Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:quant-ph/0507154

Security of quantum key distribution with discrete rotational symmetry

Masato Koashi

Published Jul 16, 2005• 12 citations
arXivHTMLPDF

Abstract

We prove the unconditional security of quantum key distribution protocols using attenuated laser pulses with M different linear polarizations. When M=4, the proof covers the so-called SARG04 protocol [V.~Scarani et al., Phys. Rev.\ Lett. {\bf 92}, 057901 (2004)], which uses exactly the same quantum communication as the Bennett-Brassard 1984 protocol. For a channel with transmission $η$, we show that the key rate in SARG04 scales as $O(η^{3/2})$. When we increase the number of states to M=2k-1 or 2k, the key rate scaling improves as $O(η^{(k+1)/k})$.

DOI
10.48550/arxiv.quant-ph/0507154

Related papers

Unconditionally secure key distillation from multiphotons

Kiyoshi Tamaki, Hoi‐Kwong Lo

In this paper, we prove that the unconditionally secure key can be surprisingly extracted from multiphoton emission part in the photon polarization-based quantum key distribution. One example is shown by explicitly proving that one can indeed generate an unconditionally secure key from Alice's two-photon emission part proposed by Scarani [ et al. Phys. Rev. Lett. 92, 057901 (2004)]. Which is called the Scarani-Acin-Ribordy-Gisin (SARG04) protocol. This protocol uses the same four states as in Bennett-Brassard 1984 (BB84) and differs only in the classical postprocessing protocol. It is, thus, interesting to see how the classical postprocessing of quantum key distribution might qualitatively change its security. We also show that one can generate an unconditionally secure key from the single to the four-photon part in a generalized SARG04 protocol that uses six states. Finally, we also compare the bit error rate threshold of these protocols with the one in the BB84 protocol and the original six-state protocol assuming a depolarizing channel.

arXiv:quant-ph/0412035•Physical Review A•Jan 17, 2006•73 citations

Discrete rotational symmetry and quantum-key-distribution protocols

David Shirokoff, Chi‐Hang Fred Fung, Hoi‐Kwong Lo

We study the role of discrete rotational symmetry in the quantum key distribution by generalizing the well-known Bennett-Brassard 1984 and Scarani-Acin-Ribordy-Gisin 2004 protocols. We observe that discrete rotational symmetry results in the protocol's invariance to continuous rotations, thus leading to a simplified relation between bit and phase error rates and consequently a straightforward security proof.

arXiv:quant-ph/0604198•Physical Review A•Mar 28, 2007•2 citations

Security of two quantum cryptography protocols using the same four qubit states

Cyril Branciard, Nicolas Gisin, Barbara Kraus +1 more

The first quantum cryptography protocol, proposed by Bennett and Brassard in 1984 (BB84), has been widely studied in recent years. This protocol uses four states (more precisely, two complementary bases) for the encoding of the classical bit. Recently, it has been noticed that by using the same four states, but a different encoding of information, one can define a protocol which is more robust in practical implementations, specifically when attenuated laser pulses are used instead of single-photon sources [V. Scarani et al., Phys. Rev. Lett. 92, 057901 (2004), referred to as the SARG04 protocol]. We present a detailed study of SARG04 in two different regimes. In the first part, we consider an implementation with a single-photon source: we derive bounds on the error rate $Q$ for security against all possible attacks by the eavesdropper. The lower and the upper bound obtained for SARG04 ($Q\ensuremath{\lesssim}10.95%$ and $Q\ensuremath{\gtrsim}14.9%$, respectively) are close to those obtained for BB84 ($Q\ensuremath{\lesssim}12.4%$ and $Q\ensuremath{\gtrsim}14.6%$, respectively). In the second part, we consider a realistic source consisting of an attenuated laser and improve on previous analysis by allowing Alice to optimize the mean number of photons as a function of the distance. The SARG04 protocol is found to perform better than BB84, both in secret-key rate and in maximal achievable distance, for a wide class of Eve's attacks.

arXiv:quant-ph/0505035•Physical Review A•Sep 1, 2005•146 citations

Security proof of a three-state quantum-key-distribution protocol without rotational symmetry

