The optimal mean photon number (mu) for quantum cryptography is the average photon number per transmitted pulse that results in the highest delivery rate of distilled cryptographic key bits, given a specific system scenario and set of assumptions about Eve's capabilities. Although many experimental systems have employed a mean photon number (mu) of 0.1 in practice, several research teams have pointed out that this value is somewhat arbitrary. In fact, various optimal values for mu have been described in the literature. In this paper we offer a detailed analytic model for an experimental, fiber-based quantum cryptographic system, and an explicit set of reasonable assumptions about Eve's current technical capabilities. We explicitly model total system behavior ranging from physical effects to the results of quantum cryptographic protocols such as error correction and privacy amplification. We then derive the optimal photon number (mu) for this system in a range of scenarios. One interesting result is that mu of approximately 1.1 is optimal for a wide range of realistic, fiber-based QKD systems; in fact, it provides nearly 10 times the distilled throughput of systems that employ a more conventional mu = 0.1, without any adverse affect on system security, as judged against a set of reasonable assumptions about Eve's current capabilities.
The optimal mean photon number (mu) for quantum cryptography is the average photon number per transmitted pulse that results in the highest delivery rate of distilled cryptographic key bits, given a specific system scenario and set of assumptions about Eve's capabilities. Although many experimental systems have employed a mean photon number (mu) of 0.1 in practice, several research teams have pointed out that this value is somewhat arbitrary. In fact, various optimal values for mu have been described in the literature. In this paper we offer a detailed analytic model for an experimental, fiber-based quantum cryptographic system, and an explicit set of reasonable assumptions about Eve's current technical capabilities. We explicitly model total system behavior ranging from physical effects to the results of quantum cryptographic protocols such as error correction and privacy amplification. We then derive the optimal photon number (mu) for this system in a range of scenarios. One interesting result is that mu of approximately 1.1 is optimal for a wide range of realistic, fiber-based QKD systems; in fact, it provides nearly 10 times the distilled throughput of systems that employ a more conventional mu = 0.1, without any adverse affect on system security, as judged against a set of reasonable assumptions about Eve's current capabilities.
Quantum Cryptography guarantees absolute confidentiality for secret key exchanged via an optical fiber. The ability lies in the possibility of distributing the secret key securely in the form of photon. We show that there are different values of optimal mean photon number (μ) based on which assumption is considered for Eve's technology. For lower optimal μ such as μ=0.1 and &mu=0.4, the system is more robust to conservative attacks of Eve. However, the system could not support for higher distilled rate at large optimal μ of 1.
This doctoral thesis summarizes research in quantum cryptography done at the Department of Electronics and Telecommunications at the Norwegian University of Science and Technology (NTNU) from 1998 through 2007.\n\nThe opening parts contain a brief introduction into quantum cryptography as well as an overview of all existing single photon detection techniques for visible and near infrared light. Then, our implementation of a fiber optic quantum key distribution (QKD) system is described. We employ a one-way phase coding scheme with a 1310 nm attenuated laser source and a polarization-maintaining Mach-Zehnder interferometer. A feature of our scheme is that it tracks phase drift in the interferometer at the single photon level instead of employing hardware phase control measures. An optimal phase tracking algorithm has been developed, implemented and tested. Phase tracking accuracy of +-10 degrees is achieved when approximately 200 photon counts are collected in each cycle of adjustment. Another feature of our QKD system is that it uses a single photon detector based on a germanium avalanche photodiode gated at 20 MHz. To make possible this relatively high gating rate, we have developed, implemented and tested an afterpulse blocking technique, when a number of gating pulses is blocked after each registered avalanche. This technique allows to increase the key generation rate nearly proportionally to the increase of the gating rate. QKD has been demonstrated in the laboratory setting with only a very limited success: by the time of the thesis completion we had malfunctioning components in the setup, and the quantum bit error rate remained unstable with its lowest registered value of about 4%.\n\nMore than half of the thesis is devoted to various security aspects of QKD. We have studied several attacks that exploit component imperfections and loopholes in optical schemes. In a large pulse attack, settings of modulators inside Alice's and Bob's setups are read out by external interrogating light pulses, without interacting with quantum states and without raising security alarms. An external measurement of phase shift at Alice's phase modulator in our setup has been demonstrated experimentally. In a faked states attack, Eve intercepts Alice's qubits and then utilizes various optical imperfections in Bob's scheme to construct and resend light pulses in such a way that Bob does not distinguish his detection results from normal, whereas they give Bob the basis and bit value chosen at Eve's discretion. Construction of such faked states using several different imperfections is discussed. Also, we sketch a practical workflow of breaking into a running quantum cryptolink for the two abovementioned classes of attacks. A special attention is paid to a common imperfection when sensitivity of Bob's two detectors relative to one another can be controlled by Eve via an external parameter, for example via the timing of the incoming pulse. This imperfection is illustrated by measurements on two different single photon detectors. Quantitative results for a faked states attack on the Bennett-Brassard 1984 (BB84) and the Scarani-Acin-Ribordy-Gisin 2004 (SARG04) protocols using this imperfection are obtained. It is shown how faked states can in principle be constructed for quantum cryptosystems that use a phase-time encoding, the differential phase shift keying (DPSK) and the Ekert protocols. Furthermore we have attempted to integrate this imperfection of detectors into the general security proof for the BB84 protocol. For all attacks, their applicability to and implications for various known QKD schemes are considered, and countermeasures against the attacks are proposed.\n\nThe thesis incorporates published papers [J. Mod. Opt. 48, 2023 (2001)], [Appl. Opt. 43, 4385 (2004)], [J. Mod. Opt. 52, 691 (2005)], [Phys. Rev. A 74, 022313 (2006)], and [quant-ph/0702262].
