Slashdot Mirror


First Bank Transfer via Quantum Cryptography

An anonymous reader writes with today's announcement that "the Austrian project for Quantum Cryptography made the world's first Bank Transfer via Quantum Cryptography Based on Entangled Photons; see also Einstein-Podolski-Rosen Paradoxon." (For more background, see the recent Slashdot post "Quantum Cryptography Leaving the Lab.")

310 comments

  1. Unexpected Consequences by etLux · · Score: 5, Funny

    Yes, but... what will I now need to decode my bank statements?

    1. Re:Unexpected Consequences by Oxy+the+moron · · Score: 2, Funny

      Yes, but... what will I now need to decode my bank statements?

      You are able to decode them now??

      --

      Proudly supporting the Libertarian Party.

    2. Re:Unexpected Consequences by Albin42 · · Score: 1

      This you could call a real challenge to break =)
      something else than our small project...

    3. Re:Unexpected Consequences by etLux · · Score: 0



      Yes.

      But only 50% of the time.

    4. Re:Unexpected Consequences by Chiasmus_ · · Score: 2, Funny

      Yes.
      But only 50% of the time.


      Oh, well then this is simple.

      In the future, your process for decoding your bank statements will work 50% of the time, but of course observing whether your bank statement has been decoded (by you) will completely undermine the decoding process.

      Therefore, you will receive your bank statements in the mail, and you can leave them unopened and mathematically consider them 50% decoded.

      --
      "Beware he who would deny you access to information, for in his heart he deems himself your master."
    5. Re:Unexpected Consequences by turnstyle · · Score: 3, Funny
      "Yes, but... what will I now need to decode my bank statements?"

      Easy! The Quantum Improbability Engine.

      --
      Here's what I do: Bitty Browser & Andromeda
    6. Re:Unexpected Consequences by mattyrobinson69 · · Score: 1

      if they look anything like mine:

      the following line means you have 3.14 balance
      balance 3.14

      the following line means you haven't got enough in the bank for interest:
      in 0.00

      the following line means you didn't have enough money to draw out a tenner at the cash point:
      out 0.00

  2. But... by DonServo · · Score: 5, Funny

    Wouldn't checking if the transfer went through alter your balance? :-P

    1. Re:But... by Anonymous Coward · · Score: 5, Funny

      I looked in my account and found out my cat was dead.

      You know the two-slit experiment? Well, its just like that
      -- standard explanation for weird quantum things when you don't know the right answer.

    2. Re:But... by etLux · · Score: 0



      No.

      But your bank would have a 50-50 chance of declaring you dead.

    3. Re:But... by blincoln · · Score: 5, Interesting

      You know the two-slit experiment? Well, its just like that
      -- standard explanation for weird quantum things when you don't know the right answer.

      I was just reading about that last night in The Elegant Universe.

      For those who haven't heard of it before, here's the experiment:

      - take a wall with light shining on it from a projector.

      - place a board in-between the wall and the projector that interrupts the beam of light. The board should have two vertical slits cut in it, which can be opened and closed independently of each other.

      If you open just the left one, you get a vertical bar of light on the wall.

      If you open just the right one, you also get a vertical bar of light on the wall, offset from the one that was there with the left one open.

      Now, intuitively you would think that if you opened both at once, you would just get two vertical bars of light, but you don't. Wave interference means you get a whole bunch of light and dark vertical bars on the wall.

      Here's the spooky quantum-mechanical part - the same interference effect happens even if the projector is designed to only emit one photon at a time, then wait until it has hit the wall (or the board) before sending another. You will still get the bands of dark and light.

      Pretty weird, eh?

      --
      "...always new atoms but always doing the same dance, remembering what the dance was yesterday." -Richard Feynman
    4. Re:But... by nessus42 · · Score: 3, Interesting
      Here's the spooky quantum-mechanical part - the same interference effect happens even if the projector is designed to only emit one photon at a time, then wait until it has hit the wall (or the board) before sending another. You will still get the bands of dark and light.
      What's even spookier is that the experiment turns out the same if you replace the photons with sodium molecules!

      |>oug

    5. Re:But... by freeJustin · · Score: 1

      Dont you belive in fate!? each of those protons has a predefined target.

    6. Re:But... by bfg9000 · · Score: 3, Funny

      Sounds like a glitch in the Matrix.

      --

      I'm not normally an irrational zealous dickhead, but I figure "When in Rome..."

    7. Re:But... by Anonymous Coward · · Score: 1, Informative

      It's only weird if you think that photons are individual physical things which move from the projector to the wall.

