Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE

Modification of error reconciliation scheme for quantum cryptography

Konstantin Kuritsyn

Published Jul 23, 2003• 6 citations
Publisher

Abstract

Quantum cryptography is essentially the quantum key distribution (QKD). In the context of QKD, one from two partners (Alice) generates and sends a sequence of qubits through a private quantum channel to another partner (Bob) and Bob receives the sequence and measures the state of each qubit. After the quantum transmission stage, Alice and Bob have almost identical qubit sequences. The erros are due to physical imperfections in the channel and presence of an eavesdropper. The next stage in QKD is key reconciliation (i.e. finding and correcting discrepancies between Alice's string and that of Bob). This reconciliation can be done by public discussion. Let us suppose there is a secret quantum channel between Alice and Bob through which Alice transmits a n-bit string A=(A1, A2,...,An)ε{0,1}n. Then Bob receives a n-bit string B=(B1, B2,...,Bn)ε{0,1)n. The string B differs from A due to the presence of noise and eavesdropper in the channel. One can estimate the bit error probability in the channel. For example, Bob can choose a random subset from his string and send it to Alice in public. Then Alice compares the received string with her corresponding subset and calculates the total number of protocol steps. The cascade scheme uses the interaction over the public channel to correct the secret strings by dividing them into the blocks of a fixed length. The length is determined from the bit error probability. A simple interactive routine is applied in each of these blocks. An error found in some block results in some action with other blocks. It is important to optimize the error-finding routines in standalone blocks as well as to organize the effective constrution of blocks with the object of protocol benchmark, information leakage and number of interactions between partners.

DOI
10.1117/12.517879

Related papers

Enhanced Reconciliation of Quantum Key Distribution

Ching‐Nung Yang, Chih-Yueh Tseng, Ming-Chan Lu

Quantum Key Distribution (QKD) could share a secret key between two distant nodes Alice and Bob. In the presence of an eavesdropper and noisy channel, Alice’s key may not be the same as Bob’s key. Thus, QKD protocol has to provide not only the distribution in key agreement phase but also the integrity in key verification phase. Error reconciliation is often used in QKD to share identical keys between Alice and Bob in key verification phase. Recently, Kurt et al. introduce a reconciliation algorithm for QKD (RQKD) to prevent error propagation in some previous reconciliation algorithms. Kurt et al.’s RQKD is a block-wise operation, and uses polynomial interpolation for reconciliation. However, if the x-axis values of polynomials are the same the blocks are removed. In this paper, we propose an enhanced RQKD (ERQKD) to deal with this weakness. When using polynomial-interpolation approach for reconciliation, our ERQKD without deleting block improves the efficiency of sharing qubits.

IEEE Optoelectronics Global Conference (OGC)•Sep 5, 2023•2 citations

An enhancement of quantum key distribution protocol with noise problem

Feng‐Tse Lin

[[abstract]]An enhanced version of the quantum key distribution (QKD) protocol in quantum cryptography is proposed. We consider that realistic detectors and imperfect devices may introduce noise into the transmission thereby causing a high error rate. The proposed scheme is based on an error rate analysis and a random sampling procedure in statistics to produce a probabilistic bound on the error estimation. Confidence intervals are used to interpret the error estimate with a specified confidence level. Based on the information obtained, Alice and Bob judge what caused the errors and establish confidence levels for the error rate of the remaining untested bits. Hence, they can determine the maximum number of times reconciliation needs to be performed to remove all errors from what remains of a raw key to produce an error-free secret key. As a result, the tedious reconciliation process can be reduced and a neglectful probability of not detecting the existence of remaining errors can be avoided as well. The privacy amplification is then applied: (1) to extract a secret key from a partially secret key, and (2) to enlarge the length of the secret key into the final key. The proposed scheme can work when dealing with errors caused by random noise and eavesdropping.

