Electronics Guide

BB84 Protocol

The BB84 protocol, developed by Charles Bennett and Gilles Brassard in 1984, was the first quantum key distribution (QKD) scheme. The sender (Alice) transmits single photons encoded in one of two randomly chosen bases: rectilinear (horizontal or vertical polarization) or diagonal (45- and 135-degree polarization). The receiver (Bob) measures each photon using a randomly chosen basis.

After transmission, Alice and Bob publicly compare their basis choices without revealing the actual bit values. They keep only the bits where they happened to choose the same basis, discarding the rest; because the bases are chosen independently and at random, roughly half the detected bits survive this sifting step. By sacrificing a portion of the sifted bits to estimate the quantum bit error rate, they can detect eavesdropping. High error rates indicate interception, while low rates permit the pair to continue.

Sifting alone does not produce a usable key. Two classical post-processing stages follow: error correction (information reconciliation) removes the residual discrepancies between Alice's and Bob's bit strings, and privacy amplification compresses the reconciled string with a randomly chosen hash function, shrinking any partial information an eavesdropper may hold to a negligible amount. The measured error rate determines how much compression is required, and above a threshold no secure key can be extracted at all.

E91 Protocol

Artur Ekert's E91 protocol uses entangled photon pairs to establish secure keys. A source generates pairs of photons in an entangled state and sends one photon to each party. Both parties measure their photons using randomly chosen measurement angles. The quantum correlations between entangled photons enable key generation while also providing security verification.

The security of E91 rests on Bell's theorem: any eavesdropper attempting to gain information about the key must disturb the quantum correlations in ways detectable through Bell inequality violations. Because the argument appeals to observed correlations rather than to a trusted description of the hardware, E91 anticipated the device-independent approach formalized by later work. Entanglement-based QKD also has a practical advantage over prepare-and-measure schemes: the source may sit between the two parties, or even be operated by an untrusted third party, since no secret is stored in it.

Continuous-Variable QKD

Continuous-variable QKD encodes information in the continuous properties of light, such as the amplitude and phase quadratures of coherent states. Rather than detecting single photons, CV-QKD uses homodyne or heterodyne detection with standard telecommunications photodetectors. This approach enables higher key rates over shorter distances and compatibility with existing fiber infrastructure.

The security of CV-QKD relies on the quantum uncertainty principle: precise measurement of one quadrature introduces uncertainty in the conjugate quadrature. Protocols such as GG02 (Gaussian-modulated coherent states) provide practical implementations with proven security against collective attacks.

Decoy-State Protocols

Practical QKD implementations often use attenuated laser pulses rather than true single photons. Because the photon number of such a pulse follows a Poisson distribution, a fraction of pulses contain two or more photons, and an eavesdropper can siphon off the extra photons undetected in a photon-number-splitting attack. Decoy-state protocols address this by randomly varying the intensity of transmitted pulses among a signal level and one or more decoy levels. Comparing the detection rates observed at each intensity lets Alice and Bob bound the yield and error rate of the single-photon component specifically, recovering a secure key rate close to what a true single-photon source would give. Decoy states are now standard in essentially every fielded QKD system.

Measurement-Device-Independent and Twin-Field QKD

Detectors have historically been the most attacked component of QKD systems. Measurement-device-independent QKD (MDI-QKD) removes that attack surface entirely. Both Alice and Bob prepare states and send them to an untrusted middle node, which performs a Bell state measurement and announces the outcome publicly. Because the announcement alone reveals nothing about the key, the middle node and its detectors may be operated by the adversary without compromising security. MDI-QKD closes every detector side channel by construction, at the cost of requiring interference between photons from two independent, well-matched lasers.

Twin-field QKD (TF-QKD) extends this arrangement to defeat the distance limit. Rather than interfering two photons, the middle node interferes the optical fields from the two parties and detects single photons, so the key rate scales with the square root of the channel transmittance instead of linearly with it. This scaling allows TF-QKD to surpass the repeaterless secret key capacity, the fundamental bound on how much key any point-to-point protocol can extract from a lossy channel without intermediate quantum nodes. TF-QKD is the basis for the longest fiber QKD demonstrations to date: in 2023 a Chinese group distributed key over 1,002 kilometers of ultralow-loss fiber with no trusted or quantum relay, though at an extremely low rate of roughly 0.0034 bits per second. The price of TF-QKD is demanding phase stabilization, since the two remote lasers must be held in a common phase reference across the entire link.

