| BB84 protocol | |
|---|---|
| Name | BB84 protocol |
| Other names | Bennett–Brassard 1984 protocol |
| Introduced | 1984 |
| Designers | Charles H. Bennett; Gilles Brassard |
| Field | Quantum cryptography |
| Related | Quantum key distribution, Quantum information science |
BB84 protocol
The BB84 protocol is a seminal Quantum key distribution (QKD) scheme introduced by Charles H. Bennett and Gilles Brassard in 1984. It uses the quantum properties of single photons and non-orthogonal bases to establish a shared secret key between two parties with the ability to detect eavesdropping. BB84 is foundational in Quantum information theory and has driven experimental work in quantum optics and secure communications.
BB84 demonstrates how fundamental principles of Quantum mechanics—notably the Heisenberg uncertainty principle and the no-cloning theorem—can be harnessed for cryptographic security. Rather than relying on computational hardness assumptions like those used in public-key cryptography (e.g., RSA or Diffie–Hellman key exchange), BB84 offers information-theoretic security under idealized physical models. The protocol stimulated research across institutions such as IBM, Los Alamos National Laboratory, Massachusetts Institute of Technology, and universities engaged in experimental quantum communication, and it influenced standards discussions in bodies like the European Telecommunications Standards Institute and national research programs.
BB84 involves two legitimate parties, conventionally named Alice and Bob, and an adversary Eve. Alice encodes classical bits into quantum states of photons prepared in one of two conjugate bases (commonly the rectilinear {|0⟩,|1⟩} and diagonal {|+⟩,|−⟩} bases). She sends a sequence of these quantum states over a quantum channel; Bob measures each incoming photon randomly in one of the two bases. After transmission, Alice and Bob use an authenticated classical channel to publicly compare the bases (not the measured bit values) and discard instances where their bases differ, yielding a raw key. They perform error estimation and apply privacy amplification and error correction (information reconciliation) to produce a shorter, secure shared key. Variations include decoy-state methods and entanglement-based adaptations like the Ekert protocol.
Security of BB84 rests on the incompatibility of measurements in non-orthogonal bases and the no-cloning theorem, which prevents perfect copying of unknown quantum states. Any interception strategy by Eve, such as an intercept-resend attack, introduces detectable disturbances manifested as an increased quantum bit error rate (QBER). Security proofs relate observed QBER to bounds on Eve’s information; rigorous frameworks include Shor–Preskill security proof techniques and composable security analyses developed in quantum cryptography literature. Practical security also engages models of device imperfections and side channels studied by researchers at institutions like Toshiba Research Europe and universities working on device-independent and measurement-device-independent QKD.
BB84 has been implemented with a variety of physical systems: weak coherent pulses from attenuated lasers, single-photon sources (e.g., nitrogen-vacancy center emitters), and entangled-photon pairs generated by spontaneous parametric down-conversion. Field demonstrations include fiber-based links spanning tens to hundreds of kilometers and free-space links including terrestrial and satellite experiments such as those by the Micius quantum satellite project led by the Chinese Academy of Sciences and experiments by teams at University of Vienna and University of Geneva. Commercial QKD products and testbeds have been developed by companies like ID Quantique, QuantumCTek, and Toshiba Corporation, and deployed in financial and governmental test networks. Integration challenges with classical networks drive research in quantum repeaters and quantum network architectures.
Real-world BB84 deployments face limitations from photon loss, detector efficiency, and imperfect sources. Practical attack vectors include photon-number-splitting attacks on weak coherent pulses, detector blinding and time-shift attacks, and side-channel exploits; notable analyses were published by groups at University of Cambridge and University of Luxembourg. Countermeasures include decoy-state protocols, measurement-device-independent QKD developed by teams at Nanyang Technological University and elsewhere, device-independent QKD leveraging loophole-free Bell test results, improved single-photon sources, and rigorous device characterization. Ongoing standards and certification efforts aim to quantify security in realistic threat models and to ensure interoperable, auditable implementations.
BB84 and QKD promise cryptographic resilience against future quantum-computing threats to classical encryption, affecting sectors from finance to healthcare and civil society. However, equitable access is a concern: high-cost hardware, infrastructure requirements, and concentration of expertise could centralize secure communications among wealthy states, corporations, and research institutions. Equity-conscious deployment emphasizes open standards, public research investment (e.g., national quantum initiatives), and capacity-building in under-resourced regions. Ethical considerations include balancing state-level security needs with civilian privacy protections and avoiding technological inequities that exacerbate surveillance or digital divides. Civil society organizations, academic consortia, and initiatives in technology policy are increasingly engaged in shaping inclusive pathways for quantum cryptography adoption.
Category:Quantum cryptography Category:Cryptographic protocols