Despite the significant progress made in both theoretical and experimental quantum key distribution (QKD), the security of current QKD implementations is still not yet established rigorously. One of the major causes of this impasse is that existing security analyses are strongly dependently on the classical-post-processing block size, and as a consequence, the resulting security bounds are unduly pessimistic. In other words, applying these security bounds to current QKD implementations would severely impair the efficiency of these implementations. In this thesis, we overcome this impasse by providing a novel security framework that allows one to derive tight non-asymtptotic security bounds on a wide range of QKD implementations. This essentially closes the gap between theory and practice of QKD.
Despite the significant progress made in both theoretical and experimental quantum key distribution (QKD), the security of current QKD implementations is still not yet established rigorously. One of the major causes of this impasse is that existing security analyses are strongly dependently on the classical-post-processing block size, and as a consequence, the resulting security bounds are unduly pessimistic. In other words, applying these security bounds to current QKD implementations would severely impair the efficiency of these implementations. In this thesis, we overcome this impasse by providing a novel security framework that allows one to derive tight non-asymtptotic security bounds on a wide range of QKD implementations. This essentially closes the gap between theory and practice of QKD.
The main goal of this research project is to analyse the security of practical implementations of discrete-variable QKD systems. While it is true that in theory QKD can offer unconditional security based on the laws of physics, in practice, however, at the moment it does not, because typical security proofs of QKD include assumptions that are not actually met by current implementations, as they usually ignore many experimental device imperfections. This means that these proofs cannot be applied to practical realisations because real devices behave differently from the theoretical models that are assumed in the proofs. This project aims to fill in this big gap between the theory and the practice of QKD by developing efficient security proof methods for the finite sample-size setting scenario that can include typical devices’ flaws to be applied to QKD experiments, particularly to decoy-state-based QKD platforms.
In contrast to classical public-key cryptosystems, where the security of encoded messages relies on on computational assumptions, Quantum Key Distribution (QKD) enables two distant parties to establish a shared secret key that, when combined with a one-time pad, provides information-theoretically secure encryption, provided that the QKD protocol is supported by a rigorous security proof. In the last decades, security proofs robust against a wide range of eavesdropping strategies have established the theoretical soundness of several QKD protocols. However, most proofs are based on idealized models of the physical systems involved in such protocols and often include assumptions that are not satisfied in practical implementations. This mismatch creates a gap between theoretical security guarantees and actual experimental realizations, making QKD protocols vulnerable to attacks. To ensure the security of real-world QKD systems, it is therefore essential to account for imperfections in security analyses. In this article, we present an overview of recent analytical and numerical developments in QKD security proofs, which provide a versatile approach for incorporating imperfections and re-establishing the security of quantum communication protocols under realistic conditions.
This thesis is concerned with rigorous security analyses of practical Quantum Key Distribution (QKD) protocols, using a variety of modern proof techniques. The main results are as follows. First, we establish a security proof for variable-length QKD protocols against IID collective attacks, and extend this result to coherent attacks using the postselection technique. In doing so, we resolve a long-standing flaw in the application of the postselection technique to QKD, thereby placing it on a rigorous mathematical footing. Second, we develop a method to bound phase error rates in entropic uncertainty relation-based and phase error rate-based proofs, using only the observed statistics of the protocol, even when detectors are imperfect and only approximately characterized. This removes a key assumption of identical detector behaviour and enables these techniques to be applied in realistic settings. Third, we present a very general security analysis based on the marginal-constrained entropy accumulation theorem. The resulting framework can be readily adapted to practical imperfections and side channels, and is suitable for certification efforts. Finally, we show that the security of QKD protocols under realistic authentication assumptions can be reduced to the standard idealized setting, where authentication is assumed to behave honestly, with only minor protocol modifications. A distinctive feature of this thesis is its unified presentation of several major QKD security proof frameworks using consistent protocol descriptions and notation. Consequently, this thesis is intended not only as a collection of new technical results, but also as a useful reference for understanding rigorous security analysis in quantum key distribution.