The Authenticated Classical Channel

Every QKD protocol requires a classical channel that is authenticated, though it need not be confidential. Without authentication, an adversary can simply impersonate each party to the other and run a man-in-the-middle attack on the basis reconciliation and error correction traffic, defeating the protocol regardless of the quantum layer's integrity. Authentication must therefore be bootstrapped from a pre-shared secret or from classical public-key signatures, and a small portion of each generated key is retained to authenticate the next session.

This dependency is often overlooked. QKD does not eliminate the need for classical cryptography; it replaces the key agreement step while still relying on classical primitives for authentication and for the symmetric cipher that ultimately encrypts the traffic. Information-theoretic security end to end therefore requires an information-theoretically secure authentication scheme, such as Wegman-Carter authentication with a pre-shared key.

The Distance Challenge

Optical fiber and atmospheric transmission channels absorb and scatter photons exponentially with distance. At typical telecom wavelengths, fiber attenuation of roughly 0.2 dB/km means that the surviving photon flux falls by a factor of ten every 50 kilometers. Unlike classical signals, quantum signals cannot be amplified without destroying their quantum properties, as the no-cloning theorem forbids copying unknown quantum states. Erbium-doped fiber amplifiers and other classical repeaters are therefore unavailable.

The consequence is a hard ceiling on point-to-point performance. Conventional prepare-and-measure QKD such as decoy-state BB84 sustains useful key rates over roughly 100 to 200 kilometers of fiber in practice, beyond which detector dark counts overwhelm the signal. The underlying limit is information-theoretic rather than merely technical: the secret key capacity of a lossy channel falls off linearly with transmittance, so no repeaterless protocol can escape the exponential decay with distance. Twin-field QKD evades this particular bound by its square-root scaling, and satellite links evade it by routing around the fiber, but extending arbitrary quantum states over continental distances at useful rates ultimately requires quantum repeaters.

Quantum Repeater Architecture

Quantum repeaters overcome distance limitations through entanglement swapping and quantum error correction. The communication channel is divided into segments, with quantum memories at each node storing entangled states. Through entanglement swapping operations, short-range entanglement is extended across multiple segments to create long-distance entangled pairs.

First-generation repeaters use probabilistic entanglement generation and purification, requiring quantum memories to hold states while multiple attempts succeed. Second-generation designs incorporate quantum error correction to improve efficiency. Third-generation repeaters aim for fault-tolerant operation with encoded logical qubits, enabling deterministic long-distance entanglement distribution.

Quantum Memory Technologies

Quantum memories store quantum states for later retrieval, essential for synchronizing probabilistic operations in quantum repeaters. Technologies include atomic ensembles using electromagnetically induced transparency, nitrogen-vacancy centers in diamond, rare-earth ion-doped crystals, and trapped ions. Key metrics include storage time, efficiency, fidelity, bandwidth, and wavelength compatibility with telecommunications infrastructure.

Entanglement Purification

Imperfect channels and operations degrade entanglement quality. Entanglement purification protocols combine multiple low-fidelity entangled pairs to produce fewer pairs with higher fidelity. Through local operations and classical communication, parties can distill high-quality entanglement from noisy resources, essential for reliable quantum communication over long distances.

Teleportation Principles

Quantum teleportation transfers an unknown quantum state from one location to another using entanglement and classical communication. The sender performs a joint measurement on the state to be teleported and their half of an entangled pair, then communicates the measurement result classically. The receiver applies a corresponding operation to their entangled particle, recreating the original state.

Importantly, teleportation does not violate the no-cloning theorem: the original state is destroyed during the sender's measurement. It also does not enable faster-than-light communication, as the classical message is essential for completing the protocol. Teleportation provides a primitive for quantum communication, enabling state transfer without direct quantum channel transmission.

