Tell me more ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.
up vote 2 down vote favorite

As its well known that QKD systems are prone to simple MITM attacks, Any idea what authentication techniques are being used in QKD to prevent them in practice

share|improve this question
2  
If you have a shared secret, you can use universal hashing. – CodesInChaos Oct 20 '12 at 16:29
yeah I was just reading about this , are there practical implementations of universal hashing ? – sashank Oct 20 '12 at 17:15
1  
GMAC and Poly1305 – CodesInChaos Oct 20 '12 at 17:23

1 Answer

up vote 3 down vote accepted

The standard answer in the research literature is to use information-theoretically secure message authentication codes, typically universal hashing (aka Carter-Wegman authenticators). Of course, you could use computationally-secure message authentication codes, like CMAC or HMAC, if you wanted, though that would partly defeat one of the reasons for using QKD.

That said, in practice QKD is a bit silly. QKD solves a problem that most people don't have, so it is basically a fancy useless toy (albeit a very expensive one). If you're considering using QKD in some practical deployment, my advice is: skip the QKD, and just use a TLS or IPSec VPN. There, I saved you $50,000; don't spend it all in one place!

share|improve this answer
D.W , Yes agree very much with you, am kinda working on a write up , "QKD Is cryptographic baloney" , so was getting as much info as possible to support. – sashank Oct 22 '12 at 14:38
1  
@sashank: perhaps read this related answer of mine. – fgrieu Oct 29 '12 at 11:19

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.