•Jan 1, 2008•0 citations

Quantum Cryptography Revisited

Susan Loepp, William K. Wootters

Recall that in the Bennett–Brassard key distribution scheme, after Alice and Bob have obtained bit strings that ideally are supposed to be identical, they have to do some further processing to make sure they end up with strings that really are identical. Our first goal in this chapter is to show how they can do this. As you might expect, we will use error-correcting codes of the sort we have been discussing in the preceding chapter. However, the way we use error-correcting codes in quantum key distribution is not quite the same as in classical communication. Normally, one corrects errors by encoding one's message into special codewords that are sufficiently different from each other that they will still be distinguishable after passing through a noisy channel. But in quantum key distribution the “noise” of the channel might actually be the effect of an eavesdropper who is free to manipulate the signals sent by Alice. Ordinary error correction is not designed for such a setting. So instead of using codewords to encode the original transmission, we wait until all the bits have been sent and then use an error-correcting code after the fact . In this respect error correction in quantum key distribution is similar to the use of an error-correcting code in the “hat problem” discussed at the end of Chapter 4. There also, the error-correcting code is applied only after all the data – in that case the vector of hat colors – has been generated and conveyed to the participants.

Cambridge University Press eBooks•Jul 10, 2006•1 citation

Key reconciliation protocol for quantum key distribution

Neha Vaishnavi Sharma, Vikas Saxena, Vinay Chamola +1 more

Abstract In quantum cryptography, secret communications are delivered through a quantum channel. One of the most important breakthroughs in quantum cryptography has been the quantum key distribution (QKD). This process enables two distant parties to share secure communications based on physical laws. However, eavesdroppers can still interrupt the communication. To overcome this, we propose a different way to detect the presence of Eve through the polynomial interpolation technique. This technique also allows us for key verification. This approach prevents the receiver as well as the intruder from discovering the sender’s fundamental basis. To fully utilize IBM quantum computers’ quantum computing capabilities, this paper attempts to show % error against alpha (strength of eavesdropping) and the impact of noise on the success probability of the desired key bits. Furthermore, the success probability under depolarizing noise is explained for different qubit counts. In the enhanced QKD protocol, using polynomial interpolation for reconciliation shows a 50% probability of successful key generation. This is even when the noise is increased to the maximum capacity.

EPJ Quantum Technology•Feb 10, 2025•6 citations

Time-Entanglement QKD: Secret Key Rates and Information Reconciliation Coding

Joseph J. Boutros, Emina Soljanin

In time entanglement-based quantum key distribution (TE-QKD), Alice and Bob extract the raw key bits from the arrival times of entangled photon pairs. Each entangled pair can contribute to multiple key bits depending on how precisely Alice and Bob can measure the photon arrival times. Thus, TE-QKD can potentially increase the secret key rate compared to typical QKD implementations, which extract up to a bit per photon. Because of entanglement, the times of photon arrivals at Alice’s and Bob’s detectors and, thus, their raw keys should be identical. However, practical photon detectors suffer from time jitter errors. These errors cause discrepancies between Alice’s and Bob’s raw keys. Therefore, Alice must send information to Bob through the public channel to reconcile their raw keys. The amount of data sent for reconciliation represents a loss, rendering secret keys shorter than the raw keys. We compute the secret key rates possible in systems with detector jitter errors and show that they are much higher than those achievable in polarization entanglement-based QKD. We then construct codes for information reconciliation to approach these rates. We demonstrate that short and moderate-length standard error-correcting codes represent excellent information reconciliation choices, making TE-QKD a promising technology.