Implementation Technologies

Photonic teleportation uses entangled photon pairs and Bell state measurements. Linear optical implementations are inherently probabilistic, succeeding at most 50% of the time without ancillary resources. Matter-based systems using trapped ions or superconducting qubits can achieve deterministic teleportation within local systems. Hybrid approaches teleport states between different physical systems.

Long-Distance Teleportation

Extending teleportation to long distances requires distributing entanglement across the channel. Ground-based demonstrations have achieved teleportation over roughly 100 kilometers through optical fiber and free-space links. Space-based experiments using China's Micius satellite have demonstrated ground-to-satellite teleportation through an uplink channel over distances up to 1,400 kilometers, teleporting single-photon qubits from a ground station in Ngari, Tibet, to the satellite at an altitude of about 500 kilometers with an average fidelity of roughly 0.80.

Network Topology

The quantum internet will comprise quantum nodes connected by quantum channels, overlaid on classical network infrastructure. End nodes include quantum computers, sensors, and secure communication terminals. Intermediate nodes provide quantum repeater functionality for long-distance entanglement. Network architecture must support routing of entanglement, resource allocation, and integration with classical networking protocols.

Protocol Stack

Quantum network protocols span multiple layers analogous to classical networking. The physical layer handles photon transmission and detection. The link layer manages entanglement generation between adjacent nodes. The network layer routes entanglement across multiple hops. The transport layer provides end-to-end entanglement with quality guarantees. Application layers support QKD, distributed quantum computing, and quantum sensing applications.

Stages of Development

The quantum internet is evolving through stages of increasing capability. Current networks support prepare-and-measure QKD. Near-term developments will enable entanglement distribution between nodes. Quantum memory integration will allow entanglement storage. Full quantum repeaters will extend range. Eventually, a fault-tolerant quantum internet will support arbitrary quantum operations between any connected nodes, enabling distributed quantum computing.

Hybrid Classical-Quantum Networks

Practical quantum networks will integrate closely with classical infrastructure. Classical channels carry synchronization signals, measurement results, and protocol coordination. Wavelength-division multiplexing can share fiber between quantum and classical signals. Network management, routing decisions, and security protocols require classical computation, making hybrid architectures essential for practical deployment.

Entanglement Sources

Reliable entanglement sources are fundamental to quantum networks. Spontaneous parametric down-conversion in nonlinear crystals generates photon pairs entangled in polarization, time-energy, or spatial modes. Quantum dots and atomic systems can produce entangled photons deterministically. Source metrics include pair generation rate, entanglement fidelity, photon indistinguishability, and wavelength compatibility.

Distribution Channels

Optical fiber provides a natural channel for photon transmission but introduces loss and polarization mode dispersion. Free-space channels avoid fiber losses for satellite links but require precise pointing and are affected by atmospheric turbulence. Wavelength conversion interfaces connect different spectral regions, enabling optimal wavelengths for sources, channels, and detectors.

Network Entanglement Management

Managing entanglement as a network resource requires new protocols for generation, storage, routing, and consumption. Entanglement must be generated, stored, and delivered to applications on demand. Resource allocation algorithms must balance competing requests while accounting for decoherence. Entanglement fidelity tracking ensures quality of service for applications with different requirements.

Quantum Randomness Sources

Quantum random number generators (QRNGs) produce true randomness derived from quantum measurements rather than algorithmic pseudo-randomness. Sources include photon detection timing, vacuum fluctuations, radioactive decay, and spin measurements. Unlike classical random number generators, QRNGs produce output that is fundamentally unpredictable, not merely computationally unpredictable.

Device-Independent Randomness

Device-independent QRNGs certify randomness without trusting the internal operation of the devices. By testing Bell inequality violations, users can verify that outputs are genuinely random regardless of device construction. This provides the highest security guarantee, though at the cost of lower generation rates and more complex implementations.

Applications and Standards

QRNGs provide randomness for cryptographic key generation, scientific simulations, gaming, and statistical sampling. Commercial QRNGs are available as standalone devices, PCIe cards, and integrated modules. Standards for QRNG certification and testing are being developed by organizations including NIST and the European Telecommunications Standards Institute.

Signature Principles

Quantum digital signatures (QDS) provide message authentication with information-theoretic security, unlike classical digital signatures that rely on computational assumptions. QDS protocols distribute quantum states that enable recipients to verify message authenticity while preventing forgery or repudiation. Multiple recipients can independently verify signatures without the ability to forge them.

