We prove the unconditional security of an entanglement-based quantum-key-distribution protocol using detectors that respond to multiple modes of light and cannot distinguish between one from two or more photons. Even with such practical detectors, any defect in the source is automatically detected as an increase in the error rate or in the rate of double clicks.
It is shown that Smolin four-qubit bound entangled states [Phys. Rev. A, 63 032306 (2001)] can maximally violate two-setting Bell inequality similar to standard CHSH inequality. Surprisingly this entanglement does not allow for secure key distillation, so neither entanglement nor violation of Bell inequalities implies quantum security. It is also pointed out how that kind of bound entanglement can be useful in reducing communication complexity.
We use the noisy entanglement-assisted classical capacity formula [arXiv:1609.08592] to create a coherent-attack security framework for Gaussian two-way quantum key distribution protocols in the asymptotic region.
The differential-phase-shift quantum key distribution protocol is formalised as a prepare-and-measure scheme and translated into an equivalent entanglement-based protocol. A necessary condition for security is that Bob's measurement can detect the entanglement of the distributed state in the entanglement-based translation, which implies that his measurement is described by non-commuting POVM elements. This condition is shown to be met.
Quantum secret sharing (QSS) schemes without entanglement have huge advantages in scalability and are easier to realize as they only require sequential communications of a single quantum system. However, these schemes often come with drawbacks such as exact ($n, n$) structure, security flaws and absences of effective cheating detections. To address these problems, we propose a verifiable framework by utilizing entanglement-free states to construct ($t, n$)-QSS schemes. Our work is the heuristic step towards information-theoretical security in entanglement-free QSS, and it sheds light on how to…
We analyze tolerable quantum bit error rates in secret sharing protocols, and show that using entangled encoding states is advantageous in the case when the eavesdropping attacks are local. We also provide a criterion for security in secret sharing -- a parallel of the Csiszar-Korner criterion in single-receiver cryptography.
We give a proof that entanglement purification, even with noisy apparatus, is sufficient to disentangle an eavesdropper (Eve) from the communication channel. In the security regime, the purification process factorises the overall initial state into a tensor-product state of Alice and Bob, on one side, and Eve on the other side, thus establishing a completely private, albeit noisy, quantum communication channel between Alice and Bob. The security regime is found to coincide for all practical purposes with the purification regime of a two-way recurrence protocol. This makes two-way entanglement …
In a recent paper [Z. J. Zhang and Z. X. Man, Phys. Rev. A 72, 022303(2005)], a multiparty quantum secret sharing protocol based on entanglement swapping was presented. However, as we show, this protocol is insecure in the sense that an unauthorized agent group can recover the secret from the dealer. Hence, we propose an improved version of this protocol which can stand against this kind of attack.
We give a security proof of quantum cryptography based entirely on entanglement purification. Our proof applies to all possible attacks (individual and coherent). It implies the security of cryptographic keys distributed with the help of entanglement-based quantum repeaters. We prove the security of the obtained quantum channel which may not only be used for quantum key distribution, but also for secure, albeit noisy, transmission of quantum information.
Security of passive entanglement-based key distribution protocols
Network Innovation Laboratories, NTT, Inc.(NTT网络创新实验室);NTT Research Center for Theoretical Quantum Information, NTT, Inc.(NTT理论量子信息研究中心);Basic Research Laboratories, NTT, Inc.(NTT基础研究所)
It is predicted by Schrodinger's equation that entanglement will occur in the interaction between detector and particle. We provide an analysis of the entanglement using the Gurvitz model of double-dot and detector. New results on entangled doubled-dots are provided as well as implications on Quantum Information processing.
It has been shown that the vacuum state of a free quantum field is entangled and such vacuum entanglement can be harvested by a pair of initially uncorrelated detectors interacting locally with the vacuum field for a finite time. In this paper, we examine the entanglement harvesting phenomenon of two non-identical inertial detectors with different energy gaps locally interacting with massless scalar fields via a Gaussian switching function. We focus on how entanglement harvesting depends on the energy gap difference from two perspectives: the amount of entanglement harvested and the harvesting…
We consider the security of the Bennett-Brassard 1984 (BB84) protocol for Quantum Key Distribution (QKD), in the presence of bit and basis dependent detector flaws. We suggest a powerful attack that can be used in systems with detector efficiency mismatch, even if the detector assignments are chosen randomly by Bob. A security proof is provided, valid for any basis dependent, possibly lossy, linear optical imperfections in the channel/receiver/detectors. The proof does not assume the so-called squashing detector model.
