Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:quant-ph/0610203 · Quantum Information and Computation

Security of quantum key distribution using weak coherent states with nonrandom phases

Hoi‐Kwong Lo, John P. Preskill

Published Jul 1, 2007• 122 citations
arXivHTMLPDF

Abstract

We prove the security of the Bennett-Brassard (BB84) quantum key distribution protocol in the case where the key information is encoded in the relative phase of a coherent-state reference pulse and a weak coherent-state signal pulse, as in some practical implementations of the protocol. In contrast to previous work, our proof applies even if the eavesdropper knows the phase of the reference pulse, provided that this phase is not modulated by the source, and even if the reference pulse is bright. The proof also applies to the case where the key is encoded in the photon polarization of a weak coherent-state pulse with a known phase, but only if the phases of the four BB84 signal states are judiciously chosen. The achievable key generation rate scales quadratically with the transmission in the channel, just as for BB84 with phase-randomized weak coherent-state signals (when decoy states are not used). For the case where the phase of the reference pulse is strongly modulated by the source, we exhibit an explicit attack that allows the eavesdropper to learn every key bit in a parameter regime where a protocol using phase-randomized signals is provably secure.

DOI
10.26421/qic7.5-6-2

Related papers

Security of quantum key distribution using weak coherent states with nonrandom phases

LoHoi-Kwong, PreskillJohn

We prove the security of the Bennett-Brassard (BB84) quantum key distribution protocol in the case where the key information is encoded in the relative phase of a coherent-state reference pulse and...

Quantum Information and Computation•Jul 1, 2007•5 citations

Unconditional security of phase-coded quantum key distribution with strong reference pulse

Masato Koashi

We discuss the unconditional security of a quantum key distribution protocol in which bit values are encoded in the phase of a weak coherent-state pulse relative to a strong reference pulse, which is essentially the one proposed by Bennett in 1992 (the B92 scheme). In the BB84 protocol with a perfect single photon source, the key rate decreases linearly with the transmission T of the channel. If we simply replace this source with a weak coherent-state pulse, the key rate drops more rapidly (as O(η2)) since the presence of multiple photons favors the eavesdropper, Eve. The B92 protocol, if modified to be encoded on the polarization of a single photon, also shows O(η2) dependence. This comes from Eve's option of sending the vacuum state, which is always registered as an inconclusive result and never causes bit errors. In the original B92 scheme with phase coding, Eve has no such option--replacing the weak pulse by the vacuum cannot avoid errors completely, thanks to the strong reference pulse. This should make the scheme stronger against the loss in the channel even coherent-state pulses from conventional lasers are used. We have obtained an unconditional security proof allowing the presence of small bit errors, and confirmed the above observation in a rigorous way. The key rate is found to drop linearly with the transmission η, and it is lower than the BB84 with a perfect single-photon source only by a constant.

Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE•Jan 11, 2005•0 citations

Phase randomization improves the security of quantum key distribution

Hoi‐Kwong Lo, John P. Preskill

Ideal quantum key distribution (QKD) protocols call for a source that emits single photon signals, but the sources used in typical practical realizations emit weak coherent states instead. A weak coherent state may contain more than one photon, which poses a potential security risk. QKD with weak coherent state signals has nevertheless been proven to be secure, but only under the assumption that the phase of each signal is random (and completely unknown to the adversary). Since this assumption need not be fully justified in practice, it is important to know whether phase randomization is really a requirement for security rather than a convenient technical assumption that makes the security proof easier. Here, we exhibit an explicit attack in which the eavesdropper exploits knowledge of the phase of the signals, and show that this attack allows the eavesdropper to learn every key bit in a parameter regime where a protocol using phase-randomized signals is provably secure. Thus we demonstrate that phase randomization really does enhance the security of QKD using weak coherent states. This result highlights the importance of a careful characterization of the source for proofs of the security of quantum key distribution.

arXiv:quant-ph/0504209•Apr 27, 2005•20 citations

Unconditional security of phase-coded quantum key distribution with strong reference pulse [5631-1]

Masato Koashia

We discuss the unconditional security of a quantum key distribution protocol in which bit values are encoded in the phase of a weak coherent-state pulse relative to a strong reference pulse, which is essentially the one proposed by Bennett in 1992 (the B92 scheme). In the BB84 protocol with a perfect single photon source, the key rate decreases linearly with the transmission η of the channel. If we simply replace this source with a weak coherent-state pulse, the key rate drops more rapidly (as O(η)) since the presence of multiple photons favors the eavesdropper, Eve. The B92 protocol, if modified to be encoded on the polarization of a single photon, also shows O(η) dependence. This comes from Eve’s option of sending the vacuum state, which is always registered as an inconclusive result and never causes bit errors. In the original B92 scheme with phase coding, Eve has no such option replacing the weak pulse by the vacuum cannot avoid errors completely, thanks to the strong reference pulse. This should make the scheme stronger against the loss in the channel even coherent-state pulses from conventional lasers are used. We have obtained an unconditional security proof allowing the presence of small bit errors, and confirmed the above observation in a rigorous way. The key rate is found to drop linearly with the transmission η, and it is lower than the BB84 with a perfect single-photon source only by a constant.