      Since there is no evidence that this is the case and there is plenty of evidence that light is a wave propogated through a medium (reference this very experiment which also works with any other kind of wave) you can see how this would not be weird at all.

    8. Re:But... by RickHunter · · Score: 1

      So tell me, then... What's the medium?

    9. Re:But... by lightray · · Score: 4, Informative

      Have you actually tried it?

      When I first read about the double slit experiment, I said to myself, "That can't be!"

      I cut two slits into a piece of cardboard and directed a flashlight beam through the slits at a wall.

      And I observed exactly what one would expect, two diffuse bright spots. I said, "Hmph."

      Of course, when I learned a little more, it was obvious why this didn't work. In order to see the interference pattern, your light must be coherent and columnated (as from a laser), and your slits must be very close together, and narrow (with dimensions similar to the wavelength of light). You pretty much need to use a laser as your light source, and rather than a "board" with slits, a sheet of metal with two very thin slits cut into it, very close together.

      Something I found very fascinating is that the diffraction pattern you get is the fourier transform of the pattern of slits the system of interference exactly implements the fourier transform integral!

    10. Re:But... by Anonymous Coward · · Score: 0

      We did this experiment at school. The slits had to be very close together, but from what I remeber, all you needed was a light source that only produced light at one wavelength.

    11. Re:But... by blincoln · · Score: 1

      It's only weird if you think that photons are individual physical things which move from the projector to the wall.

      Since there is no evidence that this is the case and there is plenty of evidence that light is a wave propogated through a medium (reference this very experiment which also works with any other kind of wave) you can see how this would not be weird at all.


      No, it's still weird.

      To have interference in a wave experiment like you describe (e.g. with waves in water), you need two waves to interfere with each other.

      The two-slit experiment shows that a single photon will act as though there's interference even when there isn't another one out there for it to interfere with.

      --
      "...always new atoms but always doing the same dance, remembering what the dance was yesterday." -Richard Feynman
    12. Re:But... by rsadelle · · Score: 1

      Miss Cleo.

      Oh, wait, you said what.

    13. Re:But... by Ckwop · · Score: 1

      In the olden days they used to candles with a mirror as to create a source of coherent light. The idea was that by using the reflection of the candle light together with the candle light itself you could have two sources of light that are pretty much in step to do experiments with.

      Of course a laser is superior.. but the effect should be quite easy to demonstrate even with such a crude mechanism.

      Simon.

    14. Re:But... by Wah · · Score: 1

      The two-slit experiment shows that a single photon will act as though there's interference even when there isn't another one out there for it to interfere with.

      Umm, when exactly is there 'not another one there to interfere with'? If something travels at the speed of light doesn't that, functionally, mean that it is everywhere at once? (at least relative to itself)

      Just a thought.

      --
      +&x
    15. Re:But... by Mikeydude750 · · Score: 0

      Or, it could mean that many different possible universes are temporarially interacting with each other?

      (That's how I understood it, anyway)

    16. Re:But... by Stewart+Pid · · Score: 1

      Yeah its exactly like that.....only different

    17. Re:But... by Knetzar · · Score: 1

      if something is everywhere at once it's speed in infinate. The speed of light is finite.

    18. Re:But... by Anonymous Coward · · Score: 0

      Are you very young or did you actually not do this in school? Physics without the double slit experiment wouldn't be very fun. What's left? Mechanics?

    19. Re:But... by maxwell+demon · · Score: 1

      Or even Buckyballs.

      --
      The Tao of math: The numbers you can count are not the real numbers.
    20. Re:But... by nessus42 · · Score: 1

      Has anyone done it with buckyballs? The MIT scientist who did it with sodium atoms claimed that it would work even for paramecium, if only he had graduate students patient enough to wait two years for each paramecium to travel down the vacuum tube at the slow velocity it would have to be going to have a big enough wavelength.

      I think he was joking, of course. But you never know....

      |>oug

    21. Re:But... by maxwell+demon · · Score: 1

      The buckyballs have been done at the institute of Anton Zeilinger in Vienna. Indeed, they could even tune between classical and quantum behaviour by changing their temperature (and therefore the decoherence rate).

      --
      The Tao of math: The numbers you can count are not the real numbers.
    22. Re:But... by mericet · · Score: 1
      Here's the spooky quantum-mechanical part - the same interference effect happens even if the projector is designed to only emit one photon at a time, then wait until it has hit the wall (or the board) before sending another. You will still get the bands of dark and light.

      Even better, try it with electrons, works best with a florescent surface. Electrons are usually regarded as particles rather than waves, but exhibit the same interference pattern. The probability of each electron to hit each point being equivalent to the brightness.

