Encoding information in quantum systems can offer surprising advantages but at the same time there are limitations that arise from the fact that measuring an observable may disturb the state of the quantum system. In our work, we provide an in-depth analysis of a simple question: What happens when we perform two measurements sequentially on the same quantum system? This question touches upon some fundamental properties of quantum mechanics, namely the uncertainty principle and the complementarity of quantum measurements. Our results have interesting consequences, for example they can provide a simple proof of the optimal quantum strategy in the famous Clauser-Horne-Shimony-Holt game. Moreover, we show that the way information is encoded in quantum systems can provide a different perspective in understanding other fundamental aspects of quantum information, like non-locality and quantum cryptography. We prove some strong equivalences between these notions and provide a number of applications in all areas.
Here we propose a general relativistic quantum framework for cryptography that exploits the fascinating connection of quantum non-locality and special theory of relativity with cryptography. The underlying principle of unconditional security is causality and two-fold quantum non-local correlations: first entanglement swapping and then teleportation over causally independent entangled systems. We show that the proposed framework has following remarkable and novel features in mistrustful cryptography: (i) It helps in defining a new notion of oblivious transfer where both the data transferred and…
We propose and discuss a specific scheme allowing to realize a Quantum Cryptography qutrit protocol. This protocol exploits the polarization properties of single frequency and single spatial mode biphotons.
We develop and present a quantum cryptography concept in which phase determinations are made from the time that a photon is detected, as opposed to where the photon is detected, and hence is a non-interferometric process. The phase-encoded quantum information is contained in temporal and polarization superpositions of single photon states, forming a complex qudit of Hilbert dimension D equal to or greater than 4. Based on this, we have developed a new quantum key distribution protocol that allows the generation of secret key in the presence of higher noise than is possible with other protocols…
Non-locality consists in the existence of non-classical correlations between local measurements. So far, it has been investigated mostly in isolated quantum systems. Here we show that non-local correlations are present, can be detected and might be robust against noise also in many-body open quantum systems, both in the steady-state and in the transient regime. We further discuss the robustness of non-local correlations when the open quantum system undergoes repeated measurements, a relevant scenario for quantum cryptography.
We present the first device-independent quantum cryptography protocol for continuous variables. Our scheme is based on the Gottesman-Kitaev-Preskill encoding scheme whereby a qubit is embedded in the infinite-dimensional space of a quantum harmonic oscillator. The novel application of discrete-variable device-independent quantum key distribution to this encoding enables a continuous-variable analogue. Since the security of this protocol is based on discrete-variables we inherit by default security against collective attacks and, under certain memoryless assumptions, coherent attacks. We find t…
This paper provides a simple variation of the basic ideas of the BB84 quantum cryptographic scheme leading to a method of key expansion. A secure random sequence (the bases sequence) determines the encoding bases in a proposed scheme. Using the bases sequence repeatedly is proven to be safe by quantum mechanical laws.
Measurements performed on distant parts of an entangled quantum state can generate correlations incompatible with classical theories respecting the assumption of local causality. This is the phenomenon known as quantum non-locality that, apart from its fundamental role, can also be put to practical use in applications such as cryptography and distributed computing. Clearly, developing ways of quantifying non-locality is an important primitive in this scenario. Here, we propose to quantify the non-locality of a given probability distribution via its trace distance to the set of classical correl…
Weak coherent states as a photon source for quantum cryptography have limit in secure data rate and transmission distance because of the presence of multi-photon events and loss in transmission line. Two-photon events in a coherent state can be taken out by a two-photon interference scheme. We investigate the security issue of utilizing this modified coherent state in quantum cryptography. A 4 dB improvement in secure data rate or a nearly two-fold increase in transmission distance over the coherent state are found. With a recently proposed and improved encoding strategy, further improvement i…
Ever since the work of Bell, it has been known that entangled quantum states can rise non-local correlations. However, for almost forty years, it has been assumed that the most non-local states would be the maximally entangled ones. Surprisingly it is not the case: non-maximally entangled states are generally more non-local than maximally entangled states for all the measures of non-locality proposed to date: Bell inequalities, the Kullback-Leibler distance, entanglement simulation with communication or with non-local boxes, the detection loophole and efficiency of cryptography. In fact, one c…
The binary (one-bit-per-photon) encoding that most existing quantum key distribution (QKD) protocols employ puts a fundamental limit on their achievable key rates, especially under high channel loss conditions associated with long-distance fiber-optic or satellite-to-ground links. Inspired by the pulse-position-modulation (PPM) approach to photon-starved classical communications, we design and demonstrate the first PPM-QKD, whose security against collective attacks is established through continuous-variable entanglement measurements that also enable a novel decoy-state protocol performed conve…
High-dimensional encoding schemes have emerged as a novel way to perform quantum information tasks. For high dimensionality, temporal and transverse spatial modes of photons are the two paradigmatic degrees of freedom commonly used in such experiments. Nevertheless, general devices for multi-outcome measurements are still needed to take full advantage of the high-dimensional nature of encoding schemes. We propose a general full-field mode sorting scheme consisting only of up to two optimized phase elements based on evolutionary algorithms that allows for joint sorting of azimuthal and radial m…
The study of quantum cryptography and quantum non-locality have traditionnally been based on two-level quantum systems (qubits). In this paper we consider a generalisation of Ekert's cryptographic protocol [Ekert] where qubits are replaced by qutrits. The security of this protocol is related to non-locality, in analogy with Ekert's protocol. In order to study its robustness against the optimal individual attacks, we derive the information gained by a potential eavesdropper applying a cloning-based attack.