Protocol Implementations

Early QDS protocols required quantum memory, limiting practicality. Modern protocols use phase-encoded coherent states or similar prepare-and-measure schemes compatible with QKD technology. The sender distributes signature states to recipients, who later use these to verify signed messages. Security analysis must account for multiple potentially colluding recipients.

Integration with Classical Systems

QDS complements classical signature schemes in hybrid security architectures. For documents requiring long-term security guarantees, quantum signatures provide protection against future quantum computer attacks. Integration requires protocols for signature distribution, verification, and interoperability with existing document and transaction systems.

Secret Sharing Concepts

Quantum secret sharing distributes a secret among multiple parties such that only authorized subsets can reconstruct it. In a (k, n) threshold scheme, any k of n parties can recover the secret, but fewer than k parties gain no information. Quantum implementations use entangled states, with different parties holding components of a larger entangled system.

Applications in Distributed Systems

Quantum secret sharing enables secure distributed storage, where data remains protected even if some storage nodes are compromised. In distributed quantum computing, secret sharing protects sensitive inputs while allowing collaborative computation. Multi-party quantum protocols for voting, auction, and contract verification build on secret sharing primitives.

Implementation Considerations

Practical quantum secret sharing requires efficient entanglement distribution to all parties and high-fidelity measurements. Graph state approaches provide flexible access structures beyond simple thresholds. Verifiable secret sharing adds protocols for parties to confirm they received valid shares, protecting against malicious dealers.

Trust Assumptions

Standard QKD protocols assume trusted, correctly functioning equipment that matches the mathematical model used in the security proof. Device-independent protocols remove this assumption, certifying security based only on observed measurement statistics. Even if devices are manufactured by adversaries or contain hidden functionality, security can be guaranteed through Bell test violations. This provides the strongest available security foundation, subject to a residual set of assumptions: the parties' laboratories must not leak information, and their random inputs must be free.

Bell Tests and Security

Device-independent security relies on Bell inequality violations that are only possible with genuine quantum entanglement. No classical hidden-variable theory can reproduce quantum correlations, so observing these correlations certifies the quantum nature of the devices. Security proofs connect Bell violation magnitude to the amount of secure key that can be extracted.

Implementation Challenges

Device-independent protocols require closing experimental loopholes that might allow classical explanations of apparent Bell violations. The detection loophole requires high detection efficiency, since discarding undetected events lets a classical model fake the correlations; the locality loophole requires space-like separation of the two measurements. Loophole-free Bell tests were first achieved in 2015, and the first complete device-independent QKD demonstrations followed in 2022. One used two trapped-ion qubits linked by optical fiber, extracting roughly 95,000 key bits with device-independent security from about 1.5 million entangled pairs generated over eight hours; another entangled two single rubidium atoms in buildings 400 meters apart.

These results establish feasibility rather than practicality. Device-independent key rates remain orders of magnitude below device-dependent alternatives, and the required detection efficiencies are difficult to sustain over deployable distances. Measurement-device-independent QKD occupies a useful middle ground, discarding only the assumption of trusted detectors while retaining trusted sources, and it achieves rates and distances compatible with real fiber networks today.

Free-Space Quantum Channels

Satellite links overcome the distance limitations of fiber-based QKD by transmitting through the atmosphere and space. Above the dense lower atmosphere, free-space loss scales only as distance squared (beam diffraction) rather than exponentially. This enables quantum communication over thousands of kilometers, connecting continents and enabling global quantum networks.

Micius Satellite Achievements

China's Micius satellite, launched in August 2016 into a roughly 500-kilometer Sun-synchronous orbit, demonstrated the first practical satellite quantum communication capabilities. These include decoy-state satellite-to-ground QKD over distances up to about 1,200 kilometers; distribution of polarization-entangled photon pairs to two ground stations separated by 1,203 kilometers, with a Bell inequality violation of roughly 2.37 observed under strict Einstein locality conditions; and ground-to-satellite teleportation over an uplink of up to 1,400 kilometers, teleporting single-photon qubits with an average fidelity of about 0.80.

