The rapid advancement of quantum computing threatens to undercut the mathematical foundations of today’s public-key cryptosystems. Quantum key distribution (QKD) provides an information-theoretically secure substitute whose security is derived from physical laws rather than computational complexity. However, most practical QKD systems still rely on trusted hardware components that are vulnerable to manufacturing backdoors, misalignment, and side-channel leakage. Device-Independent Quantum Key Distribution (DIQKD) removes these assumptions by certifying security from experimentally observed Bell-inequality violations, treating devices as untrusted black boxes.This paper provides a complete overview of DIQKD research, focusing on the evolution from early theoretical security proofs to real-world demonstrations on quantum hardware. We review implementation issues on platforms like IBM Quantum, evaluate finite-key security models, and study fundamental protocols. Building on this review, the Quantum Guard framework is presented as a conceptual design that combines adaptive optimization, finite-key estimation, and active attack detection to achieve resilient, device-independent communication. We further demonstrate practical file encryption using DIQKD-generated keys. Finally, we discuss current limitations and strategic objectives for building scalable, commercial quantum-secure networks.
The rapid advancement of quantum computing threatens to undercut the mathematical foundations of today’s public-key cryptosystems. Quantum key distribution (QKD) provides an information-theoretically secure substitute whose security is derived from physical laws rather than computational complexity. However, most practical QKD systems still rely on trusted hardware components that are vulnerable to manufacturing backdoors, misalignment, and side-channel leakage. Device-Independent Quantum Key Distribution (DIQKD) removes these assumptions by certifying security from experimentally observed Bell-inequality violations, treating devices as untrusted black boxes.This paper provides a complete overview of DIQKD research, focusing on the evolution from early theoretical security proofs to real-world demonstrations on quantum hardware. We review implementation issues on platforms like IBM Quantum, evaluate finite-key security models, and study fundamental protocols. Building on this review, the Quantum Guard framework is presented as a conceptual design that combines adaptive optimization, finite-key estimation, and active attack detection to achieve resilient, device-independent communication. We further demonstrate practical file encryption using DIQKD-generated keys. Finally, we discuss current limitations and strategic objectives for building scalable, commercial quantum-secure networks.
Abstract Device-independent quantum key distribution (DIQKD) is the art of using untrusted devices to distribute secret keys in an insecure network. It thus represents the ultimate form of cryptography, offering not only information-theoretic security against channel attacks, but also against attacks exploiting implementation loopholes. In recent years, much progress has been made towards realising the first DIQKD experiments, but current proposals are just out of reach of today’s loophole-free Bell experiments. Here, we significantly narrow the gap between the theory and practice of DIQKD with a simple variant of the original protocol based on the celebrated Clauser-Horne-Shimony-Holt (CHSH) Bell inequality. By using two randomly chosen key generating bases instead of one, we show that our protocol significantly improves over the original DIQKD protocol, enabling positive keys in the high noise regime for the first time. We also compute the finite-key security of the protocol for general attacks, showing that approximately 10 8 –10 10 measurement rounds are needed to achieve positive rates using state-of-the-art experimental parameters. Our proposed DIQKD protocol thus represents a highly promising path towards the first realisation of DIQKD in practice.
Abstract Device-independent quantum key distribution (DIQKD) is the art of using untrusted devices to distribute secret keys in an insecure network. It thus represents the ultimate form of cryptography, offering not only information-theoretic security against channel attacks, but also against attacks exploiting implementation loopholes. In recent years, much progress has been made towards realising the first DIQKD experiments, but current proposals are just out of reach of today’s loophole-free Bell experiments. Here, we significantly narrow the gap between the theory and practice of DIQKD with a simple variant of the original protocol based on the celebrated Clauser-Horne-Shimony-Holt (CHSH) Bell inequality. By using two randomly chosen key generating bases instead of one, we show that our protocol significantly improves over the original DIQKD protocol, enabling positive keys in the high noise regime for the first time. We also compute the finite-key security of the protocol for general attacks, showing that approximately 108–1010 measurement rounds are needed to achieve positive rates using state-of-the-art experimental parameters. Our proposed DIQKD protocol thus represents a highly promising path towards the first realisation of DIQKD in practice.