arXiv:2301.00486•IEEE Transactions on Communications•Aug 4, 2023•8 citations

Information Reconciliation for Quantum Key Distribution

David Elkouss, Jesús Martínez-Mateo, Vicente Martín Ayuso +1 more

Quantum key distribution (QKD) relies on quantum and classical procedures in order to achieve the growing of a secret random string -the key- known only to the two parties executing the protocol. Limited intrinsic efficiency of the protocol, imperfect devices and eavesdropping produce errors and information leakage from which the set of measured signals -the raw key- must be stripped in order to distill a final, information theoretically secure, key. The key distillation process is a classical one in which basis reconciliation, error correction and privacy amplification protocols are applied to the raw key. This cleaning process is known as information reconciliation and must be done in a fast and efficient way to avoid cramping the performance of the QKD system. Brassard and Salvail proposed a very simple and elegant protocol to reconcile keys in the secret-key agreement context, known as Cascade, that has become the de-facto standard for all QKD practical implementations. However, it is highly interactive, requiring many communications between the legitimate parties and its efficiency is not optimal, imposing an early limit to the maximum tolerable error rate. In this paper we describe a low-density parity-check reconciliation protocol that improves significantly on these problems. The protocol exhibits better efficiency and limits the number of uses of the communications channel. It is also able to adapt to different error rates while remaining efficient, thus reaching longer distances or higher secure key rate for a given QKD system.