The satellite was also used as a trusted relay to establish an intercontinental quantum-secured video link between Beijing and Vienna, spanning roughly 7,600 kilometers. That demonstration depended on trusting the satellite itself. A later experiment closed that gap, using satellite-distributed entanglement to perform QKD between two ground stations 1,120 kilometers apart without trusting the relay, which remains one of the strongest demonstrations that physics-based security can survive at continental scale. Collectively these experiments established the feasibility of global quantum networks, though Micius is a single satellite in low Earth orbit and provides only brief nighttime passes over any given pair of stations.

Technical Challenges

Satellite quantum communication faces challenges including atmospheric turbulence, precise pointing requirements, background light rejection, satellite-ground synchronization, and limited observation windows. Adaptive optics compensate for atmospheric distortion. Single-photon detectors must discriminate faint quantum signals from background counts. Daylight operation requires narrow spectral filtering and spatial mode selection.

Future Satellite Networks

Multiple nations and organizations are developing quantum satellite capabilities. Constellations of quantum-enabled satellites could provide continuous global coverage. Integration with ground-based quantum networks will create hybrid systems with both terrestrial and space segments. Intersatellite quantum links may eventually enable direct space-based entanglement distribution without ground involvement.

Single-Photon Sources

Ideal QKD requires sources emitting exactly one photon per pulse. Practical sources include attenuated lasers with decoy-state protocols, spontaneous parametric down-conversion with heralding, quantum dots, and color centers. Source characteristics including wavelength, emission rate, photon purity, and indistinguishability affect system performance. Fiber-compatible telecom wavelengths (1310 nm, 1550 nm) minimize transmission loss.

Single-Photon Detectors

Detecting individual photons requires highly sensitive detectors. Avalanche photodiodes operate in Geiger mode, generating macroscopic signals from single photons. Superconducting nanowire detectors offer higher efficiency and lower timing jitter but require cryogenic cooling. Detector characteristics including efficiency, dark count rate, timing resolution, and dead time directly impact QKD key rates and maximum distances.

Quantum State Preparation and Measurement

Encoding quantum information requires precise control of photon properties. Polarization encoding uses wave plates and polarizers. Phase encoding modulates relative phases between time bins or path modes using interferometers. Measurement apparatus must distinguish between encoding states with high fidelity. Active stabilization systems maintain alignment against environmental drift.

Classical Control Electronics

QKD systems require sophisticated classical electronics for timing, synchronization, and data processing. Precise clock distribution coordinates transmitter and receiver operations. Fast random number generators select encoding bases. Time-tagging electronics record detection events. Classical post-processing computes error rates, performs error correction, and extracts secure keys.

Security Proofs

QKD security proofs establish conditions under which protocols are secure against arbitrary attacks. Proofs must account for finite-key effects in practical implementations, device imperfections, and various attack models. Security claims range from unconditional security against any quantum attack to practical security against known attack strategies.

Side-Channel Attacks

Real QKD devices may leak information through unintended side channels. Attacks have exploited detector efficiency mismatches, timing correlations, trojan horse vulnerabilities, and laser seeding attacks. Countermeasures include measurement-device-independent protocols, monitoring of device parameters, and careful engineering to eliminate information leakage.

Certification and Standards

Certification frameworks verify that QKD implementations meet security claims. The gap they must close is the one between the abstract protocol, which is provably secure, and the physical device, which is not the protocol. ETSI's Industry Specification Group on QKD publishes group specifications covering components, interfaces, and the characterization of optical sources and detectors. The ITU-T Y.3800 series defines QKD network architectures and their integration with classical telecommunications networks. ISO/IEC 23837 specifies security requirements and evaluation methods for QKD, providing a basis for Common Criteria evaluation of commercial equipment. Ongoing work addresses interoperability between vendors, repeatable test procedures, and the treatment of QKD key material by conventional key management systems.

Practical Limitations and Institutional Skepticism

QKD's theoretical guarantees have not translated into broad institutional endorsement, and an accurate picture of the technology requires stating the objections plainly. The United States National Security Agency does not support the use of QKD to protect National Security Systems and does not anticipate certifying QKD products for that purpose unless its limitations are overcome. The United Kingdom's National Cyber Security Centre reaches a similar conclusion. Both agencies instead direct users to standardized post-quantum algorithms; the NSA's CNSA 2.0 suite specifies ML-KEM and ML-DSA and contains no QKD component.

