Cloning and Cryptography with Quantum Continuous Variables
N. J. Cerf, S. Iblisdir, G. Van Assche
备注：
8 pages, 3 figures, submitted to the special issue of the European Physical Journal D on "Quantum interference and cryptographic keys: novel physics and advancing technologies", proceedings of the conference QUICK 2001, Corsica, April 7-13 2001. Minor correction, references added
The cloning of quantum variables with continuous spectra is investigated. We define a Gaussian 1-to-2 cloning machine, which copies equally well two conjugate variables such as position and momentum or the two quadrature components of a light mode. The resulting cloning fidelity for coherent states, namely $F=2/3$, is shown to be optimal. An asymmetric version of this Gaussian cloner is then used to assess the security of a continuous-variable quantum key distribution scheme that allows two remote parties to share a Gaussian key. The information versus disturbance tradeoff underlying this continuous quantum cryptographic scheme is then analyzed for the optimal individual attack. Methods to convert the resulting Gaussian keys into secret key bits are also studied. The extension of the Gaussian cloner to optimal $N$-to-$M$ continuous cloners is then discussed, and it is shown how to implement these cloners for light modes, using a phase-insensitive optical amplifier and beam splitters. Finally, a phase-conjugated inputs $(N,N')$-to-$(M,M')$ continuous cloner is defined, yielding $M$ clones and $M'$ anticlones from $N$ replicas of a coherent state and $N'$ replicas of its phase-conjugate (with $M'-M=N'-N$). This novel kind of cloners is shown to outperform the standard $N$-to-$M$ cloners in some situations.
We describe a nuclear magnetic resonance (NMR) experiment which implements an efficient one-to-two qubit phase-covariant cloning machine(QPCCM). In the experiment we have achieved remarkably high fidelities of cloning, 0.848 and 0.844 respectively for the original and the blank qubit. This experimental value is close to the optimal theoretical value of 0.854. We have also demonstrated how to use our phase-covariant cloning machine for quantum simulations of bit by bit eavesdropping in the four-state quantum key distribution protocol.
We consider one of the quantum key distribution protocols recently introduced in Ref. [Pirandola et al., Nature Physics 4, 726 (2008)]. This protocol consists in a two-way quantum communication between Alice and Bob, where Alice encodes secret information via a random phase-space displacement of a coherent state. In particular, we study its security against a specific class of individual attacks which are based on combinations of Gaussian quantum cloning machines.
In practical quantum cryptography, the source sometimes produces multi-photon pulses, thus enabling the eavesdropper Eve to perform the powerful photon-number-splitting (PNS) attack. Recently, it was shown by Curty and Lutkenhaus [Phys. Rev. A 69, 042321 (2004)] that the PNS attack is not always the optimal attack when two photons are present: if errors are present in the correlations Alice-Bob and if Eve cannot modify Bob's detection efficiency, Eve gains a larger amount of information using another attack based on a 2->3 cloning machine. In this work, we extend this analysis to all distances…
The impossibility of perfectly copying (or cloning) an arbitrary quantum state is one of the basic rules governing the physics of quantum systems. The processes that perform the optimal approximate cloning have been found in many cases. These "quantum cloning machines" are important tools for studying a wide variety of tasks, e.g. state estimation and eavesdropping on quantum cryptography. This paper provides a comprehensive review of quantum cloning machines (both for discrete-dimensional and for continuous-variable quantum systems); in addition, it presents the role of cloning in quantum cry…
Multiphoton state in quantum cryptography decreases its security. Key disclosing with universal quantum cloning machine (UQCM) is considered in explicit manner. Although UQCM cannot make perfect clones, there is some invariant quantity between the original photon and the imperfect clones. The invariant quantity, the direction of Stokes parameters, tells us the auxiliary information leading into key information. The attack, then, corresponds to some kind of quantum non-demolition measurement. Its application to recent high-performance quantum cryptography, Y-00 protocol, is also studied.