Non-local correlations are not only a fascinating feature of quantum theory, but an interesting resource for information processing, for instance in communication-complexity theory or cryptography. An important question in this context is whether the resource can be distilled: Given a large amount of weak non-local correlations, is there a method to obtain strong non-locality using local operations and shared randomness? We partly answer this question by no: CHSH-type non-locality, the only possible non-locality of binary systems, which is not super-strong, but achievable by measurements on ce…
The first quantum cryptography protocol, proposed by Bennett and Brassard in 1984 (BB84), has been widely studied in the last years. This protocol uses four states (more precisely, two complementary bases) for the encoding of the classical bit. Recently, it has been noticed that by using the same four states, but a different encoding of information, one can define a new protocol which is more robust in practical implementations, specifically when attenuated laser pulses are used instead of single-photon sources [V. Scarani et al., Phys. Rev. Lett. {\bf 92}, 057901 (2004); referred to as SARG04…
Oblivious transfer, a central functionality in modern cryptography, allows a party to send two one-bit messages to another who can choose one of them to read, remaining ignorant about the other, whereas the sender does not learn the receiver's choice. Oblivious transfer the security of which is information-theoretic for both parties is known impossible to achieve from scratch. - The joint behavior of certain bi-partite quantum states is non-local, i.e., cannot be explained by shared classical information. In order to better understand such behavior, which is classically explainable only by com…
The problem of unconditional security of quantum cryptography (i.e. the security which is guaranteed by the fundamental laws of nature rather than by technical limitations) is one of the central points in quantum information theory. We propose a relativistic quantum cryptosystem and prove its unconditional security against any eavesdropping attempts. Relativistic causality arguments allow to demonstrate the security of the system in a simple way. Since the proposed protocol does not employ collective measurements and quantum codes, the cryptosystem can be experimentally realized with the prese…
Mistrustful cryptography includes important tasks like bit commitment, oblivious transfer, coin flipping, secure computations, position authentication, digital signatures and secure unforgeable tokens. Practical quantum implementations presently use photonic setups. In many such implementations, Alice sends photon pulses encoding quantum states and Bob chooses measurements on these states. In practice, Bob generally uses single photon threshold detectors, which cannot distinguish the number of photons in detected pulses. Also, losses and other imperfections require Bob to report the detected p…
We prove that the teleportation based quantum cryptography protocol presented in [Opt. Commun. 283, 184 (2010)], which is built using only orthogonal states encoding the classical bits that are teleported from Alice to Bob, is asymptotically secure against all types of individual and collective attacks. We then investigate modifications to that protocol leading to greater secret-key rates and to security against coherent attacks. In other words, we show an unconditional secure quantum key distribution protocol that does not need non-orthogonal quantum states to encode the bits of the secret ke…
Non-local correlations are one of the most fascinating consequences of quantum physics from the point of view of information: Such correlations, although not allowing for signaling, are unexplainable by pre-shared information. The correlations have applications in cryptography, communication complexity, and sit at the very heart of many attempts of understanding quantum theory -- and its limits -- better in terms of classical information. In these contexts, the question is crucial whether such correlations can be distilled, i.e., whether weak correlations can be used for generating (a smaller …
Institute of Quantum Technologies and Advanced Computing, KACST（KACST量子技术与先进计算研究所）；Department of Physics, College of Science, Imam Mohammad Ibn Saud Islamic University (IMSIU)（伊玛目穆罕默德·本·沙特伊斯兰大学理学院物理系）；Department of Physics, College of Science, King Khalid University（国王哈立德大学理学院物理系）；Institute for Quantum Science and Technology and Department of Physics, Shanghai University（上海大学量子科学与技术研究院及物理系）；Shanghai Key Laboratory of High Temperature Superconductors, Shanghai University（上海大学高温超导学重点实验室）；NCQOQI, KACST（KACST国家量子光学与量子信息研究中心）