    23. Re:But... by nessus42 · · Score: 1

      Perhaps the MIT scientist wasn't joking about paramecium after all.... I just did a search on Zeilinger, and apparently he is planning on doing the two-slit experiment with viruses next!

      |>oug

    24. Re:But... by cazzazullu · · Score: 1
      You can do this experiment with other types of particles as well, hell, you can even trow cars through two garage-gates and still have this kind of effect (the wavelenght of a moving car is pretty small though so you will have to look REALLY VERY good to see the waves here ;).

      But seriously, this effect isn't really so strange when you get used to the different logic one uses in quantum mechanics towards "real" physical things around us. First of all, there is that famous Schrodinger-equation, an equation that describes a relation between the energy, position and time-evolution of stuff (I'm not going into detail here), but the important thing is that this equation only has solutions in the form of "waves". There has been a lot of discussion about what exactly these waves are, but the common consensus is that (the square of) these waves describe probability-distributions of particles. "But a particle is a physical thing, a point in concreto, not a wave"! Correct, but ONLY when it interacts with other particles (for instance hits a wall, bounces with a photon so you can see it, ...). As long as it doesn't interact with anything at all, it lives as a wave of probabilities. Only when another particle comes near this wave collapses and, according to its probability distribution, chooses an appropriate "real" physical state (as a point).

      Now, these waves can interact with themselves and thus cause these interference-effects described in the two-slit-experiment, just because the particles are waves AS LONG NOTHING HAPPENS in the mean while. When you put both slits open for instance, and you put a detector on each slit to see through which slit it went, the interference pattern disappears. The part of the probability wave that went through the other slit was destroyed (collapsed) by your detection (which requires interaction with at least one photon, electron, ...).

      But you probably need to work with this kind of things for a while before you start to think of this kind of logic as "logical" :)

      --
      int main(void) {while(1) fork(); return 0;}
    25. Re:But... by Wah · · Score: 1

      The speed of light is finite.

      Yes, when measured.

      if something is everywhere at once it's speed in infinate.

      It's my understanding that to accelerate some actual thing with mass, say like a person, to the speed of light, it would require the functional equivalent of all the energy in the Universe. If that were to be done, that thing would by the defintion of space-time be everywhere/when at once.

      I probably am tring to translate mathematical concepts that don't mesh with 'reality' here, but if 'I' was to observe a photon in it's 'natural' frame of reference, traveling alongside the photon, it would appear to be everywhere. Or at least that's my understanding (and no, I can't to the math).

      --
      +&x
    26. Re:But... by Asprin · · Score: 1


      Or even 1972 Toyota Corollas, but you need expend an extrordinary amount of energy getting their momentum large enough for the effect to be noticeable because (IIRC) the condition for diffraction is that the DeBroglie wavelength of the particle has to be the same order of magnitude as the slit spacing. If I did the calcs correctly (choosing round numbers), a 2000Kg Toyota moving at 10^6 m/s (1/3 speed of light) would require a slit spacing around 10^-45m, but it's been 10 years since grad school, so I might have messed up.

      See DeBroglie Wavelength.

      Here's a web calculator for calculating stuff about it.

      And here's a calculation with a pitched baseball, if you still don't believe me.

      --
      "Lawyers are for sucks."
      - Doug McKenzie
    27. Re:But... by Knetzar · · Score: 1

      "It's my understanding that to accelerate some actual thing with mass, say like a person, to the speed of light, it would require the functional equivalent of all the energy in the Universe"

      It would take more then that, all the energy in the Universe is finite, it would take infinate energy. Also, your assuming that photons have mass, and I'm pretty sure that they don't.

    28. Re:But... by Wah · · Score: 1

      It would take more then that, all the energy in the Universe is finite, it would take infinate energy.

      So that would be where the concept of infinite breaks down. Or maybe it's just that hard to accelerate matter. If this a math/astrophysics thing you are sure of, or is this just a general opinion?

      I was not assuming photons have mass, I'm assuming that an observer, traveling at a relative speed to the photon, would.

      --
      +&x
  3. Unfortunately... by Anonymous Coward · · Score: 5, Funny

    ...I can't observe my checking account balance without lowering it.

    1. Re:Unfortunately... by Brandybuck · · Score: 1, Funny

      It's called an account balance statement fee, and has nothing to do with quantum physics.

      --
      Don't blame me, I didn't vote for either of them!
    2. Re:Unfortunately... by Anonymous Coward · · Score: 0

      God, you suck. The parent joke wasn't very funny, but yours was just stupid.

    3. Re:Unfortunately... by HermanAB · · Score: 1

      That is Heissenberg's Uncertainty Principle of Banking...