We perform a comprehensive analysis of practical quantum cryptography (QC) systems implemented in actual physical environments via either free-space or fiber-optic cable quantum channels for ground-ground, ground-satellite, air-satellite and satellite-satellite links. (1) We obtain universal expressions for the effective secrecy capacity and rate for QC systems taking into account three important attacks on individual quantum bits, including explicit closed-form expressions for the requisite amount of privacy amplification. Our analysis also includes the explicit calculation in detail of the total cost in bits of continuous authentication, thereby obtaining new results for actual ciphers of finite length. (2) We perform for the first time a detailed, explicit analysis of all systems losses due to propagation, errors, noise, etc. as appropriate to both optical fiber cable- and satellite communications-based implementations of QC. (3) We calculate for the first time all system load costs associated to classical communication and computational constraints that are ancillary to, but essential for carrying out, the pure QC protocol itself. (4) We introduce an extended family of generalizations of the Bennett-Brassard (BB84) QC protocol that equally provide unconditional secrecy but allow for the possibility of optimizing throughput rates against specific cryptanalytic attacks. (5) We obtain universal predictions for maximal rates that can be achieved with practical system designs under realistic environmental conditions. (6) We propose a specific QC system design that includes the use of a novel method of high-speed photon detection that may be able to achieve very high throughput rates for actual implementations in realistic environments.
We present a detailed description of a widely applicable mathematical model for quantum key distribution (QKD) systems implementing the measurement-device-independent (MDI) protocol. The model is tested by comparing its predictions with data taken using a proof-of-principle, time-bin qubit-based QKD system in a secure laboratory environment (i.e. in a setting in which eavesdropping can be excluded). The good agreement between the predictions and the experimental data allows the model to be used to optimize mean photon numbers per attenuated laser pulse, which are used to encode quantum bits. This in turn allows optimization of secret key rates of existing MDI-QKD systems, identification of rate-limiting components, and projection of future performance. In addition, we also performed measurements over deployed fiber, showing that our system's performance is not affected by environment-induced perturbations.
We perform a comprehensive analysis of practical quantum cryptography (QC) systems implemented in actual physical environments via either free-space or fiber-optic cable quantum channels for ground-ground, ground-satellite, air-satellite and satellite-satellite links. (1) We obtain the complete universal expressions for the effective secrecy capacity and rate for QC systems taking into account the most general attacks on individual quantum bits, including explicit closed-form expressions for the necessary and sufficient amount of privacy amplification. Our analysis also includes the explicit calculation in detail of the total cost in bits of continuous authentication, thereby obtaining new results for actual ciphers of finite length. (2) We perform for the first time a detailed, explicit analysis of all systems losses due to propagation, errors, noise, etc. as appropriate to both optical fiber cable- and satellite communications-based implementations of QC. (3) We calculate for the first time all system load costs associated to classical communication and computational constraints that are ancillary to, but essential for carrying out, the pure QC protocol itself. (4) We introduce an extended family of generalizations of the Bennett-Brassard (BB84) QC protocol that equally provide unconditional secrecy but allow for the possibility of optimizing throughput rates against specific cryptanalytic attacks. (5) We obtain universal predictions for maximal rates that can be achieved with practical system designs under realistic environmental conditions. (6) We propose a specific QC system design that includes the use of a novel method of high-speed photon detection that may be able to achieve very high throughput rates for actual implementations in realistic environments.
This paper presents an investigation of practical quantum secure communication using multi-photon tolerant protocols. Multi-photon tolerant protocols loosen the limit on the number of photons imposed by currently used quantum key distribution protocols. The multi-photon tolerant protocols investigated in this paper are multi-stage protocols that do not require any prior agreement between a sender Alice and a receiver Bob. The security of such protocols stems from the fact that the optimal detection strategies between the legitimate users and the eavesdropper are asymmetrical, allowing Bob to obtain measurement results deterministically while imposing unavoidable quantum noise to the eavesdropper Eve's measurement. Multi-photon tolerant protocols are based on the use of transformations known only to the communicating party applying them i.e. either Alice or Bob. In this paper multi-photon tolerant protocols are used in order to share a key or a message between a sender Alice and a receiver Bob. Thus such protocols can be either used as quantum key distribution (QKD) protocols or quantum communication protocols. In addition, multi-stage protocols can be used to share a key between Alice and Bob, followed by the shared key used as a seed key to a single-stage protocol, called the braiding concept. This paper presents a practical study of multi-photon tolerant multi-stage protocols. Security aspects as well as challenges to the practical implementation are discussed. In addition, secret raw key generation rates are calculated with respect to both losses and distances over a fiber optical channel. It is well-known that raw key generation rates decreases with the increase in channel losses and distances. In this paper, coherent non-decoying quantum states are used to transfer the encoded bits from Alice to Bob. Raw key generation rates are calculated for different average photon numbers µ and compared with the case of µ=0.1, which is the average number of photons used in most single-photon based QKD protocols. Furthermore, an optimal average number of photons to be used within the secure region of the multi-photon tolerant protocols is calculated. It is worth noting that, with the increased key generation rates and distances of communication offered by the multi-photon tolerant protocols, quantum secure communication need not be restricted to quantum key distribution; it can be elevated to attain direct quantum secure communication.