Abstract:Key establishment is a crucial primitive for building secure channels in a multi-party setting. Without quantum mechanics, key establishment can only be done under the assumption that some computational problem is hard. Since digital communication can be easily eavesdropped and recorded, it is important to consider the secrecy of information anticipating future algorithmic and computational discoveries which could break the secrecy of past keys, violating the secrecy of the confidential channel.Quantum key distribution (QKD) can be used generate secret keys that are secure against any future algorithmic or computational improvements. QKD protocols still require authentication of classical communication, although existing security proofs of QKD typically assume idealized authentication. It is generally considered folklore that QKD when used with computationally secure authentication is still secure against an unbounded adversary, provided the adversary did not break the authentication during the run of the protocol.We describe a security model for quantum key distribution extending classical authenticated key exchange (AKE) security models. Using our model, we characterize the long-term security of the BB84 QKD protocol with computationally secure authentication against an eventually unbounded adversary. By basing our model on traditional AKE models, we can more readily compare the relative merits of various forms of QKD and existing classical AKE protocols. This comparison illustrates in which types of adversarial environments different quantum and classical key agreement protocols can be secure.

A quantum key distribution protocol without classical communications

Quantum Key Distribution using Expectation Values of Super-classical GHZ States

Unconditionally secure key distribution without quantum channel

Quantum no-key protocol for direct and secure transmission of quantum and classical messages

Quantum Key Distribution: Security, Feasibility and Robustness

Quantum Three-Pass protocol: Key distribution using quantum superposition states

Quantum key distribution based on orthogonal states allows secure quantum bit commitment

User-defined Quantum Key Distribution

Simple loss-tolerant protocol for GHZ-state distribution in a quantum network

Quantum Key Distribution in the Classical Authenticated Key Exchange Framework

Quantum Key Distribution without sending a Quantum Signal

Quantum Signature Protocol without the Trusted Third Party

Quantum Key Distribution with Minimal Qubit Transmission Based on MultiQubit Greenberger Horne Zeilinger State

Quantum Authentication and Quantum Key Distribution Protocol

Quantum Key Distribution and Quantum Authentication Based on Entangled State

Modified Bennett-Brassard 1984 Quantum Key Distribution Protocol with Two-Way Classical Communications

Conference key agreement in a quantum network

Quantum Conference Key Agreement with Phase Noise Resistance

A quasi quantum secure direct communication protocol with authentication

Robust Quantum Public-Key Encryption with Applications to Quantum Key Distribution

A secure dynamic quantum anonymous secret sharing protocol utilizing GHZ states