| quantum secret sharing | |
|---|---|
| Name | Quantum secret sharing |
| Introduced | 1999 |
| Developer | Charles H. Bennett et al.; M. Hillery, V. Bužek, A. Berthiaume |
| Type | quantum protocol |
quantum secret sharing
Quantum secret sharing is a family of cryptographic protocols that distribute a secret among multiple parties such that only authorized subsets can reconstruct it, while unauthorized subsets obtain no information. Rooted in Quantum Physics and quantum information theory, these schemes exploit entanglement, the no-cloning theorem, and quantum correlations to achieve tasks that cannot be realized classically or that provide stronger security guarantees. Quantum secret sharing is important for securing distributed quantum computation, key management, and authentication in emerging quantum networks.
Quantum secret sharing generalizes classical secret sharing (e.g., Shamir schemes) to the quantum domain by enabling the splitting of either classical or quantum information across participants using quantum states. The canonical model introduces a dealer who encodes a secret into multi-partite quantum states, often GHZ or graph state resources, and distributes shares to recipients. Reconstruction requires quantum operations or classical communication combined with quantum measurements. Early proposals include the protocol of Hillery, Bužek and Berthiaume (1999), and frameworks that relate to quantum error correction codes and stabilizer code constructions.
The security and functionality of quantum secret sharing rest on core principles of quantum mechanics: quantum entanglement, the no-cloning theorem, and measurement disturbance. Many constructions map secret sharing access structures to stabilizer formalism and quantum error-correcting code parameters; for example, CSS codes and graph states provide systematic encoding for ((k,n)) threshold schemes. The theory draws on results from quantum information theory such as entropy inequalities (von Neumann entropy) and resource theories of entanglement. Connections exist to quantum teleportation and entanglement swapping for share transfer and to multipartite entanglement classification for access structure design. Foundational security proofs use composable security models adapted from QKD frameworks developed by groups at institutions like IBM, Cambridge, and IQC.
Protocols split into schemes for sharing classical secrets with quantum means and sharing quantum secrets (quantum state sharing). Representative protocols include the original HBB99 protocol (Hillery–Bužek–Berthiaume), Cleve–Gottesman–Lo threshold schemes, and constructions based on graph-state or cluster state encodings used in MBQC. Secret-sharing can be threshold ((k,n)), ramp (partial information leakage allowed), or general access-structure-based. Implementations often incorporate error correction and entanglement purification steps to mitigate decoherence. Hybrid classical-quantum variants combine QKD channels (e.g., BB84) with quantum share distribution to manage classical secret reconstruction.
Security models address honest-but-curious and malicious adversaries, collusion among participants, and external eavesdroppers on quantum channels. Threat analyses exploit the no-cloning theorem to limit copying-based attacks and use monogamy of entanglement to quantify leakage against colluding sets. Security proofs employ composable frameworks and reduction to entanglement distillation or QKD security when possible. Practical threats include channel loss, side channels, imperfect sources (e.g., weak coherent pulses), and dishonest dealers; countermeasures come from authentication protocols, entanglement verification, and device-independent approaches leveraging Bell test violations. Research contrasts information-theoretic security against computational assumptions often used in classical multiparty computation.
Laboratory demonstrations have realized quantum secret sharing with photons, trapped ions, and superconducting qubits. Photonic experiments frequently use spontaneous parametric down-conversion sources to produce GHZ states for three-party sharing, demonstrated by groups at Vienna, Bristol, and NIST. Trapped-ion platforms at institutions such as IQC and Innsbruck have showcased multi-qubit encoding and recovery consistent with stabilizer-based schemes. Satellite-assisted and metropolitan quantum networks (e.g., experiments related to Micius) explore long-distance distribution of entangled shares, integrating classical network routing and QKD infrastructure. Key experimental metrics include fidelity of reconstructed states, secret-reconstruction rate, and resilience to loss and noise.
Quantum secret sharing supports secure multiparty quantum computation, distributed quantum key management, and threshold control of quantum resources (e.g., access to a quantum memory or quantum bank). In quantum networks, it enables secure delegation and access control across nodes in architectures pursued by QIA projects, national initiatives such as Quantum Flagship (EU) and programs at DARPA and EPSRC. Integration involves interfacing with QKD links, quantum repeaters, and network management protocols to provide authenticated share distribution and reconstruction across heterogeneous hardware. Use cases include secure joint control of sensor arrays, resilient cloud quantum computing authorization, and tamper-evident distributed ledgers for quantum assets.
Open challenges include scalable high-fidelity multipartite entanglement distribution, device-independent and fault-tolerant secret sharing, and general access-structure constructions with minimal quantum resources. Bridging quantum secret sharing with post-quantum cryptography and classical secure multiparty computation remains active, as does formalizing composable security for hybrid networks. Engineering challenges focus on quantum repeater integration, error mitigation, and standards development by bodies like IETF and national standards agencies. Theoretical avenues include resource-efficient schemes based on continuous-variable quantum information and applications in quantum machine learning and secure distributed sensing. Category:Quantum cryptography