Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:quant-ph/0505061 · Physical Review A

Generalized decoding, effective channels, and simplified security proofs in quantum key distribution

Joseph M. Renes, Markus Grassl

Published Aug 23, 2006• 44 citations
arXivHTMLPDF

Abstract

Prepare and measure quantum key distribution protocols can be decomposed into two basic steps: delivery of the signals over a quantum channel and distillation of a secret key from the signal and measurement records by classical processing and public communication. Here we formalize the distillation process for a general protocol in a purely quantum-mechanical framework and demonstrate that it can be viewed as creating an ``effective'' quantum channel between the legitimate users Alice and Bob. The process of secret key generation can then be viewed as entanglement distribution using this channel, which enables application of entanglement-based security proofs to essentially any prepare and measure protocol. To ensure secrecy of the key, Alice and Bob must be able to estimate the channel noise from errors in the key, and we further show how symmetries of the distillation process simplify this task. Applying this method, we prove the security of several key distribution protocols based on equiangular spherical codes.

DOI
10.1103/physreva.74.022317

Related papers

Key distillation from quantum channels using two-way communication protocols

Joonwoo Bae, Antonio Acín

We provide a general formalism to characterize the cryptographic properties of quantum channels in the realistic scenario where the two honest parties employ prepare and measure protocols and the known two-way communication reconciliation techniques. We obtain a necessary and sufficient condition to distill a secret key using this type of schemes for Pauli qubit channels and generalized Pauli channels in higher dimension. Our results can be applied to standard protocols such as Bennett-Brassard 1984 or six-state, giving a critical error rate of 20% and 27.6%, respectively. We explore several possibilities to enlarge these bounds, without any improvement. These results suggest that there may exist weakly entangling channels useless for key distribution using prepare and measure schemes.

arXiv:quant-ph/0610048•Physical Review A•Jan 26, 2007•76 citations

A Generic Security Proof for Quantum Key Distribution

Matthias Christandl, Renato Renner, ARTUR K. EKERT

Quantum key distribution allows two parties, traditionally known as Alice and Bob, to establish a secure random cryptographic key if, firstly, they have access to a quantum communication channel, and secondly, they can exchange classical public messages which can be monitored but not altered by an eavesdropper, Eve. Quantum key distribution provides perfect security because, unlike its classical counterpart, it relies on the laws of physics rather than on ensuring that successful eavesdropping would require excessive computational effort. However, security proofs of quantum key distribution are not trivial and are usually restricted in their applicability to specific protocols. In contrast, we present a general and conceptually simple proof which can be applied to a number of different protocols. It relies on the fact that a cryptographic procedure called privacy amplification is equally secure when an adversary's memory for data storage is quantum rather than classical.

arXiv:quant-ph/0402131•Feb 18, 2004•72 citations

Equivalence between Two-Qubit Entanglement and Secure Key Distribution

Antonio Acín, Lluís Masanes, Nicolas Gisin

We study the problem of secret key distillation from bipartite states in the scenario where Alice and Bob can perform measurements only at the single-copy level and classically process the obtained outcomes. Even with these limitations, secret bits can be asymptotically distilled by the honest parties from any two-qubit entangled state, under any individual attack. Our results point out a complete equivalence between two-qubit entanglement and secure key distribution: a key can be established through a one-qubit channel if and only if it allows one to distribute entanglement. These results can be generalized to a higher dimension for all those states that are one-copy distillable.