Despite enormous theoretical and experimental progress in quantum cryptography, the security of most current implementations of quantum key distribution is still not rigorously established. One significant problem is that the security of the final key strongly depends on the number, M, of signals exchanged between the legitimate parties. Yet, existing security proofs are often only valid asymptotically, for unrealistically large values of M. Another challenge is that most security proofs are very sensitive to small differences between the physical devices used by the protocol and the theoretical model used to describe them. Here we show that these gaps between theory and experiment can be simultaneously overcome by using a recently developed proof technique based on the uncertainty relation for smooth entropies. Although they offer significant promise, practical implementations of quantum key distribution are often not as rigorous as theory predicts. This study demonstrates how two instances of such discrepancies can be resolved by taking advantage of an enotropic formulation of the uncertainty principle.
The counter-intuitive features of quantum mechanics make it possible to solve problems and perform tasks that are beyond the abilities of non-quantum (classical) computers and communication devices. The field of quantum information processing studies how we can achieve such improvements by representing information as quantum states.One of the early achievements of quantum information processing is the development of quantum key distribution (QKD). QKD protocols allow two participants (Alice and Bob) to achieve the classically-impossible task of generating a secret shared key even if their adversary is computationally unlimited.Unfortunately, the security promises of QKD are true only in theory; practical implementations of QKD deviate from the theoretical protocols, and many of these deviations give rise to practical attacks. In this research thesis, we study the security properties of various QKD protocols in many practical settings:First, we study practical security of semiquantum key distribution (SQKD) protocols, where either Alice or Bob is non-quantum (classical). Following practical security problems in previous SQKD protocols, we suggest a new SQKD protocol (the "Mirror protocol") which can be securely implemented, and we prove it robust and secure against a wide range of attacks (the "uniform collective attacks").Then, we study "composable security" of the first QKD protocol created by Bennett and Brassard (BB84). BB84 has its unconditional security proved against adversaries performing the most general attacks in a theoretical (idealized) setting; however, some security approaches do not prove "composable security", which requires the secret key to remain secret even when Alice and Bob actually use it for cryptographic purposes. We generalize an algebraic security approach for BB84, making it prove composable security of BB84 (and many variants of BB84) against the most general attacks.Finally, we analyze an important practical attack (named "Bright Illumination"), showing how it can be modeled as a theoretical "Reversed-Space" attack.Overall, all results aim to enhance our understanding on how to bridge the gap between theory and practice in various sub-fields of QKD, and they may help solve a major open problem in the field of QKD: constructing a realistic QKD implementation that can be proved truly and unconditionally secure against any possible attack.
Quantum Key Distribution (QKD) offers information-theoretic security grounded in the laws of quantum mechanics rather than computational assumptions. While its theoretical foundations are robust, practical implementations necessarily deviate from the idealized models assumed in security analyses, opening the door to side-channel attacks and implementation loopholes. In particular, most research to date has focused on mitigating vulnerabilities in the measurement devices, leading to the development of Measurement-Device-Independent QKD (MDI-QKD) and Twin-Field QKD (TF-QKD), which effectively close all receiver-side loopholes. By contrast, the security of the source has remained less explored, despite being critical for the overall integrity of QKD systems. The goal of this thesis is to develop security proofs that explicitly account for realistic imperfections in QKD sources. Special emphasis is placed on three main aspects: correlations between emitted pulses that violate independence assumptions, imperfect phase randomization arising from practical modulation schemes, and leakage of internal settings through passive or active side channels. By formulating rigorous methods to analyze these imperfections, the work aims to provide a framework that enables practitioners to quantify and mitigate implementation risks systematically. Additionally, this thesis seeks to clarify under which conditions the commonly used decoy-state method remains secure, and to what extent source assumptions can be relaxed without compromising performance. This thesis aims to advance the understanding of how real-world deviations impact QKD security and to contribute to the development of protocols and devices. Ultimately, this work is motivated by the ambition to help bring QKD from a theoretically promising idea to a mature technology deployable with confidence in practical scenarios.