Chi‐Hang Fred Fung, Hoi‐Kwong Lo

Standard security proofs of quantum-key-distribution (QKD) protocols often rely on symmetry arguments. In this paper, we prove the security of a three-state protocol that does not possess rotational symmetry. The three-state QKD protocol we consider involves three qubit states, where the first two states $\ensuremath{\mid}{0}_{z}⟩$ and $\ensuremath{\mid}{1}_{z}⟩$ can contribute to key generation, and the third state $\ensuremath{\mid}+⟩=(\ensuremath{\mid}{0}_{z}⟩+\ensuremath{\mid}{1}_{z}⟩)∕\sqrt{2}$ is for channel estimation. This protocol has been proposed and implemented experimentally in some frequency-based QKD systems where the three states can be prepared easily. Thus, by founding on the security of this three-state protocol, we prove that these QKD schemes are, in fact, unconditionally secure against any attacks allowed by quantum mechanics. The main task in our proof is to upper bound the phase error rate of the qubits given the bit error rates observed. Unconditional security can then be proved not only for the ideal case of a single-photon source and perfect detectors, but also for the realistic case of a phase-randomized weak coherent light source and imperfect threshold detectors. Our result in the phase error rate upper bound is independent of the loss in the channel. Also, we compare the three-state protocol with the Bennett-Brassard 1984 (BB84) protocol. For the single-photon source case, our result proves that the BB84 protocol strictly tolerates a higher quantum bit error rate than the three-state protocol, while for the coherent-source case, the BB84 protocol achieves a higher key generation rate and secure distance than the three-state protocol when a decoy-state method is used.

arXiv:quant-ph/0607056•Physical Review A•Oct 31, 2006•62 citations

Performance of two quantum-key-distribution protocols

Chi‐Hang Fred Fung, Kiyoshi Tamaki, Hoi‐Kwong Lo

We compare the performance of Bennett-Brassard 1984 (BB84) and Scarani-Acin-Ribordy-Gisin 2004 (SARG04) protocols, the latter of which was proposed by V. Scarani et al. [Phys. Rev. Lett. 92, 057901 (2004)]. Specifically, in this paper, we investigate the SARG04 protocol with two-way classical communications and the SARG04 protocol with decoy states. In the first part of the paper, we show that the SARG04 scheme with two-way communications can tolerate a higher bit error rate (19.4% for a one-photon source and 6.56% for a two-photon source) than the SARG04 one with one-way communications (10.95% for a one-photon source and 2.71% for a two-photon source). Also, the upper bounds on the bit error rate for the SARG04 protocol with two-way communications are computed in a closed form by considering an individual attack based on a general measurement. In the second part of the paper, we propose employing the idea of decoy states in the SARG04 scheme to obtain unconditional security even when realistic devices are used. We compare the performance of the SARG04 protocol with decoy states and the BB84 one with decoy states. We find that the optimal mean-photon number for the SARG04 scheme is higher than that of the BB84 one when the bit error rate is small. Also, we observe that the SARG04 protocol does not achieve a longer secure distance and a higher key generation rate than the BB84 one, assuming a typical experimental parameter set.

arXiv:quant-ph/0510025•Physical Review A•Jan 25, 2006•101 citations

Unconditionally secure key distillation from multi-photons in a single-photon polarization based quantum key distribution

Kiyoshi Tamaki, Hoi‐Kwong Lo

In this presentation, we show some counter-examples to a naive belief that the security of QKD is based on no-cloning theorem. One example is shown by explicitly proving that one can indeed generate an unconditionally secure key from Alice's two-photon emission part in "SARG04 protocol" proposed by V. Scarani et al, in Phys. Rev. Lett. 92, 057901 (2004). This protocol differs from BB84 only in the classical communication. It is, thus, interesting to see how only the classical communication of QKD protocol might qualitatively change its security. We also show that one can generate an unconditionally secure key from the single to the four-photon part in a generalized SARG04 that uses six states. Finally, we also compare the bit error rate threshold of these protocols with the one in BB84 and the original six-state protocol assuming a depolarizing channel

