| quantum key distribution | |
|---|---|
| Name | Quantum key distribution |
| Type | Quantum cryptography |
| Introduced | 1984 |
| Inventor | Charles Bennett and Gilles Brassard |
| Related | Quantum cryptography, Quantum information science |
quantum key distribution
Quantum key distribution (QKD) is a set of cryptographic techniques that use principles of quantum mechanics to establish shared secret keys between parties with provable detection of eavesdropping. Rooted in the formalism of quantum information and quantum optics, QKD matters because it promises information-theoretic security against adversaries bounded only by the laws of physics rather than computational assumptions common to classical cryptography such as RSA or Elliptic-curve cryptography.
QKD exploits quantum properties such as the no-cloning theorem, quantum measurement disturbance, and entanglement to enable two parties—commonly named Alice and Bob—to detect any interception by an eavesdropper (Eve). Typical operation separates a quantum channel (for transmitting quantum states) and an authenticated classical channel (for sifting, error correction, and privacy amplification). The protocol flow includes quantum state preparation, transmission, measurement, sifting, parameter estimation and classical post-processing (error correction and privacy amplification), often relying on information theory concepts developed by Claude Shannon and later formalized within quantum information theory.
The first and most influential protocol is BB84, introduced by Charles Bennett and Gilles Brassard in 1984, which uses nonorthogonal polarization states of single photons. The E91 protocol, proposed by Artur Ekert in 1991, uses entangled pairs and Bell inequality tests to certify security via quantum nonlocality. B92 is a simplified two-state variant by Charles Bennett in 1992. Continuous-variable QKD (CV-QKD) uses quadrature measurements of coherent or squeezed states and leverages homodyne detection; notable implementations and theoretical work involve groups at Toshiba Research Europe, SeQureNet, and academic teams at University of Geneva and École Polytechnique.
Other notable protocols include decoy-state methods (proposed by Hoi-Kwong Lo and collaborators) that mitigate photon-number-splitting attacks on weak coherent pulse sources, device-independent QKD (DI-QKD) which relies on loophole-free Bell tests demonstrated in experiments such as those at University of Geneva and Delft University of Technology, and measurement-device-independent QKD (MDI-QKD) that removes detector-side channel vulnerabilities and has been implemented by teams at Chinese Academy of Sciences and industrial partners like ID Quantique.
Security proofs for QKD rest on quantum information theory, entropic uncertainty relations, and composable security frameworks developed by researchers including Renato Renner, Dominique Mayers, and Masanes. Proof techniques vary: entanglement-based proofs map prepare-and-measure schemes onto entangled-state equivalents; information-theoretic analyses use smooth min- and max-entropy to bound an adversary's knowledge. Security models consider collective, coherent, and individual attacks; modern proofs aim for composable security within the Universal Composability framework and take into account finite-key effects crucial for practical deployments.
Physical implementations typically use single-photon or weak-coherent sources generated by laser diodes, spontaneous parametric down-conversion sources, or emerging quantum dot single-photon emitters. Encoding degrees of freedom include polarization, phase, time-bin, and orbital angular momentum. Detection technologies include single-photon avalanche diodes (SPADs), superconducting nanowire single-photon detectors (SNSPDs) developed in labs such as NIST and MIT, and homodyne detectors for CV-QKD. Integrated photonics platforms from companies like ID Quantique and research groups at University of Bristol and Toshiba advance miniaturization. Quantum random number generators (QRNGs) are often paired with QKD systems to seed protocols; vendors and labs such as QuTech and QRNG projects provide tested devices.
QKD has been deployed in metropolitan networks (e.g., the Swiss SECOQC network and the Tokyo QKD Network) and long-distance links tested over optical fiber and satellite channels, notably missions like Micius (China) and experiments by European Space Agency collaborators. Integration with classical cryptography occurs via hybrid systems: QKD-derived symmetric keys are used for AES session keys, key management integrates with Public Key Infrastructure for authentication, and network architectures use trusted nodes or quantum repeaters (under research at Yale University and University of Innsbruck) to extend reach.
Practical QKD faces limitations such as channel loss, detector inefficiencies, finite-key rates, and infrastructure cost. Attack vectors exploit imperfect devices: detector blinding and time-shift attacks demonstrated by groups at University of Geneva and Technische Universität Darmstadt spurred countermeasures like MDI-QKD and improved detector design. Side-channel research at institutions such as Cambridge University led to standards and certification efforts by national labs (NIST, ANSSI). Countermeasures include decoy-state techniques, state-of-the-art SNSPDs, device-independent and semi-device-independent protocols, and rigorous implementation security audits.
QKD exemplifies practical applications of fundamental quantum phenomena—entanglement, superposition, and measurement disturbance—and motivates advances in quantum optics, quantum communication, and quantum networks. Future directions include scalable quantum repeaters, integration with quantum computing infrastructures, satellite QKD for global coverage, standards harmonization, and development of post-quantum cryptography as a complementary national-security strategy. Research continues at major centers (e.g., University of Geneva, QuTech, Chinese Academy of Sciences, NIST) and industrial consortia aiming to preserve secure communications in an era shaped by quantum science and technological continuity.
Category:Quantum cryptography Category:Quantum information science