Quantum tomographic cryptography with Bell diagonal states: non-equivalence of classical and quantum distillation protocols
Dagomir Kaszlikowski, Jenn Yang Lim, D. K. L. Oi, Frederick H. Willeboordse, Ajay Gopinathan, L. C. Kwek
备注：
9 pages. 2 figures There was an error in the formula 4 (transformation of Bell states). This error does not change the main result of the paper, namely, that quantum distillation is more powerful than classical advantage distillation
We present a generalized tomographic quantum key distribution protocol in which the two parties share a Bell diagonal mixed state of two qubits. We show that if an eavesdropper performs a coherent measurement on many quantum ancilla states simultaneously, classical methods of secure key distillation are less effective than quantum entanglement distillation protocols. We also show that certain Bell diagonal states are resistant to any attempt of incoherent eavesdropping.
In this paper we analyze the security of the so-called quantum tomographic cryptography with the source producing entangled photons via an experimental scheme proposed in Phys. Rev. Lett. 92, 37903 (2004). We determine the range of the experimental parameters for which the protocol is secure against the most general incoherent attacks.
We consider the class of reference frame independent protocols in d dimensions for quantum key distribution, in which Alice and Bob have one natural basis that is aligned and the rest of their frames are unaligned. We relate existing approaches to tomographically complete protocols. We comment on two different approaches to finite key bounds in this setting, one direct and one using the entropic uncertainty relation and suggest that the existing finite key bounds can still be improved.
The security of a cryptographic key that is generated by communication through a noisy quantum channel relies on the ability to distill a shorter secure key sequence from a longer insecure one. For an important class of protocols, which exploit tomographically complete measurements on entangled pairs of any dimension, we show that the noise threshold for classical advantage distillation is identical with the threshold for quantum entanglement distillation. As a consequence, the two distillation procedures are equivalent: neither offers a security advantage over the other.
We present a protocol for quantum cryptography in which the data obtained for mismatched bases are used in full for the purpose of quantum state tomography. Eavesdropping on the quantum channel is seriously impeded by requiring that the outcome of the tomography is consistent with unbiased noise in the channel. We study the incoherent eavesdropping attacks that are still permissible and establish under which conditions a secure cryptographic key can be generated. The whole analysis is carried out for channels that transmit quantum systems of any finite dimension.
The tomographic approach to quantum mechanics is revisited as a direct tool to investigate violation of Bell-like inequalities. Since quantum tomograms are well defined probability distributions, the tomographic approach is emphasized to be the most natural one to compare the predictions of classical and quantum theory. Examples of inequalities for two qubits an two qutrits are considered in the tomographic probability representation of spin states.
We present a homodyne detection scheme to verify Bell's inequality on correlated optical beams at the output of a nondegenerate parametric amplifier. Our approach is based on tomographic measurement of the joint detection probabilities, which allows high quantum efficiency at detectors. A self-homodyne scheme is suggested to simplify the experimental set-up.
The tomographic method is employed to investigate the presence of quantum correlations in two classes of parameter-dependent states of two qutrits. The violation of some Bell's inequalities in a wide domain of the parameter space is shown. A comparison between the tomographic approach and a recent method elaborated by Wu, Poulsen and Molmer shows the better adequacy of the former method with respect to the latter one.
Time-domain balanced homodyne detection is performed on two well-separated temporal modes sharing a single photon. The reconstructed density matrix of the two-mode system is used to prove and quantify its entangled nature, while the Wigner function is employed for an innovative tomographic test of Bell's inequality based on the theoretical proposal by Banaszek and Wodkiewicz [Phys. Rev. Lett. 82, 2009 (1999)]. Provided some auxiliary assumptions are made, a clear violation of Banaszek-Bell's inequality is found.
We present a crytographic protocol based upon entangled qutrit pairs. We analyse the scheme under a symmetric incoherent attack and plot the region for which the protocol is secure and compare this with the region of violations of certain Bell inequalities.
