Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:quant-ph/9711033

Security against eavesdropping in quantum cryptography

Norbert Lütkenhaus, Stephen Mark Barnett

Published Nov 18, 1997• 0 citations
arXivHTMLPDF

Abstract

In this article we deal with the security of the BB84 quantum cryptography protocol over noisy channels using generalized privacy amplification. For this we estimate the fraction of bits needed to be discarded during the privacy amplification step. This estimate is given for two scenarios, both of which assume the eavesdropper to access each of the signals independently and take error correction into account. One scenario does not allow a delay of the eavesdropper's measurement of a measurement probe until he receives additional classical information. In this scenario we achieve a sharp bound. The other scenario allows a measurement delay, so that the general attack of an eavesdropper on individual signals is covered. This bound is not sharp but allows a practical implementation of the protocol.

DOI
10.48550/arxiv.quant-ph/9711033

Related papers

Security of quantum cryptography against individual attacks

Boris A. Slutsky, Ramesh R. Rao, Pang-Chen Sun +1 more

An attempt to eavesdrop on a quantum cryptographic channel reveals itself through errors it inevitably introduces into the transmission. We investigate the relationship between the induced error rate and the maximum amount of information the eavesdropper can extract, in both the two-state B92 [B92 refers to the work of C. H. Bennett, Phys. Rev. Lett. 68, 3121 (1992)] and the four-state BB84 [BB84 refers to the work of C. H. Bennett and G. Brassard, in Proceedings of the IEEE International Conference on Computers, Systems, and Signal Processing, Bangalore, India (IEEE, New York, 1984), pp. 175--179] quantum cryptographic protocols. In each case, the optimal eavesdropping method that on average yields the most information for a given error rate is explicitly constructed. Analysis is limited to eavesdropping strategies where each bit of the quantum transmission is attacked individually and independently from other bits. Subject to this restriction, however, we believe that all attacks not forbidden by physical laws are covered. Unlike previous work, the eavesdropper's advantage is measured in terms of Renyi (rather than Shannon) information, and with respect only to bits received error-free by Bob (rather than all bits). This alters both the maximum extractable information and the optimal eavesdropping attack. The result can be used directly at the privacy amplification stage of the protocol to accomplish secure communication over a noisy channel.

Physical Review A•Apr 1, 1998•115 citations

Security of quantum cryptography against individual attacks

Boris A. Slutsky, Ramesh R. Rao, Pang-Chen Sun +1 more

An attempt to eavesdrop a quantum cryptographic channel reveals itself through errors it inevitably introduces into the transmission. We investigate the relationship between the induced error rate and the maximum amount of information the eavesdropper can extract, both in the two-state B92 and the four-state BB84 quantum cryptographic protocols. In each case, the optimal eavesdropping method that on average yields the most information for a given error rate is explicitly constructed. Analysis is limited to eavesdropping strategies where each bit of the quantum transmission is attacked individually and independently form other bits. Subject to this restriction, however, we believe that all attacks not forbidden by physical laws are included. Unlike previous work, the eavesdropper's advantage is measured in terms of Renyi information, and with respect only to bits received error-free by Bob. This alters both the maximum extractable information and the optimal eavesdropping attack. The result can be used directly at the privacy amplification stage of the protocol to accomplish secure communication over a noisy channel.

Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE•Feb 1, 1998•0 citations

The secrecy capacity of practical quantum cryptography

Gerald N. Gilbert, Michael Hamrick

Quantum cryptography has attracted much recent attention due to its potential for providing secret communications that cannot be decrypted by any amount of computational effort. This is the first analysis of the secrecy of a practical implementation of the BB84 protocol that simultaneously takes into account and presents the full set of analytical expressions for effects due to the presence of pulses containing multiple photons in the attenuated output of the laser, the finite length of individual blocks of key material, losses due to error correction, privacy amplification, and authentication, errors in polarization detection, the efficiency of the detectors, and attenuation processes in the transmission medium. The analysis addresses eavesdropping attacks on individual photons rather than collective attacks in general. Of particular importance is the first derivation of the necessary and sufficient amount of privacy amplification compression to ensure secrecy against the loss of key material which occurs when an eavesdropper makes optimized individual attacks on pulses containing multiple photons. It is shown that only a fraction of the information in the multiple photon pulses is actually lost to the eavesdropper.

arXiv:quant-ph/0106033•Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE•Aug 5, 2003•1 citation

Security Issues Associated With Error Correction And Privacy Amplification In Quantum Key Distribution