We study optimal eavesdropping in quantum cryptography with three-dimensional systems, and show that this scheme is more secure than protocols using two-dimensional states. We generalize the according eavesdropping transformation to arbitrary dimensions, and discuss the connection with optimal quantum cloning.
The no-cloning principle tells us that non-orthogonal quantum states cannot be cloned, but it does not tell us that orthogonal states can always be cloned. We suggest a situation where the cloning transformations are restricted, leading to a novel type of no-cloning principle. In the case of a composite system made of two subsystems: if the subsystems are only available one after the other then there are various cases when orthogonal states cannot be cloned. Surprising examples are given, which give a radically better insight regarding the basic concepts of quantum cryptography.
The quantum cloner machine maps an unknown arbitrary input qubit into two optimal clones and one optimal flipped qubit. By combining linear and non-linear optical methods we experimentally implement a scheme that, after the cloning transformation, restores the original input qubit in one of the output channels, by using local measurements, classical communication and feedforward. This significant teleportation-like method demonstrates how the information is preserved during the cloning process. The realization of the reversion process is expected to find useful applications in the field of mod…
We consider the cloning of sequences of qubits prepared in the states used in the BB84 or 6-state quantum cryptography protocol, and show that the single-qubit fidelity is unaffected even if entire sequences of qubits are prepared in the same basis. This result is of great importance for practical quantum cryptosystems because it reduces the need for high-speed random number generation without impairing on the security against finite-size attacks.
Over decades quantum cryptography has been intensively studied for unconditionally secured data transmission in a quantum regime. Due to the quantum loopholes caused by imperfect single photon detectors and/or lossy quantum channels, however, the quantum cryptography is practically inefficient and even vulnerable to eavesdropping. Here, a method of unconditionally secured key distribution potentially compatible with current fiber-optic communications networks is proposed in a classical regime for high-speed optical backbone networks. The unconditional security is due to the quantum superpositi…
The no-cloning theorem asserts that, unlike classical information, quantum information cannot be copied. This seemingly undesirable phenomenon is harnessed in quantum cryptography. Uncloneable cryptography studies settings in which the impossibility of copying is a desired property, and achieves forms of security that are classically unattainable. The first example discovered and analyzed was in the context of cash. On the one hand, we want users to hold the cash; on the other hand, the cash should be hard to counterfeit. Quantum money uses variants of the no-cloning theorem to make counterfei…
We present a protocol for deterministic and highly efficient quantum cryptography with entangled photon pairs in a 4x4-dimentional Hilbert space. Two communicating parties, Alice and Bob first share a both polarization- and path-entangled photon pair, and then each performs a complete Bell-state measurement on their own photon in one of two complementary Bell-state bases. It is demonstrated that each measurement in which both Alice and Bob register a photon can build certain perfect correlation and generate 1.5 key bits on average. The security of our protocol is guaranteed by the non-cloning …
Cloning machines, that is, transformations that achieve the best approximate copying of a quantum state compatible with the no-cloning theorem, have been a fundamental research topic over the last five years. This study is of particular significance given the close connection between quantum cloning and quantum cryptography: using an optimal cloner generally makes it possible to obtain a tight bound on the best individual eavesdropping strategy in a quantum cryptosystem. In this Chapter, the issue of cloning a continuous-variable quantum system will be analyzed, and a Gaussian cloning transfor…
We analyze the security of quantum cryptography schemes for $d$-level systems using 2 or $d+1$ maximally conjugated bases, under individual eavesdropping attacks based on cloning machines and measurement after the basis reconciliation. We consider classical advantage distillation protocols, that allow to extract a key even in situations where the mutual information between the honest parties is smaller than the eavesdropper's information. In this scenario, advantage distillation protocols are shown to be as powerful as quantum distillation: key distillation is possible using classical techniqu…
The study of quantum cryptography and quantum entanglement has traditionally been based on two-level quantum systems (qubits) and more recently on three-level systems (qutrits). We investigate several classes of state-dependent quantum cloners for four-level systems (quartits). These results apply to symmetric as well as asymmetric cloners, so that the balance between the fidelity of the two clones can also be analyzed. We extend Cerf's formalism for cloning states in order to derive cloning machines that remain invariant under certain unitary transformations. Our results show that a different…
We propose an optical implementation of the Gaussian continuous-variable quantum cloning machines. We construct a symmetric N -> M cloner which optimally clones coherent states and we also provide an explicit design of an asymmetric 1 -> 2 cloning machine. All proposed cloning devices can be built from just a single non-degenerate optical parametric amplifier and several beam splitters.
