arXiv:quant-ph/0610151 · Physical Review A

Security of quantum-key-distribution protocols using two-way classical communication or weak coherent pulses

Barbara Kraus, Cyril Branciard, Renato Renner

Published Jan 16, 2007• 63 citations

Abstract

We apply the techniques introduced by Kraus et al. [Phys. Rev. Lett. 95, 080501 (2005)] to prove security of quantum-key-distribution (QKD) schemes using two-way classical post-processing as well as QKD schemes based on weak coherent pulses instead of single-photon pulses. As a result, we obtain improved bounds on the secret-key rate of these schemes. For instance, for the six-state protocol using two-way classical post-processing we recover the known threshold for the maximum tolerated bit error rate of the channel, 0.276, but demonstrate that the secret-key rate can be substantially higher than previously shown. Moreover, we provide a detailed analysis of the Bennett-Brassard 1984 (BB84) and the SARG protocol using weak coherent pulses (with and without decoy states) in the so-called untrusted-device scenario, where the adversary might influence the detector efficiencies. We evaluate lower bounds on the secret-key rate for realistic channel parameters and show that, for channels with low noise level, the bounds for the SARG protocol are superior to those for the BB84 protocol, whereas this advantage disappears with increasing noise level.

DOI: 10.1103/physreva.75.012316

Related papers

Upper bounds for the secure key rate of the decoy-state quantum key distribution

Marcos Curty, Tobias Moroder, Xiongfeng Ma +2 more

The use of decoy states in quantum key distribution (QKD) has provided a method for substantially increasing the secret key rate and distance that can be covered by QKD protocols with practical signals. The security analysis of these schemes, however, leaves open the possibility that the development of better proof techniques or better classical postprocessing methods might further improve their performance in realistic scenarios. In this paper, we derive upper bounds on the secure key rate for decoy-state QKD. These bounds are based basically only on the classical correlations established by the legitimate users during the quantum communication phase of the protocol. The only assumption about the possible postprocessing methods is that double click events are randomly assigned to single click events. Further, we consider only secure key rates based on the uncalibrated device scenario which assigns imperfections such as detection inefficiency to the eavesdropper. Our analysis relies on two preconditions for secure two-way and one-way QKD. The legitimate users need to prove that there exists no separable state (in the case of two-way QKD) or that there exists no quantum state having a symmetric extension (one-way QKD) that is compatible with the available measurements results. Both criteria have been previously applied to evaluate single-photon implementations of QKD. Here we use them to investigate a realistic source of weak coherent pulses. The resulting upper bounds can be formulated as a convex optimization problem known as a semidefinite program which can be efficiently solved. For the standard four-state QKD protocol, they are quite close to known lower bounds, thus showing that there are clear limits to the further improvement of classical postprocessing techniques in decoy-state QKD.

arXiv:0901.4669Physical Review AMar 26, 200910 citations

Proof of security of quantum key distribution with two-way classical communications

Daniel Gottesman, Hoi‐Kwong Lo

Shor and Preskill (see Phys. Rev. Lett., vol.85, p.441, 2000) have provided a simple proof of security of the standard quantum key distribution scheme by Bennett and Brassard (1984) by demonstrating a connection between key distribution and entanglement purification protocols (EPPs) with one-way communications. Here, we provide proofs of security of standard quantum key distribution schemes, Bennett and Brassard and the six-state scheme, against the most general attack, by using the techniques of two-way entanglement purification. We demonstrate clearly the advantage of classical post-processing with two-way classical communications over classical post-processing with only one-way classical communications in quantum key distribution (QKD). This is done by the explicit construction of a new protocol for (the error correction/detection and privacy amplification of) Bennett and Brassard that can tolerate a bit error rate of up to 18.9%, which is higher than what any Bennett and Brassard scheme with only one-way classical communications can possibly tolerate. Moreover, we demonstrate the advantage of the six-state scheme over Bennett and Brassard by showing that the six-state scheme can strictly tolerate a higher bit error rate than Bennett and Brassard. In particular, our six-state protocol can tolerate a bit error rate of 26.4%, which is higher than the upper bound of 25% bit error rate for any secure Bennett and Brassard protocol. Consequently, our protocols may allow higher key generation rate and remain secure over longer distances than previous protocols. Our investigation suggests that two-way entanglement purification is a useful tool in the study of advantage distillation, error correction, and privacy amplification protocols.

arXiv:quant-ph/0105121IEEE Transactions on Information TheoryFeb 1, 2003374 citations