Non-local correlations are among the most fascinating features of quantum theory from the point of view of information: Such correlations, although not allowing for signaling, are unexplainable by pre-shared information. The correlations have applications in cryptography, communication complexity, and sit at the very heart of many attempts of understanding quantum theory -- and its limits -- in terms of classical information. In these contexts, the question is crucial whether such correlations can be amplified or distilled, i.e., whether and how weak correlations can be used for generating (a …
Simulating fermionic lattice models with qubits requires mapping fermionic degrees of freedom to qubits. The simplest method for this task, the Jordan-Wigner transformation, yields strings of Pauli operators acting on an extensive number of qubits. This overhead can be a hindrance to implementation of qubit-based quantum simulators, especially in the analog context. Here we thus review and analyze alternative fermion-to-qubit mappings, including the two approaches by Bravyi and Kitaev and the Auxiliary Fermion transformation. The Bravyi-Kitaev transform is reformulated in terms of a classical …
We consider continuous-variable quantum key distribution with discrete-alphabet encodings. In particular, we study protocols where information is encoded in the phase of displaced coherent (or thermal) states, even though the results can be directly extended to any protocol based on finite constellations of displaced Gaussian states. In this setting, we provide a composable security analysis in the finite-size regime assuming the realistic but restrictive hypothesis of collective Gaussian attacks. Under this assumption, we can efficiently estimate the parameters of the channel via maximum like…
Quantum key distributions (QKD) systems often rely on polarization of light for encoding, thus limiting the amount of information that can be sent per photon and placing tight bounds on the error that such a system can tolerate. Here we describe a proof-of-principle experiment that indicates the feasibility of high-dimensional QKD based on the transverse structure of the light field, allowing for the transfer of more than 1 bit per photon. Our implementation uses the orbital angular momentum (OAM) of photons and the corresponding mutually unbiased basis of angular position (ANG). Our experimen…
Einstein, Podolsky and Rosen (EPR) pointed out that the quantum-mechanical description of "physical reality" implied an unphysical, instantaneous action between distant measurements. To avoid such an action at a distance, EPR concluded that Quantum Mechanics had to be incomplete. However, its extensions involving additional "hidden variables", allowing for the recovery of determinism and locality, have been disproved experimentally (Bell's theorem). Here, I present an opposite solution of the paradox based on the greater indeterminism of the modern Quantum Field Theory (QFT) description of Par…
Quantum communication, and indeed quantum information in general, has changed the way we think about quantum physics. In 1984 and 1991, the first protocol for quantum cryptography and the first application of quantum non-locality, respectively, attracted a diverse field of researchers in theoretical and experimental physics, mathematics and computer science. Since then we have seen a fundamental shift in how we understand information when it is encoded in quantum systems. We review the current state of research and future directions in this new field of science with special emphasis on quantum…
Efficient Lattice Hamiltonian Encoding for the Shortest Vector Problem
Imperial College London（帝国理工学院）；Raymond and Beverly Sackler School of Physics and Astronomy, Tel-Aviv University（特拉维夫大学雷蒙德和贝弗利萨克勒物理与天文学学院）；Helmholtz-Zentrum Dresden-Rossendorf（德累斯顿罗森多夫亥姆霍兹中心）
Simulating a fermionic system on a quantum computer requires encoding the anti-commuting fermionic variables into the operators acting on the qubit Hilbert space. The most familiar of which, the Jordan-Wigner transformation, encodes fermionic operators into non-local qubit operators. As non-local operators lead to a slower quantum simulation, recent works have proposed ways of encoding fermionic systems locally. In this work, we show that locality may in fact be too strict of a condition and the size of operators can be reduced by encoding the system quasi-locally. We give examples relevant to…
In the spirit of device-independent cryptography, we present a two-party quantum authorization primitive with non-locality as its fueling resource. Therein, users are attributed authorization levels granting them access to a private database accordingly. The authorization levels are encoded in the non-local resources distributed to the users, and subsequently confirmed by their ability to win CHSH games using such resources. We formalize the protocol, prove its security, and frame it in the device-independent setting employing the notion of CHSH self-testing via simulation. Finally, we provide…
