The power of independence

Artur Ekert

DOI: https://doi.org/10.1038/nphys4346

IF: 19.684

2018-01-01

Nature Physics

Abstract:Device-independent quantum cryptography promises unprecedented security, but it is regarded as a theorist's dream and an experimentalist's nightmare. A new mathematical tool has now pushed its experimental demonstration much closer to reality.

What problem does this paper attempt to address?

Simple and tight device-independent security proofs

Rotem Arnon-Friedman,Renato Renner,Thomas Vidick

DOI: https://doi.org/10.1137/18M1174726

2019-03-27

Abstract:Device-independent security is the gold standard for quantum cryptography: not only is security based entirely on the laws of quantum mechanics, but it holds irrespective of any a priori assumptions on the quantum devices used in a protocol, making it particularly applicable in a quantum-wary environment. While the existence of device-independent protocols for tasks such as randomness expansion and quantum key distribution has recently been established, the underlying proofs of security remain very challenging, yield rather poor key rates, and demand very high-quality quantum devices, thus making them all but impossible to implement in practice. We introduce a technique for the analysis of device-independent cryptographic protocols. We provide a flexible protocol and give a security proof that provides quantitative bounds that are asymptotically tight, even in the presence of general quantum adversaries. At a high level our approach amounts to establishing a reduction to the scenario in which the untrusted device operates in an identical and independent way in each round of the protocol. This is achieved by leveraging the sequential nature of the protocol, and makes use of a newly developed tool, the "entropy accumulation theorem" of Dupuis et al. As concrete applications we give simple and modular security proofs for device-independent quantum key distribution and randomness expansion protocols based on the CHSH inequality. For both tasks we establish essentially optimal asymptotic key rates and noise tolerance. In view of recent experimental progress, which has culminated in loophole-free Bell tests, it is likely that these protocols can be practically implemented in the near future.

Quantum Physics,Cryptography and Security
Quantum Advantage in Cryptography

Renato Renner,Ramona Wolf

DOI: https://doi.org/10.2514/1.J062267

IF: 2.624

2023-02-02

AIAA Journal

Abstract:Ever since its inception, cryptography has been caught in a vicious circle: Cryptographers keep inventing methods to hide information, and cryptanalysts break them, prompting cryptographers to invent even more sophisticated encryption schemes, and so on. But could it be that quantum information technology breaks this circle? At first sight, it looks as if it just lifts the competition between cryptographers and cryptanalysts to the next level. Indeed, quantum computers will render most of today’s public key cryptosystems insecure. Nonetheless, there are good reasons to believe that cryptographers will ultimately prevail over cryptanalysts. Quantum cryptography allows us to build communication schemes whose secrecy relies only on the laws of physics and some minimum assumptions about the cryptographic hardware—leaving basically no room for an attack. While we are not yet there, this paper provides an overview of the principles and state-of-the-art of quantum cryptography, as well as an assessment of current challenges and prospects for overcoming them.

engineering, aerospace
From Quantum Code-Making To Quantum Code-Breaking

A Ekert

1998-01-01

Abstract:This is a semi-popular overview of quantum entanglement as an important physical resource in the field of data security and quantum computing. After a brief outline of entanglement's key role in philosophical debates about the meaning of quantum mechanics I describe its current impact on both cryptography and cryptanalysis. The paper is based on the lecture given at the conference "Geometric Issues in the Foundations of Science" (Oxford, June 1996) in honor of Roger Penrose.
Quantum cryptography beyond key distribution: theory and experiment

Mathieu Bozzio,Claude Crépeau,Petros Wallden,Philip Walther

2024-11-14

Abstract:Due to its fundamental principles, quantum theory holds the promise to enhance the security of modern cryptography, from message encryption to anonymous communication, digital signatures, online banking, leader election, one-time passwords and delegated computation. While quantum key distribution (QKD) has already enabled secure key exchange over hundreds of kilometers, a myriad of other quantum-cryptographic primitives are being developed to secure future applications against quantum adversaries. This article surveys the theoretical and experimental developments in quantum cryptography beyond QKD over the past decades, along with advances in secure quantum computation. It provides an intuitive classification of the main quantum primitives and their security levels, summarizes their possibilities and limits, and discusses their implementation with current photonic technology.