The need for secrecy and security is essential in communication. Secret sharing is a conventional protocol to distribute a secret message to a group of parties, who cannot access it individually but need to cooperate in order to decode it. While several variants of this protocol have been investigated, including realizations using quantum systems, the security of quantum secret sharing schemes still remains unproven almost two decades after their original conception. Here we establish an unconditional security proof for continuous variable entanglement-based quantum secret sharing schemes, in …
We show that in device independent quantum key distribution protocols the privacy of randomness is of crucial importance. For sublinear test sample sizes even the slightest guessing probability by an eavesdropper will completely compromise security. We show that a combined attack exploiting test sample and measurement choices compromises the security even with a linear size test sample and otherwise device independent security considerations. We explicitly derive the sample size needed to retrieve security as a function of the randomness quality. We demonstrate that exploiting features of genu…
High-dimensional quantum key distribution (HDQKD) offers the possibility of high secure-key rate with high photon-information efficiency. We consider HDQKD based on the time-energy entanglement produced by spontaneous parametric downconversion, and show that it is secure against collective attacks. Its security rests upon visibility data -- obtained from Franson and conjugate-Franson interferometers -- that probe photon-pair frequency correlations and arrival-time correlations. From these measurements an upper bound can be established on the eavesdropper's Holevo information by translating the…
We show a deterministic secure direct communication protocol using single qubit in mixed state. The security of this protocol is based on the security proof of BB84 protocol. It can be realized with current technologies.
We propose a scheme for witnessing entanglement in phase space by significantly inefficient detectors. The implementation of this scheme does not require any additional process for correcting errors in contrast to previous proposals. Moreover, it allows us to detect entanglement without full a priori knowledge of the detection efficiency. It is shown that entanglement in single photon entangled and two-mode squeezed states can be witnessed with detection efficiency as low as 40%. Our approach enhances the possibility of witnessing entanglement in various physical systems using current detectio…
In continuous-variable quantum information processing detectors are necessarily coarse grained and of finite range. We discuss how especially the latter feature is a bug and may easily lead to overoptimistic estimates of entanglement and of security, when missed data outside the detector range are ignored. We show that entropic separability or security criteria are much superior to variance-based criteria for mitigating the negative effects of this bug.
Secure quantum key distribution with multimode Gaussian entangled states and multimode homodyne detectors is proposed. In general the multimode character of both the sources of entanglement and the homodyne detectors can cause a security break even for a perfect channel when trusted parties are unaware of the detection structure. Taking into account the multimode structure and potential leakage of information from a homodyne detector reduces the loss of security to some extent. We suggest the symmetrization of the multimode sources of entanglement as an efficient method allowing us to fully re…
We analyse security costs in one segment of nested purification protocol in a large quantum cryptography network, employing the quantum switchers and repeaters. We demonstrate that exponential or even super-exponential grow of entanglement resources occurs in dependence on number of the network switchers. For this reason, an optimization in the nested strategy is suggested, preventing a stronger than the exponential grow of entanglement resources.