Horace P. Yuen

Privacy amplification is a necessary step in all quantum key distribution protocols, and error correction is needed in each except when signals of many photons are used in the key communication in quantum noise approach. No security analysis of error correcting code information leak to the attacker has ever been provided, while an ad hoc formula is currently employed to account for such leak in the key generation rate. It is also commonly believed that privacy amplification allows the users to at least establish a short key of arbitrarily close to perfect security. In this paper we show how the lack of rigorous error correction analysis makes the otherwise valid privacy amplification results invalid, and that there exists a limit on how close to perfect a generated key can be obtained from privacy amplification. In addition, there is a necessary tradeoff between key rate and security, and the best theoretical values from current theories would not generate enough near-uniform key bits to cover the message authentication key cost in disturbance-information tradeoff protocols of the BB84 variety.

arXiv:1411.2310•Nov 10, 2014•1 citation

Noiseless attack on certain quantum key distribution protocols

Vinod N. Rao, R. Srikanth

The information-disturbance tradeoff lies at the heart of quantum key distribution (QKD), allowing a sender and a receiver to monitor eavesdropping in the communication channel by checking for errors in the transmission. Even so, here we show that for a class of QKD protocols based on the principle of interaction-free measurement, an eavesdropper Eve can obtain partial information noiselessly, i.e., in such a way that the disturbance produced does not show up during the error checking. The proposed attack is shown to be the optimal individual noiseless attack. An implication of the noiselessness is that even though error correction is not required, privacy amplification (PA) is necessary. For example, in the case of the protocol of [T.-G. Noh, PRL 103, 230501 (2009)], the compression factor of PA is 0.68 in the case of an individual, noiseless attack. For the noisy generalization of the above attack, where Eve introduces noise into the communication channel without adding noise to the eavesdropping channel, the security requirement entails a lower bound on the noise threshold of about 11%, assuming that the transmitted particles are single photons.

•Dec 9, 2020•0 citations

Detection and Analysis of Eavesdropping Attacks on Quantum Key Distribution BB84 Protocol

Godala Madhu

Quantum Key Distribution (QKD) provides an innovative approach for secure communication by utilizing the principles of quantum mechanics. Among various QKD protocols, the BB84 protocol remains the most widely studied and implemented due to its simplicity and theoretical security guarantees. However, practical implementations of BB84 are vulnerable to several eavesdropping attacks and channel imperfections. This paper presents a comprehensive study on the detection and analysis of eavesdropping attacks in the BB84 protocol. The work focuses on common attacks such as intercept-resend attack, photon-number splitting attack, Trojan horse attack, and phase-covariant cloning attack. The effect of these attacks on Quantum Bit Error Rate (QBER) is analyzed in detail. Simulation-based observations are discussed to demonstrate how QBER increases under malicious interference. The study further explores statistical methods for detecting eavesdropping and examines practical countermeasures including decoy states, privacy amplification, and error correction techniques. The paper concludes that BB84 remains robust against eavesdropping when proper detection and mitigation mechanisms are employed.

