order of magnitude. Consequently, a QD source could allow generation of a secure key in conditions where a WCP source would simply fail, such as in the case of high channel losses. Our demonstration is the first specific use case that shows a clear benefit for QD-based single-photon sources in secure quantum communication, and has the potential to enhance the viability and efficiency of satellite-based QKD networks.
In this thesis we develop practical tools for quantum key distribution (QKD) security proofs. We apply the tools to provide security proofs for several protocols, ranging from discrete variable protocols in high dimensions, protocols with realistic implementations, measurement device independent QKD and continuous-variable QKD. The security proofs are based on the Devetak-Winter security framework [I. Devetak and A. Winter, Proc. of the Roy. Soc. of London Series A, 461, 207 (2005); B. Kraus, N. Gisin, and R. Renner, Phys. Rev. Lett., 95 080501 (2005)]. \n \nIn the key rate calculation, it is often convenient to assume that the optimal attack is symmetric. \nUnder the assumption that the parameter estimation is based on coarse-grained observations, we show that the optimal attack is symmetric, if the protocol and the postselection have sufficient symmetries. \nAs an example we calculate the key rates of protocols using 2, d and d+1 mutually unbiased bases in d-dimensional Hilbert spaces. \n \nWe investigate the connection between the optimal collective eavesdropping attack and the optimal cloning attack, in which the eavesdropper employs an optimal cloner to attack the protocol. \nWe find that, in general, it does not hold that the optimal attack is an optimal cloner. However, there are classes of protocols, for which we can identify the optimal attack by an optimal cloner. \nWe analyze protocols with mutually unbiased bases in d dimensions, and show that for the protocols with 2 and d+1 mutually unbiased bases the optimal attack is an optimal cloner, but for the protocols with d mutually unbiased bases, it is not. \n \nIn optical implementations of the phase-encoded BB84 protocol, the bit information is usually encoded in the phase of two consecutive photon pulses generated in a Mach-Zehnder interferometer. In the actual experimental realization, the loss in the arms of the Mach-Zehnder interferometer is not balanced, for example because only one arm contains a lossy phase modulator. \nSince the imbalance changes the structure of the signals states and measurements, the BB84 security analysis no longer applies in this scenario. \nWe provide a security proof for the unbalanced phase-encoded BB84. The loss does lower the key rate compared to a protocol without loss. However, for a realistic parameter regime, the same key rate is found by applying the original BB84 security analysis. \n \nRecently, the security of a measurement device-independent QKD setup with BB84 signal states was proven in Refs. [H.-K. Lo, M. Curty, and B. Qi, Phys. Rev. Lett., 108 (2012); S. L. Braunstein and S. Pirandola, Phys. Rev. Lett., 108 (2012)]. In this setup Alice and Bob send quantum states to an intermediate node, which performs the measurement, and is assumed to be controlled by Eve. \nWe analyze the security of a measurement device-independent QKD protocol with B92 signal states, and calculate the key rates numerically for a realistic implementation. \nBased on our security proof we were able to prove the security of the strong reference pulse B92 protocol. \n \nWe analyze the security of continuous-variable protocols using the entropic uncertainty relations established in Ref. [M. Berta, M. Christandl, R. Colbeck, J. M. Renes, and R. Renner, Nature Physics 6, 659 (2010)] to provide an estimate of the key rate based on the observed first and second moments. We analyze a protocol with squeezed coherent states and the 2-state protocol with two coherent states with opposite phases.
The absence of real single-photon sources is a significant limitation to the experimental implementation of the BB84 quantum key distribution (QKD) protocol. When substantially attenuated laser pulses are substituted for ideal sources in practical systems, the outcome is weak coherent states where each pulse has a nonzero probability of having multiple photons rather than pure single-photon emission. To evaluate quantum bit error rate (QBER), key generation rate and overall system security it is essential to describe the exact impact of the optical and physical system on such pulses. This practical tradeoff presents additional issues. It is crucial to understand how QBER is impacted by attenuation, loss, dispersion, depolarisation and detector properties particularly in adversarial scenarios such as photon number splitting (PNS) and beam-splitting attacks. Although a significant amount of research has been conducted on algorithmic simulations of BB84, there are few complete frameworks that can physically explain these effects and their impact on QBER. This work models the BB84 protocol at the physical level by developing a Python-based simulation platform that takes into account all significant channel impairments and system inefficiencies. The framework supports both theoretical and practical optimisation of QKD systems by further isolating the effects of different optical losses and eavesdropping techniques on QBER and secure key generation.