      --
      Oh well, what the hell...
    4. Re:Unfortunately... by Frank+T.+Lofaro+Jr. · · Score: 2, Funny

      So you check your Wells Fargo balance by phone too I see? :)

      ($2 fee for phone banking)

      --
      Just because it CAN be done, doesn't mean it should!
  4. Quantum tracking number... by gevmage · · Score: 5, Funny

    So the transaction slip presumably says:

    Your transaction number has a 90% probability of being between 8765432 and 8765478.

    Have a 75% nice day.

    --
    Craig Steffen
    http://www.craigsteffen.net
    1. Re:Quantum tracking number... by nessus42 · · Score: 1
      Your transaction number has a 90% probability of being between 8765432 and 8765478.
      That's assuming the Copenhagen interpretation of quantum mechanics. Using the Many Worlds interpretation, your bank account will be in a superposition of these different values, and then when you go to check your bank balance, your brain in will in a superposition of being rich and being poor.

      I think that in the future fetching my money from the bank is going to give me a headache.

      |>oug
    2. Re:Quantum tracking number... by red+floyd · · Score: 1

      I want to only be in the world where I'm rich!

      Of course, according to Cramer's Transactional Interpretation, both of those are bogus. There is no superposition, no "collapse". The advanced reply wave reinforces the offer wave "instantaneously".

      --
      The only reason we have the rights we have is that people just like us died to gain those rights. -- Cheerio Boy
    3. Re:Quantum tracking number... by nessus42 · · Score: 1

      I haven't heard of Cramer's Interpretation before. What does it buy us that Bohm's doesn't?

      |>oug

    4. Re:Quantum tracking number... by red+floyd · · Score: 1

      You don't have the pilot wave. Cramer's Interpretetation is much like Wheeler/Feynman absorber theory. It takes advantage of the fact that there are two solutions to Schroedinger, the standard (retarded) and the advanced (time reversed) wave.

      --
      The only reason we have the rights we have is that people just like us died to gain those rights. -- Cheerio Boy
    5. Re:Quantum tracking number... by red+floyd · · Score: 1

      Sorry, didn't mean to hit submit yet.

      One of the advantages of the Transactional Interpretation is that it *CAN* explain the two-slit experiment, including the delayed-choice version.

      In Schroedingers Kittens and the Search For Reality, John Gribbin provides a good lay overview of the TI.

      --
      The only reason we have the rights we have is that people just like us died to gain those rights. -- Cheerio Boy
  5. Entangled Photons by Anonymous Coward · · Score: 0

    'Entangled' and 'money transfer' might become interesting when more than one person tries to do a money transfer at the same time...

    1. Re:Entangled Photons by Professr3 · · Score: 5, Funny
      Please be Bill Gates, please be Bill Gates, please be Bill Gates...

      When in doubt, mod +1 funny and pray

    2. Re:Entangled Photons by __aagctu1952 · · Score: 1
      Please be Bill Gates, please be Bill Gates, please be Bill Gates...

      I'm not so sure you'd want that...

      "So Mr Professr3, I see you have just transferred USD 500,000,000 to a bank account in the Bahamas. How would you like to start paying off your debt?"
    3. Re:Entangled Photons by Professr3 · · Score: 2, Funny

      Well, first I'd like to secure a small loan to fly to the Bahamas... and then I'll let you know :)

  6. Incredible by CosmicDreams · · Score: 1

    An acutal real world example! Excellent

    --
    Go Gusties
  7. Paradoxon is not a word by Anonymous Coward · · Score: 0

    That is all.

  8. My check bounced by Anonymous Coward · · Score: 5, Funny

    Due to Insufficient Cat.

    1. Re:My check bounced by Anonymous Coward · · Score: 2, Funny

      Did you look? Because that may have caused your problem.

    2. Re:My check bounced by njchick · · Score: 1

      Now bounced checks will interfere with each other.

  9. Due to the Heisenberg Uncertainty Principle... by gid13 · · Score: 4, Funny

    ... there has been a bank error in your favour. Collect $200. :)

    1. Re:Due to the Heisenberg Uncertainty Principle... by Anonymous Coward · · Score: 1, Funny

      I think THAT could only happen if their systems were powered by improbability drive...

  10. Proof of Concept by radoni · · Score: 4, Insightful

    ..but why do we need this?

    The biggest hole in security is usually the people operating technology. Ever want something, call up and ask for it.

    What does the ability to have uncrackable encryption do to thwart social engineering tactics?

