Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:quant-ph/0303009 · Quantum Information and Computation

Security bounds in quantum cryptography using d-level systems

Antonio Acín, Nicolas Gisin, Valerio Scarani

Published Nov 1, 2003• 47 citations
arXivHTMLPDF

Abstract

We analyze the security of quantum cryptography schemes for d-level systems using 2 or d+1 maximally conjugated bases, under individual eavesdropping attacks based on cloning machines and measurement after the basis reconciliation. We consider classical advantage distillation protocols, that allow to extract a key even in situations where the mutual information between the honest parties is smaller than the eavesdropper's information. In this scenario, advantage distillation protocols are shown to be as powerful as quantum distillation: key distillation is possible using classical techniques if and only if the corresponding state in the entanglement based protocol is distillable.

DOI
10.26421/qic3.6-1

Related papers

Security bounds in quantum cryptography using d-level systems

AcinAntonio, GisinNicolas, ScaraniValerio

We analyze the security of quantum cryptography schemes for d-level systems using 2 or d + 1 maximally conjugated bases, under individual eavesdropping attacks based on cloning machines and measure...

Quantum Information and Computation•Nov 1, 2003•2 citations

Security bound of two-basis quantum-key-distribution protocols using qudits

Georgios M. Nikolopoulos, G. Alber

We investigate the security bounds of quantum-cryptographic protocols using $d$-level systems. In particular, we focus on schemes that use two mutually unbiased bases, thus extending the Bennett-Brassard 1984 quantum-key-distribution scheme to higher dimensions. Under the assumption of general coherent attacks, we derive an analytic expression for the ultimate upper security bound of such quantum-cryptography schemes. This bound is well below the predictions of optimal cloning machines. The possibility of extraction of a secret key beyond entanglement distillation is discussed. In the case of qutrits we argue that any eavesdropping strategy is equivalent to a symmetric one. For higher dimensions such an equivalence is generally no longer valid.

arXiv:quant-ph/0507221•Physical Review A•Sep 16, 2005•59 citations

Security of Quantum Key Distribution Using d -Level Systems

Nicolas J. Cerf, Mohamed Bourennane, Anders Karlsson +1 more

We consider two quantum cryptographic schemes relying on encoding the key into qudits, i.e., quantum states in a d-dimensional Hilbert space. The first cryptosystem uses two mutually unbiased bases (thereby extending the BB84 scheme), while the second exploits all d+1 available such bases (extending the six-state protocol for qubits). We derive the information gained by a potential eavesdropper applying a cloning-based individual attack, along with an upper bound on the error rate that ensures unconditional security against coherent attacks.

arXiv:quant-ph/0107130•Physical Review Letters•Mar 8, 2002•1,355 citations

Coherent eavesdropping attacks in tomographic quantum cryptography: Nonequivalence of quantum and classical key distillation

Dagomir Kaszlikowski, Jenn Yang Lim, L. C. Kwek +1 more

The security of a cryptographic key that is generated by communication through a noisy quantum channel relies on the ability to distill a shorter secure key sequence from a longer insecure one. We show that---for protocols that use quantum channels of any dimension and completely characterize them by state tomography---the noise threshold for classical advantage distillation of a specific kind is substantially lower than the threshold for quantum entanglement distillation if the eavesdropper can perform powerful coherent attacks. In marked contrast, earlier investigations had shown that the thresholds are identical for incoherent attacks on the same classical distillation scheme. It remains an open question whether other schemes for classical advantage distillation have higher thresholds for coherent eavesdropping attacks.

arXiv:quant-ph/0312172•Physical Review A•Oct 17, 2005•3 citations

Enhancing distillability of secret keys with entanglement distillation and classical advantage distillation

Shin Sun, Kenneth Goodenough, Daniel Bhatti +2 more

Realizing secure communication between distant parties is one of the main goals of quantum technology. Although quantum key distribution (QKD) promises information-theoretic security for sharing a secret key, the key rate heavily depends on the level of noise in the quantum channel. To overcome the noise, both quantum and classical techniques exist, i.e., entanglement distillation and classical advantage distillation. So far, these techniques have only been used separately from each other. Herein, we present a two-stage distillation scheme concatenating entanglement distillation with classical advantage distillation. For the advantage distillation, we utilize a fixed protocol, specifically, the repetition code; in the case of entanglement distillation, we employ an enumeration algorithm to find an optimal protocol. We test our scheme for noisy entangled states and demonstrate its quantitative advantage: Our two-stage distillation scheme achieves finite key rates even in a high-noise regime where entanglement distillation or advantage distillation alone cannot afford key sharing. We also calculate the security bounds for relevant QKD protocols with our key-distillation scheme and show that they exceed the previous security bounds on the critical quantum bit error rates with only advantage distillation. Since the advantage distillation part does not introduce further requirements for quantum resources other than those required for entanglement distillation, the proposed scheme is well suited for quantum key distribution tasks with entanglement distribution networks.