Quantum Physics
The Ultimate Physical Limits of Privacy

Artur Ekert,Renato Renner

DOI: https://doi.org/10.1038/nature13132

IF: 64.8

2014-01-01

Nature

Abstract:Among those who make a living from the science of secrecy, worry and paranoia are just signs of professionalism. Can we protect our secrets against those who wield superior technological powers? Can we trust those who provide us with tools for protection? Can we even trust ourselves, our own freedom of choice? Recent developments in quantum cryptography show that some of these questions can be addressed and discussed in precise and operational terms, suggesting that privacy is indeed possible under surprisingly weak assumptions.
Fully Distrustful Quantum Cryptography

J. Silman,A. Chailloux,N. Aharon,I. Kerenidis,S. Pironio,S. Massar

DOI: https://doi.org/10.1103/PhysRevLett.106.220501

2011-01-27

Abstract:In the distrustful quantum cryptography model the different parties have conflicting interests and do not trust one another. Nevertheless, they trust the quantum devices in their labs. The aim of the device-independent approach to cryptography is to do away with the necessity of making this assumption, and, consequently, significantly increase security. In this paper we enquire whether the scope of the device-independent approach can be extended to the distrustful cryptography model, thereby rendering it `fully' distrustful. We answer this question in the affirmative by presenting a device-independent (imperfect) bit-commitment protocol, which we then use to construct a device-independent coin flipping protocol.

Quantum Physics
Quantum Complementarity Approach to Device-Independent Security

Xingjian Zhang,Pei Zeng,Tian Ye,Hoi-Kwong Lo,Xiongfeng Ma

DOI: https://doi.org/10.1103/physrevlett.131.140801

IF: 8.6

2023-01-01

Physical Review Letters

Abstract:Complementarity is an essential feature of quantum mechanics. The preparation of an eigenstate of one observable implies complete randomness in its complementary observable. In quantum cryptography, complementarity allows us to formulate security analyses in terms of phase-error correction. However, the concept becomes much subtler in the device-independent regime that offers security without device characterization. Security proofs of device-independent quantum cryptography tasks are often complex and quite different from those of their more standard device-dependent cousins. The existing proofs pose huge challenges to experiments, among which large data-size requirement is a crux. Here, we show the complementarity security origin of the device-independent tasks. By linking complementarity with quantum nonlocality, we recast the device-independent scheme into a quantum error correction protocol. Going beyond the identical-and-independent-distribution case, we consider the most general attack. We generalize the sample entropy in classical Shannon theory for the finite-size analysis. Our method exhibits good finite-size performance and brings the device-independent scheme to a more practical regime. Applying it to the data in a recent ion-trap-based device-independent quantum key distribution experiment, one could reduce the requirement on data size to less than a third. Furthermore, the operational meaning of complementarity naturally extends device-independent scenarios to advantage key distillation, easing experiments by tolerating higher loss and lower transmittance.
Entropy Accumulation under Post-Quantum Cryptographic Assumptions

Ilya Merkulov,Rotem Arnon-Friedman

2023-07-02

Abstract:In device-independent (DI) quantum protocols, the security statements are oblivious to the characterization of the quantum apparatus - they are based solely on the classical interaction with the quantum devices as well as some well-defined assumptions. The most commonly known setup is the so-called non-local one, in which two devices that cannot communicate between themselves present a violation of a Bell inequality. In recent years, a new variant of DI protocols, that requires only a single device, arose. In this novel research avenue, the no-communication assumption is replaced with a computational assumption, namely, that the device cannot solve certain post-quantum cryptographic tasks. The protocols for, e.g., randomness certification, in this setting that have been analyzed in the literature used ad hoc proof techniques and the strength of the achieved results is hard to judge and compare due to their complexity. Here, we build on ideas coming from the study of non-local DI protocols and develop a modular proof technique for the single-device computational setting. We present a flexible framework for proving the security of such protocols by utilizing a combination of tools from quantum information theory, such as the entropic uncertainty relation and the entropy accumulation theorem. This leads to an insightful and simple proof of security, as well as to explicit quantitative bounds. Our work acts as the basis for the analysis of future protocols for DI randomness generation, expansion, amplification and key distribution based on post-quantum cryptographic assumptions.

