arXiv:quant-ph/9911054 · Physical Review Letters

Limitations on Practical Quantum Cryptography

Gilles Brassard A, Norbert Lütkenhaus, Tal Mor, Barry C. Sanders

Published Aug 7, 2000• 1,220 citations

Abstract

We provide limits to practical quantum key distribution, taking into account channel losses, a realistic detection process, and imperfections in the "qubits" sent from the sender to the receiver. As we show, even quantum key distribution with perfect qubits might not be achievable over long distances when the other imperfections are taken into account. Furthermore, existing experimental schemes (based on weak pulses) currently do not offer unconditional security for the reported distances and signal strength. Finally we show that parametric down-conversion offers enhanced performance compared to its weak coherent pulse counterpart.

DOI: 10.1103/physrevlett.85.1330

Related papers

Quantum Cryptography Via Parametric Downconversion

Gilles Brassard A, Tal Mor, Barry C. Sanders

The use of quantum bits (qubits) in cryptography holds the promise of secure cryptographic quantum key distribution schemes. It is based usually on single-photon polarization states. Unfortunately, the implemented “qubits” in the usual weak pulse experiments are not true two-level systems, and quantum key distribution based on these imperfect qubits is totally insecure in the presence of high (realistic) loss rate. In this work, we investigate another potential implementation: qubits generated using a process of parametric downconversion. We find that, to first (two-photon) and second (four-photon) order in the parametric downconversion small parameter, this implementation of quantum key distribution is equivalent to the theoretical version.Once realistic measurements are taken into account, quantum key distribution based on parametric downconversion suffers also from sensitivity to extremely high (nonrealistic) losses. By choosing the small parameter of the process according to the loss rates, both implementations of quantum key distribution can in principle become secure against the attack studied in this paper. However, adjusting the small parameter to the required levels seems to be impractical in the weak pulse process. On the other hand, this can easily be done in the parametric downconversion process, making it a much more promising implementation.

arXiv:quant-ph/9906074Kluwer Academic Publishers eBooksDec 19, 20052 citations

Quantum cryptography via parametric downconversion

Gilles Brassard A, Tal Mor, Barry C. Sanders

The use of quantum bits (qubits) in cryptography holds the promise of secure cryptographic quantum key distribution schemes. It is based usually on single-photon polarization states. Unfortunately, the implemented ``qubits'' in the usual weak pulse experiments are not true two-level systems, and quantum key distribution based on these imperfect qubits is totally insecure in the presence of high (realistic) loss rate. In this work, we investigate another potential implementation: qubits generated using a process of parametric downconversion. We find that, to first (two-photon) and second (four-photon) order in the parametric downconversion small parameter, this implementation of quantum key distribution is equivalent to the theoretical version. Once realistic measurements are taken into account, quantum key distribution based on parametric downconversion suffers also from sensitivity to extremely high (nonrealistic) losses. By choosing the small parameter of the process according to the loss rates, both implementations of quantum key distribution can in principle become secure against the attack studied in this paper. However, adjusting the small parameter to the required levels seems to be impractical in the weak pulse process. On the other hand, this can easily be done in the parametric downconversion process, making it a much more promising implementation.

Jun 24, 199913 citations

Quantum cryptoyraphy: The concept and challenyes

Anand Sharma, Vishal Kumar Goar, Ramesh Hhandra Belwal +1 more

This Quantum cryptoyraphy is one of the emeryiny topics in the field of computer industry. This paper focus on quantum cryptoyraphy and how this technoloyy contributes value to a defense-in-depth strateyy pertaininy to completely secure key distribution. The scope of this paper covers the technical challenyes to implement the concepts of quantum cryptoyraphy. We describe the quantum key distribution by which two users who share no secret information (without haviny any private or public keys known before hand) initially exchanye a random quantum transmission consistiny of very faint flashes of polarized liyht. We are focusiny on practical quantum key distribution, takiny into account channel losses, a realistic detection process, and imperfections in the “qubits” sent from the sender to the receiver. As we show, even quantum key distribution with perfect qubits miyht not be achievable over lony distances when the other imperfections are taken into account. ??

International Conference on Computer and Automation EngineeringFeb 1, 20103 citations

Practical quantum cryptography

Alexei S. Trifonov, Anton Zavriyev, Darius Subacius +2 more

We report our recent results in development of the secure fiber-optics communication system based upon quantum key distribution (QKD). Emphasize is made on the limitation imposed by the state-of-the-art components crucial for the system performance. We discuss the problem of the interferometer design and highlight the possible security loopholes known. Together with single photon counting performance it places the main restriction on the distance range and the secure key rate of the QKD system based upon the weak coherent pulses. Finally we describe the result of the first test of the system using single photons produced by non-degenerate parametric down-conversion as a source.

Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIEAug 24, 20045 citations

Security aspects of practical quantum cryptography

Gilles Brassard A, Norbert Lütkenhaus, Tal Mor +1 more

Summary form only given. Quantum information theory suggests the possibility of accomplishing tasks that are beyond the capability of classical computer science, such as information-secure cryptographic key distribution. The lack of security proofs for standard (secret- and public-) key distribution schemes, and the insecurity of the most widely used classical schemes (such as RSA and PGP) against "quantum attacks" emphasises the need for information-secure key distribution. We provide a thorough investigation of security issues for practical quantum key distribution, taking into account channel losses, and a realistic detection process.

Conference on Lasers and Electro-OpticsAug 29, 200515 citations

Quantum Cryptography: From Theory to Practice

Xiongfeng Ma

Quantum cryptography or quantum key distribution (QKD) applies fundamental laws of quantum physics to guarantee secure communication. The security of quantum cryptography was proven in the last decade. Many security analyses are based on the assumption that QKD system components are idealized. In practice, inevitable device imperfections may compromise security unless these imperfections are well investigated.\n\nA highly attenuated laser pulse which gives a weak coherent state is widely used in QKD experiments. A weak coherent state has multi-photon components, which opens up a security loophole to the sophisticated eavesdropper. With a small adjustment of the hardware, we will prove that the decoy state method can close this loophole and substantially improve the QKD performance. We also propose a few practical decoy state protocols, study statistical fluctuations and perform experimental demonstrations. Moreover, we will apply the methods from entanglement distillation protocols based on two-way classical communication to improve the decoy state QKD performance. Furthermore, we study the decoy state methods for other single photon sources, such as triggering parametric down-conversion (PDC) source. Note that our work, decoy state protocol, has attracted a lot of scientific and media interest. The decoy state QKD becomes a standard technique for prepare-and-measure QKD schemes.\n\nAside from single-photon-based QKD schemes, there is another type of scheme based on entangled photon sources. A PDC source is commonly used as an entangled photon source. We propose a model and post-processing scheme for the entanglement-based QKD with a PDC source. Although the model is proposed to study the entanglement-based QKD, we emphasize that our generic model may also be useful for other non-QKD experiments involving a PDC source. By simulating a real PDC experiment, we show that the entanglement-based QKD can achieve longer maximal secure distance than the single-photon-based QKD schemes.\n\nWe propose a time-shift attack that exploits the efficiency mismatch of two single photon detectors in a QKD system. This eavesdropping strategy can be realized by current technology. We will also discuss counter measures against the attack and study the security of a QKD system with efficiency mismatch detectors.

Feb 26, 200921 citations