| E91 | |
|---|---|
| Name | E91 |
| Introduced | 1991 |
| Designers | Artur Ekert |
| Derived from | Quantum key distribution |
| Related | BB84, Bell's theorem |
| Field | Quantum cryptography |
E91
E91 is a quantum key distribution protocol proposed by Artur Ekert in 1991 that uses quantum entanglement and violations of Bell's theorem to establish cryptographic keys between distant parties. It matters in Quantum Physics and Quantum cryptography because it links foundational tests of quantum nonlocality with practical security guarantees, providing a conceptually distinct alternative to prepare-and-measure schemes such as BB84.
E91 was published as "Quantum cryptography based on Bell’s theorem" during a period of rapid development in quantum information theory and quantum optics in the late 1980s and early 1990s. The protocol built on prior work in quantum key distribution (notably Charles H. Bennett and Brassard's BB84, 1984) and on experimental advances in generating entangled photon pairs from sources such as spontaneous parametric down-conversion in nonlinear crystals. E91 explicitly connected cryptographic security to experimental tests of Bell inequalities—principally the CHSH inequality—thus tying applied quantum communications to foundational experiments by John S. Bell and later realizations by groups including Alain Aspect and others. The protocol catalyzed further research into device-independent security and motivated implementations across academic groups and industry laboratories like IBM, Oxford and Geneva.
E91 employs pairs of entangled qubits (typically polarization-entangled photons in a singlet state) distributed to two parties conventionally named Alice and Bob. Each party measures their qubit performing one of several possible spin or polarization observables; measurement bases are chosen randomly from a predefined set. Correlations in outcomes are used both to generate raw key bits and to evaluate statistical tests derived from Bell's theorem, such as the CHSH inequality. The violation of a Bell inequality is taken as evidence of nonlocal quantum correlations and as a certificate that the shared states are entangled and not classically correlated via an eavesdropper. The protocol leverages quantum principles including superposition, entanglement, and the no-cloning theorem to ensure that any attempt at interception disturbs correlations in a detectable way. E91's design contrasts with prepare-and-measure protocols by relying on entanglement swapping and shared Bell correlations rather than trusted state preparation by a single sender.
Security proofs for E91 evolved from intuitive arguments into rigorous frameworks grounded in quantum information theory. Early security claims used Bell-violation statistics to bound an adversary's information; later work formalized this into unconditional security proofs against collective and coherent attacks using techniques from entanglement distillation and quantum error correction. E91 inspired the field of device-independent quantum key distribution (DI-QKD), where security can be certified solely from observed correlations without trusting internal device workings; key theoretical contributions came from researchers in DI-QKD and quantum cryptography, including developments using entropy accumulation theorems and composable security frameworks. Security analyses consider realistic threats including detector inefficiencies, side channels, photon-number-splitting attacks, and imperfections modelled by adversarial quantum operations. The relation between Bell-inequality violation magnitude and extractable secret-key rate is central to converting experimental statistics into quantitative secrecy bounds.
Experimental realizations of E91 typically use entangled photon pairs produced by spontaneous parametric down-conversion in nonlinear crystals, or by entangled sources based on quantum dots and atomic ensembles. Implementations have been demonstrated over optical fibers, in free-space links (including long-distance tests across metropolitan areas), and via satellite-assisted links—efforts exemplified by collaborations such as the Micius satellite programme. Key enabling technologies include high-efficiency single-photon detectors (e.g., superconducting nanowire single-photon detectors), low-loss optical components, fast random-number generators for basis choice, and timing/synchronization systems. Experimental challenges addressed in implementations include closing detection and locality loopholes for strong Bell tests, mitigating decoherence over transmission, and integrating entanglement sources with quantum repeaters and quantum memory research pursued at institutions like Max Planck Institute for Quantum Optics and ICFO.
E91 provides a pathway to cryptographic systems whose security can be linked to experimentally observed nonlocality, offering advantages in scenarios where device trust is limited. Practical applications include secure key distribution for governmental, financial, and critical infrastructure communications, and as a building block in quantum networks and quantum repeater architectures. However, real-world deployment faces limitations: entanglement distribution over long distances suffers loss and decoherence, Bell tests require high-efficiency detection to avoid loopholes, and device-independent implementations demand stringent experimental thresholds that are challenging with current technology. Additionally, integration with existing classical infrastructure and standards (e.g., TLS replacement scenarios) remains an engineering and interoperability problem. Ongoing research focuses on improving source brightness, detector performance, quantum memory integration, and scalable DI-QKD protocols to bridge the gap between theoretical security promises and operational quantum-secure communication services.
Category:Quantum cryptography Category:Quantum information theory Category:Quantum entanglement