Source-linked AI summary
Unidimensional continuous-variable measurement-device-independent quantum key distribution
Dongyun Bai, Peng Huang, Yiqun Zhu, Hongxin Ma, Tailong Xiao, Tao Wang, Guihua Zeng
TL;DR
Imperfect detectors create practical vulnerabilities in CV-QKD, motivating detector-independent CV-MDI schemes. This paper proposes single-quadrature Gaussian modulation for both senders, analyzes collective-attack security and finite-size effects, and finds performance comparable to symmetrical CV-MDI QKD with lower implementation complexity.
Problem
Conventional CV-MDI QKD uses symmetrical amplitude-and-phase modulation, making implementations relatively complex despite detector-side-channel protection.
Source: §1 · pp. 2–3Method
The paper develops a unidimensional CV-MDI QKD protocol using one modulator per sender and analyzes it under collective attacks with finite-size effects.
Source: §1 · p. 3, §3.1 · p. 6, §4 · p. 11Results
The proposed protocol has performance comparable to symmetrical Gaussian-modulated CV-MDI QKD and remains robust to finite-size effects for block lengths larger than 10^9.
Source: §4 · p. 15, §5 · p. 16Takeaways & Limitations
Unidimensional modulation offers considerable system simplification and supports use of more standard devices while retaining acceptable secret-key performance.
Source: §3.2 · p. 11, §5 · p. 16The analysis restricts the channels to two independent Gaussian Markovian memoryless channels, so the assumed attack is less optimal than the two-mode attack in Ref.
Source: §3.1 · p. 6
Abstract
from arXiv · showhide
Continuous-variable (CV) measurement-device-independent (MDI) quantum key distribution (QKD) is immune to imperfect detection devices, which can eliminate all kinds of attacks on practical detectors. Here we first propose a CV-MDI QKD scheme using unidimensional modulation (UD) in general phase-sensitive channels. The UD CV-MDI QKD protocol is implemented with the Gaussian modulation of a single quadrature of the coherent states prepared by two legitimate senders, aiming to simplify the implementation compared with the standard, symmetrically Gaussian-modulated CVMDI QKD protocol. Our scheme reduces the complexity of the system since it ignores the requirement in one of the quadrature modulations as well as the corresponding parameter estimations. The security of our proposed scheme is analyzed against collective attacks, and the finite-size analysis under realistic conditions is taken into account. UD CV-MDI QKD shows a comparable performance to that of its symmetrical counterpart, which will facilitate the simplification and practical implementation of the CV-MDI QKD protocols.
1 Introduction
CV-MDI QKD protects against detector side-channel attacks, while conventional protocols require symmetrical modulation of both quadratures. This paper extends unidimensional modulation to CV-MDI QKD to simplify implementation while retaining comparable performance and finite-size robustness.
1 Introduction
- Detector attacks motivate CV-MDI QKD, whose untrusted-party detection removes detector side-channel vulnerabilities.CV-QKD faces attacks involving local oscillators, calibration, saturation, and detector blinding.Source: §1 · pp. 2–3
- Conventional CV-MDI QKD has Alice and Bob symmetrically modulate amplitude and phase quadratures before Charlie performs Bell-state measurement.The measurement results are publicly announced for raw-key generation, parameter estimation, information reconciliation, and privacy amplification.Source: §1 · p. 2
- Unidimensional CV-QKD uses one modulator for single-quadrature modulation, reducing apparatus complexity compared with two-modulator symmetrical schemes.Prior security analyses and experiments support the feasibility of unidimensional CV-QKD.Source: §1 · p. 3
- The paper proposes CV-MDI QKD in which both senders use one modulator, analyzes collective-attack security in phase-sensitive channels, and includes finite-size effects.The analysis derives secret-key rates under physicality constraints and parameters for the unmodulated quadrature.Source: §1 · p. 3
- The paper compares the proposed protocol with symmetrical CV-MDI QKD and organizes the analysis around asymptotic rates, finite-size effects, and practical conclusions.These topics correspond to Sections 3, 4, and 5, respectively.Source: §1 · p. 3
2 CV-MDI QKD protocol with unidimensional modulation
The protocol replaces symmetrical two-quadrature modulation with single-quadrature modulation while retaining the CV-MDI structure. An equivalent entanglement-based representation enables security analysis, and Charlie’s measurement plus Bob’s displacement establish correlated data for key extraction.
2 CV-MDI QKD protocol with unidimensional modulation
- The proposed CV-MDI protocol uses unidimensional modulation by having Alice and Bob modulate only one quadrature before sending states to Charlie.The equivalent entanglement-based scheme is introduced to make security analysis more convenient.Source: §2 · p. 3, §2.2 · p. 4
2.1 UDCV-QKD protocol and original CV-MDI QKD protocol
- In the unidimensional prepare-and-measure model, one modulator applies Gaussian modulation variance V_m to the amplitude quadrature, while the channel remains phase-sensitive.The channel is characterized separately by transmittance and excess noise in the amplitude and phase quadratures; the receiver may measure the unmodulated quadrature for channel characterization.Source: §2.1 · p. 4
- In the standard CV-MDI protocol, Alice and Bob symmetrically modulate amplitude and phase quadratures and send independent states to Charlie for balanced-beam-splitter Bell-state measurement.Charlie publicly announces the two homodyne results, after which the senders form raw keys and perform post-processing.Source: §2.1 · p. 4
2.2 CV-MDI QKD with unidimensional modulation
- The entanglement-based implementation prepares a TMSVS, homodyne-measures one mode, and conditionally prepares coherent states with V_m = V^2 − 1 for transmission to Charlie.Charlie interferes the incoming modes on a balanced beam splitter and announces the amplitude result when amplitude modulation is used.Source: §2.2 · pp. 4–5
- Bob displaces his retained mode using Charlie’s announced result, after which Alice and Bob use authenticated post-processing for parameter estimation, reverse reconciliation, and privacy amplification.The displaced retained modes can be treated as entangled, so their data become correlated for key extraction.Source: §2.2 · p. 5
- The protocol may switch quadrature bases and modulate the phase quadrature when needed to collect channel properties for the unmodulated quadrature.This requirement supplements the nominal single-quadrature modulation rather than restoring symmetrical modulation as the main preparation scheme.Source: §2.2 · p. 5
3 Secret key calculation with performance analysis under asymptotic case
The protocol’s asymptotic secret-key rate is derived under Gaussian collective attacks using an equivalent one-way model, then evaluated for symmetric and asymmetric channel placements. With practical modulation variance, UD CV-MDI QKD achieves performance comparable to symmetric Gaussian modulation while reducing implementation complexity.