We study the minimal input sets which can determine completely the universal and the phase-covariant quantum cloning machines. We find that the universal quantum cloning machine, which can copy arbitrary input qubit equally well, however can be determined completely by only four input states located at the four vertices of a tetrahedron. The phase-covariant quantum cloning machine, which can copy all qubits located on the equator of the Bloch sphere, can be determined by three equatorial qubits with equal angular distance. These results sharpen further the well-known results that BB84 states a…
Attempts at cloning a quantum system result in the introduction of imperfections in the state of the copies. This is a consequence of the no-cloning theorem, which is a fundamental law of quantum physics and the backbone of security for quantum communications. Although such perfect copies are prohibited, a quantum state may be copied with maximal accuracy via various optimal cloning schemes. Optimal quantum cloning, which lies at the border of the physical limit imposed by the no-signalling theorem and the Heisenberg uncertainty principle, has been experimentally realized for low dimensional p…
The cloning of quantum variables with continuous spectra is analyzed. A universal - or Gaussian - quantum cloning machine is exhibited that copies equally well the states of two conjugate variables such as position and momentum. It also duplicates all coherent states with a fidelity of 2/3. More generally, the copies are shown to obey a no-cloning Heisenberg-like uncertainty relation.
We propose an experimental scheme for the cloning machine of continuous quantum variables through a network of parametric amplifiers working as input-output four-port gates.
We report the experimental demonstration of continuous variable cloning of phase conjugate coherent states as proposed by Cerf and Iblisdir (Phys. Rev. Lett. 87, 247903 (2001)). In contrast to the proposal of Cerf and Iblisdir, the cloning transformation is accomplished using only linear optical components, homodyne detection and feedforward. Three clones are succesfully produced with fidelities about 89%.
We show that an unknown quantum state in phase space can be teleported via three-mode entanglement generated by continuous variable quantum cloning machine (transformation). Further, proceeding with our teleportation protocol we are able to improve the fidelity of teleportation obtained by Loock et.al. [Phys.Rev.Lett. 84, 3482(2000)]. Also we study here the entanglement between the two output copies from cloning machine.
The security of quantum cryptography is guaranteed by the no-cloning theorem, which implies that an eavesdropper copying transmitted qubits in unknown states causes their disturbance. Nevertheless, in real cryptographic systems some level of disturbance has to be allowed to cover, e.g., transmission losses. An eavesdropper can attack such systems by replacing a noisy channel by a better one and by performing approximate cloning of transmitted qubits which disturb them but below the noise level assumed by legitimate users. We experimentally demonstrate such symmetric individual eavesdropping on…
We discuss the criteria presently used for evaluating the efficiency of quantum teleportation schemes for continuous variables. Using an argument based upon the difference between 1-to-2 quantum cloning (quantum duplication) and 1-to-infinity cloning (classical measurement), we show that a fidelity value larger than 2/3 is required for successful quantum teleportation of coherent states. This value has not been reached experimentally so far.
We investigate the security of continuous-variable (CV) quantum key distribution (QKD) using coherent states and reverse reconciliation against Gaussian individual attacks based on an optimal Gaussian $1 \to 2$ cloning machine. We provide an implementation of the optimal Gaussian individual attack. we also find a Bell-measurement attack which works without delayed choice of measurements and has better performance than the cloning attack.