Several mechanisms that affect one and two photon coherence in optical fibers and their remedies are discussed. The results are illustrated on quantum cryptography experiments and on long distance Bell inequality tests.
The relation between the boolean functions and Bell inequalities for qubits is analyzed. The connection between the maximal quantum violation of a Bell inequality and the nonlinearity of the corresponding boolean function is discussed. A visualization scheme of boolean functions is proposed. An attempt to classify Bell inequalities for qubits is made, a weaker result (classification with respect to Jevons group) is obtained. The fractal structure of the classification is shown. All constructs are illustrated by Mathematica code.
We present a setup for quantum cryptography based on photon pairs in energy-time Bell states and show its feasability in a laboratory experiment. Our scheme combines the advantages of using photon pairs instead of faint laser pulses and the possibility to preserve energy-time entanglement over long distances. Moreover, using 4-dimensional energy-time states, no fast random change of bases is required in our setup : Nature itself decides whether to measure in the energy or in the time base.
Intermediate states are known from intercept/resend eavesdropping in the BB84 quantum cryptographic protocol. But they also play fundamental roles in the optimal eavesdropping strategy on BB84 and in the CHSH inequality. We generalize the intermediate states to arbitrary dimension and consider intercept/resend eavesdropping, optimal eavesdropping on the generalized BB84 protocol and present a generalized CHSH inequality for two entangled quNits based on these states.
Multi-qudit systems are studied in tomographic probability representations of quantum qudit states. Results of calculations for Bell-type numbers within the framework of classical probability theory and in quantum tomography are compared. Violation of Bell-type inequalities are shown explicitly using the method of averaging in tomographic picture of quantum states.
Here we show that, if we insert context dependent unitary evolutions (which can be achieved via post selection) into spatial (i.e., normal) Bell-CHSH test, then it is possible to violate space-time Bell-CHSH inequality maximally (i.e., up to $4$). However this does not contradict Tsirelson quantum bound ($2\sqrt{2}$), as the latter has been derived without taking into consideration context dependent unitary evolutions and/or post selection. As an important application, this leads to a more efficient quantum key distribution protocol.
The concept of asymptotic correctability of Bell-diagonal quantum states is generalised to elementary quantum systems of higher dimensions. Based on these results basic properties of quantum state purification protocols are investigated which are capable of purifying tensor products of Bell-diagonal states and which are based on $B$-steps of the Gottesman-Lo-type with the subsequent application of a Calderbank-Shor-Steane quantum code. Consequences for maximum tolerable error rates of quantum cryptographic protocols are discussed.
We propose a novel double-entanglement-based quantum cryptography protocol that is both efficient and deterministic. The proposal uses photon pairs with entanglement both in polarization and in time degrees of freedom; each measurement in which both of the two communicating parties register a photon can establish one and only one perfect correlation and thus deterministically create a key bit. Eavesdropping can be detected by violation of local realism. A variation of the protocol shows a higher security, similarly to the six-state protocol, under individual attacks. Our scheme allows a robust…
We propose a tomographic approach to study quantum nonlocality in continuous variable quantum systems. On one hand we derive a Bell-like inequality for measured tomograms. On the other hand, we introduce pseudospin operators whose statistics can be inferred from the data characterizing the reconstructed state, thus giving the possibility to use standard Bell's inequalities. Illuminating examples are also discussed.
Quantum Cryptography, or more accurately, Quantum Key Distribution (QKD) is based on using an unconditionally secure ``quantum channel'' to share a secret key among two users. A manufacturer of QKD devices could, intentionally or not, use a (semi-)classical channel instead of the quantum channel, which would remove the supposedly unconditional security. One example is the BB84 protocol, where the quantum channel can be implemented in polarization of single photons. Here, use of several photons instead of one to encode each bit of the key provides a similar but insecure system. For protocols ba…
We consider a variant of the BB84 protocol for quantum cryptography, the prototype of tomographically incomplete protocols, where the key is generated by one-way communication rather than the usual two-way communication. Our analysis, backed by numerical evidence, establishes thresholds for eavesdropping attacks on the raw data and on the generated key at quantum bit error rates of 10% and 6.15%, respectively. Both thresholds are lower than the threshold for unconditional security in the standard BB84 protocol.
