Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Lecture notes in computer science

Information-Theoretically Secure Secret-Key Agreement by NOT Authenticated Public Discussion

Ueli M. Maurer

Published Jan 1, 1997• 94 citations
Publisher
DOI
10.1007/3-540-69053-0_15

Related papers

Information Theoretically Secure Secret Key Agreement

Shun Watanabe, Ryutaroh Matsumoto, Tomohiko Uyematsu

IEICE Technical Report; IEICE Tech. Rep.•Feb 23, 2012•0 citations

Quantum cryptography and authentication with low key-consumption

Aysajan Abidin, Christoph Pacher, Thomas Lorünser +2 more

Quantum Key Distribution (QKD - also referred to as Quantum Cryptography) is a technique for secret key agreement. It has been shown that QKD rigged with Information-Theoretic Secure (ITS) authentication (using secret key) of the classical messages transmitted during the key distribution protocol is also ITS. Note, QKD without any authentication can trivially be broken by man-in-the-middle attacks. Here, we study an authentication method that was originally proposed because of its low key consumption; a two-step authentication that uses a publicly known hash function, followed by a secret strongly universal2 hash function, which is exchanged each round. This two-step authentication is not information-theoretically secure but it was argued that nevertheless it does not compromise the security of QKD. In the current contribution we study intrinsic weaknesses of this approach under the common assumption that the QKD adversary has access to unlimited resources including quantum memories. We consider one implementation of Quantum Cryptographic protocols that use such authentication and demonstrate an attack that fully extract the secret key. Even including the final key from the protocol in the authentication does not rule out the possibility of these attacks. To rectify the situation, we propose a countermeasure that, while not information-theoretically secure, restores the need for very large computing power for the attack to work. Finally, we specify conditions that must be satisfied by the two-step authentication in order to restore information-theoretic security.

Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE•Oct 6, 2011•3 citations

Information-Theoretic Key Agreement of Multiple Terminals—Part II: Channel Model

Amin Gohari, Venkat Anantharam

This is the second part of a two-part paper on information-theoretically secure secret key agreement. This part covers the secret key capacity under the channel model. In this model, multiple terminals wish to create a shared secret key that is secure from an eavesdropper with unlimited computational resources. The terminals are all connected to a noiseless and authenticated but insecure channel, called the “public channel.” Furthermore, the terminals have access to a secure but noisy discrete memoryless broadcast channel (DMBC). The first terminal can choose a sequence of inputs to the DMBC, which has outputs at the other terminals and at the eavesdropper. After each channel use, the terminals can engage in arbitrarily many rounds of interactive authenticated communication over the public channel. At the end, each legitimate terminal should be able to generate the secret key. In this paper, we derive new lower and upper bounds on the secrecy capacity. In each case, an example is provided to show that the new bound represents a strict improvement over the previously best known bound. This part of the paper is not standalone, and is written under the assumption that the reader has access to Part I, which is published in the same issue.

IEEE Transactions on Information Theory•Jul 21, 2010•74 citations

Protocols for Secret Key Agreement by Public Discussion Based on Common Information

Ueli M. Maurer

Springer eBooks•Aug 5, 2007•85 citations

Information-theoretic secret key agreement

SL Shengli Liu

•Jan 1, 2002•10 citations

Signal Sets for Secret Key Agreement With Public Discussion Based on Gaussian and Fading Channels

Motohiko Isaka, S. Kawata

We study the signal sets for information theoretically secure key agreement with public discussion over the Gaussian and flat fading channels. Alice transmits signals to Bob over a noisy channel while Eve receives signals through an independent noisy channel. By utilizing this noisy resource, Alice and Bob wish to share a secret key on which Eve has a negligible amount of information. We present a protocol that allows Alice and Bob to share a common secret information, and encompass the signal sets for an efficient protocol in information theoretic sense.

IEEE Transactions on Information Forensics and Security•Mar 22, 2011•7 citations
Quantum Key Distribution (QKD - also referred to as Quantum Cryptography) is a technique for secret key agreement. It has been shown that QKD rigged with Information-Theoretic Secure (ITS) authentication (using secret key) of the classical messages transmitted during the key distribution protocol is also ITS. Note, QKD without any authentication can trivially be broken by man-in-the-middle attacks. Here, we study an authentication method that was originally proposed because of its low key consumption; a two-step authentication that uses a publicly known hash function, followed by a secret strongly universal2 hash function, which is exchanged each round. This two-step authentication is not information-theoretically secure but it was argued that nevertheless it does not compromise the security of QKD. In the current contribution we study intrinsic weaknesses of this approach under the common assumption that the QKD adversary has access to unlimited resources including quantum memories. We consider one implementation of Quantum Cryptographic protocols that use such authentication and demonstrate an attack that fully extract the secret key. Even including the final key from the protocol in the authentication does not rule out the possibility of these attacks. To rectify the situation, we propose a countermeasure that, while not information-theoretically secure, restores the need for very large computing power for the attack to work. Finally, we specify conditions that must be satisfied by the two-step authentication in order to restore information-theoretic security.
This is the second part of a two-part paper on information-theoretically secure secret key agreement. This part covers the secret key capacity under the channel model. In this model, multiple terminals wish to create a shared secret key that is secure from an eavesdropper with unlimited computational resources. The terminals are all connected to a noiseless and authenticated but insecure channel, called the “public channel.” Furthermore, the terminals have access to a secure but noisy discrete memoryless broadcast channel (DMBC). The first terminal can choose a sequence of inputs to the DMBC, which has outputs at the other terminals and at the eavesdropper. After each channel use, the terminals can engage in arbitrarily many rounds of interactive authenticated communication over the public channel. At the end, each legitimate terminal should be able to generate the secret key. In this paper, we derive new lower and upper bounds on the secrecy capacity. In each case, an example is provided to show that the new bound represents a strict improvement over the previously best known bound. This part of the paper is not standalone, and is written under the assumption that the reader has access to Part I, which is published in the same issue.
We study the signal sets for information theoretically secure key agreement with public discussion over the Gaussian and flat fading channels. Alice transmits signals to Bob over a noisy channel while Eve receives signals through an independent noisy channel. By utilizing this noisy resource, Alice and Bob wish to share a secret key on which Eve has a negligible amount of information. We present a protocol that allows Alice and Bob to share a common secret information, and encompass the signal sets for an efficient protocol in information theoretic sense.