Abstract:Key establishment is a crucial primitive for building secure channels in a multi-party setting. Without quantum mechanics, key establishment can only be done under the assumption that some computational problem is hard. Since digital communication can be easily eavesdropped and recorded, it is important to consider the secrecy of information anticipating future algorithmic and computational discoveries which could break the secrecy of past keys, violating the secrecy of the confidential channel.Quantum key distribution (QKD) can be used generate secret keys that are secure against any future algorithmic or computational improvements. QKD protocols still require authentication of classical communication, although existing security proofs of QKD typically assume idealized authentication. It is generally considered folklore that QKD when used with computationally secure authentication is still secure against an unbounded adversary, provided the adversary did not break the authentication during the run of the protocol.We describe a security model for quantum key distribution extending classical authenticated key exchange (AKE) security models. Using our model, we characterize the long-term security of the BB84 QKD protocol with computationally secure authentication against an eventually unbounded adversary. By basing our model on traditional AKE models, we can more readily compare the relative merits of various forms of QKD and existing classical AKE protocols. This comparison illustrates in which types of adversarial environments different quantum and classical key agreement protocols can be secure.

Infeasibility of Quantum Cryptography Without Eavesdropping Check

Eavesdropping on Quantum-Cryptographical Systems.

Quantum Key Distribution in the Classical Authenticated Key Exchange Framework

Security of "Counterfactual Quantum Cryptography"

Towards the Impossibility of Quantum Public Key Encryption with Classical Keys from One-Way Functions

Unconditionally secure key distribution without quantum channel

"Quantum" key distribution using weak classical light waves

Quantum no-key protocol for direct and secure transmission of quantum and classical messages

Quantum cryptography beyond key distribution: theory and experiment

A quantum key distribution protocol without classical communications

02 13 1 v 2 4 M ar 2 00 4 A Generic Security Proof for Quantum Key Distribution

A security framework for quantum key distribution implementations

Quantum Key Distribution without sending a Quantum Signal

Quantum cryptography with imperfect apparatus

Hybrid Quantum Cryptography from Communication Complexity

Quantum cryptography based on interaction-free measurement

Security proof for qudit-system-based quantum cryptography against entanglement-measurement attack

Counterfactual Quantum Cryptography Based on Weak Coherent States

Quantum public-key crypto via EPR pairs

Loss Control-Based Key Distribution under Quantum Protection

Quantum Cryptography: Theory and Practice