We present a game-based approach to teach Bell inequalities and quantum cryptography at high school. The approach is based on kinesthetic activities and allows students to experience and discover quantum features and their applications first-hand. We represent quantum states by the orientation of students, and mimic quantitative random behaviour and measurements using dice and apps.
Bell's theorem states that no local realistic explanation of quantum mechanical predictions is possible, in which the experimenter has a freedom to choose between different measurement settings. Within a local realistic picture the violation of Bell's inequalities can only be understood if this freedom is denied. We determine the minimal degree to which the experimenter's freedom has to be abandoned, if one wants to keep such a picture and be in agreement with the experiment. Furthermore, the freedom in choosing experimental arrangements may be considered as a resource, since its lacking can b…
We present a protocol for deterministic and highly efficient quantum cryptography with entangled photon pairs in a 4x4-dimentional Hilbert space. Two communicating parties, Alice and Bob first share a both polarization- and path-entangled photon pair, and then each performs a complete Bell-state measurement on their own photon in one of two complementary Bell-state bases. It is demonstrated that each measurement in which both Alice and Bob register a photon can build certain perfect correlation and generate 1.5 key bits on average. The security of our protocol is guaranteed by the non-cloning …
A quantum cryptography scheme based on entanglement between a single particle state and a vacuum state is proposed. The scheme utilizes linear optics devices to detect the superposition of the vacuum and single particle states. Existence of an eavesdropper can be detected by using a variant of Bell's inequality.
Bell's theorem is supposed to exclude all local hidden-variable models of quantum correlations. However, an explicit counterexample shows that a new class of local realistic models, based on generalized arithmetic and calculus, can exactly reconstruct rotationally symmetric quantum probabilities typical of two-electron singlet states. Observable probabilities are consistent with the usual arithmetic employed by macroscopic observers, but counterfactual aspects of Bell's theorem are sensitive to the choice of hidden-variable arithmetic and calculus. The model is classical in the sense of Einste…
Some quantum cryptographic protocols can be implemented with specially prepared chocolate balls, others protected by value indefiniteness cannot. Similarities and differences of cryptography with quanta and chocolate are discussed. Motivated by these considerations it is proposed to certify quantum random number generators and quantum cryptographic protocols by value indefiniteness. This feature, which derives itself from Bell- and Kochen-Specker type arguments, is only present in systems with three or more mutually exclusive outcomes.
We consider two remote parties connected to a relay by two quantum channels. To generate a secret key, they transmit coherent states to the relay, where the states are subject to a continuous-variable (CV) Bell detection. We study the ideal case where Alice's channel is lossless, i.e., the relay is locally situated in her lab and the Bell detection is performed with unit efficiency. This configuration allows us to explore the optimal performances achievable by CV measurement-device-independent (MDI) quantum key distribution (QKD). This corresponds to the limit of a trusted local relay, where t…
We consider a family of quantum communication protocols involving $N$ partners. We demonstrate the existence of a link between the security of these protocols against individual attacks by the eavesdropper, and the violation of some Bell's inequalities, generalizing the link that was noticed some years ago for two-partners quantum cryptography. The arguments are independent of the local hidden variable debate.
Using polarization-entangled photons from spontaneous parametric downconversion, we have implemented Ekert's quantum cryptography protocol. The near-perfect correlations of the photons allow the sharing of a secret key between two parties. The presence of an eavesdropper is continually checked by measuring Bell's inequalities. We investigated several possible eavesdropper strategies, including pseudo-quantum non-demolition measurements. In all cases, the eavesdropper's presence was readily apparent. We discuss a procedure to increase her detectability.
