| BB84 protocol | |
|---|---|
| Name | BB84 protocol |
| Caption | Schematic of polarization states used in BB84 |
| Developer | Charles H. Bennett and Gilles Brassard |
| Introduced | 1984 |
| Field | Quantum cryptography |
| Related | Quantum key distribution, Quantum information |
BB84 protocol
The BB84 protocol is a seminal quantum cryptography scheme for quantum key distribution (QKD) introduced in 1984 by Charles H. Bennett and Gilles Brassard. It uses the quantum properties of single photons and complementary bases to allow two parties to establish a shared secret key with provable detection of an eavesdropper, impacting both theoretical quantum information theory and practical secure communications.
BB84 was proposed in the 1984 paper "Quantum Cryptography: Public Key Distribution and Coin Tossing" by Bennett, Charles H. and Brassard, Gilles and is widely credited with founding practical quantum cryptography research. The protocol emerged amid advances in quantum mechanics and early experimental photonics at institutions such as IBM research groups and university laboratories including University of Toronto and Université de Montréal. BB84 catalyzed follow-up theoretical work by researchers like Artur Ekert (who proposed the E91 protocol) and motivated programs at national laboratories such as Los Alamos National Laboratory and National Institute of Standards and Technology (NIST). Its development contributed to later standards efforts and industry projects, including initiatives by ID Quantique and telecommunications companies exploring quantum networking.
BB84 relies on core principles of quantum mechanics: the no-cloning theorem, measurement disturbance, and complementarity. The no-cloning theorem, formalized by W. K. Wootters and W. H. Zurek, prohibits perfect copying of unknown quantum states. Complementary bases (e.g., rectilinear and diagonal polarization) ensure that measuring in the wrong basis introduces detectable errors. These principles connect to foundational work in quantum information and to formal security proofs developed by researchers such as Dominic Mayers and Renato Renner. BB84's security is analyzed using concepts from Shannon entropy, information theory, and quantum channel models like the depolarizing channel.
In BB84 two parties, traditionally called Alice and Bob, exchange quantum states over a quantum channel and classical messages over an authenticated classical channel. Alice encodes random bits into photon polarization states chosen from two conjugate bases (often horizontal and vertical polarization and diagonal polarization). Bob measures each incoming photon in a randomly chosen basis. After transmission, Alice and Bob publicly compare basis choices and keep only the bits for which their bases matched (the sifted key). They estimate the quantum bit error rate (QBER) by disclosing a subset of the sifted key; if the QBER is below a threshold, they proceed with error correction (e.g., using Cascade or low-density parity-check codes) and privacy amplification (often via universal hashing) to produce a final secret key. Authentication of the classical channel can be established using short pre-shared keys and message authentication codes (MACs). Practical instantiations use devices like avalanche photodiode detectors and single-photon sources or weak coherent pulses.
Security proofs for BB84 consider collective, coherent, and individual attacks by an eavesdropper (Eve). Basic eavesdropping strategies include intercept-resend attacks and photon number splitting (PNS) attacks against multi-photon pulses. Rigorous unconditional security proofs were developed by Mayers, H.-K. Lo and H. F. Chau, and later refined by Renner using the composable security framework. Countermeasures against PNS include the decoy state protocol introduced by Hwang and implemented by groups at Toshiba Research Europe and ID Quantique. Security analyses incorporate finite-key effects, side-channel models, and detector vulnerabilities such as detector blinding attacks studied by teams including Nicolas Gisin's collaborators; device-independent and measurement-device-independent QKD paradigms (e.g., MDI-QKD) address some of these concerns.
Experimental BB84 implementations span fiber-optic links, free-space optics, and satellite demonstrations. Early fiber implementations were carried out in the 1990s by groups at Los Alamos National Laboratory and NEC Corporation. Free-space and urban demonstrations include work by University of Geneva and China Academy of Space Technology culminating in the Micius satellite experiments that demonstrated long-distance QKD between ground stations. Commercial products have been produced by companies such as ID Quantique, Toshiba and Quantum Xchange. Key enabling technologies include single-photon detectors (InGaAs and superconducting nanowire single-photon detectors), laser diodes, optical modulators, and quantum random number generators (QRNGs). Integration efforts target metropolitan area networks and quantum repeaters researched at institutions like Delft University of Technology and Caltech.
BB84 faces limitations including channel loss, detector inefficiency, and device imperfections. Variants and extensions address these limits: the decoy state method mitigates multi-photon vulnerabilities; SARG04 modifies sifting to resist PNS attacks; six-state protocol uses three bases for higher disturbance sensitivity; entanglement-based versions relate BB84 to E91 protocol; and measurement-device-independent QKD removes detector-side trust assumptions. Research into quantum repeaters and quantum error correction (e.g., surface code) aims to extend QKD distances. Standardization and interoperability work continues via bodies like the European Telecommunications Standards Institute (ETSI) and NIST.
BB84 occupies a central, foundational role in both theoretical quantum information science and applied secure communications. It exemplifies how fundamental quantum mechanics principles can enforce cryptographic security and has guided experimental advances in photonics, cryogenic detectors, and space-based quantum links. BB84's influence extends to policy and national programs in quantum technologies across governments and industry, informing efforts to build resilient communications infrastructure rooted in conservative principles of stability, trusted institutions, and interoperable standards. Category:Quantum cryptography