We analyze the security of an Ekert type bipartite key distribution protocol coming under cloning attacks by an untrusted observer. Precisely, an eavesdropper is assumed to intercept and apply an asymmetric, phase-variant cloner on one or both qubits which are transmitted over public channel from an authenticated source to the trusted parties. We partially characterize two-qubit states from the perspective of designing a QKD protocol that can generate a distillable secret key among the trusted users even under such cloning attacks. We rely upon Devetak Winter framework for computing key rate so as to identify states, which when used in the protocol, secret-key can be distilled. Utility of an entangled state, for designing a successful QKD protocol, changes from single-qubit to double-qubits cloning attacks. Interestingly, we can distinguish some useful families of two-qubit entangled states when only one of the transmitted qubits is cloned by a malicious third party.
AI Summary
The paper studies which two-qubit resource states support secret-key extraction in an Ekert-type QKD protocol under a specified asymmetric, phase-variant cloning attack. The source and measurement devices are trusted; Eve intercepts either one transmitted qubit or both, retaining the ancillary outputs. This is an attack-specific analysis rather than security against arbitrary adversaries.
The protocol combines CHSH and QBER validation checks with an asymptotic, direct-reconciliation Devetak–Winter calculation. The stated validation conditions are $\lambda_1^2+\lambda_2^2>1$ and $\lambda_1+\lambda_2>\sqrt{2}$, where the $\lambda_i$ are correlation-tensor singular values. The calculated rate is $r_D=\frac13\sum_{j=1}^3[I_j(A:B)-\chi_j(A:E)]$, averaged over three Pauli measurement bases.
For single-qubit attacks, the paper reports positive rates for pure entangled states and entangled states with maximally mixed marginals, including Werner states, and for several noisy-channel constructions. These conclusions use explicit reduced-state and entropy calculations, with parameter-space plots supporting positivity claims. A maximally entangled input at cloning parameter $\theta=\pi/4$ gives $I(A:B)=0.739127$, $\chi=0.140517$, and $r_D=0.59861$ bits. Examples with nonzero local Bloch vectors pass both validation checks but yield negative calculated rates. Double-qubit attacks are compared numerically and can change a positive rate into a negative one.
The stated limitations are the restriction to this cloning strategy and the absence of a complete characterization of useful two-qubit states. General attacks and a systematic distinction between single- and double-qubit attack regimes are left open.
No sign of AI-generated textOverclaimsPossible errorStrong assumptionsUnclear novelty
Central claim may not hold: The universal claims of successful key generation contradict the protocol's mandatory abort checks, as demonstrated by the allowed theta=0 pure state with alpha=0.1 and the entangled Werner state with v=0.5.
The comparison table labels the Werner case v=0.71, theta=pi/4 successful despite its failure of both validation checks, and several entries use attack parameters outside the specified domain.
The printed cloning transformation cannot correlate Eve's ancilla with the signal and differs from the amplitude-damping-type isometry used in the worked example.
The security calculation averages over three key-generation bases although the protocol specifies two, and its printed entropy formulas omit outcome averaging while the stated Holevo inequality has the wrong direction.
The paper treats a nonpositive achievable Devetak–Winter expression as a general impossibility of distilling key without proving a converse, and its supplementary assertion of strictly positive Werner rates includes v=0 where the rate is exactly zero.
Written by gpt-6.1-sol from the paper's full text. Automated: it can be wrong.
We analyze the security of an Ekert type bipartite key distribution protocol coming under cloning attacks by an untrusted observer. Precisely, an eavesdropper is assumed to intercept and apply an asymmetric, phase-variant cloner on one or both qubits which are transmitted over public channel from an authenticated source to the trusted parties. We partially characterize two-qubit states from the perspective of designing a QKD protocol that can generate a distillable secret key among the trusted users even under such cloning attacks. We rely upon Devetak Winter framework for computing key rate so as to identify states, which when used in the protocol, secret-key can be distilled. Utility of an entangled state, for designing a successful QKD protocol, changes from single-qubit to double-qubits cloning attacks. Interestingly, we can distinguish some useful families of two-qubit entangled states when only one of the transmitted qubits is cloned by a malicious third party.