International Journal of Advanced Research in Science and Technology•Jun 1, 2026•0 citations
In this article we deal with the security of the BB84 quantum cryptography protocol over noisy channels using generalized privacy amplification. For this we estimate the fraction of bits needed to be discarded during the privacy amplification step. This estimate is given for two scenarios, both of which assume the eavesdropper to access each of the signals independently and take error correction into account. One scenario does not allow a delay of the eavesdropper's measurement of a measurement probe until he receives additional classical information. In this scenario we achieve a sharp bound. The other scenario allows a measurement delay, so that the general attack of an eavesdropper on individual signals is covered. This bound is not sharp but allows a practical implementation of the protocol.
An attempt to eavesdrop on a quantum cryptographic channel reveals itself through errors it inevitably introduces into the transmission. We investigate the relationship between the induced error rate and the maximum amount of information the eavesdropper can extract, in both the two-state B92 [B92 refers to the work of C. H. Bennett, Phys. Rev. Lett. 68, 3121 (1992)] and the four-state BB84 [BB84 refers to the work of C. H. Bennett and G. Brassard, in Proceedings of the IEEE International Conference on Computers, Systems, and Signal Processing, Bangalore, India (IEEE, New York, 1984), pp. 175--179] quantum cryptographic protocols. In each case, the optimal eavesdropping method that on average yields the most information for a given error rate is explicitly constructed. Analysis is limited to eavesdropping strategies where each bit of the quantum transmission is attacked individually and independently from other bits. Subject to this restriction, however, we believe that all attacks not forbidden by physical laws are covered. Unlike previous work, the eavesdropper's advantage is measured in terms of Renyi (rather than Shannon) information, and with respect only to bits received error-free by Bob (rather than all bits). This alters both the maximum extractable information and the optimal eavesdropping attack. The result can be used directly at the privacy amplification stage of the protocol to accomplish secure communication over a noisy channel.
An attempt to eavesdrop a quantum cryptographic channel reveals itself through errors it inevitably introduces into the transmission. We investigate the relationship between the induced error rate and the maximum amount of information the eavesdropper can extract, both in the two-state B92 and the four-state BB84 quantum cryptographic protocols. In each case, the optimal eavesdropping method that on average yields the most information for a given error rate is explicitly constructed. Analysis is limited to eavesdropping strategies where each bit of the quantum transmission is attacked individually and independently form other bits. Subject to this restriction, however, we believe that all attacks not forbidden by physical laws are included. Unlike previous work, the eavesdropper's advantage is measured in terms of Renyi information, and with respect only to bits received error-free by Bob. This alters both the maximum extractable information and the optimal eavesdropping attack. The result can be used directly at the privacy amplification stage of the protocol to accomplish secure communication over a noisy channel.
Quantum cryptography has attracted much recent attention due to its potential for providing secret communications that cannot be decrypted by any amount of computational effort. This is the first analysis of the secrecy of a practical implementation of the BB84 protocol that simultaneously takes into account and presents the full set of analytical expressions for effects due to the presence of pulses containing multiple photons in the attenuated output of the laser, the finite length of individual blocks of key material, losses due to error correction, privacy amplification, and authentication, errors in polarization detection, the efficiency of the detectors, and attenuation processes in the transmission medium. The analysis addresses eavesdropping attacks on individual photons rather than collective attacks in general. Of particular importance is the first derivation of the necessary and sufficient amount of privacy amplification compression to ensure secrecy against the loss of key material which occurs when an eavesdropper makes optimized individual attacks on pulses containing multiple photons. It is shown that only a fraction of the information in the multiple photon pulses is actually lost to the eavesdropper.
Privacy amplification is a necessary step in all quantum key distribution protocols, and error correction is needed in each except when signals of many photons are used in the key communication in quantum noise approach. No security analysis of error correcting code information leak to the attacker has ever been provided, while an ad hoc formula is currently employed to account for such leak in the key generation rate. It is also commonly believed that privacy amplification allows the users to at least establish a short key of arbitrarily close to perfect security. In this paper we show how the lack of rigorous error correction analysis makes the otherwise valid privacy amplification results invalid, and that there exists a limit on how close to perfect a generated key can be obtained from privacy amplification. In addition, there is a necessary tradeoff between key rate and security, and the best theoretical values from current theories would not generate enough near-uniform key bits to cover the message authentication key cost in disturbance-information tradeoff protocols of the BB84 variety.
The information-disturbance tradeoff lies at the heart of quantum key distribution (QKD), allowing a sender and a receiver to monitor eavesdropping in the communication channel by checking for errors in the transmission. Even so, here we show that for a class of QKD protocols based on the principle of interaction-free measurement, an eavesdropper Eve can obtain partial information noiselessly, i.e., in such a way that the disturbance produced does not show up during the error checking. The proposed attack is shown to be the optimal individual noiseless attack. An implication of the noiselessness is that even though error correction is not required, privacy amplification (PA) is necessary. For example, in the case of the protocol of [T.-G. Noh, PRL 103, 230501 (2009)], the compression factor of PA is 0.68 in the case of an individual, noiseless attack. For the noisy generalization of the above attack, where Eve introduces noise into the communication channel without adding noise to the eavesdropping channel, the security requirement entails a lower bound on the noise threshold of about 11%, assuming that the transmitted particles are single photons.
Quantum Key Distribution (QKD) provides an innovative approach for secure communication by utilizing the principles of quantum mechanics. Among various QKD protocols, the BB84 protocol remains the most widely studied and implemented due to its simplicity and theoretical security guarantees. However, practical implementations of BB84 are vulnerable to several eavesdropping attacks and channel imperfections. This paper presents a comprehensive study on the detection and analysis of eavesdropping attacks in the BB84 protocol. The work focuses on common attacks such as intercept-resend attack, photon-number splitting attack, Trojan horse attack, and phase-covariant cloning attack. The effect of these attacks on Quantum Bit Error Rate (QBER) is analyzed in detail. Simulation-based observations are discussed to demonstrate how QBER increases under malicious interference. The study further explores statistical methods for detecting eavesdropping and examines practical countermeasures including decoy states, privacy amplification, and error correction techniques. The paper concludes that BB84 remains robust against eavesdropping when proper detection and mitigation mechanisms are employed.