发表机构
University of Waterloo; Université de Montréal; National University of Singapore（滑铁卢大学; 蒙特利尔大学; 新加坡国立大学）
机构由 AI 辅助整理，请以论文原文为准。AI 中文总结
本研究针对量子密钥分发协议，提出将错误验证与隐私放大合并为单步哈希过程的方案，证明其在密钥率不变、安全参数微调下可保证安全性，能降低经典后处理等的复杂度与资源需求。
AI 中文摘要
量子密钥分发（QKD）协议通常包含错误验证和隐私放大两个独立步骤，这两个步骤均需从合适的哈希族中采样哈希函数并应用于经典数据。一种潜在更简单的替代方案是实现单步哈希过程：公布并比较其输出的固定数量比特以完成错误验证，保留剩余比特作为最终输出密钥。这可降低协议中经典后处理的复杂度、经典通信量及所需随机数。尽管该构造已在文献中出现，但缺乏合适的数学证明。本研究表明，在某些简单条件下，此类协议的安全性可通过无最终错误验证步骤的协议的保密性的稍作修改的概念推导得出。特别地，我们证明对于大多数基于熵的证明，该组合协议可在密钥率不变、安全参数仅作微小调整的情况下实现。
英文摘要
Quantum Key Distribution (QKD) protocols typically involve two separate steps of error-verification and privacy amplification. Both steps involve the application of a hash function sampled from a suitable hash family to classical data. A potentially simpler alternative is to implement a single-step hashing procedure, announce and compare a fixed number of bits of its output for error-verification, and retain the remaining bits as the final output key. This reduces the complexity of classical postprocessing, the amount of classical communication, and the amount of randomness needed in the protocol. While this construction has appeared in the literature, a suitable mathematical justification is lacking. In this work, we show that the security of such protocols, under certain simple conditions, follows from a slightly modified notion of secrecy of the protocol without the final error-verification step. In particular, we show that for most entropy-based proofs, the combined protocol can be implemented with no change to the key rate, and a minor change to the security parameter.