The paper studies which two-qubit resource states support secret-key extraction in an Ekert-type QKD protocol under a specified asymmetric, phase-variant cloning attack. The source and measurement devices are trusted; Eve intercepts either one transmitted qubit or both, retaining the ancillary outputs. This is an attack-specific analysis rather than security against arbitrary adversaries.
The protocol combines CHSH and QBER validation checks with an asymptotic, direct-reconciliation Devetak–Winter calculation. The stated validation conditions are λ12+λ22>1 and λ1+λ2>2, where the λi are correlation-tensor singular values. The calculated rate is rD=31∑j=13[Ij(A:B)−χj(A:E)], averaged over three Pauli measurement bases.
For single-qubit attacks, the paper reports positive rates for pure entangled states and entangled states with maximally mixed marginals, including Werner states, and for several noisy-channel constructions. These conclusions use explicit reduced-state and entropy calculations, with parameter-space plots supporting positivity claims. A maximally entangled input at cloning parameter θ=π/4 gives I(A:B)=0.739127, χ=0.140517, and rD=0.59861 bits. Examples with nonzero local Bloch vectors pass both validation checks but yield negative calculated rates. Double-qubit attacks are compared numerically and can change a positive rate into a negative one.
The stated limitations are the restriction to this cloning strategy and the absence of a complete characterization of useful two-qubit states. General attacks and a systematic distinction between single- and double-qubit attack regimes are left open.
In this thesis we develop practical tools for quantum key distribution (QKD) security proofs. We apply the tools to provide security proofs for several protocols, ranging from discrete variable protocols in high dimensions, protocols with realistic implementations, measurement device independent QKD and continuous-variable QKD. The security proofs are based on the Devetak-Winter security framework [I. Devetak and A. Winter, Proc. of the Roy. Soc. of London Series A, 461, 207 (2005); B. Kraus, N. Gisin, and R. Renner, Phys. Rev. Lett., 95 080501 (2005)]. \n \nIn the key rate calculation, it is often convenient to assume that the optimal attack is symmetric. \nUnder the assumption that the parameter estimation is based on coarse-grained observations, we show that the optimal attack is symmetric, if the protocol and the postselection have sufficient symmetries. \nAs an example we calculate the key rates of protocols using 2, d and d+1 mutually unbiased bases in d-dimensional Hilbert spaces. \n \nWe investigate the connection between the optimal collective eavesdropping attack and the optimal cloning attack, in which the eavesdropper employs an optimal cloner to attack the protocol. \nWe find that, in general, it does not hold that the optimal attack is an optimal cloner. However, there are classes of protocols, for which we can identify the optimal attack by an optimal cloner. \nWe analyze protocols with mutually unbiased bases in d dimensions, and show that for the protocols with 2 and d+1 mutually unbiased bases the optimal attack is an optimal cloner, but for the protocols with d mutually unbiased bases, it is not. \n \nIn optical implementations of the phase-encoded BB84 protocol, the bit information is usually encoded in the phase of two consecutive photon pulses generated in a Mach-Zehnder interferometer. In the actual experimental realization, the loss in the arms of the Mach-Zehnder interferometer is not balanced, for example because only one arm contains a lossy phase modulator. \nSince the imbalance changes the structure of the signals states and measurements, the BB84 security analysis no longer applies in this scenario. \nWe provide a security proof for the unbalanced phase-encoded BB84. The loss does lower the key rate compared to a protocol without loss. However, for a realistic parameter regime, the same key rate is found by applying the original BB84 security analysis. \n \nRecently, the security of a measurement device-independent QKD setup with BB84 signal states was proven in Refs. [H.-K. Lo, M. Curty, and B. Qi, Phys. Rev. Lett., 108 (2012); S. L. Braunstein and S. Pirandola, Phys. Rev. Lett., 108 (2012)]. In this setup Alice and Bob send quantum states to an intermediate node, which performs the measurement, and is assumed to be controlled by Eve. \nWe analyze the security of a measurement device-independent QKD protocol with B92 signal states, and calculate the key rates numerically for a realistic implementation. \nBased on our security proof we were able to prove the security of the strong reference pulse B92 protocol. \n \nWe analyze the security of continuous-variable protocols using the entropic uncertainty relations established in Ref. [M. Berta, M. Christandl, R. Colbeck, J. M. Renes, and R. Renner, Nature Physics 6, 659 (2010)] to provide an estimate of the key rate based on the observed first and second moments. We analyze a protocol with squeezed coherent states and the 2-state protocol with two coherent states with opposite phases.