Quantum cryptography integrating an optical quantum memory
Laboratoire Kastler Brossel, Sorbonne Université, CNRS, ENS-Université PSL, Collège de France（卡斯勒-布罗塞尔实验室，索邦大学，法国国家科学研究中心，巴黎高等师范学院-巴黎文理研究大学，法兰西公学院）；Welinq（韦尔林克）；ICFO - Institut de Ciencies Fotoniques, The Barcelona Institute of Science and Technology（光子科学研究所，巴塞罗那科学技术研究院）；University of Vienna, Faculty of Physics, Vienna Center for Quantum Science and Technology (VCQ)（维也纳大学物理学院，维也纳量子科学与技术中心）；Université de Paris, CNRS, IRIF（巴黎大学，法国国家科学研究中心，信息与随机研究所）；LIP6, CNRS, Sorbonne Université（LIP6实验室，法国国家科学研究中心，索邦大学）
So far no mechanism is known, which could connect the two measurements in an Aspect-type experiment. Here, we suggest such a mechanism, based on the phase of a photon's field during propagation. We show that two polarization measurements are correlated, even if no signal passes from one point of measurement to the other. The non-local connection of a photon pair is the result of its origin at a common source, where the two fields acquire a well defined phase difference. Therefore, it is not actually a non-local effect in any conventional sense. We expect that the model and the detailed analysi…
The interest in decoherence-free, or noiseless subsystems (DFS/NSs) of quantum systems is both of fundamental and practical interest. Understanding the invariance of a set of states under certain transformations is mutually associated with a better understanding of some fundamental aspects of quantum mechanics as well as the practical utility of invariant subsystems. For example, DFS/NSs are potentially useful for protecting quantum information in quantum cryptography and quantum computing as well as enabling universal computation. Here we discuss transformations which are compatible with a DF…
Entangled photon pairs -- discrete light quanta that exhibit non-classical correlations -- play a crucial role in quantum information science (for example in demonstrations of quantum non-locality and quantum cryptography). At the macroscopic optical field level non-classical correlations can also be important, as in the case of squeezed light, entangled light beams and teleportation of continuous quantum variables. Here we use stimulated parametric down-conversion to study entangled states of light that bridge the gap between discrete and macroscopic optical quantum correlations. We demonstra…
Quantum cryptography has been recently extended to continuous variable systems, e.g., the bosonic modes of the electromagnetic field. In particular, several cryptographic protocols have been proposed and experimentally implemented using bosonic modes with Gaussian statistics. Such protocols have shown the possibility of reaching very high secret-key rates, even in the presence of strong losses in the quantum communication channel. Despite this robustness to loss, their security can be affected by more general attacks where extra Gaussian noise is introduced by the eavesdropper. In this general…
Experimental quantum cryptography with single photons and imperfect devices
University of Waterloo（滑铁卢大学）；Department for Quantum Technology, University of Münster（明斯特大学量子技术系）；Institute for Physics and Astronomy, Technical University of Berlin（柏林工业大学物理与天文学研究所）；Toshiba Europe Ltd.（东芝欧洲有限公司）；Advanced Quantum Light Sources GmbH（先进量子光源有限公司）；Key Laboratory of Optoelectronic Materials and Devices, Institute of Semiconductors, Chinese Academy of Sciences（中国科学院半导体研究所光电材料与器件重点实验室）
We introduce the concept of cryptographic reduction, in analogy with a similar concept in computational complexity theory. In this framework, class $A$ of crypto-protocols reduces to protocol class $B$ in a scenario $X$, if for every instance $a$ of $A$, there is an instance $b$ of $B$ and a secure transformation $X$ that reproduces $a$ given $b$, such that the security of $b$ guarantees the security of $a$. Here we employ this reductive framework to study the relationship between security in quantum key distribution (QKD) and quantum secure direct communication (QSDC). We show that replacing …
QUBO Modeling of Module Learning With Errors: Stability and Scaling in Post-Quantum Cryptography
D Y Patil International University（D Y Patil 国际大学）；Birla Institute of Technology and Science Pilani, Dubai（比拉理工学院皮拉尼分校，迪拜）；QbitForce Quantum Pvt. Ltd.（QbitForce 量子私人有限公司）；SRM University-AP（SRM 大学安得拉邦校区）；University of Stuttgart（斯图加特大学）
Cryptanalysis is an important branch in the study of cryptography, including both the classical cryptography and the quantum one. In this paper we analyze the security of two three-party quantum key distribution protocols (QKDPs) proposed recently, and point out that they are susceptible to a simple and effective attack, i.e. the dense-coding attack. It is shown that the eavesdropper Eve can totally obtain the session key by sending entangled qubits as the fake signal to Alice and performing collective measurements after Alice's encoding. The attack process is just like a dense-coding communic…