Quantum Key Distribution (QKD) is revolutionizing cryptography by promising information-theoretic security through the immutable laws of quantum mechanics. Yet, the challenge of transforming these idealized security models into practical, resilient systems remains a pressing issue, especially as quantum computing evolves. In this review, we critically dissect and synthesize the latest advancements in QKD protocols and their security vulnerabilities, with a strong emphasis on rigorous security proofs. We actively categorize contemporary QKD schemes into three key classes: uncertainty principle-based protocols (e.g., BB84), hybrid architectures that enable secure direct communication (eg, three-stage protocol), and continuous-variable frameworks. We further include two modern classes of QKD protocols, namely Twin-field QKD and Device-Independent QKD, both of which were developed to have practical implementations over the last decade. Moreover, we highlight important experimental breakthroughs and innovative mitigation strategies, including the deployment of advanced Quantum Error Correction Codes (QECCs), that significantly enhance channel fidelity and system robustness. By mapping the current landscape, from sophisticated quantum attacks to state-of-the-art error correction methods, this review fills an important gap in the literature. To bring everything together, the relevance of this review concerning quantum augmented networks (QuANets) is also presented. This allows the readers to gain a comprehensive understanding of the security promises of quantum key distribution from theoretical proofs to experimental validations.
ABSTRACT Quantum key distribution (QKD) is based on the laws of quantum mechanics to enable provably secure communication. Despite its theoretical security promise, practical QKD systems are vulnerable to serious attacks, including side‐channel attacks and detector loopholes, and assumes a trusted device characterisation. Device‐independent quantum key distribution (DIQKD) overcomes these limitations by relying solely on observed nonlocal correlations, certified through Bell inequality violations, thereby removing assumptions about the internal workings of the measurement devices. In this paper, we first review the foundational principles underlying DIQKD, including Bell tests and security definitions. We then examine a range of protocol designs, including CHSH‐based schemes, and non‐local game frameworks, alongside with their security proofs. We also assess recent experimental implementations and discuss source architectures, detection technologies and finite‐key analyses. Finally, we identify current open problems, such as noise tolerance, generation rates and integration with quantum networks and outline promising directions for future research to realize robust high‐performance DIQKD.
Device-Independent Quantum Key Distribution (DI-QKD) represents the pinnacle of secure quantum communication, offering cryptographic guarantees that are independent of the trustworthiness of the devices used. Unlike traditional QKD schemes that rely on specific assumptions about internal device behaviour, DI-QKD leverages the violation of Bell inequalities to certify security solely from observed statistics. This approach eliminates a wide range of side-channel and implementation attacks, making it especially attractive for critical infrastructures and defense applications. The core concept hinges on the ability of the communicating parties, traditionally named Alice and Bob, to generate shared secret keys through the violation of Bell inequalities verified at a central node, named Charlie, regardless of hardware imperfections. Previous works demonstrated the feasibility of a Bell-certified key exchange over a real optical channel using a heralded entanglement scheme. This work aims to build on that foundation, presenting a full-stack engineering implementation of a DI-QKD system that includes industrial-grade entangled photon sources, high-efficiency SNSPD detectors, central-node heralding logic, and a real-time software stack for key management, observability, and integration with classical IT infrastructure.
Abstract Device-independent quantum key distribution (DI-QKD) provides the gold standard for secure key exchange. Not only does it allow for information-theoretic security based on quantum mechanics, but it also relaxes the need to physically model the devices, thereby fundamentally ruling out many quantum hacking threats to which non-DI QKD systems are vulnerable. In practice though, DI-QKD is very challenging. It relies on the loophole-free violation of a Bell inequality, a task that requires high quality entanglement to be distributed between distant parties and close to perfect quantum measurements, which is hardly achievable with current technology. Notwithstanding, recent theoretical and experimental efforts have led to proof-of-principle DI-QKD implementations. In this article, we review the state-of-the-art of DI-QKD by highlighting its main theoretical and experimental achievements, discussing recent proof-of-principle demonstrations, and emphasizing the existing challenges in the field.