arXiv:2410.19334•Physical Review A•Sep 11, 2025•3 citations

Optimal Eavesdropping in Quantum Cryptography with Six States

Dagmar Bruß

A generalization of the quantum cryptographic protocol by Bennett and Brassard is discussed, using three conjugate bases, i.e., six states. By calculating the optimal mutual information between sender and eavesdropper it is shown that this scheme is safer against eavesdropping on single qubits than the one based on two conjugate bases. We also address the question for a connection between the maximal classical correlation in a generalized Bell inequality and the intersection of mutual informations between sender/receiver and sender/eavesdropper.

arXiv:quant-ph/9805019•Physical Review Letters•Oct 5, 1998•868 citations
We analyze the security of quantum cryptography schemes for d-level systems using 2 or d+1 maximally conjugated bases, under individual eavesdropping attacks based on cloning machines and measurement after the basis reconciliation. We consider classical advantage distillation protocols, that allow to extract a key even in situations where the mutual information between the honest parties is smaller than the eavesdropper's information. In this scenario, advantage distillation protocols are shown to be as powerful as quantum distillation: key distillation is possible using classical techniques if and only if the corresponding state in the entanglement based protocol is distillable.
We investigate the security bounds of quantum-cryptographic protocols using ddd-level systems. In particular, we focus on schemes that use two mutually unbiased bases, thus extending the Bennett-Brassard 1984 quantum-key-distribution scheme to higher dimensions. Under the assumption of general coherent attacks, we derive an analytic expression for the ultimate upper security bound of such quantum-cryptography schemes. This bound is well below the predictions of optimal cloning machines. The possibility of extraction of a secret key beyond entanglement distillation is discussed. In the case of qutrits we argue that any eavesdropping strategy is equivalent to a symmetric one. For higher dimensions such an equivalence is generally no longer valid.
We consider two quantum cryptographic schemes relying on encoding the key into qudits, i.e., quantum states in a d-dimensional Hilbert space. The first cryptosystem uses two mutually unbiased bases (thereby extending the BB84 scheme), while the second exploits all d+1 available such bases (extending the six-state protocol for qubits). We derive the information gained by a potential eavesdropper applying a cloning-based individual attack, along with an upper bound on the error rate that ensures unconditional security against coherent attacks.
The security of a cryptographic key that is generated by communication through a noisy quantum channel relies on the ability to distill a shorter secure key sequence from a longer insecure one. We show that---for protocols that use quantum channels of any dimension and completely characterize them by state tomography---the noise threshold for classical advantage distillation of a specific kind is substantially lower than the threshold for quantum entanglement distillation if the eavesdropper can perform powerful coherent attacks. In marked contrast, earlier investigations had shown that the thresholds are identical for incoherent attacks on the same classical distillation scheme. It remains an open question whether other schemes for classical advantage distillation have higher thresholds for coherent eavesdropping attacks.
Realizing secure communication between distant parties is one of the main goals of quantum technology. Although quantum key distribution (QKD) promises information-theoretic security for sharing a secret key, the key rate heavily depends on the level of noise in the quantum channel. To overcome the noise, both quantum and classical techniques exist, i.e., entanglement distillation and classical advantage distillation. So far, these techniques have only been used separately from each other. Herein, we present a two-stage distillation scheme concatenating entanglement distillation with classical advantage distillation. For the advantage distillation, we utilize a fixed protocol, specifically, the repetition code; in the case of entanglement distillation, we employ an enumeration algorithm to find an optimal protocol. We test our scheme for noisy entangled states and demonstrate its quantitative advantage: Our two-stage distillation scheme achieves finite key rates even in a high-noise regime where entanglement distillation or advantage distillation alone cannot afford key sharing. We also calculate the security bounds for relevant QKD protocols with our key-distillation scheme and show that they exceed the previous security bounds on the critical quantum bit error rates with only advantage distillation. Since the advantage distillation part does not introduce further requirements for quantum resources other than those required for entanglement distillation, the proposed scheme is well suited for quantum key distribution tasks with entanglement distribution networks.
A generalization of the quantum cryptographic protocol by Bennett and Brassard is discussed, using three conjugate bases, i.e., six states. By calculating the optimal mutual information between sender and eavesdropper it is shown that this scheme is safer against eavesdropping on single qubits than the one based on two conjugate bases. We also address the question for a connection between the maximal classical correlation in a generalized Bell inequality and the intersection of mutual informations between sender/receiver and sender/eavesdropper.