Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Proceedings/Proceedings of the ... International Conference on Software Engineering and Knowledge Engineering

Formal Specification and Model Checking of the BB84 Protocol in Maude (S)

Canh Minh Do, Kazuhiro Ogata

Published Sep 29, 2025• 0 citations
Publisher

Abstract

The BB84 protocol is the first quantum key distribution (QKD) protocol, allowing two parties (typically referred to as Alice and Bob) to securely share a cryptographic key by leveraging the principles of quantum mechanics.Given its importance in cryptography, simulating the protocol is essential for understanding its behavior, while formally verifying that it enjoys certain desired properties is equally crucial.This paper presents a formal specification of the BB84 protocol in Maude, a specification and programming language based on rewriting logic.The formal specification is executable in Maude with several formal analysis methods for simulation and analysis.We use the built-in Maude LTL model checker to analyze some qualitative properties of the protocol.Our analysis confirms that (1) if Alice and Bob choose the same basis and there is no eavesdropper, their bits will match; and (2) if Alice and Bob choose the same basis but do not share the same bit, the presence of an eavesdropper will be detected.

DOI
10.18293/seke2025-020

Related papers

Symbolic model checking quantum circuits in Maude

Canh Minh Do, Kazuhiro Ogata

This article presents a symbolic approach to model checking quantum circuits using a set of laws from quantum mechanics and basic matrix operations with Dirac notation. We use Maude, a high-level specification/programming language based on rewriting logic, to implement our symbolic approach. As case studies, we use the approach to formally specify several quantum communication protocols in the early work of quantum communication and formally verify their correctness: Superdense Coding, Quantum Teleportation, Quantum Secret Sharing, Entanglement Swapping, Quantum Gate Teleportation, Two Mirror-image Teleportation, and Quantum Network Coding. We demonstrate that our approach/implementation can be a first step toward a general framework to formally specify and verify quantum circuits in Maude. The proposed way to formally specify a quantum circuit makes it possible to describe the quantum circuit in Maude such that the formal specification can be regarded as a series of quantum gate/measurement applications. Once a quantum circuit has been formally specified in the proposed way together with an initial state and a desired property expressed in linear temporal logic (LTL), the proposed model checking technique utilizes a built-in Maude LTL model checker to automatically conduct formal verification that the quantum circuit enjoys the property starting from the initial state.

PeerJ Computer Science•Jun 20, 2024•12 citations

A GAME THEORETIC APPROACH TO STUDY THE QUANTUM KEY DISTRIBUTION BB84 PROTOCOL

Mahboobeh Houshmand, Monireh Houshmand, Habib Rajabi Mashhadi

Quantum cryptography uses quantum mechanics to guarantee secure communication. BB84 is a widely used quantum key distribution that provides a way for two parties, a sender, Alice, and a receiver, Bob, to share an unconditionally secure key in the presence of an eavesdropper, Eve. Three different criteria can be assumed to study the BB84 protocol. They are the efficiency of the protocol, the probability that Eve remains undetected, and the amount of knowledge Eve has about Alice's bit sequence. In a previous approach, we only considered the probability that Eve remains undetected. We viewed this protocol as a three player static game in which Alice and Bob were two cooperative players and Eve was a competitive one. In our game model, Alice's and Bob's objective was to maximize the probability of detecting Eve, while Eve's objective was to minimize this probability. In this paper, our previous effort is extended and we also consider the other two criteria, i.e. the efficiency of the protocol and the amount of knowledge Eve has about Alice's bit sequence. Using these models, we show how game theory can be used to find the strategies for Alice, Bob and Eve.

International Journal of Quantum Information•May 25, 2011•1 citation

Toward Real-World QKD: A System-Level Simulation of the BB84 Protocol

Rahul Mishra, Lov Kumar

As the digital front becomes our new frontier, and digital data becomes increasingly vulnerable to highly sophisticated cyber attacks, conventional encryption approaches may no longer be sufficient to withstand a quantum attack. The focus of this work is to deploy a simulation of the BB84 protocol, one of the first Quantum Key Distribution (QKD) protocols developed by Charles Bennett and Gilles Brassard in 1984. The simulation involves two communicating parties, Alice and Bob, with Bob creating a secret keys generated cryptographically and sending it reliably over to Alice using quantum bits, or qubits. By leveraging quantum mechanics, this protocol ensures that any interception can be identified, thus bolstering both the integrity and confidentiality of the key exchange through scientists' understanding of superposition and the no-cloning principle. In the simulation, the potential of quantum communication to achieve secure key distribution over an insecure channel is demonstrated. Differently from traditional encryption protocols, QKD guarantees security not on computational but on physical basis. The aim of this paper is to show the feasibility and robustness of the BB84 protocol for actual cryptographic applications. This models the protocol between Alice and Bob, which paves the way for quantum-proof encryption systems and is a relevant step towards next generation cyber security.