arXiv:quant-ph/0303053•Physical Review Letters•Oct 13, 2003•34 citations

Quantum Cryptography and Quantum Key Distribution

Chindiyababy, Ramkumar Jayaraman, Manoj Kumar

Quantum cryptography provides secret communication, which offers various security factors like confidentiality, integrity, and authentication assurance based on the law of physics. The law of physics states that quantum computing can also be applied into the communication sector, which is particularly in the field of cryptography. Then quantum can significantly distribute the data securely by applying quantum key distribution (QKD), quantum key sharing, etc. In the classical cryptography, it is difficult to compute secret keys using security concepts like key exchange and authentication, etc., and it fails to provide adequate protection during data communication as it needs some effective computation in terms of security. The lack of security in the data communication can be overcome by using the concept of quantum computing. Generally, in quantum computing, elementary quantum systems like polarized photons are used to transmit digital information based on the principle of uncertainty as it gives rise to a significant phenomenon of effective security in terms of communication compared to existing concepts related to cryptography. In quantum computing, the detection ratio for identifying the data which are sent through a communication channel is more difficult as it uses qubits and photons to represent the data that are sent. Quantum channels are used to distribute the information between two users as it passes through the unprotected classical channels as it is unknown to anyone else. Assuming that Alice and Bob use a latent noise channel to send a key, reconciliation is the process of correcting errors between Alice and Bob’s version of the key. This is done by public discussion, which leaks some information about the secret key to an undercover. This chapter gives a discussion on QKD concepts as it helps to provide a secure communication, where the information is broadcasting through a quantum channel. Finally, the various existing quantum protocols are described in relation to some security measures based on QKD, and the standard QKD protocol of BB84 is discussed.

CRC Press eBooks•Jun 13, 2022•1 citation

Noisy Processing and Distillation of Private Quantum States

Joseph M. Renes, Graeme Smith

We provide a simple security proof for prepare and measure quantum key distribution protocols employing noisy processing and one-way postprocessing of the key. This is achieved by showing that the security of such a protocol is equivalent to that of an associated key distribution protocol in which, instead of the usual maximally entangled states, a more general private state is distilled. In addition to a more general target state, the usual entanglement distillation tools are employed (in particular, Calderbank-Shor-Steane-like codes), with the crucial difference that noisy processing allows some phase errors to be left uncorrected without compromising the privacy of the key.

arXiv:quant-ph/0603262•Physical Review Letters•Jan 9, 2007•43 citations

Enhancing distillability of secret keys with entanglement distillation and classical advantage distillation

Shin Sun, Kenneth Goodenough, Daniel Bhatti +2 more

Realizing secure communication between distant parties is one of the main goals of quantum technology. Although quantum key distribution (QKD) promises information-theoretic security for sharing a secret key, the key rate heavily depends on the level of noise in the quantum channel. To overcome the noise, both quantum and classical techniques exist, i.e., entanglement distillation and classical advantage distillation. So far, these techniques have only been used separately from each other. Herein, we present a two-stage distillation scheme concatenating entanglement distillation with classical advantage distillation. For the advantage distillation, we utilize a fixed protocol, specifically, the repetition code; in the case of entanglement distillation, we employ an enumeration algorithm to find an optimal protocol. We test our scheme for noisy entangled states and demonstrate its quantitative advantage: Our two-stage distillation scheme achieves finite key rates even in a high-noise regime where entanglement distillation or advantage distillation alone cannot afford key sharing. We also calculate the security bounds for relevant QKD protocols with our key-distillation scheme and show that they exceed the previous security bounds on the critical quantum bit error rates with only advantage distillation. Since the advantage distillation part does not introduce further requirements for quantum resources other than those required for entanglement distillation, the proposed scheme is well suited for quantum key distribution tasks with entanglement distribution networks.