We propose a scheme for continuous-variable quantum cloning of coherent states with phase-conjugate input modes using linear optics. The quantum cloning machine yields $M$ identical optimal clones from $N$ replicas of a coherent state and $N$ its replicas of phase conjugate. This scheme can be straightforwardly implemented with the setup accessible at present since its optical implementation only employs simple linear optical elements and homodyne detection. Compared with the original scheme for continuous variables quantum cloning with phase-conjugate input modes proposed by Cerf and Iblisdir…
We propose several methods for quantum key distribution (QKD) based upon the generation and transmission of random distributions of coherent or squeezed states, and we show that they are are secure against individual eavesdropping attacks. These protocols require that the transmission of the optical line between Alice and Bob is larger than 50 %, but they do not rely on "non-classical" features such as squeezing. Their security is a direct consequence of the no-cloning theorem, that limits the signal to noise ratio of possible quantum measurements on the transmission line. Our approach can als…
Lectures on classical and quantum cryptography. Contents: Private key cryptosystems. Elements of number theory. Public key cryptography and RSA cryptosystem. Shannon`s entropy and mutual information. Entropic uncertainty relations. The no cloning theorem. The BB84 quantum cryptographic protocol. Security proofs. Bell`s theorem. The EPRBE quantum cryptographic protocol.
We experimentally demonstrate continuous-variable quantum teleportation beyond the no-cloning limit. We teleport a coherent state and achieve the fidelity of 0.70$\pm$0.02 that surpasses the no-cloning limit of 2/3. Surpassing the limit is necessary to transfer the nonclassicality of an input quantum state. By using our high-fidelity teleporter, we demonstrate entanglement swapping, namely teleportation of quantum entanglement, as an example of transfer of nonclassicality.
The fidelity of a quantum transformation is strongly linked with the prior partial information of the state to be transformed. We illustrate this interesting point by proposing and demonstrating the superior cloning of coherent states with prior partial information. More specifically, we propose two simple transformations that under the Gaussian assumption optimally clone symmetric Gaussian distributions of coherent states as well as coherent states with known phases. Furthermore, we implement for the first time near-optimal state-dependent cloning schemes relying on simple linear optics and f…
We present a feasible scheme to use trapped ions Cavity QED system to implement optimal $1\to N$ cloning machine of coherent state. In present scheme, as the ouput of the clone machine, the copies of the cavity mode emerge at the vibrational modes and cavity modes is acted as the ancilla mode in the implementation of the cloning. We further show that such system can be used to generated multimodes quantum state, which can realize optimum symmetric $1\to N$ telecloning of coherent state of distant cavity.
All incoherent as well as 2- and 3-qubit coherent eavesdropping strategies on the 6 state protocol of quantum cryptography are classified. For a disturbance of 1/6, the optimal incoherent eavesdropping strategy reduces to the universal quantum cloning machine. Coherent eavesdropping cannot increase Eve's Shannon information, neither on the entire string of bits, nor on the set of bits received undisturbed by Bob. However, coherent eavesdropping can increase as well Eve's Renyi information as her probability of guessing correctly all bits. The case that Eve delays the measurement of her probe u…
We investigate phase-insensitive linear amplification at the quantum limit for single- and two-mode states and show that there exists a broad class of non-Gaussian states whose nonclassicality survives even at an arbitrarily large gain. We identify the corresponding observable nonclassical effects and find that they include, remarkably, two-mode entanglement. The implications of our results for quantum cloning outside the Gaussian regime are also addressed.
