We consider a variant of the BB84 protocol for quantum cryptography, the prototype of tomographically incomplete protocols, where the key is generated by one-way communication rather than the usual two-way communication. Our analysis, backed by numerical evidence, establishes thresholds for eavesdropping attacks on the raw data and on the generated key at quantum bit error rates of 10% and 6.15%, respectively. Both thresholds are lower than the threshold for unconditional security in the standard BB84 protocol.
Tomography of the two qubit density matrix shared by Alice and Bob is an essential ingredient for guaranteeing an acceptable margin of confidentiality during the establishment of a secure fresh key through the Quantum Key Distribution (QKD) scheme. We show how the Singapore protocol for key distribution is optimal from this point of view, due to the fact that it is based on so called SIC POVM qubit tomography which allows the most accurate full tomographic reconstruction of an unknown density matrix on the basis of a restricted set of experimental data. We illustrate with the help of experimen…
A recurring problem in quantum mechanics is to estimate either the state of a quantum system or the measurement operator applied to it. If we wish to estimate both, then the difficulty is that the state and the measurement always appear together: to estimate the state, we must use a measurement; to estimate the measurement operator, we must use a state. The data of such quantum estimation experiments come in the form of measurement frequencies. Ideally, the measured average frequencies can be attributed to an average state and an average measurement operator. If this is not the case, we have c…
We present a protocol for quantum cryptography in which the data obtained for mismatched bases are used in full for the purpose of quantum state tomography. Eavesdropping on the quantum channel is seriously impeded by requiring that the outcome of the tomography is consistent with unbiased noise in the channel. We study the incoherent eavesdropping attacks that are still permissible and establish under which conditions a secure cryptographic key can be generated. The whole analysis is carried out for channels that transmit quantum systems of any finite dimension.
We scrutinize the effects of non-ideal data acquisition on the homodyne tomograms of photon quantum states. The presence of a weight function, schematizing the effects of the finite thickness of the probing beam or equivalently noise, only affects the state reconstruction procedure by a normalization constant. The results are extended to a discrete mesh and show that quantum tomography is robust under incomplete and approximate knowledge of tomograms.
We prove that in the BB84 quantum cryptography protocol Alice and Bob do not need to make random bases-choice for each qubit: they can keep the same bases for entire blocks of qubits. It suffices that the raw key consists of many such qubit-blocks. The practical advantage of reducing the need for random number is emphasized.
When the 4-state or the 6-state protocol of quantum cryptography is carried out on a noisy (i.e. realistic) quantum channel, then the raw key has to be processed to reduce the information of an adversary Eve down to an arbitrarily low value, providing Alice and Bob with a secret key. In principle, quantum algorithms as well as classical algorithms can be used for this processing. A natural question is: up to which error rate on the raw key is a secret-key agreement at all possible? Under the assumption of incoherent eavesdropping, we find that the quantum and classical limits are precisely the…
As an alternative to the usual key generation by two-way communication in schemes for quantum cryptography, we consider codes for key generation by one-way communication. We study codes that could be applied to the raw key sequences that are ideally obtained in recently proposed scenarios for quantum key distribution, which can be regarded as communication through symmetric four-letter channels.
This paper presents a practical method of quantum tomography for decoding the state of photons in a multistage cryptography protocol. This method works if the polarization angles are defined on a fixed plane, as is assumed in several quantum cryptography protocols. We show if there are 2m polarization angles in a fixed plane, we need m number of filters and m2 number of photons through each filter.
By realizing a quantum cryptography system based on polarization entangled photon pairs we establish highly secure keys, because a single photon source is approximated and the inherent randomness of quantum measurements is exploited. We implement a novel key distribution scheme using Wigner's inequality to test the security of the quantum channel, and, alternatively, realize a variant of the BB84 protocol. Our system has two completely independent users separated by 360 m, and generates raw keys at rates of 400 - 800 bits/second with bit error rates arround 3 percent.