    --
    SIGERR: laziness exceeds quota
    1. Re:Proof of Concept by cmdr_beeftaco · · Score: 1

      Right, that is why we must go after and attack all the evil-do'ers.

    2. Re:Proof of Concept by Albin42 · · Score: 1

      NONO, not the evil-do'ers. waste your cpu on this instead =)

    3. Re:Proof of Concept by onion2k · · Score: 5, Insightful

      Firstly, the security this sort of thing provides is at a different stage in the process to anything a social attack would work on, so the two concepts are unrelated.

      Secondly, even if they were related, you're appear to be suggesting we might as well not bother patching one future security hole because a different one also exists? Thats crazy. We should tackle all security risks, not just one particular one.

      Lastly, socially engineered attacks are most often people giving up a PIN or forging a signature. That affects one account per attack. If a cracker gets past the sort of stage that Quantum Cryptography protects they have the opportunity to automate and reap every transaction the bank carries out.

      Now which is the bigger problem?

    4. Re:Proof of Concept by Anonymous Coward · · Score: 2, Insightful

      I can't believe this got a +5.

      It's ridiculous reasoning.

      Should deadbolts not have been developed because most people break in through windows?

      Should we stop working on vaccines to deadly viruses just because most people die of heart disease or cancer?

      It's called progress. People work on improving their own peice of the puzzle and the whole system improves as a whole by the sum of the efforts.

    5. Re:Proof of Concept by Telastyn · · Score: 1

      It proves the problem is a social engineering problem. Right now, if a teller lets someone get $500, they can claim ignorance or 'evil haxx0rz did it!'.

      In the future, people can know it was the teller's fault, and levy consiquences.

    6. Re:Proof of Concept by lawpoop · · Score: 1

      Well, I think that all that the grand-parent is arguing is that quantum cryptography is increased security where we don't need it. One-way traps are good enough, and no-one forsees them being broken. Why do we need quantum-encrypted transactions? The money and effort is better spend developing procedures and technologies to prevent more pressing weaknesses, such as social engineering and insider fraud.

      --
      Computers are useless. They can only give you answers.
      -- Pablo Picasso
    7. Re:Proof of Concept by Anonymous Coward · · Score: 0

      socially engineered attacks are most often people giving up a PIN or forging a signature. That affects one account per attack. ... Now which is the bigger problem?

      I basically agree with your points. But in fairness, you must admit that just as a quantum cracker's goal would be to "reap all transactions", so would a social cracker's goal be to obtain the internal signature, password, etc. of an employee/insider with the power to reap all transactions.

    8. Re:Proof of Concept by JDBrechtel · · Score: 1

      Because while "one-way traps" are good enough, quantum cryptography is "better". Heard of progress? Yea, we started that new crazy idea a couple of years ago.

    9. Re:Proof of Concept by David+Hume · · Score: 2, Informative

      Firstly, the security this sort of thing provides is at a different stage in the process to anything a social attack would work on, so the two concepts are unrelated.


      The two different security issues are related in the way almost, if not all, issues are related. Time, money and resources. If you spend them in an effort to address one problem they can't be spent in an effort to address another.

      Secondly, even if they were related, you're appear to be suggesting we might as well not bother patching one future security hole because a different one also exists? Thats crazy. We should tackle all security risks, not just one particular one.


      Should we really attack all security risks at the same time when we have limited resources? To borrow an analogy from a post below, does it make sense to spend money to make an even better, super duper dead bolt when: (a) nobody has cracked, or is expected to crack, current dead bolts; and (b) there is not enough money to secure the window? I honestly don't know, what current or reasonably expected vulnerability is quantum cryptography designed to remedy? Are current systems too slow, or expected to become too slow in the future? Does it address a real problem?

      Lastly, socially engineered attacks are most often people giving up a PIN or forging a signature. That affects one account per attack. If a cracker gets past the sort of stage that Quantum Cryptography protects they have the opportunity to automate and reap every transaction the bank carries out.


      If true, this is a good point, but I'm not sure it is true. First, I'm not sure that there is any reasonable expectation that a cracker will get "past the sort of stage that Quantum Cryptography protects." I thought the consensus was that current systems, given a sufficiently large key, were for all practical purposes unbreakable. Secondly, while social engineering attacks may, in fact, "most often" involve "people giving up a PIN or forging a signature," resulting in a single loss, that is not necessarly true in all cases. One can readily imagine an employee being socially engineered into giving system wide acess to an "execute," "repairman," or "consultant."

      It may (or may not) be the case that the money would be better and more efficiently spent on training, education, etc. to prevent socially engineering attacks. But that wouldn't be cool.