We present a generalized Bell inequality for two entangled quNits. On one quNit the choice is between two standard von Neumann measurements, whereas for the other quNit there are $N^2$ different binary measurements. These binary measurements are related to the intermediate states known from eavesdropping in quantum cryptography. The maximum violation by $\sqrt{N}$ is reached for the maximally entangled state. Moreover, for N=2 it coincides with the familiar CHSH-inequality.
A generalization of the quantum cryptographic protocol by Bennett and Brassard is discussed, using three conjugate bases, i.e. six states. By calculating the optimal mutual information between sender and eavesdropper it is shown that this scheme is safer against eavesdropping on single qubits than the one based on two conjugate bases. We also address the question for a connection between the maximal classical correlation in a generalized Bell inequality and the intersection of mutual informations between sender/receiver and sender/eavesdropper.
We present the optimal collective attack on a Quantum Key Distribution (QKD) protocol in the "device-independent" security scenario, where no assumptions are made about the way the QKD devices work or on what quantum system they operate. Our main result is a tight bound on the Holevo information between one of the authorized parties and the eavesdropper, as a function of the amount of violation of a Bell-type inequality.
Tomography of the two qubit density matrix shared by Alice and Bob is an essential ingredient for guaranteeing an acceptable margin of confidentiality during the establishment of a secure fresh key through the Quantum Key Distribution (QKD) scheme. We show how the Singapore protocol for key distribution is optimal from this point of view, due to the fact that it is based on so called SIC POVM qubit tomography which allows the most accurate full tomographic reconstruction of an unknown density matrix on the basis of a restricted set of experimental data. We illustrate with the help of experimen…
Non-local boxes are hypothetical ``machines'' that give rise to superstrong non-local correlations, leading to a stronger violation of Bell/CHSH inequalities than is possible within the framework of quantum mechanics. We show how non-local boxes can be used to perform any two-party secure computation. We first construct a protocol for bit commitment and then show how to achieve oblivious transfer using non-local boxes. Both have been shown to be impossible using quantum mechanics alone.
The promise of secure cryptographic quantum key distribution schemes is based on the use of quantum effects in the spin space. We point out that in fact in many current quantum cryptography protocols the space part of the wave function is neglected. However exactly the space part of the wave function describes the behaviour of particles in ordinary real three-dimensional space. As a result such schemes can be secure against eavesdropping attacks in the abstract spin space but could be insecure in the real three-dimensional space. We discuss an approach to the security of quantum key distributi…
In this paper, the Lorentz transformation of the entangled Bell states with momentum, not necessarily orthogonal to the boost direction, and spin, is studied. We extended quantum correlations and Bell's inequality to the relativistic regime by considering normalized relativistic observables. It is shown that quantum information, along the perpendicular direction to the boost, is eventually lost and Bell's inequality is not always violated for entangled states in special relativity. This could impose restrictions to certain quantum information processing such as quantum cryptography using massi…
Multiparty quantum cryptography based on distributed entanglement will find its natural application in the upcoming quantum networks. The security of many multipartite device-independent (DI) protocols, such as DI conference key agreement, relies on bounding the von Neumann entropy of the parties' outcomes conditioned on the eavesdropper's information, given the violation of a multipartite Bell inequality. We consider three parties testing the Mermin-Ardehali-Belinskii-Klyshko (MABK) inequality and certify the privacy of their outcomes by bounding the conditional entropy of a single party's ou…
Quantum Cryptography is on the verge of commercial application. One of its greatest limitations is over long distance - secret key rates are low and the longest fibre over which any key has been exchanged is currently 100 km. We investigate the quantum relay, which can increase the maximum distance at which quantum cryptography is possible. The relay splits the channel into sections, and sends a different photon across each section, increasing the signal to noise ratio. The photons are linked as in teleportation, with entangled photon pairs and Bell measurements. We show that such a scheme cou…
We experimentally demonstrate that tomographic measurements can be performed for states of qubits before they are prepared. A variant of the quantum teleportation protocol is used as a channel between two instants in time, allowing measurements for polarisation states of photons to be implemented 88 ns before they are created. Measurement data taken at the early time and later unscrambled according to the results of the protocol's Bell measurements, produces density matrices with an average fidelity of $0.90 \pm 0.01$ against the ideal states of photons created at the later time. Process tomog…