The security of a cryptographic key that is generated by communication through a noisy quantum channel relies on the ability to distill a shorter secure key sequence from a longer insecure one. We show that -- for protocols that use quantum channels of any dimension and completely characterize them by state tomography -- the noise threshold for classical advantage distillation is substantially lower than the threshold for quantum entanglement distillation because the eavesdropper can perform powerful coherent attacks. The earlier claims that the two noise thresholds are identical, which were b…
Privacy amplification is the key step to guarantee the security of quantum communication. The existing security proofs require accumulating a large number of raw key bits for privacy amplification. This is similar to block ciphers in classical cryptography that would delay the final key generation since an entire block must be accumulated before privacy amplification. Moreover, any leftover errors after information reconciliation would corrupt the entire block. By modifying the security proof based on quantum error correction, we develop a stream privacy amplification scheme, which resembles t…
Self-calibrating quantum state tomography aims at reconstructing the unknown quantum state and certain properties of the measurement devices from the same data. Since the estimates of the state and device parameters come from the same data, one should employ a joint estimation scheme, including the construction and reporting of joint state-device error regions to quantify uncertainty. We explain how to do this naturally within the framework of optimal error regions. As an illustrative example, we apply our procedure to the double-crosshair measurement of the BB84 scenario in quantum cryptograp…
The Wigner quasiprobability distribution of a narrowband single-photon state was reconstructed by quantum state tomography using photon-number-resolving measurements with transition-edge sensors (TES) at system efficiency 58(2)%. This method makes no assumptions on the nature of the measured state, save for the limitation on photon flux imposed by the TES. Negativity of the Wigner function was observed in the raw data without any inference or correction for decoherence.
We present a continuous variable (CV) quantum key distribution (QKD) scheme based on the CV quantum teleportation of coherent states that yields a raw secret key made up of discrete variables for both Alice and Bob. This protocol preserves the efficient detection schemes of current CV technology (no single-photon detection techniques) and, at the same time, has efficient error correction and privacy amplification schemes due to the binary modulation of the key. We show that for a certain type of incoherent attack it is secure for almost any value of the transmittance of the optical line used b…
Multipartite entanglement has been widely regarded as key resources in distributed quantum computing, for instance, multi-party cryptography, measurement based quantum computing, quantum algorithms. It also plays a fundamental role in quantum phase transitions, even responsible for transport efficiency in biological systems. Certifying multipartite entanglement is generally a fundamental task. Since an $N$ qubit state is parameterized by $4^N-1$ real numbers, one is interested to design a measurement setup that reveals multipartite entanglement with as little effort as possible, at least witho…
It has previously been shown that the gated detectors of two commercially available quantum key distribution (QKD) systems are blindable and controllable by an eavesdropper using continuous-wave illumination and short bright trigger pulses, manipulating voltages in the circuit [L. Lydersen et al., Nat. Photonics DOI:10.1038/nphoton.2010.214]. This allows for an attack eavesdropping the full raw and secret key without increasing the quantum bit error rate (QBER). Here we show how thermal effects in detectors under bright illumination can lead to the same outcome. We demonstrate that the detecto…
We consider two-way continuous-variable quantum key distribution, studying its security against general eavesdropping strategies. Assuming the asymptotic limit of many signals exchanged, we prove that two-way Gaussian protocols are immune to coherent attacks. More precisely we show the general superadditivity of the two-way security thresholds, which are proven to be higher than the corresponding one-way counterparts in all cases. We perform the security analysis first reducing the general eavesdropping to a two-mode coherent Gaussian attack, and then showing that the superadditivity is achiev…
A quantum key distribution system may be probed by an eavesdropper Eve by sending in bright light from the quantum channel and analyzing the back-reflections. We propose and experimentally demonstrate a setup for mounting such a Trojan-horse attack. We show it in operation against the quantum cryptosystem Clavis2 from ID~Quantique, as a proof-of-principle. With just a few back-reflected photons, Eve discerns Bob's secret basis choice, and thus the raw key bit in the Scarani-Acín-Ribordy-Gisin 2004 protocol, with higher than 90% probability. This would clearly breach the security of the cryptos…