We present a composably secure protocol allowing $n$ parties to test an entanglement generation resource controlled by a possibly dishonest party. The test consists only in local quantum operations and authenticated classical communication once a state is shared among them and provides composable security, namely it can be used as a secure subroutine by $n$ honest parties within larger communication protocols to test if a source is sharing quantum states that are at least $ε$-close to the GHZ state. This claim comes on top of previous results on multipartite entanglement verification where the…
We propose the use of intra-particle entanglement to enhance the security of a practical implementation of the Bennett-Brassard-1984 (BB84) quantum key distribution scheme. Intra-particle entanglement is an attractive resource since it can be easily generated using only linear optics. Security is studied under a simple model of incoherent attack for protocols involving two or all five mutually unbiased bases. In terms of efficiency of secret key generation and tolerable error rate, the latter is found to be superior to the former. We find that states that allow secrecy distillation are necessa…
We consider the entanglement dynamics between two Unruh-DeWitt detectors at rest separated at a distance $d$. This simple model when analyzed properly in quantum field theory shows many interesting facets and helps to dispel some misunderstandings of entanglement dynamics. We find that there is spatial dependence of quantum entanglement in the stable regime due to the phase difference of vacuum fluctuations the two detectors experience, together with the interference of the mutual influences from the backreaction of one detector on the other. When two initially entangled detectors are still ou…
We discuss quantum key distribution protocols using quantum continuous variables. We show that such protocols can be made secure against individual gaussian attacks regardless the transmission of the optical line between Alice and Bob. This is achieved by reversing the reconciliation procedure subsequent to the quantum transmission, that is, using Bob's instead of Alice's data to build the key. Although squeezing or entanglement may be helpful to improve the resistance to noise, they are not required for the protocols to remain secure with high losses. Therefore, these protocols can be impleme…
Photonic systems based on energy-time entanglement have been proposed to test local realism using the Bell inequality. A violation of this inequality normally also certifies security of device-independent quantum key distribution, so that an attacker cannot eavesdrop or control the system. Here, we show how this security test can be circumvented in energy-time entangled systems when using standard avalanche photodetectors, allowing an attacker to compromise the system without leaving a trace. With tailored pulses of classical light we reach Bell values up to 3.63 at 97.6% detector efficiency w…
Fast gated avalanche photodiodes (APDs) are the most commonly used single photon detectors for high bit rate quantum key distribution (QKD). Their robustness against external attacks is crucial to the overall security of a QKD system or even an entire QKD network. Here, we investigate the behavior of a gigahertz-gated, self-differencing InGaAs APD under strong illumination, a tactic Eve often uses to bring detectors under her control. Our experiment and modelling reveal that the negative feedback by the photocurrent safeguards the detector from being blinded through reducing its avalanche prob…
We investigate how the polarization correlations of entangled photons described by wave packets are modified when measured by moving detectors. For this purpose, we analyze the Clauser-Horne-Shimony-Holt Bell inequality as a function of the apparatus velocity. Our analysis is motivated by future experiments with entangled photons designed to use satellites. This is a first step towards the implementation of quantum information protocols in a global scale.
In this letter, we report an experimental realization of distributing entangled photon pairs over 100 km of dispersion-shifted fiber. In the experiment, we used a periodically poled lithium niobate waveguide to generate the time-energy entanglement and superconducting single-photon detectors to detect the photon pairs after 100 km. We also demonstrate that the distributed photon pairs can still be useful for quantum key distribution and other quantum communication tasks.
We prove the security of the 1984 protocol of Bennett and Brassard (BB84) for quantum key distribution. We first give a key distribution protocol based on entanglement purification, which can be proven secure using methods from Lo and Chau's proof of security for a similar protocol. We then show that the security of this protocol implies the security of BB84. The entanglement-purification based protocol uses Calderbank-Shor-Steane (CSS) codes, and properties of these codes are used to remove the use of quantum computation from the Lo-Chau protocol.
The practical homodyne detector model of continuous-variable quantum key distribution models the inherent imperfections of the practical homodyne detector, namely the limited detection efficiency and the electronic noise, into trusted loss. However, the conventional practical homodyne detector model is valid only when both the imperfections of the practical homodyne detector are calibrated. In this paper, we show a modified practical homodyne detector model that can model the imperfections separately. The phase-sensitive amplifier is further applied to compensate the imperfections of the pract…
In free-space quantum key distribution (QKD), the sensitivity of the receiver's detector channels may depend differently on the spatial mode of incoming photons. Consequently, an attacker can control the spatial mode to break security. We experimentally investigate a standard polarization QKD receiver, and identify sources of efficiency mismatch in its optical scheme. We model a practical intercept-and-resend attack and show that it would break security in most situations. We show experimentally that adding an appropriately chosen spatial filter at the receiver's entrance is an effective count…
Secret sharing is a multi-party cryptographic primitive that can be applied to a network of partially distrustful parties for encrypting data that is both sensitive (it must remain secure) and important (it must not be lost or destroyed). When sharing classical secrets (as opposed to quantum states), one can distinguish between protocols that leverage bi-partite quantum key distribution (QKD) and those that exploit multi-partite entanglement. The latter class are known to be vulnerable to so-called participant attacks and, while progress has been made recently, there is currently no analysis t…
We study the use of detection devices in entanglement-based state preparation. In particular we consider optical detection devices such as single-photon sensitivity detectors, single-photon resolution detectors and detector cascades (with an emphasis on the performance of realistic detectors). We develop an extensive theory for the use of these devices. In entanglement-based state preparation we perform measurements on subsystems, and we therefore need precise bounds on the distinguishability of these measurements (this is fundamentally different from, e.g., tomography, where an ensemble of id…
We use a single trapped 40Ca+ ion as a resonant, polarization-sensitive absorber to detect and characterize the entanglement of tunable narrowband photon pairs from a spontaneous parametric down-conversion source. Single-photon absorption is marked by a quantum jump in the ion and heralded by coincident detection of the partner photon. For three polarization basis settings of absorption and detection of the herald, we find maximum coincidences always for orthogonal polarizations. The polarization entanglement is further evidenced by tomographic reconstruction of the biphoton quantum state.