Bell nonlocality is a cornerstone of quantum theory with applications in information processing ranging from cryptography to distributed computing and game theory. Indeed, it is known that Bell's theorem can be formally linked to Bayesian games, allowing the use of nonlocal correlations to advise players and thereby achieve new points of equilibrium that are unavailable classically. Here we generalize this link, proving the connection between multistage games of incomplete information with Bell scenarios involving the communication of measurement outcomes between the parties. We apply the gene…
Entangled pure-states, Werner-states and generalized mixed-states of any structure, spanning a 2x2 Hilbert space are created by a novel high-brilliance universal source of polarization-entangled photon pairs. The violation of a Bell inequality has been tested for the first time with a pure-state, indeed a conceptually relevant ideal condition, and with Werner-states. The generalized ''maximally entangled mixed states'' (MEMS) were also synthetized for the first time and their exotic properties investigated by means of a quantum tomographic technique.
The generation and detection of maximally-entangled two-particle states, `Bell states,' are crucial tasks in many quantum information protocols such as cryptography and teleportation. Unfortunately, they require strong inter-particle interactions lacking in optics. For this reason, it has not previously been possible to perform complete Bell state determination in optical systems. In this work, we show how a recently developed quantum interference technique for enhancing optical nonlinearities can make efficient Bell-state measurement possible. We also discuss weaknesses of the scheme includin…
We assess non-Markovianity of a quantum open-system dynamics through the violation of temporal bell-like inequalities in a controllable Nuclear Magnetic Resonance system. We investigate experimentally the connections between the violation of the addressed temporal Bell-like inequality and the non-divisibility of the effective evolution of our system, which we fully characterize in a broad range of experimentally controllable regimes. Finally, we investigate the link between our approach and Leggett-Garg-like inequalities based on time-translational two-time correlation functions. These results…
Quantum communication has demonstrated its usefulness for quantum cryptography far beyond quantum key distribution. One domain is two-party cryptography, whose goal is to allow two parties who may not trust each other to solve joint tasks. Another interesting application is position-based cryptography whose goal is to use the geographical location of an entity as its only identifying credential. Unfortunately, security of these protocols is not possible against an all powerful adversary. However, if we impose some realistic physical constraints on the adversary, there exist protocols for which…
We investigate the maximal violation of Bell inequalities for two $d$-dimensional systems by using the method of Bell operator. The maximal violation corresponds to the maximal eigenvalue of the Bell operator matrix. The eigenvectors corresponding to these eigenvalues are described by asymmetric entangled states. We estimate the maximum value of the eigenvalue for large dimension. A family of elegant entangled states $|Ψ>_{\rm app}$ that violate Bell inequality more strongly than the maximally entangled state but are somewhat close to these eigenvectors is presented. These approximate states c…
Secure cryptographic protocols are indispensable for modern communication systems. It is realized through an encryption process in cryptography. In quantum cryptography, Quantum Key Distribution (QKD) is a widely popular quantum communication scheme that enables two parties to establish a shared secret key that can be used to encrypt and decrypt messages. But security loopholes still exist in this cryptographic protocol, as an eavesdropper can in principle still intercept all the ciphertext to perform cryptanalysis and the key may get leaked to the eavesdropper, although it happens very rarely…
In the cryptographic context, an earlier unexplored application of the temporal version of the Bell-type inequality is shown here in the device-independent (DI) scenario. This is done by using the Leggett-Garg inequality (LGI) to demonstrate the security against eavesdropping in a quantum key distribution (QKD) scheme. This typically involves a higher dimensional attack against which the standard BB84 protocol is insecure. For this purpose, we invoke an appropriate form of LGI. While the key generation is done by the usual Bennett-Brassard 1984 (BB84) method, the security check against device …
The field of device-independent quantum cryptography has seen enormous success in the past several years, including security proofs for key distribution and random number generation that account for arbitrary imperfections in the devices used. Full security proofs in the field so far are long and technically deep. In this paper we show that the concept of the mirror adversary can be used to simplify device-independent proofs. We give a short proof that any bipartite Bell violation can be used to generate private random numbers. The proof is based on elementary techniques and is self-contained.