Quantum process tomography is often used to completely characterize an unknown quantum process. However, it may lead to an unphysical process matrix, which will cause the loss of information respect to the tomography result. Convex optimization, widely used in machine learning, is able to generate a global optimal model that best fits the raw data while keeping the process tomography in a legitimate region. Only by correctly revealing the original action of the process can we seek deeper into its properties like its phase transition and its Hamiltonian. Thus, we reconstruct the real quantum ch…
Quantum information has been drawing a wealth of research in recent years, shedding light on questions at the heart of quantum mechanics, as well as advancing fields such as complexity theory, cryptography, key distribution, and chemistry. These fundamental and applied aspects of quantum information rely on a crucial issue: the ability to characterize a quantum state from measurements, through a process called Quantum State Tomography (QST). However, QST requires a large number of measurements, each derived from a different physical observable corresponding to a different experimental setup. U…
Quantum Key Distribution, as a branch of quantum mechanics in cryptography, can distribute keys between legal communication parties in an unconditionally secure manner, thus can realize in transmitting confidential information with unconditional security. We consider a Phase-Matching Quantum Key Distribution protocol with 3-state systems for the first time, where the phase of the coherent state is 3,thus we propose three different ways to response to every successful detection and two parties gain their raw keys by "flip and flip". The simulation results show that compared with Phase-Matching …
Randomness extraction is of fundamental importance for information-theoretic cryptography. It allows to transform a raw key about which an attacker has some limited knowledge into a fully secure random key, on which the attacker has essentially no information. Up to date, only very few randomness-extraction techniques are known to work against an attacker holding quantum information on the raw key. This is very much in contrast to the classical (non-quantum) setting, which is much better understood and for which a vast amount of different techniques are known and proven to work. We prove a new…
The speed at which two remote parties can exchange secret keys over a fixed-length fiber-optic cable in continuous-variable quantum key distribution (CV-QKD) is currently limited by the computational complexity of post-processing algorithms for key reconciliation. Multi-edge low-density parity-check (LDPC) codes with low code rates and long block lengths were proposed for CV-QKD, in order to extend the maximum reconciliation distance between the two remote parties. Key reconciliation over multiple dimensions has been shown to further improve the error-correction performance of multi-edge LDPC …
Underwater quantum communication has recently been explored using polarization and orbital angular momentum. Here, we show that spatially structured modes, e.g., a coherent superposition of beams carrying both polarization and orbital angular momentum, can also be used for underwater quantum cryptography. We also use the polarization degree of freedom for quantum communication in an underwater channel having various lengths, up to $30$ meters. The underwater channel proves to be a difficult environment for establishing quantum communication as underwater optical turbulence results in significa…
From Characterization To Construction: Generative Quantum Circuit Synthesis from Gate Set Tomography Data
Quantum and Computer Engineering, Delft University of Technology, The Netherlands（量子与计算机工程系，代尔夫特理工大学，荷兰）；QuTech, Delft University of Technology, The Netherlands（QuTech，代尔夫特理工大学，荷兰）；Kavli Institute of Nanoscience Delft, Delft University of Technology, The Netherlands（代尔夫特纳米科学研究所Kavli，代尔夫特理工大学，荷兰）
We propose an efficient logical layer-based reconciliation method for continuous-variable quantum key distribution (CVQKD) to extract binary information from correlated Gaussian variables. We demonstrate that by operating on the raw-data level, the noise of the quantum channel can be corrected in the low-dimensional (scalar) space and the reconciliation can be extended to arbitrary dimensions. The CVQKD systems allow an unconditionally secret communication over standard telecommunication networks. To exploit the real potential of CVQKD a robust reconciliation technique is needed. It is current…
Generalized Rényi entropy accumulation theorem and generalized quantum probability estimation
Institute for Quantum Computing and Department of Physics and Astronomy, University of Waterloo（滑铁卢大学量子计算研究所和物理与天文学系）；The Center for Quantum Science and Technology, Department of Complex Systems, Weizmann Institute of Science（魏茨曼科学研究所复杂系统系量子科学与技术中心）
Silicon-on-chip (SOI) photonic circuit is the most promising platform for scalable quantum information technology for its low loss, small footprint, CMOS-compatible and telecom communications techniques compatible. Multiple multiplexed entanglement sources include: energy-time, time-bin and polarization entangled sources based on 1-cm length single silicon nanowire, all these sources are compatible with (100GHz) dense-wave-division-multiplexing (DWDM) system. Different methods such as two photon interference pattern, Bell-Inequality and quantum state tomography are used to characterize the qua…