    10. Re:Proof of Concept by __aaromg1353 · · Score: 1

      Isn't one of the key benefits of quantum crypto that there's no need for key exchange because of the entanglement?

      Thus, there's no key/password to ask for.

    11. Re:Proof of Concept by David+Hume · · Score: 1

      Should deadbolts not have been developed because most people break in through windows?


      Should we spend limited resources to improve deadbolts that are currently, and are expected to remain, unbreakable, when there are not sufficient resources to improve and adequately secure windows?

      Should we stop working on vaccines to deadly viruses just because most people die of heart disease or cancer?


      Should we continue to work on vaccines to deadly viruses if: (a) ten times as many people die of heart disease; and (b) spending the money on heart disease could reasonably be expected to save and improve the lives of at least five times as many people?

      It's called progress. People work on improving their own peice of the puzzle and the whole system improves as a whole by the sum of the efforts.


      It is called cost-benefit analysis. Given limited resources, people decide which investments of time, effort and money will provide the greatest returns.

    12. Re:Proof of Concept by onion2k · · Score: 2, Insightful

      Note that I did say "one future security hole". While the crypto we have know, with "a sufficiently large key", they *will* become trivial to break in the future. If (when) quantum computing becomes available to anyone with a decent bank roll then we'll need quantum crypto to remain secure. I don't think waiting until that time is a good idea. Getting a head start is.

    13. Re:Proof of Concept by David+Hume · · Score: 2, Interesting

      Note that I did say "one future security hole". While the crypto we have know, with "a sufficiently large key", they *will* become trivial to break in the future. If (when) quantum computing becomes available to anyone with a decent bank roll then we'll need quantum crypto to remain secure. I don't think waiting until that time is a good idea. Getting a head start is.


      Very good point. FWIW, I actually thought of this (really ;)... after I posted. You are right, one cannot afford to wait.

      But I also think I raised a valid point. One cannot do everything -- or at least everything well. Choices have to be made. Investment in quantum crptography may be a good choice, and perhaps a better one than investing in more training, education, etc. re: social attacks. However, I still suspect that one (not the only, perhaps not the most important, but one) reason for the investment in QC is that it is interesting. Spending money on paper shreders and training employees to use them, etc., is less than fascinating.

    14. Re:Proof of Concept by gumbi+west · · Score: 2, Insightful
      No, a social attack can work on a much higher level than this would work (think the master password to the accounts). Social attack is far and away the most serious security holes that anyone has.
      Secondly, even if they were related, you're appear to be suggesting we might as well not bother patching one future security hole because a different one also exists? Thats crazy. We should tackle all security risks, not just one particular one.
      No, the question is one of resource allocation. At present, there is no known (implementable for less than billions within 50 years) method of factoring these large prime numbers that are used to store the keys, so why spend money on this when you could actualy prevent a security hole. Your right, if money was ininite, all security holes should be worked on. As is, we should work on holes that have a possibility of causing a leak in the next 50 years.
      Lastly, socially engineered attacks are most often people giving up a PIN or forging a signature.
      It's not what is most common, it is what costs the bank the most after it happened. That is social engeneering.

      And finaly, you say it best.

      Now which is the bigger problem?
    15. Re:Proof of Concept by Anonymous Coward · · Score: 0

      Exactly. Once quantum computing becomes possible, current encryption is useless. It will be like putting your information in pig latin.

    16. Re:Proof of Concept by Mark+Hood · · Score: 1

      Yes and no - your argument isn't exactly right. You ask:
      Should deadbolts not have been developed because most people break in through windows?

      A better analogy would have been asking 'should I upgrade my deadbolts to tungsten carbide, drill-resistant ones, because no burgler will ever get through them' when your back door is made of 3/8" plywood and non-toughened glass.

      The bank to bank transfers are the strongest link of the chain - making them tougher is fine, but not at the expense of the weakest part. If there's a disgruntled employee who can be bribed to transfer 10m to the Bahamas for me, why should I try and crack the transfer and 'hijack' the cash?

      I know you were making a point that we each do what we can - but I'm worried QC will be hyped as a 'snake oil' solution to all 'cyber-crime' - when it won't be able to help at all.

      Mark

      --
      Liked this comment? Why not buy me something nice
    17. Re:Proof of Concept by Anonymous Coward · · Score: 0
      Thats crazy. We should tackle all security risks, not just one particular one.

      No, that's just plain silly. Money doesn't grow in trees; resources don't come free. It would be stupid to try to work on ALL areas; independent of whether one is focusing on security, or other similar things (from process point of view), like performance. You ALWAYS should focus more on weakest link(s), bottlenecks. If your dam has a leak, you say one definitely has to pour more concrete over the whole area of dam structure; not just plug in the leak and fortify that part?