Quantum Physics,Cryptography and Security
Experimenter's Freedom in Bell's Theorem and Quantum Cryptography

Johannes Kofler,Tomasz Paterek,Caslav Brukner

DOI: https://doi.org/10.1103/PhysRevA.73.022104

2006-02-07

Abstract:Bell's theorem states that no local realistic explanation of quantum mechanical predictions is possible, in which the experimenter has a freedom to choose between different measurement settings. Within a local realistic picture the violation of Bell's inequalities can only be understood if this freedom is denied. We determine the minimal degree to which the experimenter's freedom has to be abandoned, if one wants to keep such a picture and be in agreement with the experiment. Furthermore, the freedom in choosing experimental arrangements may be considered as a resource, since its lacking can be used by an eavesdropper to harm the security of quantum communication. We analyze the security of quantum key distribution as a function of the (partial) knowledge the eavesdropper has about the future choices of measurement settings which are made by the authorized parties (e.g. on the basis of some quasi-random generator). We show that the equivalence between the violation of Bell's inequality and the efficient extraction of a secure key - which exists for the case of complete freedom (no setting knowledge) - is lost unless one adapts the bound of the inequality according to this lack of freedom.

Quantum Physics
Quantum security and theory of decoherence

Piotr Mironowicz

DOI: https://doi.org/10.1088/1367-2630/aca558

2022-11-26

New Journal of Physics

Abstract:We sketch a relation between two crucial, yet independent, fields in quantum information research, viz. quantum decoherence and quantum cryptography. We investigate here how the standard cryptographic assumption of shielded laboratory, stating that data generated by a secure quantum device remain private unless explicitly published, is disturbed by the einselection mechanism of quantum Darwinism explaining the measurement process by interaction with the external environment. We illustrate the idea with a paradigmatic example of a quantum random number generator compromised by an analog of the Van Eck phreaking. In particular, we derive a trade-off relation between eavesdropper's guessing probability P guess and the collective decoherence factor Γ of the simple form P guess + Γ ≥ 1.

physics, multidisciplinary
High-rate measurement-device-independent quantum cryptography

Stefano Pirandola,Carlo Ottaviani,Gaetana Spedalieri,Christian Weedbrook,Samuel L. Braunstein,Seth Lloyd,Tobias Gehring,Christian S. Jacobsen,Ulrik L. Andersen

DOI: https://doi.org/10.1038/nphoton.2015.83

IF: 35

2015-05-25

Nature Photonics

Abstract:Quantum cryptography achieves a formidable task—the remote distribution of secret keys by exploiting the fundamental laws of physics. Quantum cryptography is now headed towards solving the practical problem of constructing scalable and secure quantum networks. A significant step in this direction has been the introduction of measurement-device independence, where the secret key between two parties is established by the measurement of an untrusted relay. Unfortunately, although qubit-implemented protocols can reach long distances, their key rates are typically very low, unsuitable for the demands of a metropolitan network. Here we show, theoretically and experimentally, that a solution can come from the use of continuous-variable systems. We design a coherent-state network protocol able to achieve remarkably high key rates at metropolitan distances, in fact three orders of magnitude higher than those currently achieved. Our protocol could be employed to build high-rate quantum networks where devices securely connect to nearby access points or proxy servers.

optics,physics, applied
On the Power of Quantum Encryption Keys

Akinori Kawachi,Christopher Portmann

DOI: https://doi.org/10.48550/arXiv.0808.2869

2008-08-21

Quantum Physics

Abstract:The standard definition of quantum state randomization, which is the quantum analog of the classical one-time pad, consists in applying some transformation to the quantum message conditioned on a classical secret key $k$. We investigate encryption schemes in which this transformation is conditioned on a quantum encryption key state $\rho_k$ instead of a classical string, and extend this symmetric-key scheme to an asymmetric-key model in which copies of the same encryption key $\rho_k$ may be held by several different people, but maintaining information-theoretical security. We find bounds on the message size and the number of copies of the encryption key which can be safely created in these two models in terms of the entropy of the decryption key, and show that the optimal bound can be asymptotically reached by a scheme using classical encryption keys. This means that the use of quantum states as encryption keys does not allow more of these to be created and shared, nor encrypt larger messages, than if these keys are purely classical.
Experimental quantum key distribution certified by Bell's theorem

D. P. Nadlinger,P. Drmota,B. C. Nichol,G. Araneda,D. Main,R. Srinivas,D. M. Lucas,C. J. Ballance,K. Ivanov,E. Y-Z. Tan,P. Sekatski,R. L. Urbanke,R. Renner,N. Sangouard,J-D. Bancal