We analyze a reversibility of optimal Gaussian $1\to 2$ quantum cloning of a coherent state using only local operations on the clones and classical communication between them and propose a feasible experimental test of this feature. Performing Bell-type homodyne measurement on one clone and anti-clone, an arbitrary unknown input state (not only a coherent state) can be restored in the other clone by applying appropriate local unitary displacement operation. We generalize this concept to a partial LOCC reversal of the cloning and we show that this procedure converts the symmetric cloner to an a…
The information encoded in the polarization of a single photon can be transferred to a remote location by two-channel continuous-variable quantum teleportation. However, the finite entanglement used in the teleportation causes random changes in photon number. If more than one photon appears in the output, the continuous-variable teleportation accidentally produces clones of the original input photon. In this paper, we derive the polarization statistics of the $N$-photon output components and show that they can be decomposed into an optimal cloning term and completely unpolarized noise. We find…
We consider the quantum cloning of continuous variable entangled states. This is achieved by introducing two symmetric entanglement cloning machines (or e-cloners): a local e-cloner and a global e-cloner; where we look at the preservation of entanglement in the clones under the condition that the fidelity of the clones is maximized. These cloning machines are implemented using simple linear optical elements such as beam splitters and homodyne detection along with squeeze gates. We show that the global e-cloner out-performs the local e-cloner both in terms of the fidelity of the cloned states a…
A new quantum cryptography protocol, based on all unselected states of a qubit as a sort of alphabet with continuous set of letters, is proposed. Its effectiveness is calculated and shown to be essentially higher than those of the other known protocols.
We use the probability of error as a measure of distinguishability between two pure and two mixed symmetric coherent states in the context of continuous variable quantum cryptography. We show that the two mixed symmetric coherent states (in which the various components have the same real part) never give an eavesdropper more information than two pure coherent states.
We analyze the asymptotic security of the family of Gaussian modulated Quantum Key Distribution protocols for Continuous Variables systems. We prove that the Gaussian unitary attack is optimal for all the considered bounds on the key rate when the first and second momenta of the canonical variables involved are known by the honest parties.
We show that for any Hilbert-space dimension, the optimal universal quantum cloner can be constructed from essentially the same quantum circuit, i.e., we find a universal design for universal cloners. In the case of infinite dimensions (which includes continuous variable quantum systems) the universal cloner reduces to an essentially classical device. More generally, we construct a universal quantum circuit for distributing qudits in any dimension which acts covariantly under generalized displacements and momentum kicks. The behavior of this covariant distributor is controlled by its initial s…
We demonstrate an implementation of quantum key distribution with continuous variables based on a go-&-return configuration over distances up to 14km. This configuration leads to self-compensation of polarisation and phase fluctuations. We observe a high degree of stability of our set-up over many hours.
After a brief introduction to the quantum no-cloning theorem and its link with the linearity and causality of quantum mechanics, the concept of quantum cloning machines is sketched, following, whenever possible, the chronology of the main results. The important classes of quantum cloning machines are reviewed, in particular state-independent and state-dependent cloning machines. The 1-to-2 cloning problem is then studied from a formal point of view, using the isomorphism between completely positive maps and operators, which leads to the so-called double-Bell ansatz. This also yields an efficie…
We investigate the security of continuous-variable (CV) quantum key distribution (QKD) using coherent states in the presence of quadrature excess noise. We consider an eavesdropping attack which uses a linear amplifier and beam splitter. This attack makes a link between beam-splitting attack and intercept-resend attack (classical teleportation attack). We also show how postselection loses its efficiency in a realistic channel.
In this letter, first, we investigate the security of a continuous-variable quantum cryptographic scheme with a postselection process against individual beam splitting attack. It is shown that the scheme can be secure in the presence of the transmission loss owing to the postselection. Second, we provide a loss limit for continuous-variable quantum cryptography using coherent states taking into account excess Gaussian noise on quadrature distribution. Since the excess noise is reduced by the loss mechanism, a realistic intercept-resend attack which makes a Gaussian mixture of coherent states g…
We show how to implement the optimal Gaussian $N$-to-$M$ cloning with linear optics and homodyne detection. We also show that the Gaussian $N$-to-$M$ cloning of known-phase coherent states can be performed with the fidelity $\sqrt \frac{2 M N}{2M N+M -N}$ by linear optics and homodyne detection, and with $\frac{2}{\sqrt{1+\frac{1}{N}}+\sqrt {1-\frac{1}{M}}}$ by utilizing quadrature squeezing. From the classical limit of the cloning (1-to-$\infty$ cloning), a necessary condition of continuous variable quantum key distribution using known-phase coherent states is provided.