International Conference for Advancement in Technology (ICONAT)•Sep 19, 2025•0 citations

Analysis of the Security of BB84 by Model Checking

Mohamed Elboukhari, Mostafa Azizi, Abdelmalek Azizi

Quantum Cryptography or Quantum key distribution (QKD) is a technique that allows the secure distribution of a bit string, used as key in cryptographic protocols.When it was noted that quantum computers could break public key cryptosystems based on number theory extensive studies have been undertaken on QKD.Based on quantum mechanics, QKD offers unconditionally secure communication.Now, the progress of research in this field allows the anticipation of QKD to be available outside of laboratories within the next few years.Efforts are made to improve the performance and reliability of the implemented technologies.But several challenges remain despite this big progress.The task of how to test the apparatuses of QKD For example did not yet receive enough attention.These devises become complex and demand a big verification effort.In this paper we are interested in an approach based on the technique of probabilistic model checking for studying quantum information.Precisely, we use the PRISM tool to analyze the security of BB84 protocol and we are focused on the specific security property of eavesdropping detection.We show that this property is affected by the parameters of quantum channel and the power of eavesdropper.

arXiv:1005.4504•International Journal of Network Security & Its Applications•Apr 12, 2010•19 citations

An Automated Analysis of the Security of Quantum Key Distribution

Rajagopal Nagarajan, Nickolas K. Papanikolaou, Garry Bowen +1 more

This paper discusses the use of computer-aided verification as a practical means for analysing quantum information systems; specifically, the BB84 protocol for quantum key distribution is examined using this method. This protocol has been shown to be unconditionally secure against all attacks in an information-theoretic setting, but the relevant security proof requires a thorough understanding of the formalism of quantum mechanics and is not easily adaptable to practical scenarios. Our approach is based on probabilistic model-checking; we have used the PRISM model-checker to show that, as the number of qubits transmitted in BB84 is increased, the equivocation of the eavesdropper with respect to the channel decreases exponentially. We have also shown that the probability of detecting the presence of an eavesdropper increases exponentially with the number of qubits. The results presented here are a testament to the effectiveness of the model-checking approach for systems where analytical solutions may not be possible or plausible.

arXiv:cs/0502048•Feb 9, 2005•18 citations

Comprehensive Analysis of BB84, A Quantum Key Distribution Protocol

SujayKumar Reddy M, Chandra Mohan B

Quantum Key Distribution (QKD) is a technique that enables secure communication between two parties by sharing a secret key. One of the most well-known QKD protocols is the BB84 protocol, proposed by Charles Bennett and Gilles Brassard in 1984. In this protocol, Alice and Bob use a quantum channel to exchange qubits, allowing them to generate a shared key that is resistant to eavesdropping. This paper presents a comparative study of existing QKD schemes, including the BB84 protocol, and highlights the advancements made in the BB84 protocol over the years. The study aims to provide a comprehensive overview of the different QKD schemes and their strengths and weaknesses and demonstrate QKDs working principles through existing simulations and implementations. Through this study, we show that the BB84 protocol is a highly secure QKD scheme that has been extensively studied and implemented in various settings. Furthermore, we discuss the improvements made to the BB84 protocol to enhance its security and practicality, including the use of decoy states and advanced error correction techniques. Overall, this paper provides a comprehensive analysis of QKD schemes, focusing on the BB84 protocol in secure communication technologies.