DOI: https://doi.org/10.1038/s41586-022-04941-5

2023-09-06

Abstract:Cryptographic key exchange protocols traditionally rely on computational conjectures such as the hardness of prime factorisation to provide security against eavesdropping attacks. Remarkably, quantum key distribution protocols like the one proposed by Bennett and Brassard provide information-theoretic security against such attacks, a much stronger form of security unreachable by classical means. However, quantum protocols realised so far are subject to a new class of attacks exploiting implementation defects in the physical devices involved, as demonstrated in numerous ingenious experiments. Following the pioneering work of Ekert proposing the use of entanglement to bound an adversary's information from Bell's theorem, we present here the experimental realisation of a complete quantum key distribution protocol immune to these vulnerabilities. We achieve this by combining theoretical developments on finite-statistics analysis, error correction, and privacy amplification, with an event-ready scheme enabling the rapid generation of high-fidelity entanglement between two trapped-ion qubits connected by an optical fibre link. The secrecy of our key is guaranteed device-independently: it is based on the validity of quantum theory, and certified by measurement statistics observed during the experiment. Our result shows that provably secure cryptography with real-world devices is possible, and paves the way for further quantum information applications based on the device-independence principle.

Quantum Physics,Cryptography and Security
Weak randomness in device independent quantum key distribution and the advantage of using high dimensional entanglement

Marcus Huber,Marcin Pawlowski

DOI: https://doi.org/10.1103/PhysRevA.88.032309

2013-09-11

Abstract:We show that in device independent quantum key distribution protocols the privacy of randomness is of crucial importance. For sublinear test sample sizes even the slightest guessing probability by an eavesdropper will completely compromise security. We show that a combined attack exploiting test sample and measurement choices compromises the security even with a linear size test sample and otherwise device independent security considerations. We explicitly derive the sample size needed to retrieve security as a function of the randomness quality. We demonstrate that exploiting features of genuinely higher dimensional systems one can reduce this weakness and provide device independent security more robust against weak randomness sources.

Quantum Physics
Post-Quantum Cryptography—A New Opportunity and Challenge for the Mathematics Community

Jintai Ding,Daniel Smith-Tone

DOI: https://doi.org/10.1090/noti1546

2017-01-01

Notices of the American Mathematical Society

Abstract:Over the past three decades, the family of public-key cryptosystems, a fundamental breakthrough in modern cryptography in the late 1970s, has become an increasingly integral part of our communication networks. The Internet, as well as other communication systems, relies principally on the Diffie-Hellman key exchange, RSA encryption, and digital signatures using DSA, ECDSA, or related algorithms. The security of these cryptosystems depends on the difficulty of certain number-theoretic problems, such as integer factorization or the discrete log problem. In 1994 Peter Shor showed that quantum computers can solve each of these problems in polynomial time, thus rendering the security of all cryptosystems based on such assumptions impotent. A large international community has emerged to address this issue in the hope that our public-key infrastructure may remain intact by utilizing new quantum-resistant primitives. In the academic world, this new science bears the moniker Post-Quantum Cryptography (PQC).
Foiling Quantum Hackers

Liucai Wang,Guoliang Shentu,Jian Wang,J. Pelc,Cheng-Zhi Peng,Qiang Zhang

2013-01-01

Abstract:Quantum cryptography holds promise for communication schemes that are, in theory, perfectly secure. But in the last few years, hackers have exploited security loopholes to crack some of the most sophisticated quantum encryption systems. Fortunately, two new papers in Physical Review Letters, one by Allison Rubenok, at the Institute for Quantum Science & Technology in Calgary, Canada, and colleagues [1] and the other by Yang Liu, at the Hefei National Laboratory for Physical Sciences and the University of Science and Technology of China, and colleagues [2] now report a new quantum encryption method that can remove the weakest link of quantum encryption schemes: loopholes associated with defects of the photodetectors used at the receiver end. Code makers have now regained the upper hand against code breakers.
On the Use of Quantum Entanglement in Secure Communications: A Survey

