Abstract:Key establishment is a crucial primitive for building secure channels in a multi-party setting. Without quantum mechanics, key establishment can only be done under the assumption that some computational problem is hard. Since digital communication can be easily eavesdropped and recorded, it is important to consider the secrecy of information anticipating future algorithmic and computational discoveries which could break the secrecy of past keys, violating the secrecy of the confidential channel.Quantum key distribution (QKD) can be used generate secret keys that are secure against any future algorithmic or computational improvements. QKD protocols still require authentication of classical communication, although existing security proofs of QKD typically assume idealized authentication. It is generally considered folklore that QKD when used with computationally secure authentication is still secure against an unbounded adversary, provided the adversary did not break the authentication during the run of the protocol.We describe a security model for quantum key distribution extending classical authenticated key exchange (AKE) security models. Using our model, we characterize the long-term security of the BB84 QKD protocol with computationally secure authentication against an eventually unbounded adversary. By basing our model on traditional AKE models, we can more readily compare the relative merits of various forms of QKD and existing classical AKE protocols. This comparison illustrates in which types of adversarial environments different quantum and classical key agreement protocols can be secure.

A security framework for quantum key distribution implementations

Almost-tight and Versatile Security Analysis of Measurement-Device-independent Quantum Key Distribution

User-defined Quantum Key Distribution

Bridging the Gap Between Theory and Practice in Quantum Cryptography

Quantum key distribution with imperfectly isolated devices

Implementation security in quantum key distribution

Foiling covert channels and malicious classical post-processing units in quantum key distribution

Versatile security analysis of measurement-device-independent quantum key distribution

Quantum key distribution with untrusted detectors

Simple and Rigorous Proof Method for the Security of Practical Quantum Key Distribution in the Single-Qubit Regime Using Mismatched Basis Measurements

Finite-key Analysis for Measurement-Device-independent Quantum Key Distribution

Quantum Key Distribution in the Classical Authenticated Key Exchange Framework

Experimental Quantum Key Distribution Secure Against Malicious Devices

Unconditional Security of Quantum Key Distribution Based on Practical Devices

Quantum Key Distribution and Security Studies

End-to-end QKD network with non-localized trust

Secure Quantum Key Distribution with Realistic Devices

Implementing the decoy state protocol in a practically oriented Quantum Key Distribution system-level model

Unbalanced-basis-misalignment-tolerant Measurement-Device-independent Quantum Key Distribution

Improved Finite-Key Security Analysis of Measurement-Device-Independent Quantum Key Distribution Against a Trojan-Horse Attack

Quantum Key Distribution: Security, Feasibility and Robustness