•Jan 1, 2005•0 citations

Unconditional Security of Coherent-State Quantum Key Distribution with a Strong Phase-Reference Pulse

Masato Koashi

We prove the unconditional security of a quantum key distribution protocol in which bit values are encoded in the phase of a weak coherent-state pulse relative to a strong reference pulse. In contrast with implementations in which a weak pulse is used as a substitute for a single-photon source, the achievable key rate is found to decrease only linearly with the transmission of the channel.

arXiv:quant-ph/0403131•Physical Review Letters•Sep 15, 2004•138 citations

SECURITY OF QUANTUM KEY DISTRIBUTION WITH STRONG PHASE-REFERENCE PULSE

Masato Koashi

In the BB84 protocol with a perfect single photon source, the key rate decreases linearly with the transmission η of the channel. If we simply replace this source with a weak coherent-state pulse, the key rate drops more rapidly (as O(η2)) since the presence of multiple photons favors the eavesdropper. Here we discuss the unconditional security of a quantum key distribution protocol in which bit values are encoded in the phase of a weak coherent-state pulse relative to a strong reference pulse, which is essentially the one proposed by Bennett in 1992 (the B92 scheme). We show that in the limit of high loss in the transmission channel, we can construct a secret key with a rate proportional to the transmission η of the channel.

International Journal of Quantum Information•Nov 1, 2005•0 citations
We prove the security of the Bennett-Brassard (BB84) quantum key distribution protocol in the case where the key information is encoded in the relative phase of a coherent-state reference pulse and a weak coherent-state signal pulse, as in some practical implementations of the protocol. In contrast to previous work, our proof applies even if the eavesdropper knows the phase of the reference pulse, provided that this phase is not modulated by the source, and even if the reference pulse is bright. The proof also applies to the case where the key is encoded in the photon polarization of a weak coherent-state pulse with a known phase, but only if the phases of the four BB84 signal states are judiciously chosen. The achievable key generation rate scales quadratically with the transmission in the channel, just as for BB84 with phase-randomized weak coherent-state signals (when decoy states are not used). For the case where the phase of the reference pulse is strongly modulated by the source, we exhibit an explicit attack that allows the eavesdropper to learn every key bit in a parameter regime where a protocol using phase-randomized signals is provably secure.
We discuss the unconditional security of a quantum key distribution protocol in which bit values are encoded in the phase of a weak coherent-state pulse relative to a strong reference pulse, which is essentially the one proposed by Bennett in 1992 (the B92 scheme). In the BB84 protocol with a perfect single photon source, the key rate decreases linearly with the transmission T of the channel. If we simply replace this source with a weak coherent-state pulse, the key rate drops more rapidly (as O(η2)) since the presence of multiple photons favors the eavesdropper, Eve. The B92 protocol, if modified to be encoded on the polarization of a single photon, also shows O(η2) dependence. This comes from Eve's option of sending the vacuum state, which is always registered as an inconclusive result and never causes bit errors. In the original B92 scheme with phase coding, Eve has no such option--replacing the weak pulse by the vacuum cannot avoid errors completely, thanks to the strong reference pulse. This should make the scheme stronger against the loss in the channel even coherent-state pulses from conventional lasers are used. We have obtained an unconditional security proof allowing the presence of small bit errors, and confirmed the above observation in a rigorous way. The key rate is found to drop linearly with the transmission η, and it is lower than the BB84 with a perfect single-photon source only by a constant.
Ideal quantum key distribution (QKD) protocols call for a source that emits single photon signals, but the sources used in typical practical realizations emit weak coherent states instead. A weak coherent state may contain more than one photon, which poses a potential security risk. QKD with weak coherent state signals has nevertheless been proven to be secure, but only under the assumption that the phase of each signal is random (and completely unknown to the adversary). Since this assumption need not be fully justified in practice, it is important to know whether phase randomization is really a requirement for security rather than a convenient technical assumption that makes the security proof easier. Here, we exhibit an explicit attack in which the eavesdropper exploits knowledge of the phase of the signals, and show that this attack allows the eavesdropper to learn every key bit in a parameter regime where a protocol using phase-randomized signals is provably secure. Thus we demonstrate that phase randomization really does enhance the security of QKD using weak coherent states. This result highlights the importance of a careful characterization of the source for proofs of the security of quantum key distribution.
We discuss the unconditional security of a quantum key distribution protocol in which bit values are encoded in the phase of a weak coherent-state pulse relative to a strong reference pulse, which is essentially the one proposed by Bennett in 1992 (the B92 scheme). In the BB84 protocol with a perfect single photon source, the key rate decreases linearly with the transmission η of the channel. If we simply replace this source with a weak coherent-state pulse, the key rate drops more rapidly (as O(η)) since the presence of multiple photons favors the eavesdropper, Eve. The B92 protocol, if modified to be encoded on the polarization of a single photon, also shows O(η) dependence. This comes from Eve’s option of sending the vacuum state, which is always registered as an inconclusive result and never causes bit errors. In the original B92 scheme with phase coding, Eve has no such option replacing the weak pulse by the vacuum cannot avoid errors completely, thanks to the strong reference pulse. This should make the scheme stronger against the loss in the channel even coherent-state pulses from conventional lasers are used. We have obtained an unconditional security proof allowing the presence of small bit errors, and confirmed the above observation in a rigorous way. The key rate is found to drop linearly with the transmission η, and it is lower than the BB84 with a perfect single-photon source only by a constant.
In the BB84 protocol with a perfect single photon source, the key rate decreases linearly with the transmission η of the channel. If we simply replace this source with a weak coherent-state pulse, the key rate drops more rapidly (as O(η2)) since the presence of multiple photons favors the eavesdropper. Here we discuss the unconditional security of a quantum key distribution protocol in which bit values are encoded in the phase of a weak coherent-state pulse relative to a strong reference pulse, which is essentially the one proposed by Bennett in 1992 (the B92 scheme). We show that in the limit of high loss in the transmission channel, we can construct a secret key with a rate proportional to the transmission η of the channel.