Abstract:Key establishment is a crucial primitive for building secure channels in a multi-party setting. Without quantum mechanics, key establishment can only be done under the assumption that some computational problem is hard. Since digital communication can be easily eavesdropped and recorded, it is important to consider the secrecy of information anticipating future algorithmic and computational discoveries which could break the secrecy of past keys, violating the secrecy of the confidential channel.Quantum key distribution (QKD) can be used generate secret keys that are secure against any future algorithmic or computational improvements. QKD protocols still require authentication of classical communication, although existing security proofs of QKD typically assume idealized authentication. It is generally considered folklore that QKD when used with computationally secure authentication is still secure against an unbounded adversary, provided the adversary did not break the authentication during the run of the protocol.We describe a security model for quantum key distribution extending classical authenticated key exchange (AKE) security models. Using our model, we characterize the long-term security of the BB84 QKD protocol with computationally secure authentication against an eventually unbounded adversary. By basing our model on traditional AKE models, we can more readily compare the relative merits of various forms of QKD and existing classical AKE protocols. This comparison illustrates in which types of adversarial environments different quantum and classical key agreement protocols can be secure.

Analysis of Counterfactual Quantum Certificate Authorization

Counterfactual Quantum Cryptography Based on Weak Coherent States

Quantum Identity Authentication in the Counterfactual Quantum Key Distribution Protocol.

Counterfactual Attack on Counterfactual Quantum Key Distribution

Security of "Counterfactual Quantum Cryptography"

Quantum Bit Commitment Protocol Based on Counterfactual Quantum Cryptography

"Counterfactual" quantum protocols

Counterfactual Quantum Bit Commitment

Practical Stabilization of Counterfactual Quantum Cryptography

Protocols for counterfactual and twin-field quantum digital signature

Counterfactual Quantum Cryptography Network with Untrusted Relay

Quantum Key Distribution in the Classical Authenticated Key Exchange Framework

Quantum direct communication with mutual authentication

On the "Security analysis and improvements of arbitrated quantum signature schemes"

Counterfactual Quantum Key Distribution with Untrusted Detectors.

Analysis of counterfactuality of counterfactual communication protocols

A Novel Single Agent Quantum Bit Commitment Scheme

Quantum private query protocol based on counterfactual quantum key distribution with noiseless attack

Quantum Authentication Protocol of Classical Messages Based on Different Sets of Orthogonal Quantum States

Cryptanalysis of the Secure Quantum Private Comparison Protocol

The Cryptanalysis of a Quantum Key Distribution and Authentication Protocol Through Once Quantum Communication