The stated objections are concrete rather than theoretical. QKD solves only key agreement, leaving authentication to classical cryptography, so it does not remove the classical trust dependency it is often credited with removing. It requires dedicated optical fiber or line-of-sight links and special-purpose hardware, which cannot be deployed as a software update the way post-quantum algorithms can. Range limits force most practical networks onto trusted-relay architectures that forfeit the end-to-end guarantee. The security proofs describe idealized devices, so real equipment remains exposed to side-channel attacks and requires costly validation. Finally, because an eavesdropper's presence halts key generation, QKD links are inherently vulnerable to denial of service.

Proponents respond that QKD's security rests on physical law rather than on unproven assumptions about mathematical hardness, and that it protects against harvest-now-decrypt-later attacks in a way no computational scheme can fully guarantee. The practical conclusion for most system designers is that the two technologies are complementary rather than competing: post-quantum cryptography is the general-purpose answer for migrating existing infrastructure, while QKD suits a narrow class of high-value, fixed, point-to-point links where the physical infrastructure already exists and long-term confidentiality outweighs cost.

Metropolitan QKD Networks

QKD networks operate in several cities worldwide, including Beijing, Shanghai, Tokyo, Vienna, and Geneva. China's backbone link between Beijing and Shanghai spans roughly 2,000 kilometers through dozens of relay stations, and has been operated together with the Micius satellite as an integrated space-to-ground network. In Europe, the EuroQCI initiative aims to build a member-state quantum communication infrastructure combining terrestrial fiber with a space segment.

These networks almost universally use trusted-node architectures. Because no deployed quantum repeater yet exists, an intermediate node terminates the quantum link on each side, holds both keys in the clear, and relays the key material by encrypting one under the other. The end-to-end security therefore depends on the physical and procedural security of every relay along the path, not on physics alone. This is the single most important caveat when evaluating claims about operational QKD networks: a trusted-relay network offers information-theoretic security on each hop, but the operator of any node can read the key. Key management systems distribute the resulting quantum-generated keys to classical encryptors at the network endpoints.

Financial and Government Applications

Banks, financial institutions, and government agencies have deployed QKD to protect high-value communications. Applications include securing interbank transactions, protecting classified government communications, and safeguarding critical infrastructure. The long-term security guarantee of QKD protects against future cryptanalytic advances and quantum computing threats.

Commercial QKD Systems

Commercial vendors offer QKD systems for point-to-point and network deployments. Products include compact modules for data center integration, rack-mounted systems for telecommunications, and turnkey network solutions. Key rates depend strongly on distance: megabit-per-second rates are achievable over short metropolitan spans, falling to kilobits per second at 50 to 100 kilometers and to a trickle beyond that. Because the quantum layer supplies keys rather than carrying payload, systems expose a standardized key delivery interface to classical encryptors, which then protect line-rate traffic with a symmetric cipher such as AES. Deployments increasingly multiplex the quantum channel onto fiber already carrying classical traffic, though Raman scattering from the classical channels raises the noise floor and constrains the achievable reach.

Integration with Quantum Computing

The quantum internet will connect quantum computers for distributed quantum computing. Blind quantum computation allows clients to perform computations on remote quantum servers without revealing algorithms or data. Quantum secure direct communication transmits messages rather than keys. These capabilities will emerge as quantum repeaters enable high-fidelity entanglement distribution.

Chip-Scale Integration

Integrated photonic circuits promise compact, low-cost quantum communication systems. Silicon photonics and other platforms integrate sources, modulators, filters, and detectors on single chips. Chip-scale devices will enable widespread deployment in data centers, mobile devices, and IoT applications, democratizing access to quantum security.

Standardization and Interoperability

Mature quantum communication infrastructure requires comprehensive standards for protocols, interfaces, and certification. Efforts by ETSI, ITU, IEEE, and national standardization bodies are defining requirements for commercial deployment. Interoperability between vendors will enable competitive markets and prevent technology lock-in.