The certificate of success for a number of important quantum information processing protocols, such as entanglement distillation, is based on the difference in the entanglement content of the quantum states before and after the protocol. In such cases, effective bounds need to be placed on the entanglement of non-local states consistent with statistics obtained from local measurements. In this work, we study numerically the ability of a novel type of homodyne detector which combines phase sensitivity and photon-number resolution to set accurate bounds on the entanglement content of two-mode qu…
We consider a possible detector-efficiency loophole in experiments that detect entanglement via the local measurement of witness operators. Here, only local properties of the detectors are known. We derive a general threshold for the detector efficiencies which guarantees that a negative expectation value of a witness is due to entanglement, rather than to erroneous detectors. This threshold depends on the local decomposition of the witness and its measured expectation value. For two-qubit witnesses we find the local operator decomposition that is optimal with respect to closing the loophole.
The human eye can detect optical signals containing only a few photons. We investigate the possibility to demonstrate entanglement with such biological detectors. While one person could not detect entanglement by simply observing photons, we discuss the possibility for several observers to demonstrate entanglement in a Bell-type experiment, in which standard detectors are replaced by human eyes. Using a toy model for biological detectors that captures their main characteristic, namely a detection threshold, we show that Bell inequalities can be violated, thus demonstrating entanglement. Remark…
This is a brief comment on the Letter by Balygin and his coworkers [Laser Phys. Lett. 15, 095203 (2018)]. We point out an error that invalidates the Letter's conclusions.
We study entanglement harvesting for matter systems such as atoms, ions or molecules, whose center of mass degrees of freedom are quantum delocalized and which couple to a relativistic quantum field. We employ a generalized Unruh-deWitt detector model for the light-matter interaction, and we investigate how the coherent spreading of the quantum center of mass wave function of two delocalized detector systems impacts their ability to become entangled with one another, via their respective interaction with a quantum field. For very massive detectors with initially highly localized centers of mas…
We analyze scenarios in which pairs of Unruh-DeWitt-like detectors interact with scalar field(s) with bi-linear and quadratic coupling. For all cases -- real scalar fields, charged scalar fields, and even for couplings mixing two different scalar fields -- we find that the detectors' dynamics depends on the Wightman function of a real scalar field with the same functional form up to a constant multiple. Consequently, entanglement harvesting exhibits low sensitivity to either the kind of scalar field or their charged nature. Furthermore, we show on general grounds that pairs of Unruh-DeWitt-lik…
We consider acceleration-assisted entanglement harvesting as evidenced in correlations between two accelerating Unruh detectors coupled to a scalar field. We elaborate on earlier studies, which in a stationary phase approximation calculated the entanglement dependence on two parameters $c_1 = κL$, and $c_2 = κΩσ^2$, where $κ$ describes the detector's acceleration, $L$ their separation and $Ω$ the energy splitting in a pair of two state Unruh detectors. Here, we go beyond the stationary phase approximation by performing a numerical calculation of entanglement harvesting, allowing us to present …
One of the most pressing issues in quantum key distribution (QKD) is the problem of detector side- channel attacks. To overcome this problem, researchers proposed an elegant "time-reversal" QKD protocol called measurement-device-independent QKD (MDI-QKD), which is based on time-reversed entanglement swapping. However, MDI-QKD is more challenging to implement than standard point- to-point QKD. Recently, an intermediary QKD protocol called detector-device-independent QKD (DDI-QKD) has been proposed to overcome the drawbacks of MDI-QKD, with the hope that it would eventually lead to a more effici…
We present a scheme for multipartite entanglement purification of quantum systems in a Greenberger-Horne-Zeilinger state with quantum nondemolition detectors (QNDs). This scheme does not require the controlled-not gates which cannot be implemented perfectly with linear optical elements at present, but QNDs based on cross-Kerr nonlinearities. It works with two steps, i.e., the bit-flipping error correction and the phase-flipping error correction. These two steps can be iterated perfectly with parity checks and simple single-photon measurements. This scheme does not require the parties to posses…
