Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

I have a question which is related to the BB84 cryptosystem.

We are not able to send single photons so instead we send $K$ photons at a time all with the same polarization. An enemy can separate one of these from the remaining $K-1$.

If the enemy can detect the polarisation by only looking at one of the photons, the others may remain undisturbed and so the enemy will not be detected - is this correct?

Why can the enemy find our common key if $K=3$?

share|improve this question
add comment

1 Answer

up vote 2 down vote accepted

What you are describing is known as the Photon Number Splitting Attack (PNS), described for the first time (I think) by Brassard, Lütkenhaus, Mor ans Sanders in this 1999 paper. Several countermeasures have been invented since (single photon sources, robust protocols, decoy states), but detailing them would stray away from of your question.

If one sends 2 or more photons, the enemy can store this photon in a quantum memory, and make the polarization measurement after the basis choice have been revealed. The enemy then knows whether to measure in the rectilinear or diagonal basis, and has all the information shared by Alice and Bob.

In 2001, Scarani, Acín, Ribordy and Gisin proposed a protocol (SARG04 pdf, wiki) which is robust against PNS attacks while using the same physical modulation than BB84. This protocol works by exchanging classical information which is more ambiguous than the basis. However, as soon as $K\ge3$ and the losses are over 50%, this protocol is subject to an unambiguous discrimination attack.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.