      And what he was saying was that relatively speaking, technical measures are pretty damn impressively reliable already. Why shoot fish in the barrel? For quantum crypto to take over, it has to offer some other benefits, not just that theoretically it's "twice as secure" (10x. 100x, whatever) than "already practically unbreakable for foreseeable future".

    18. Re:Proof of Concept by eddeye · · Score: 1
      Secondly, even if they were related, you're appear to be suggesting we might as well not bother patching one future security hole because a different one also exists? Thats crazy. We should tackle all security risks, not just one particular one.

      What you say is true. The catch is that in this instance, quantum cryptography doesn't "fix" anything. Classical crypto is more than adequate for financial transactions; no one ever breaks the communications (as grandparent stated). QC offers no new security benefits, just a lot of "gee whiz" factor.

      I've said it before and I'll say it again: quantum crypto is useless. It's a solution looking for a problem.

      --
      Democracy is two wolves and a sheep voting on lunch.
    19. Re:Proof of Concept by Jim+Starx · · Score: 1
      Are current systems too slow, or expected to become too slow in the future?

      yes

      --
      The darkness... controls the music. The music... controls the soul.
    20. Re:Proof of Concept by Jim+Starx · · Score: 1
      At present, there is no known (implementable for less than billions within 50 years) method of factoring these large prime numbers that are used to store the keys, so why spend money on this when you could actualy prevent a security hole.

      Because someone could figure it out tomorrow.

      --
      The darkness... controls the music. The music... controls the soul.
    21. Re:Proof of Concept by Jim+Starx · · Score: 1

      That would be a good point..... except, it's not an either or thing. Social attacks are the most dangerous, yes. Do you the people that use QC have completely ignored that? I doubt it. What evidence do you have that they're not doing both?

      --
      The darkness... controls the music. The music... controls the soul.
    22. Re:Proof of Concept by gilgongo · · Score: 1

      > I thought the consensus was that current
      > systems, given a sufficiently large key, were
      > for all practical purposes unbreakable

      If we're talking about quantum encryption (which we are) then actuallly it *IS* completely impossible to break it (undetected) no matter how much computing power you have (even quantum computing power). Well, unless somebody finds a way to circumvent the laws of physics. So maybe the Supreme Being might be able to break it.

      --
      "And the meaning of words; when they cease to function; when will it start worrying you?"
    23. Re:Proof of Concept by gumbi+west · · Score: 1
      Yeah, but a bank could just use secure transfer of bulk encription keys, then with those keys they could transmit more keys.

      I guess my problem with this technology is that it is too expensive to be used by any but those with the most resources, but least necessary for them.

    24. Re:Proof of Concept by Jim+Starx · · Score: 1
      secure transfer of bulk encription keys, then with those keys they could transmit more keys

      Wow.... that is a really bad idea. The entire purpose of changing keys is that if one is cracked by some freak lucky guess it won't be usefull for long...

      I do see your point about the cost/usefullness. But this technology is still in it's infantcy. Just think of the first computers, as big as an entire room, god knows how expensive, and can't do any math more complicated then I can manage using an abacus. But things got better over time. Granted with computers they got better at a freakishly fast rate, and that probably won't be true with this technology, but with time I'm sure they will find more practical (cost effective) ways to implement it.

      --
      The darkness... controls the music. The music... controls the soul.
    25. Re:Proof of Concept by gumbi+west · · Score: 1
      Actually the reason you change keys is two fold. The less important reason is the one you state (it is almost imposible to guess a key). the more important reason is that the key give away information about itself with every bit you transfer past its length. I.e. perfect security is to transmit every 128 bits with their own 128 bit key. This is often not pratical, so the next best thing to do is to change keys often.

      To minimize probblems you could transmit (via trusted courier) once a month enough keys for several million per day (this would fit on a CD) and then just switch every hundred microseconds. The only advantage of the quantum criptography machine is that you don't have to trust a courier OR public/private key encription.

  11. You Q-bank Transfer by Anonymous Coward · · Score: 1, Funny

    Was for +/- $100i

    Thank you for your patronage.

    1. Re:You Q-bank Transfer by lpangelrob2 · · Score: 2, Funny

      The last time I tried to use imaginary money, the government had me arrested for fraud. Well, Uncle Sam, look at me now!

  12. Quantum Bank Transfers by Anonymous Coward · · Score: 0

    Presumably, opening an account with this bank will get one "shrodinger's cat" as a new account premium?

    1. Re:Quantum Bank Transfers by Anonymous Coward · · Score: 1, Funny

      I wouldn't be so certain of that.