•Oct 1, 2010•31 citations
Quantum cryptography is essentially the quantum key distribution (QKD). In the context of QKD, one from two partners (Alice) generates and sends a sequence of qubits through a private quantum channel to another partner (Bob) and Bob receives the sequence and measures the state of each qubit. After the quantum transmission stage, Alice and Bob have almost identical qubit sequences. The erros are due to physical imperfections in the channel and presence of an eavesdropper. The next stage in QKD is key reconciliation (i.e. finding and correcting discrepancies between Alice's string and that of Bob). This reconciliation can be done by public discussion. Let us suppose there is a secret quantum channel between Alice and Bob through which Alice transmits a n-bit string A=(A1, A2,...,An)ε{0,1}n. Then Bob receives a n-bit string B=(B1, B2,...,Bn)ε{0,1)n. The string B differs from A due to the presence of noise and eavesdropper in the channel. One can estimate the bit error probability in the channel. For example, Bob can choose a random subset from his string and send it to Alice in public. Then Alice compares the received string with her corresponding subset and calculates the total number of protocol steps. The cascade scheme uses the interaction over the public channel to correct the secret strings by dividing them into the blocks of a fixed length. The length is determined from the bit error probability. A simple interactive routine is applied in each of these blocks. An error found in some block results in some action with other blocks. It is important to optimize the error-finding routines in standalone blocks as well as to organize the effective constrution of blocks with the object of protocol benchmark, information leakage and number of interactions between partners.
Quantum Key Distribution (QKD) could share a secret key between two distant nodes Alice and Bob. In the presence of an eavesdropper and noisy channel, Alice’s key may not be the same as Bob’s key. Thus, QKD protocol has to provide not only the distribution in key agreement phase but also the integrity in key verification phase. Error reconciliation is often used in QKD to share identical keys between Alice and Bob in key verification phase. Recently, Kurt et al. introduce a reconciliation algorithm for QKD (RQKD) to prevent error propagation in some previous reconciliation algorithms. Kurt et al.’s RQKD is a block-wise operation, and uses polynomial interpolation for reconciliation. However, if the x-axis values of polynomials are the same the blocks are removed. In this paper, we propose an enhanced RQKD (ERQKD) to deal with this weakness. When using polynomial-interpolation approach for reconciliation, our ERQKD without deleting block improves the efficiency of sharing qubits.
[[abstract]]An enhanced version of the quantum key distribution (QKD) protocol in quantum cryptography is proposed. We consider that realistic detectors and imperfect devices may introduce noise into the transmission thereby causing a high error rate. The proposed scheme is based on an error rate analysis and a random sampling procedure in statistics to produce a probabilistic bound on the error estimation. Confidence intervals are used to interpret the error estimate with a specified confidence level. Based on the information obtained, Alice and Bob judge what caused the errors and establish confidence levels for the error rate of the remaining untested bits. Hence, they can determine the maximum number of times reconciliation needs to be performed to remove all errors from what remains of a raw key to produce an error-free secret key. As a result, the tedious reconciliation process can be reduced and a neglectful probability of not detecting the existence of remaining errors can be avoided as well. The privacy amplification is then applied: (1) to extract a secret key from a partially secret key, and (2) to enlarge the length of the secret key into the final key. The proposed scheme can work when dealing with errors caused by random noise and eavesdropping.
Recall that in the Bennett–Brassard key distribution scheme, after Alice and Bob have obtained bit strings that ideally are supposed to be identical, they have to do some further processing to make sure they end up with strings that really are identical. Our first goal in this chapter is to show how they can do this. As you might expect, we will use error-correcting codes of the sort we have been discussing in the preceding chapter. However, the way we use error-correcting codes in quantum key distribution is not quite the same as in classical communication. Normally, one corrects errors by encoding one's message into special codewords that are sufficiently different from each other that they will still be distinguishable after passing through a noisy channel. But in quantum key distribution the “noise” of the channel might actually be the effect of an eavesdropper who is free to manipulate the signals sent by Alice. Ordinary error correction is not designed for such a setting. So instead of using codewords to encode the original transmission, we wait until all the bits have been sent and then use an error-correcting code after the fact . In this respect error correction in quantum key distribution is similar to the use of an error-correcting code in the “hat problem” discussed at the end of Chapter 4. There also, the error-correcting code is applied only after all the data – in that case the vector of hat colors – has been generated and conveyed to the participants.
Abstract In quantum cryptography, secret communications are delivered through a quantum channel. One of the most important breakthroughs in quantum cryptography has been the quantum key distribution (QKD). This process enables two distant parties to share secure communications based on physical laws. However, eavesdroppers can still interrupt the communication. To overcome this, we propose a different way to detect the presence of Eve through the polynomial interpolation technique. This technique also allows us for key verification. This approach prevents the receiver as well as the intruder from discovering the sender’s fundamental basis. To fully utilize IBM quantum computers’ quantum computing capabilities, this paper attempts to show % error against alpha (strength of eavesdropping) and the impact of noise on the success probability of the desired key bits. Furthermore, the success probability under depolarizing noise is explained for different qubit counts. In the enhanced QKD protocol, using polynomial interpolation for reconciliation shows a 50% probability of successful key generation. This is even when the noise is increased to the maximum capacity.
In time entanglement-based quantum key distribution (TE-QKD), Alice and Bob extract the raw key bits from the arrival times of entangled photon pairs. Each entangled pair can contribute to multiple key bits depending on how precisely Alice and Bob can measure the photon arrival times. Thus, TE-QKD can potentially increase the secret key rate compared to typical QKD implementations, which extract up to a bit per photon. Because of entanglement, the times of photon arrivals at Alice’s and Bob’s detectors and, thus, their raw keys should be identical. However, practical photon detectors suffer from time jitter errors. These errors cause discrepancies between Alice’s and Bob’s raw keys. Therefore, Alice must send information to Bob through the public channel to reconcile their raw keys. The amount of data sent for reconciliation represents a loss, rendering secret keys shorter than the raw keys. We compute the secret key rates possible in systems with detector jitter errors and show that they are much higher than those achievable in polarization entanglement-based QKD. We then construct codes for information reconciliation to approach these rates. We demonstrate that short and moderate-length standard error-correcting codes represent excellent information reconciliation choices, making TE-QKD a promising technology.
Quantum key distribution (QKD) relies on quantum and classical procedures in order to achieve the growing of a secret random string -the key- known only to the two parties executing the protocol. Limited intrinsic efficiency of the protocol, imperfect devices and eavesdropping produce errors and information leakage from which the set of measured signals -the raw key- must be stripped in order to distill a final, information theoretically secure, key. The key distillation process is a classical one in which basis reconciliation, error correction and privacy amplification protocols are applied to the raw key. This cleaning process is known as information reconciliation and must be done in a fast and efficient way to avoid cramping the performance of the QKD system. Brassard and Salvail proposed a very simple and elegant protocol to reconcile keys in the secret-key agreement context, known as Cascade, that has become the de-facto standard for all QKD practical implementations. However, it is highly interactive, requiring many communications between the legitimate parties and its efficiency is not optimal, imposing an early limit to the maximum tolerable error rate. In this paper we describe a low-density parity-check reconciliation protocol that improves significantly on these problems. The protocol exhibits better efficiency and limits the number of uses of the communications channel. It is also able to adapt to different error rates while remaining efficient, thus reaching longer distances or higher secure key rate for a given QKD system.