arXiv:2312.05609•Dec 9, 2023•2 citations
The BB84 protocol is the first quantum key distribution (QKD) protocol, allowing two parties (typically referred to as Alice and Bob) to securely share a cryptographic key by leveraging the principles of quantum mechanics.Given its importance in cryptography, simulating the protocol is essential for understanding its behavior, while formally verifying that it enjoys certain desired properties is equally crucial.This paper presents a formal specification of the BB84 protocol in Maude, a specification and programming language based on rewriting logic.The formal specification is executable in Maude with several formal analysis methods for simulation and analysis.We use the built-in Maude LTL model checker to analyze some qualitative properties of the protocol.Our analysis confirms that (1) if Alice and Bob choose the same basis and there is no eavesdropper, their bits will match; and (2) if Alice and Bob choose the same basis but do not share the same bit, the presence of an eavesdropper will be detected.
This article presents a symbolic approach to model checking quantum circuits using a set of laws from quantum mechanics and basic matrix operations with Dirac notation. We use Maude, a high-level specification/programming language based on rewriting logic, to implement our symbolic approach. As case studies, we use the approach to formally specify several quantum communication protocols in the early work of quantum communication and formally verify their correctness: Superdense Coding, Quantum Teleportation, Quantum Secret Sharing, Entanglement Swapping, Quantum Gate Teleportation, Two Mirror-image Teleportation, and Quantum Network Coding. We demonstrate that our approach/implementation can be a first step toward a general framework to formally specify and verify quantum circuits in Maude. The proposed way to formally specify a quantum circuit makes it possible to describe the quantum circuit in Maude such that the formal specification can be regarded as a series of quantum gate/measurement applications. Once a quantum circuit has been formally specified in the proposed way together with an initial state and a desired property expressed in linear temporal logic (LTL), the proposed model checking technique utilizes a built-in Maude LTL model checker to automatically conduct formal verification that the quantum circuit enjoys the property starting from the initial state.
Quantum cryptography uses quantum mechanics to guarantee secure communication. BB84 is a widely used quantum key distribution that provides a way for two parties, a sender, Alice, and a receiver, Bob, to share an unconditionally secure key in the presence of an eavesdropper, Eve. Three different criteria can be assumed to study the BB84 protocol. They are the efficiency of the protocol, the probability that Eve remains undetected, and the amount of knowledge Eve has about Alice's bit sequence. In a previous approach, we only considered the probability that Eve remains undetected. We viewed this protocol as a three player static game in which Alice and Bob were two cooperative players and Eve was a competitive one. In our game model, Alice's and Bob's objective was to maximize the probability of detecting Eve, while Eve's objective was to minimize this probability. In this paper, our previous effort is extended and we also consider the other two criteria, i.e. the efficiency of the protocol and the amount of knowledge Eve has about Alice's bit sequence. Using these models, we show how game theory can be used to find the strategies for Alice, Bob and Eve.
As the digital front becomes our new frontier, and digital data becomes increasingly vulnerable to highly sophisticated cyber attacks, conventional encryption approaches may no longer be sufficient to withstand a quantum attack. The focus of this work is to deploy a simulation of the BB84 protocol, one of the first Quantum Key Distribution (QKD) protocols developed by Charles Bennett and Gilles Brassard in 1984. The simulation involves two communicating parties, Alice and Bob, with Bob creating a secret keys generated cryptographically and sending it reliably over to Alice using quantum bits, or qubits. By leveraging quantum mechanics, this protocol ensures that any interception can be identified, thus bolstering both the integrity and confidentiality of the key exchange through scientists' understanding of superposition and the no-cloning principle. In the simulation, the potential of quantum communication to achieve secure key distribution over an insecure channel is demonstrated. Differently from traditional encryption protocols, QKD guarantees security not on computational but on physical basis. The aim of this paper is to show the feasibility and robustness of the BB84 protocol for actual cryptographic applications. This models the protocol between Alice and Bob, which paves the way for quantum-proof encryption systems and is a relevant step towards next generation cyber security.
Quantum Cryptography or Quantum key distribution (QKD) is a technique that allows the secure distribution of a bit string, used as key in cryptographic protocols.When it was noted that quantum computers could break public key cryptosystems based on number theory extensive studies have been undertaken on QKD.Based on quantum mechanics, QKD offers unconditionally secure communication.Now, the progress of research in this field allows the anticipation of QKD to be available outside of laboratories within the next few years.Efforts are made to improve the performance and reliability of the implemented technologies.But several challenges remain despite this big progress.The task of how to test the apparatuses of QKD For example did not yet receive enough attention.These devises become complex and demand a big verification effort.In this paper we are interested in an approach based on the technique of probabilistic model checking for studying quantum information.Precisely, we use the PRISM tool to analyze the security of BB84 protocol and we are focused on the specific security property of eavesdropping detection.We show that this property is affected by the parameters of quantum channel and the power of eavesdropper.
This paper discusses the use of computer-aided verification as a practical means for analysing quantum information systems; specifically, the BB84 protocol for quantum key distribution is examined using this method. This protocol has been shown to be unconditionally secure against all attacks in an information-theoretic setting, but the relevant security proof requires a thorough understanding of the formalism of quantum mechanics and is not easily adaptable to practical scenarios. Our approach is based on probabilistic model-checking; we have used the PRISM model-checker to show that, as the number of qubits transmitted in BB84 is increased, the equivocation of the eavesdropper with respect to the channel decreases exponentially. We have also shown that the probability of detecting the presence of an eavesdropper increases exponentially with the number of qubits. The results presented here are a testament to the effectiveness of the model-checking approach for systems where analytical solutions may not be possible or plausible.
Quantum Key Distribution (QKD) is a technique that enables secure communication between two parties by sharing a secret key. One of the most well-known QKD protocols is the BB84 protocol, proposed by Charles Bennett and Gilles Brassard in 1984. In this protocol, Alice and Bob use a quantum channel to exchange qubits, allowing them to generate a shared key that is resistant to eavesdropping. This paper presents a comparative study of existing QKD schemes, including the BB84 protocol, and highlights the advancements made in the BB84 protocol over the years. The study aims to provide a comprehensive overview of the different QKD schemes and their strengths and weaknesses and demonstrate QKDs working principles through existing simulations and implementations. Through this study, we show that the BB84 protocol is a highly secure QKD scheme that has been extensively studied and implemented in various settings. Furthermore, we discuss the improvements made to the BB84 protocol to enhance its security and practicality, including the use of decoy states and advanced error correction techniques. Overall, this paper provides a comprehensive analysis of QKD schemes, focusing on the BB84 protocol in secure communication technologies.