The study of quantum cryptography and quantum entanglement have traditionally been based on two-level quantum systems (qubits). In this paper, we consider a generalization of Ekert's entanglement-based quantum cryptographic protocol where qubits are replaced by three-level systems (qutrits). In order to investigate the security against the optimal individual attack, we derive the information gained by a potential eavesdropper applying a cloning-based attack. We exhibit the explicit form of this cloner, which is distinct from the previously known cloners, and conclude that the protocol is more robust than those based on entangled qubits as well as unentangled qutrits.
In recent years, traditional cryptography has faced a lot of threats with advancements in quantum computing technology. The objective of the work is to analyze the suitability of the BB84 protocol for quantum key distribution. The BB84 protocol uses the principles of superposition, entanglement, and the no-cloning theorem that provide a framework enabling the secure exchange of secret keys. Qiskit, an open-source software, is used for analysis and study. An ideal quantum channel is established between the two communicating parties using Qiskit. The analysis is done in the presence of an eavesdropper, and it is found that the eavesdropper’s incorrect basis choices alter the states of the qubits, and thereby, the communicating parties will come to know about the interception.
Quantum cryptography is considered a solution for sharing secret information in a secure mode. Establishing a quantum security platform into an exciting system requires a package of stable processes. One of these processes is based on creating a Quantum Key Distribution (QKD) protocol or sharing a secret key. This paper presents a QKD protocol that utilizes two quantum channels to prepare a shared secret key. The first communication channel will be initiated by entanglement states, where the entangled photons will be emitted by a trusted third party. The second communication channel utilizes the superposition states that will be initiated by the one of the communicated parties. Moreover, the protocol produces a string of random qubits after verifying the communicated legitimate parties during entangled state channels. The produced string will reflect the shared secret key between the users.
Quantum Key Distribution (QKD) allows spatially separated parties to establish a secret key among themselves based on quantum principles. While QKD systems are being deployed worldwide, their reliance on trusted measurements makes them vulnerable. Moreover, existing protocols have largely focussed on the qubit cases, and rely on the maximally entangled state, a costly resource to generate. Here, we consider the one-sided-device-independent (1SDI) QKD protocols, where one of the measurement devices is trusted while the other is untrusted. The resource in this scenario is quantum steering, an asymmetric form of quantum nonlocality. This is inspired by a real-world scenario, where the trusted party can be considered to be a bank, or any large organisation that has sufficient resources to protect its systems and validate them, while the users are vulnerable to attacks. We then demonstrate that a secure key can be obtained using any pure bipartite entangled state in this setup. Considering realistic detectors and sources based on current technology, we demonstrate that even states that are almost separable can be used to extract a secure key. Moreover, for every pure entangled bipartite state, we find the critical detection efficiencies and visibility to obtain a secure key.
We investigate the connection between the optimal collective eavesdropping attack and the optimal cloning attack where the eavesdropper employs an optimal cloner to attack the quantum key distribution (QKD) protocol. The analysis is done in the context of the security proof in Refs. [Proc. R. Soc. London A 461, 207 (2005); Phys. Rev. Lett. 95, 080501 (2005)] for discrete variable protocols in d-dimensional Hilbert spaces. We consider a scenario in which the protocols and cloners are equipped with symmetries. These symmetries are used to define a quantum cloning scenario. We find that, in general, it does not hold that the optimal attack is an optimal cloner. However, there are classes of protocols, where we can identify an optimal attack by an optimal cloner. We analyze protocols with 2, d and d+1 mutually unbiased bases where d is a prime, and show that for the protocols with 2 and d+1 mutually unbiased bases (MUBs) the optimal attack is an optimal cloner but, for the protocols with d MUBs, it is not. Finally, we give criteria to identify protocols which have different signal states, but the same optimal attack. Using these criteria, we present qubit protocols which have the same optimal attack as the Bennett-Brassard 1984 (BB84) protocol or the 6-state protocol.