3.1 Secret key calculation
- UD CV-MDI QKD derives a lower-bounded secret-key rate under Gaussian collective attacks by converting the entanglement-based protocol to an equivalent one-way model.The equivalent model imposes more constraints on Eve, so its rate is a lower bound for the original scheme.Source: §3.1 · pp. 6–7
- The analysis focuses on single-quadrature modulation, yielding an asymmetric covariance matrix and channel parameters for Alice and Bob.The entanglement-based construction represents modulation of the x quadrature with variance V_m = V^2 − 1 and assumes perfect homodyne detection.Source: §3.1 · p. 7
- Physicality constraints bound the unknown p-quadrature transmittance and excess noise, and the calculation assumes symmetric channel parameters across quadratures.The assumed equalities are ηA,p = ηA,x, ηB,p = ηB,x, ϵA,p = ϵA,x, and ϵB,p = ϵB,x.Source: §3.1 · p. 8, Figure 3 · p. 9
3.2 Performance analysis
- Larger modulation variance increases the secret-key rate in both channel configurations, but gains become small at very large variance; the analysis therefore selects V_m = 100 N0.This choice is reported as providing optimal performance under practical conditions.Source: §3.2 · pp. 9–10, Figure 4 · p. 10
- In the symmetric case, the UD protocol achieves satisfactory maximum transmission distance compared with the symmetric Gaussian-modulated CV-MDI protocol.The comparison includes reconciliation efficiencies β = 0.96 and β = 0.98 and uses the PLOB bound as an ultimate repeaterless benchmark.Source: §3.2 · p. 10, Figure 4 · p. 10
- Across symmetric and asymmetric configurations, UD CV-MDI QKD has performance comparable to its Gaussian-modulated counterpart while simplifying implementation; asymmetric placement performs better than symmetric placement.The protocol is also reported to be especially sensitive to reverse-reconciliation efficiency in the asymmetric case.Source: §3.2 · pp. 10–11, Figure 5 · p. 11
4 Finite-size analysis in UD CV-MDI QKD protocol
The finite-size analysis estimates channel parameters conservatively and evaluates secret-key rates under symmetric and asymmetric conditions. Performance approaches the asymptotic case as block length increases and becomes robust for block lengths above 10^9.
Finite-size key rate
- The finite-size key-rate expression includes a privacy-amplification correction term, with N signals exchanged, n signals generating keys, and m = N − n signals used for parameter estimation.The failure probability and smoothing parameter can conservatively be set to 10^-10.Source: §4 · p. 12
Parameter estimation
- Finite-size estimation focuses on transmission and excess noise, using confidence intervals from maximum-likelihood estimates of correlated Gaussian linear-model parameters.The analysis selects lower transmission and higher excess noise to minimize the secret-key rate.Source: §4 · pp. 12–13
Finite-size effects
- Finite-size effects significantly reduce performance for small exchanged-data blocks, while the secret-key rate gradually approaches the asymptotic case as block length increases.The generated key uses half of the total block length, with the remaining signals used for parameter estimation.Source: §4 · pp. 12, 14, 15
- Block lengths larger than 10^9 make the UD CV-MDI QKD scheme robust against finite-size effects in both symmetric and asymmetric configurations.The simulations use the conservative lower-transmission and higher-excess-noise estimates within confidence intervals.Source: §4 · pp. 12, 15
- In both symmetric and asymmetric finite-size curves, the secret-key rates remain strictly below the PLOB bound.The PLOB bound is plotted as the repeaterless quantum-communication limit.Source: §4 · p. 15, Figure 8 · p. 15
Symmetric case
- The symmetric finite-size analysis varies block lengths from 10^6 to 10^9 and infinity at modulation variance V_m = 100, β = 0.98, and excess noise ϵA,x = ϵB,x = 0.002.The quantum-channel loss is 0.2 dB/km, and the PLOB bound is included for comparison.Source: Figure 8 · p. 15
5 Conclusion
The paper introduces a CV-MDI QKD protocol using Gaussian modulation of a single coherent-state quadrature, reducing implementation complexity while retaining comparable performance to symmetric modulation. Its simulations also show robustness to finite-size effects for sufficiently large blocks.
5 Conclusion
- The proposed UD CV-MDI QKD scheme uses single-quadrature Gaussian modulation and reduces implementation complexity by allowing more standard devices.The unmodulated quadrature is also shown to remain physical.Source: §5 · p. 15
- The protocol is robust to finite-size effects when the exchanged block length exceeds 10^9.This conclusion follows the finite-size simulations under practical conditions.Source: §5 · p. 15, Figure 9 · p. 16
- Compared with the original symmetric Gaussian-modulation protocol, UD CV-MDI QKD achieves comparable secret-key rates with considerable system simplification.The conclusion reports this comparison under accessible parameters.Source: §5 · pp. 15–16