In continuous-variable quantum information processing detectors are necessarily coarse grained and of finite range. We discuss how especially the latter feature is a bug and may easily lead to overoptimistic estimates of entanglement and of security, when missed data outside the detector range are ignored. We show that entropic separability or security criteria are much superior to variance-based criteria for mitigating the negative effects of this bug.
Quantum cryptography with the predetermined key was experimentally realized using Einstein-Podolsky-Rosen(EPR) correlations of continuously bright optical beams. Only one of two EPR correlated beams is transmitted with the signals modulated on quadrature phases and amplitudes, and the other one is retained by the authorized receiver. The modulated small signals are totally submerged in the large quantum noise of the signal beam, therefore nobody except the authorized receiver can decode the signals. Usability of imperfect quantum correlation, high transmission and detection efficiencies, and s…
We discuss a quantum key distribution scheme in which small phase and amplitude modulations of CW light beams carry the key information. The presence of EPR type correlations provides the quantum protection. We identify universal constraints on the level of shared information between the intended receiver (Bob) and any eavesdropper (Eve) and use this to make a general evaluation of security. We identify teleportation as an optimum eavesdropping technique.
We introduce new quantum key distribution protocols using quantum continuous variables, that are secure against individual attacks for any transmission of the optical line between Alice and Bob. In particular, it is not required that this transmission is larger than 50 %. Though squeezing or entanglement may be helpful, they are not required, and there is no need for quantum memories or entanglement purification. These protocols can thus be implemented using coherent states and homodyne detection, and they may be more efficient than usual protocols using quantum discrete variables.
We demonstrate that secure quantum key distribution systems based on continuous variables implementations can operate beyond the apparent 3 dB loss limit that is implied by the beam splitting attack . The loss limit was established for standard minimum uncertainty states such as coherent states. We show that by an appropriate postselection mechanism we can enter a region where Eve's knowledge falls behind the information shared between Alice and Bob even in the presence of substantial losses.
Correlations of the type discussed by EPR in their original 1935 paradox for continuous variables exist for the quadrature phase amplitudes of two spatially separated fields. These correlations were experimentally reported in 1992. We propose to use such EPR beams in quantum cryptography, to transmit with high efficiency messages in such a way that the receiver and sender may later determine whether eavesdropping has occurred. The merit of the new proposal is in the possibility of transmitting a reasonably secure yet predetermined key. This would allow relay of a cryptographic key over long di…
The cloning of continuous quantum variables is analyzed based on the concept of Gaussian cloning machines, i.e., transformations that yield copies that are Gaussian mixtures centered on the state to be copied. The optimality of Gaussian cloning machines that transform N identical input states into M output states is investigated, and bounds on the fidelity of the process are derived via a connection with quantum estimation theory. In particular, the optimal N-to-M cloning fidelity for coherent states is found to be equal to MN/(MN+M-N).
A general study of arbitrary finite-size coherent attacks against continuous-variable quantum cryptographic schemes is presented. It is shown that, if the size of the blocks that can be coherently attacked by an eavesdropper is fixed and much smaller than the key size, then the optimal attack for a given signal-to-noise ratio in the transmission line is an individual gaussian attack. Consequently, non-gaussian coherent attacks do not need to be considered in the security analysis of such quantum cryptosystems.
A transformation achieving the optimal symmetric N-to-M cloning of coherent states is presented. Its implementation only requires a phase-insensitive linear amplifier and a network of beam splitters. An experimental demonstration of this continuous-variable cloner should therefore be in the scope of current technology. The link between optimal quantum cloning and optimal amplification of quantum states is also pointed out.
We present the first device-independent quantum cryptography protocol for continuous variables. Our scheme is based on the Gottesman-Kitaev-Preskill encoding scheme whereby a qubit is embedded in the infinite-dimensional space of a quantum harmonic oscillator. The novel application of discrete-variable device-independent quantum key distribution to this encoding enables a continuous-variable analogue. Since the security of this protocol is based on discrete-variables we inherit by default security against collective attacks and, under certain memoryless assumptions, coherent attacks. We find t…