arXiv:2410.19334•Physical Review A•Sep 11, 2025•3 citations
Prepare and measure quantum key distribution protocols can be decomposed into two basic steps: delivery of the signals over a quantum channel and distillation of a secret key from the signal and measurement records by classical processing and public communication. Here we formalize the distillation process for a general protocol in a purely quantum-mechanical framework and demonstrate that it can be viewed as creating an ``effective'' quantum channel between the legitimate users Alice and Bob. The process of secret key generation can then be viewed as entanglement distribution using this channel, which enables application of entanglement-based security proofs to essentially any prepare and measure protocol. To ensure secrecy of the key, Alice and Bob must be able to estimate the channel noise from errors in the key, and we further show how symmetries of the distillation process simplify this task. Applying this method, we prove the security of several key distribution protocols based on equiangular spherical codes.
We provide a general formalism to characterize the cryptographic properties of quantum channels in the realistic scenario where the two honest parties employ prepare and measure protocols and the known two-way communication reconciliation techniques. We obtain a necessary and sufficient condition to distill a secret key using this type of schemes for Pauli qubit channels and generalized Pauli channels in higher dimension. Our results can be applied to standard protocols such as Bennett-Brassard 1984 or six-state, giving a critical error rate of 20% and 27.6%, respectively. We explore several possibilities to enlarge these bounds, without any improvement. These results suggest that there may exist weakly entangling channels useless for key distribution using prepare and measure schemes.
Quantum key distribution allows two parties, traditionally known as Alice and Bob, to establish a secure random cryptographic key if, firstly, they have access to a quantum communication channel, and secondly, they can exchange classical public messages which can be monitored but not altered by an eavesdropper, Eve. Quantum key distribution provides perfect security because, unlike its classical counterpart, it relies on the laws of physics rather than on ensuring that successful eavesdropping would require excessive computational effort. However, security proofs of quantum key distribution are not trivial and are usually restricted in their applicability to specific protocols. In contrast, we present a general and conceptually simple proof which can be applied to a number of different protocols. It relies on the fact that a cryptographic procedure called privacy amplification is equally secure when an adversary's memory for data storage is quantum rather than classical.
We study the problem of secret key distillation from bipartite states in the scenario where Alice and Bob can perform measurements only at the single-copy level and classically process the obtained outcomes. Even with these limitations, secret bits can be asymptotically distilled by the honest parties from any two-qubit entangled state, under any individual attack. Our results point out a complete equivalence between two-qubit entanglement and secure key distribution: a key can be established through a one-qubit channel if and only if it allows one to distribute entanglement. These results can be generalized to a higher dimension for all those states that are one-copy distillable.
Quantum cryptography provides secret communication, which offers various security factors like confidentiality, integrity, and authentication assurance based on the law of physics. The law of physics states that quantum computing can also be applied into the communication sector, which is particularly in the field of cryptography. Then quantum can significantly distribute the data securely by applying quantum key distribution (QKD), quantum key sharing, etc. In the classical cryptography, it is difficult to compute secret keys using security concepts like key exchange and authentication, etc., and it fails to provide adequate protection during data communication as it needs some effective computation in terms of security. The lack of security in the data communication can be overcome by using the concept of quantum computing. Generally, in quantum computing, elementary quantum systems like polarized photons are used to transmit digital information based on the principle of uncertainty as it gives rise to a significant phenomenon of effective security in terms of communication compared to existing concepts related to cryptography. In quantum computing, the detection ratio for identifying the data which are sent through a communication channel is more difficult as it uses qubits and photons to represent the data that are sent. Quantum channels are used to distribute the information between two users as it passes through the unprotected classical channels as it is unknown to anyone else. Assuming that Alice and Bob use a latent noise channel to send a key, reconciliation is the process of correcting errors between Alice and Bob’s version of the key. This is done by public discussion, which leaks some information about the secret key to an undercover. This chapter gives a discussion on QKD concepts as it helps to provide a secure communication, where the information is broadcasting through a quantum channel. Finally, the various existing quantum protocols are described in relation to some security measures based on QKD, and the standard QKD protocol of BB84 is discussed.
We provide a simple security proof for prepare and measure quantum key distribution protocols employing noisy processing and one-way postprocessing of the key. This is achieved by showing that the security of such a protocol is equivalent to that of an associated key distribution protocol in which, instead of the usual maximally entangled states, a more general private state is distilled. In addition to a more general target state, the usual entanglement distillation tools are employed (in particular, Calderbank-Shor-Steane-like codes), with the crucial difference that noisy processing allows some phase errors to be left uncorrected without compromising the privacy of the key.
Realizing secure communication between distant parties is one of the main goals of quantum technology. Although quantum key distribution (QKD) promises information-theoretic security for sharing a secret key, the key rate heavily depends on the level of noise in the quantum channel. To overcome the noise, both quantum and classical techniques exist, i.e., entanglement distillation and classical advantage distillation. So far, these techniques have only been used separately from each other. Herein, we present a two-stage distillation scheme concatenating entanglement distillation with classical advantage distillation. For the advantage distillation, we utilize a fixed protocol, specifically, the repetition code; in the case of entanglement distillation, we employ an enumeration algorithm to find an optimal protocol. We test our scheme for noisy entangled states and demonstrate its quantitative advantage: Our two-stage distillation scheme achieves finite key rates even in a high-noise regime where entanglement distillation or advantage distillation alone cannot afford key sharing. We also calculate the security bounds for relevant QKD protocols with our key-distillation scheme and show that they exceed the previous security bounds on the critical quantum bit error rates with only advantage distillation. Since the advantage distillation part does not introduce further requirements for quantum resources other than those required for entanglement distillation, the proposed scheme is well suited for quantum key distribution tasks with entanglement distribution networks.