Prepare-and-measure (P&M) quantum networks are the basic building blocks of quantum communication and cryptography. These networks crucially rely on non-orthogonal quantum encodings to distribute quantum correlations, thus enabling superior communication rates and information-theoretic security. Here, we present a computational toolbox that is able to efficiently characterise the set of input-output probability distributions for any discrete-variable P&M quantum network, assuming only the inner-product information of the quantum encodings. Our toolbox is thus highly versatile and can be used t…
Fermion-to-qubit mappings that preserve geometric locality are especially useful for simulating lattice fermion models (e.g., the Hubbard model) on a quantum computer. They avoid the overhead associated with geometric non-local parity terms in mappings such as the Jordan-Wigner transformation and the Bravyi-Kitaev transformation. As a result, they often provide quantum circuits with lower depth and gate complexity. In such encodings, fermionic states are encoded in the common +1 eigenspace of a set of stabilizers, akin to stabilizer quantum error-correcting codes. Here, we discuss several know…
Single-Photon Advantage in Quantum Cryptography Beyond QKD
Institute of Solid State Physics, Technical University of Berlin（柏林工业大学固体物理研究所）；Electrical Engineering and Computer Science Department, Technical University of Berlin（柏林工业大学电气与计算机工程系）；Key Laboratory of Optoelectronic Materials and Devices, Institute of Semiconductors, Chinese Academy of Sciences（中国科学院半导体研究所光电材料与器件重点实验室）；Center of Materials Science and Optoelectronics Engineering, University of Chinese Academy of Sciences（中国科学院大学材料科学与工程光电子学中心）
Device-Independent (DI) security is the best form of quantum cryptography, providing information-theoretic security based on the very laws of nature. In its highest form, security is guaranteed against adversaries limited only by the no-superluminal signalling rule of relativity. The task of randomness amplification, to generate secure fully uniform bits starting from weakly random seeds, is of both cryptographic and foundational interest, being important for the generation of cryptographically secure random numbers as well as bringing deep connections to the existence of free-will. DI no-sign…
The wave-particle duality of light has led to two different encodings for optical quantum information processing. Several approaches have emerged based either on particle-like discrete-variable states, e.g. finite-dimensional quantum systems, or on wave-like continuous-variable states, e.g. infinite-dimensional systems. Here, we demonstrate the first measurement-induced generation of entanglement between optical qubits of these different types, located at distant places and connected by a lossy channel. Such hybrid entanglement, which is a key resource for a variety of recently proposed scheme…
The problem of sharing entanglement over large distances is crucial for implementations of quantum cryptography. A possible scheme for long-distance entanglement sharing and quantum communication exploits networks whose nodes share Einstein-Podolsky-Rosen (EPR) pairs. In Perseguers et al. [Phys. Rev. A 78, 062324 (2008)] the authors put forward an important isomorphism between storing quantum information in a dimension $D$ and transmission of quantum information in a $D+1$-dimensional network. We show that it is possible to obtain long-distance entanglement in a noisy two-dimensional (2D) netw…
Agile cryptography allows for a resource-efficient swap of a cryptographic core in case the security of an underlying classical cryptographic algorithm becomes compromised. Conversely, versatile cryptography allows the user to switch the cryptographic task without requiring any knowledge of its inner workings. In this paper, we suggest how these related principles can be applied to the field of quantum cryptography by explicitly demonstrating two quantum cryptographic protocols, quantum digital signatures (QDS) and quantum secret sharing (QSS), on the same hardware sender and receiver platform…
We examine a situation in which an information-carrying signal is sent from two sources to a common receiver. The radiation travels through free space in the presence of noise. The information resides in a relationship between the two beams. We inquire into whether itis possible, in principle, that the locations of the transmitters can be concealed from a party who receives the radiation and decodes the information. Direction finding entails making a set of measurements on asignal and constructing an analytic continuation of the time dependent fields from the results. The fact that this proces…
