The post-processing of quantum key distribution mainly includes error correction and privacy amplification. The error correction algorithms and privacy amplification methods used in the existing quantum key distribution are completely unrelated. Based on the principle of correspondence between error-correcting codes and hash function families, we proposed the idea of time-division multiplexing for error correction and privacy amplification for the first time. That is to say, through the common error correction algorithms and their corresponding hash function families or the common hash function families and their corresponding error-correcting codes, error correction and privacy amplification can be realized by time-division multiplexing with the same set of devices. In addition, we tested the idea from the perspective of error correction and privacy amplification, respectively. The analysis results show that the existing error correction algorithms and their corresponding hash function families or the common privacy amplification methods and their corresponding error-correcting codes cannot realize time-division multiplexing for error correction and privacy amplification temporarily. However, according to the principle of correspondence between error-correcting codes and hash function families, the idea of time-division multiplexing is possible. Moreover, the research on time-division multiplexing for error correction and privacy amplification has some practical significance. Once the idea of time-division multiplexing is realized, it will further reduce the calculation and storage cost of the post-processing process, reduce the deployment cost of quantum key distribution, and help to remote the practical engineering of quantum key distribution.
The post-processing of quantum key distribution mainly includes error correction and privacy amplification. The error correction algorithms and privacy amplification methods used in the existing quantum key distribution are completely unrelated. Based on the principle of correspondence between error-correcting codes and hash function families, we proposed the idea of time-division multiplexing for error correction and privacy amplification for the first time. That is to say, through the common error correction algorithms and their corresponding hash function families or the common hash function families and their corresponding error-correcting codes, error correction and privacy amplification can be realized by time-division multiplexing with the same set of devices. In addition, we tested the idea from the perspective of error correction and privacy amplification, respectively. The analysis results show that the existing error correction algorithms and their corresponding hash function families or the common privacy amplification methods and their corresponding error-correcting codes cannot realize time-division multiplexing for error correction and privacy amplification temporarily. However, according to the principle of correspondence between error-correcting codes and hash function families, the idea of time-division multiplexing is possible. Moreover, the research on time-division multiplexing for error correction and privacy amplification has some practical significance. Once the idea of time-division multiplexing is realized, it will further reduce the calculation and storage cost of the post-processing process, reduce the deployment cost of quantum key distribution, and help to remote the practical engineering of quantum key distribution.
Combined with one-time pad encryption scheme, quantum key distribution guarantees the unconditional security of communication in theory. However, error correction and privacy amplification in the post-processing phase of quantum key distribution result in high time delay, which limits the final secret key generation rate and the practicability of quantum key distribution systems. To alleviate this limitation, this paper proposes an efficient post-processing algorithm based on polar codes for quantum key distribution. In this algorithm, by analyzing the channel capacity of the main channel and the wiretap channel respectively under the Wyner's wiretap channel model, we design a codeword structure of polar codes, so that the error correction and privacy amplification could be completed synchronously in a single step. Through combining error correction and privacy amplification into one single step, this efficient post-processing algorithm reduces complexity of the system and lower the post-processing delay. Besides, the reliable and secure communicaiton conditions for this algorithm has been given in this paper. Simulation results show that this post-processing algorithm satisfies the reliable and secure communication conditions well.
Privacy amplification is a necessary step in all quantum key distribution protocols, and error correction is needed in each except when signals of many photons are used in the key communication in quantum noise approach. No security analysis of error correcting code information leak to the attacker has ever been provided, while an ad hoc formula is currently employed to account for such leak in the key generation rate. It is also commonly believed that privacy amplification allows the users to at least establish a short key of arbitrarily close to perfect security. In this paper we show how the lack of rigorous error correction analysis makes the otherwise valid privacy amplification results invalid, and that there exists a limit on how close to perfect a generated key can be obtained from privacy amplification. In addition, there is a necessary tradeoff between key rate and security, and the best theoretical values from current theories would not generate enough near-uniform key bits to cover the message authentication key cost in disturbance-information tradeoff protocols of the BB84 variety.