IEEE International Symposium on Information Theory (ISIT)•Jan 1, 2005•2 citations
We prove the unconditional security of quantum key distribution protocols using attenuated laser pulses with M different linear polarizations. When M=4, the proof covers the so-called SARG04 protocol [V.~Scarani et al., Phys. Rev.\ Lett. {\bf 92}, 057901 (2004)], which uses exactly the same quantum communication as the Bennett-Brassard 1984 protocol. For a channel with transmission ηηη, we show that the key rate in SARG04 scales as O(η3/2)O(η^{3/2})O(η3/2). When we increase the number of states to M=2k-1 or 2k, the key rate scaling improves as O(η(k+1)/k)O(η^{(k+1)/k})O(η(k+1)/k).
In this paper, we prove that the unconditionally secure key can be surprisingly extracted from multiphoton emission part in the photon polarization-based quantum key distribution. One example is shown by explicitly proving that one can indeed generate an unconditionally secure key from Alice's two-photon emission part proposed by Scarani [ et al. Phys. Rev. Lett. 92, 057901 (2004)]. Which is called the Scarani-Acin-Ribordy-Gisin (SARG04) protocol. This protocol uses the same four states as in Bennett-Brassard 1984 (BB84) and differs only in the classical postprocessing protocol. It is, thus, interesting to see how the classical postprocessing of quantum key distribution might qualitatively change its security. We also show that one can generate an unconditionally secure key from the single to the four-photon part in a generalized SARG04 protocol that uses six states. Finally, we also compare the bit error rate threshold of these protocols with the one in the BB84 protocol and the original six-state protocol assuming a depolarizing channel.
The first quantum cryptography protocol, proposed by Bennett and Brassard in 1984 (BB84), has been widely studied in recent years. This protocol uses four states (more precisely, two complementary bases) for the encoding of the classical bit. Recently, it has been noticed that by using the same four states, but a different encoding of information, one can define a protocol which is more robust in practical implementations, specifically when attenuated laser pulses are used instead of single-photon sources [V. Scarani et al., Phys. Rev. Lett. 92, 057901 (2004), referred to as the SARG04 protocol]. We present a detailed study of SARG04 in two different regimes. In the first part, we consider an implementation with a single-photon source: we derive bounds on the error rate QQQ for security against all possible attacks by the eavesdropper. The lower and the upper bound obtained for SARG04 ($Q\ensuremath{\lesssim}10.95%$ and $Q\ensuremath{\gtrsim}14.9%$, respectively) are close to those obtained for BB84 ($Q\ensuremath{\lesssim}12.4%$ and $Q\ensuremath{\gtrsim}14.6%$, respectively). In the second part, we consider a realistic source consisting of an attenuated laser and improve on previous analysis by allowing Alice to optimize the mean number of photons as a function of the distance. The SARG04 protocol is found to perform better than BB84, both in secret-key rate and in maximal achievable distance, for a wide class of Eve's attacks.
Standard security proofs of quantum-key-distribution (QKD) protocols often rely on symmetry arguments. In this paper, we prove the security of a three-state protocol that does not possess rotational symmetry. The three-state QKD protocol we consider involves three qubit states, where the first two states $\ensuremath{\mid}{0}_{z}⟩$ and $\ensuremath{\mid}{1}_{z}⟩$ can contribute to key generation, and the third state $\ensuremath{\mid}+⟩=(\ensuremath{\mid}{0}_{z}⟩+\ensuremath{\mid}{1}_{z}⟩)∕\sqrt{2}$ is for channel estimation. This protocol has been proposed and implemented experimentally in some frequency-based QKD systems where the three states can be prepared easily. Thus, by founding on the security of this three-state protocol, we prove that these QKD schemes are, in fact, unconditionally secure against any attacks allowed by quantum mechanics. The main task in our proof is to upper bound the phase error rate of the qubits given the bit error rates observed. Unconditional security can then be proved not only for the ideal case of a single-photon source and perfect detectors, but also for the realistic case of a phase-randomized weak coherent light source and imperfect threshold detectors. Our result in the phase error rate upper bound is independent of the loss in the channel. Also, we compare the three-state protocol with the Bennett-Brassard 1984 (BB84) protocol. For the single-photon source case, our result proves that the BB84 protocol strictly tolerates a higher quantum bit error rate than the three-state protocol, while for the coherent-source case, the BB84 protocol achieves a higher key generation rate and secure distance than the three-state protocol when a decoy-state method is used.
We compare the performance of Bennett-Brassard 1984 (BB84) and Scarani-Acin-Ribordy-Gisin 2004 (SARG04) protocols, the latter of which was proposed by V. Scarani et al. [Phys. Rev. Lett. 92, 057901 (2004)]. Specifically, in this paper, we investigate the SARG04 protocol with two-way classical communications and the SARG04 protocol with decoy states. In the first part of the paper, we show that the SARG04 scheme with two-way communications can tolerate a higher bit error rate (19.4% for a one-photon source and 6.56% for a two-photon source) than the SARG04 one with one-way communications (10.95% for a one-photon source and 2.71% for a two-photon source). Also, the upper bounds on the bit error rate for the SARG04 protocol with two-way communications are computed in a closed form by considering an individual attack based on a general measurement. In the second part of the paper, we propose employing the idea of decoy states in the SARG04 scheme to obtain unconditional security even when realistic devices are used. We compare the performance of the SARG04 protocol with decoy states and the BB84 one with decoy states. We find that the optimal mean-photon number for the SARG04 scheme is higher than that of the BB84 one when the bit error rate is small. Also, we observe that the SARG04 protocol does not achieve a longer secure distance and a higher key generation rate than the BB84 one, assuming a typical experimental parameter set.
In this presentation, we show some counter-examples to a naive belief that the security of QKD is based on no-cloning theorem. One example is shown by explicitly proving that one can indeed generate an unconditionally secure key from Alice's two-photon emission part in "SARG04 protocol" proposed by V. Scarani et al, in Phys. Rev. Lett. 92, 057901 (2004). This protocol differs from BB84 only in the classical communication. It is, thus, interesting to see how only the classical communication of QKD protocol might qualitatively change its security. We also show that one can generate an unconditionally secure key from the single to the four-photon part in a generalized SARG04 that uses six states. Finally, we also compare the bit error rate threshold of these protocols with the one in BB84 and the original six-state protocol assuming a depolarizing channel