We produce two identical keys using, for the first time, entangled trinary quantum systems (qutrits) for quantum key distribution. The advantage of qutrits over the normally used binary quantum systems is an increased coding density and a higher security margin. The qutrits are encoded into the orbital angular momentum of photons, namely Laguerre-Gaussian modes with azimuthal index l +1, 0 and -1, respectively. The orbital angular momentum is controlled with phase holograms. In an Ekert-type protocol the violation of a three-dimensional Bell inequality verifies the security of the generated ke…
We present the first device-independent quantum cryptography protocol for continuous variables. Our scheme is based on the Gottesman-Kitaev-Preskill encoding scheme whereby a qubit is embedded in the infinite-dimensional space of a quantum harmonic oscillator. The novel application of discrete-variable device-independent quantum key distribution to this encoding enables a continuous-variable analogue. Since the security of this protocol is based on discrete-variables we inherit by default security against collective attacks and, under certain memoryless assumptions, coherent attacks. We find t…
We report the generation of polarization-entangled photons, using a quantum dot single photon source, linear optics and photodetectors. Two photons created independently are observed to violate Bell's inequality. The density matrix describing the polarization state of the postselected photon pairs is also reconstructed, and agrees well with a simple model predicting the quality of entanglement from the known parameters of the single photon source. Our scheme provides a method to generate no more than one entangled photon pair per cycle, a feature useful to enhance quantum cryptography protocol…
We consider the Bennett-Brassard cryptographic scheme, which uses two conjugate quantum bases. An eavesdropper who attempts to obtain information on qubits sent in one of the bases causes a disturbance to qubits sent in the other basis. We derive an upper bound to the accessible information in one basis, for a given error rate in the conjugate basis. Independently fixing the error rate in the conjugate bases, we show that both bounds can be attained simultaneously by an optimal eavesdropping probe, consisting of two qubits. The qubits' interaction and their subsequent measurement are described…
We present theoretical and experimental study of preparing maximally entangled two-photon polarization states, or Bell states, using femtosecond pulse pumped spontaneous parametric down-conversion (SPDC). First, we show how the inherent distinguishability in femtosecond pulse pumped type-II SPDC can be removed by using an interferometric technique without spectral and amplitude post-selection. We then analyze the recently introduced Bell state preparation scheme using type-I SPDC. Theoretically, both methods offer the same results, however, type-I SPDC provides experimentally superior methods …
Lectures on classical and quantum cryptography. Contents: Private key cryptosystems. Elements of number theory. Public key cryptography and RSA cryptosystem. Shannon`s entropy and mutual information. Entropic uncertainty relations. The no cloning theorem. The BB84 quantum cryptographic protocol. Security proofs. Bell`s theorem. The EPRBE quantum cryptographic protocol.
Understanding the limits of quantum theory in terms of uncertainty and correlation has always been a topic of foundational interest. Surprisingly this pursuit can also bear interesting applications such as device-independent quantum cryptography and tomography or self-testing. Building upon a series of recent works on the geometry of quantum correlations, we are interested in the problem of computing quantum Bell inequalities or the boundary between quantum and post-quantum world. Better knowledge of this boundary will lead to more efficient device-independent quantum processing protocols. We …