Security of Quantum Key Distribution with Weak Coherent Pulses

駿川上

Quantum key distribution (QKD) allows two distant parties to share a secret key and realizes a communication with information-theoretic security by combining it with one-time-pad encryption.Since the Bennett-Brassard 1984 (BB84) protocol was proposed, a large number of researches on QKD have been conducted from both aspects of theory and implementations.For implementations of QKD, weak coherent pulses (WCP) are heavily used as optical signals because they are easily generated by typical lasers and attenuators.The security for QKD with WCP has been also studied along the development of the implementations.In this thesis, the security analysis of the QKD with WCP is considered and further developed from two aspects.First, the security of the differential-quadrature-phase-shift (DQPS) protocol is proved.The DQPS protocol has essentially the same set up as the phase-encoding BB84 (PE-BB84) protocol, which is one of the most frequently demonstrated protocols.Since the known proof techniques for the BB84 protocol is not directly applicable, a modified approach is developed which is suitable for the DQPS protocol.As a result, the advantage of the DQPS protocol in the key generation rate over the PE-BB84 protocol is shown in the asymptotic limit where the size of communication data is assumed to be infinite.Second, a new method for security analysis with finite-key size is proposed as a suitable method for QKD protocols using WCP.Differently from the current method based on simple random sampling, the proposed method relies on Bernoulli sampling, which is associated with binomial distribution.The security of the BB84 protocol is proved by using the Bernoulli-sampling method, enabling a simpler analysis with a smaller number of parameters to be estimated compared to the method with simple random sampling.The required number of detected signals to generate a secret key is shown to be smaller than 10 4 , which is drastic improvement from the number ∼ 10 7 obtained in the previous result.The proposed method is also applied to the DQPS protocol, and its advantage over the PE-BB84 protocol is certified even in the finite-key regime.i

Mar 23, 20171 citation

Performance of two quantum-key-distribution protocols

Chi‐Hang Fred Fung, Kiyoshi Tamaki, Hoi‐Kwong Lo

We compare the performance of Bennett-Brassard 1984 (BB84) and Scarani-Acin-Ribordy-Gisin 2004 (SARG04) protocols, the latter of which was proposed by V. Scarani et al. [Phys. Rev. Lett. 92, 057901 (2004)]. Specifically, in this paper, we investigate the SARG04 protocol with two-way classical communications and the SARG04 protocol with decoy states. In the first part of the paper, we show that the SARG04 scheme with two-way communications can tolerate a higher bit error rate (19.4% for a one-photon source and 6.56% for a two-photon source) than the SARG04 one with one-way communications (10.95% for a one-photon source and 2.71% for a two-photon source). Also, the upper bounds on the bit error rate for the SARG04 protocol with two-way communications are computed in a closed form by considering an individual attack based on a general measurement. In the second part of the paper, we propose employing the idea of decoy states in the SARG04 scheme to obtain unconditional security even when realistic devices are used. We compare the performance of the SARG04 protocol with decoy states and the BB84 one with decoy states. We find that the optimal mean-photon number for the SARG04 scheme is higher than that of the BB84 one when the bit error rate is small. Also, we observe that the SARG04 protocol does not achieve a longer secure distance and a higher key generation rate than the BB84 one, assuming a typical experimental parameter set.

arXiv:quant-ph/0510025Physical Review AJan 25, 2006101 citations

Information-theoretic security proof for quantum-key-distribution protocols

Renato Renner, Nicolas Gisin, Barbara Kraus

We present a technique for proving the security of quantum-key-distribution (QKD) protocols. It is based on direct information-theoretic arguments and thus also applies if no equivalent entanglement purification scheme can be found. Using this technique, we investigate a general class of QKD protocols with one-way classical post-processing. We show that, in order to analyze the full security of these protocols, it suffices to consider collective attacks. Indeed, we give new lower and upper bounds on the secret-key rate which only involve entropies of two-qubit density operators and which are thus easy to compute. As an illustration of our results, we analyze the Bennett-Brassard 1984, the six-state, and the Bennett 1992 protocols with one-way error correction and privacy amplification. Surprisingly, the performance of these protocols is increased if one of the parties adds noise to the measurement data before the error correction. In particular, this additional noise makes the protocols more robust against noise in the quantum channel.

arXiv:quant-ph/0502064Physical Review AJul 25, 2005521 citations

Lower and Upper Bounds on the Secret-Key Rate for Quantum Key Distribution Protocols Using One-Way Classical Communication

Barbara Kraus, Nicolas Gisin, Renato Renner

We investigate a general class of quantum key distribution (QKD) protocols using one-way classical communication. We show that full security can be proven by considering only collective attacks. We derive computable lower and upper bounds on the secret-key rate of those QKD protocols involving only entropies of two-qubit density operators. As an illustration of our results, we determine new bounds for the Bennett-Brassard 1984, the 6-state, and the Bennett 1992 protocols. We show that in all these cases the first classical processing that the legitimate partners should apply consists in adding noise.

arXiv:quant-ph/0410215Physical Review LettersAug 15, 2005299 citations