We suggest a type of attack on quantum cryptosystems that exploits variations in detector efficiency as a function of a control parameter accessible to an eavesdropper. With gated single-photon detectors, this control parameter can be the timing of the incoming pulse. When the eavesdropper sends short pulses using the appropriate timing so that the two gated detectors in Bob's setup have different efficiencies, the security of quantum key distribution can be compromised. Specifically, we show for the Bennett-Brassard 1984 (BB84) protocol that if the efficiency mismatch between 0 and 1 detector…
In this paper, we rigorously prove the intuition that in security proofs for BB84 one may regard an incoming signal to Bob as a qubit state. From this result, it follows that all security proofs for BB84 based on a virtual qubit entanglement distillation protocol, which was originally proposed by Lo and Chau [H.-K. Lo and H. F. Chau, Science 283, 2050 (1999)], and Shor and Preskill [P. W. Shor and J. Preskill, Phys. Rev. Lett. 85, 441 (2000)], are all valid even if Bob's actual apparatus cannot distill a qubit state explicitly. As a consequence, especially, the well-known result that a higher …
This report is about contradiction between fidelity needed to determine the entanglement and concomitant noise that always accompanies precise measurement. Account of quantum properties of field leads to additional noise caused by multiple particle creation through nonunitarity of quantum field representation in embedded sections of space (Unruh noise). Causes of quantum noise vanish at leaving off assumption about statistical independence of detectors. Smearing of detector leads to elimination of causes of Unruh noise and to emergence of imaginary entanglement of few mode states caused by ove…
We investigate limitations imposed by detector dead-times on the performance of sequential attacks against a differential-phase-shift (DPS) quantum key distribution (QKD) protocol with weak coherent pulses. In particular, we analyze sequential attacks based on unambiguous state discrimination of the signal states emitted by the source and we obtain ultimate upper bounds on the maximal distance achievable by a DPS QKD scheme both in the so-called trusted and untrusted device scenarios, respectively.
The security of a high speed quantum key distribution system with finite detector dead time τ is analyzed. When the transmission rate becomes higher than the maximum count rate of the individual detectors (1/τ), security issues affect the algorithm for sifting bits. Analytical calculations and numerical simulations of the Bennett-Brassard BB84 protocol are performed. We study Rogers et al.'s protocol (introduced in "Detector dead-time effects and paralyzability in high-speed quantum key distribution," New J. Phys. 9 (2007) 319) in the presence of an active eavesdropper Eve who has the power to…
We define a multiparty entanglement measure, called generalized geometric measure, that can detect and quantify genuine multiparty entanglement for any number of parties. The quantum phase transitions in exactly solvable models like the anisotropic XY model can be detected by this measure. We find that the multisite measure can be a useful tool to detect quantum phenomena in more complex systems like quasi 2D and 2D frustrated Heisenberg antiferromagnets. We propose an order parameter, called bound generalized geometric measure, in the spirit of bound quantum states, that can recognize the gap…
We address the question of how much entanglement can be certified from the observed correlations and the knowledge of the Hilbert space dimension of the measured systems. We focus on the case in which both systems are known to be qubits. For several correlations (though not for all), one can certify the same amount of entanglement as with state tomography, but with fewer assumptions, since nothing is assumed about the measurements. We also present security proofs of quantum key distribution without any assumption on the measurements. We discuss how both the amount of entanglement and the secur…
In a previous paper certain measurable criteria have been derived, that are sufficient to demonstrate the existence of Einstein-Podolsky-Rosen (EPR) correlations for measurements with continuous variable outcomes. Here it is shown how such EPR criteria, which do not demand perfect EPR correlations, can be used to prove the extent of security for continuous variable quantum cryptographic schemes (in analogy to that proposed by Ekert) where Alice and Bob hope to construct a secure sequence of values from measurements performed on continuous-variable EPR-correlated fields sent from a distant sour…