Quantum Key Distribution (QKD) protocols typically involve two separate steps of error-verification and privacy amplification. Both steps involve the application of a hash function sampled from a suitable hash family to classical data. A potentially simpler alternative is to implement a single-step hashing procedure, announce and compare a fixed number of bits of its output for error-verification, and retain the remaining bits as the final output key. This reduces the complexity of classical postprocessing, the amount of classical communication, and the amount of randomness needed in the protocol. While this construction has appeared in the literature, a suitable mathematical justification is lacking. In this work, we show that the security of such protocols, under certain simple conditions, follows from a slightly modified notion of secrecy of the protocol without the final error-verification step. In particular, we show that for most entropy-based proofs, the combined protocol can be implemented with no change to the key rate, and a minor change to the security parameter.
This paper presents the design and development of practical post-processing software for a general quantum key distribution system. The proposed algorithms consist of three main contributions: 1) channel parameter estimation for quantum bit error rates by a random key sampling method, 2) information reconciliation using rate-adaptive LDPC codes, that collaborate with identical key confirmation by employing a polynomial-based hash function, and 3) privacy amplification performed by a universal hash function, where the binary information is randomly chosen to construct the Toeplitz matrix corresponding to the condition of a secure secret key rate. The proposed post-processing algorithms were implemented and tested in an entangled quantum key distribution experiment based on the BBM92 protocol over a 11-meter free-space quantum channel link. The experiment was conducted over 100 cycles and was able to generate the average sifted key rate of 1,109.08 bits per second. The efficiency of the proposed algorithms enabled two legitimate parties to generate the identical secret key according to the information-theoretic security principles, where the average estimated quantum bit error rate was 2.0127%, the average efficiency of information reconciliation was 1.1919, and the average final secret key rate was 428.42 bits per second. The proposed algorithms could be used in the industrial quantum key distribution systems based on a discrete-variable protocol by optimizing the input parameters of the post-processing procedure, especially for high-speed applications.
Post-processing is indispensable in quantum key distribution (QKD), which is aimed at sharing secret keys between two distant parties. It mainly consists of key reconciliation and privacy amplification, which is used for sharing the same keys and for distilling unconditional secret keys. In this paper, we focus on speeding up the privacy amplification process by choosing a simple multiplicative universal class of hash functions. By constructing an optimal multiplication algorithm based on four basic multiplication algorithms, we give a fast software implementation of length-adaptive privacy amplification. "Length-adaptive" indicates that the implementation of privacy amplification automatically adapts to different lengths of input blocks. When the lengths of the input blocks are 1 Mbit and 10 Mbit, the speed of privacy amplification can be as fast as 14.86 Mbps and 10.88 Mbps, respectively. Thus, it is practical for GHz or even higher repetition frequency QKD systems.
Quantum key distribution (QKD), based on quantum mechanics, enables unconditionally secure key exchange even against adversaries with unlimited computing power. As the core of QKD post-processing, information reconciliation (IR) and privacy amplification (PA) ensure key consistency and security by correcting errors and removing leaked information. With the trend toward miniaturized and chip-based QKD systems, post-processing modules require highly integrated designs. FPGAs offer an ideal solution due to their low cost, power efficiency, and flexibility. This paper presents an FPGA-based QKD post-processing architecture using a polar codes-based appending IR algorithm, achieving reconciliation efficiency better than 1.1 under Eµ≥ 0.06 and Rm= 4. A convolution-structured Toeplitz hash module is developed for PA, supporting 53.13 Mbps data rate and 26.45 Mbps key rate with RPA= 0.5. The complete system is implemented on a Xilinx XCKU040 FPGA. Experimental results show support for 176.58 Mbps input, 36.59 Mbps real-time processing, and 17.56 Mbps key output, demonstrating strong performance and engineering suitability. The design features high integration and portability, offering a practical hardware solution for efficient QKD post-processing.