Keith Shannon,Elias Towe,Ozan K. Tonguz

DOI: https://doi.org/10.48550/arXiv.2003.07907

2020-03-18

Abstract:Quantum computing and quantum communications are exciting new frontiers in computing and communications. Indeed, the massive investments made by the governments of the US, China, and EU in these new technologies are not a secret and are based on the expected potential of these technologies to revolutionize communications, computing, and security. In addition to several field trials and hero experiments, a number of companies such as Google and IBM are actively working in these areas and some have already reported impressive demonstrations in the past few years. While there is some skepticism about whether quantum cryptography will eventually replace classical cryptography, the advent of quantum computing could necessitate the use of quantum cryptography as the ultimate frontier of secure communications. This is because, with the amazing speeds demonstrated with quantum computers, breaking cryptographic keys might no longer be a daunting task in the next decade or so. Hence, quantum cryptography as the ultimate frontier in secure communications might not be such a far-fetched idea. It is well known that Heisenberg's Uncertainty Principle is essentially a "negative result" in Physics and Quantum Mechanics. It turns out that Heisenberg's Uncertainty Principle, one of the most interesting results in Quantum Mechanics, could be the theoretical basis and the main scientific principle behind the ultimate frontier in quantum cryptography or secure communications in conjunction with Quantum Entanglement.

Cryptography and Security,Quantum Physics
A QUICK GLANCE AT QUANTUM CRYPTOGRAPHY

Samuel J. Lomonaco

DOI: https://doi.org/10.1080/0161-119991887739

1999-01-01

Cryptologia

Abstract:The recent application of the principles of quantum mechanics to cryptography has led to a remarkable new dimension in secret communication. As a result of these new developments, it is now possible to construct cryptographic communication systems which detect unauthorized eavesdropping should it occur, and which give a guarantee of no eavesdropping should it not occur.

mathematics, applied,computer science, theory & methods,history & philosophy of science
Insider-proof encryption with applications for quantum key distribution

Matthew McKague,Lana Sheridan

DOI: https://doi.org/10.48550/arXiv.1209.4696

2013-04-15

Abstract:It has been pointed out that current protocols for device independent quantum key distribution can leak key to the adversary when devices are used repeatedly and that this issue has not been addressed. We introduce the notion of an insider-proof channel. This allows us to propose a means by which devices with memories could be reused from one run of a device independent quantum key distribution protocol to the next while bounding the leakage to Eve, under the assumption that one run of the protocol could be completed securely using devices with memories.

Quantum Physics
Turing, Ciphers and Quanta

Artur Ekert,Alastair Kay,James Pope

DOI: https://doi.org/10.1098/rsta.2011.0324

2012-01-01

Abstract:Alan Turing has certainly contributed to a widespread belief that the quest for a perfect, unbreakable, cipher is a futile pursuit. The ancient art of concealing information has, in the past, been matched by the ingenuity of code-breakers, but no longer! With the advent of quantum cryptography, the hopes of would-be eavesdroppers have been dashed, perhaps for good. Moreover, recent research, building on schemes that were invented decades ago to perform quantum cryptography, shows that secure communication certified by a sufficient violation of a Bell inequality makes a seemingly insane scenario possible—devices of unknown or dubious provenance, even those that are manufactured by our enemies, can be safely used for secure communication, including key distribution. All that is needed to implement this bizarre and powerful form of cryptography is a loophole-free test of a Bell inequality, which is on the cusp of technological feasibility. We provide a brief overview of the intriguing connections between Bell inequalities and cryptography and describe how studies of quantum entanglement and the foundations of quantum theory influence the way we may protect information in the future.

The power of independence

Simple and tight device-independent security proofs

Quantum Advantage in Cryptography

From Quantum Code-Making To Quantum Code-Breaking

Quantum cryptography beyond key distribution: theory and experiment

The Ultimate Physical Limits of Privacy

Fully Distrustful Quantum Cryptography

Quantum Complementarity Approach to Device-Independent Security

Entropy Accumulation under Post-Quantum Cryptographic Assumptions

Experimenter's Freedom in Bell's Theorem and Quantum Cryptography

Quantum security and theory of decoherence

High-rate measurement-device-independent quantum cryptography

On the Power of Quantum Encryption Keys

Experimental quantum key distribution certified by Bell's theorem

Weak randomness in device independent quantum key distribution and the advantage of using high dimensional entanglement

Post-Quantum Cryptography—A New Opportunity and Challenge for the Mathematics Community

Foiling Quantum Hackers

On the Use of Quantum Entanglement in Secure Communications: A Survey

A QUICK GLANCE AT QUANTUM CRYPTOGRAPHY

Insider-proof encryption with applications for quantum key distribution

Turing, Ciphers and Quanta