    2. Re:quantum bank transfers by Anonymous Coward · · Score: 0

      When my really fat aunt does a quantum bank transfer around the house, she really does a quantum bank transfer AROUND THE HOUSE!

    3. Re:Quantum Bank Transfers by Anonymous Coward · · Score: 0

      It's uncertain whether it's certainly uncertain.
      Let's invade Iraq and find out.

  13. What about the fees by GuyinVA · · Score: 2, Funny

    Sure but would they still charge a fee for using "out of our network" ATMs?

    1. Re:What about the fees by Paulrothrock · · Score: 0, Offtopic

      No fees charged for using any ATM, and any fees charged by the owners of the ATM are refunded to me at the end of the month.

      I love my credit union.

      --
      I'm in the hole of the broadband donut.
  14. FACTUM: Paradoxon *IS* a word. by Anonymous Coward · · Score: 0

    N:T:

  15. trade ya by theMerovingian · · Score: 4, Funny


    I'll give you my entangled photons in exchange for chocolate.

    --
    "If you think you have things under control, you're not going fast enough." --Mario Andretti
  16. Dear Prestigious Journal by Letter · · Score: 3, Funny
    Dear Prestigious Journal,

    At the University concluded a study which finds quantum cryptography is a lot better than plain cryptography. Please FAX bank account via quantum cryptography to KWEISE MFUME at +34 79 345 8792 for full article.

    Looking forward to hearing,
    Letter

    1. Re:Dear Prestigious Journal by Anonymous Coward · · Score: 0

      Hysterical.

      I wonder how many people here know who Kwesi Mfume is?

      Freudian slip? Or just grab a name from the forefront of your brain?

  17. quantum bank transfers by jacquesm · · Score: 3, Funny

    are only good for small change...

  18. This just in by MajorDick · · Score: 2, Funny

    Man arrested in connection with bank transfer fraud, he reportedly stole 1.2 million dollars using a flashlight

    1. Re:This just in by forrestt · · Score: 1

      I can see it now, flashlights banned because they are now seen as tools used to rob people. Obviously if you own a flashlight, you are only interrested in using it to rob a bank.

  19. Complicated by nycsubway · · Score: 3, Funny

    Thats some damn complicated stuff, there! I hope the technicians who fix the ATM machine know about phuton criptography. I may know how to program with code, but damned if i know how futons work!

    1. Re:Complicated by Anonymous Coward · · Score: 5, Funny

      "I may know how to program with code, but damned if i know how futons work!"

      Simple: fold the futon up when you want to use it as a couch and then fold it back down when you want to use it as a bed.

    2. Re:Complicated by Anonymous Coward · · Score: 0

      "but damned if i know how futons work!"

      Pretty simple really. Normally they're an uncomfortable couch, but at night you can lower the backrest to allow for an uncomfortable bed instead.

    3. Re:Complicated by autopr0n · · Score: 0, Redundant

      but damned if i know how futons work!

      They're quite simple, really. Normaly you just lift up one end, and it converts from a couch to a bed, and push down and it changes again. Very convienent for dorm rooms, and that sort of thing.

      --
      autopr0n is like, down and stuff.
    4. Re:Complicated by nycsubway · · Score: 1

      I meant fotons! not futons.... woops!

    5. Re:Complicated by haystor · · Score: 1

      The proper technicians aren't hard to find. Haven't you ever heard of Quantum Mechanics? I'm sure they work on this stuff.

      --
      t
    6. Re:Complicated by AKAImBatman · · Score: 1

      Psst... I think you mean photons.

    7. Re:Complicated by InvaderSkooge · · Score: 1

      Just make sure you don't get entangled while doin it.

      --
      Erik
      YOU ARE SAYING IMPUDENCE TO ME! THAT IS IMPUDENCE!
    8. Re:Complicated by Amazing+Quantum+Man · · Score: 1

      Yeah, and we get union scale.

      From a slashdot sig: "Quantum Mechanics -- the dreams stuff is made of".

      --
      Fascism starts when the efficiency of the government becomes more important than the rights of the people.
  20. Bullshit again by Anonymous Coward · · Score: 0

    Once again, I point out that there is no such thing as quantum cryptography. It's a lie perpetuated by idiots and charlatans. All quantum "cryptography" systems require a conventional message authentication code. The whole system is no stronger than that MAC*.

    *Well, against a well-funded adversary. But then, Jim Bob's House of Cryptanalysis and Live Bait isn't going to try cracking the high-end security needs these systems are shilled for.

  21. Quantum Crypto Provably Flawed? by theLOUDroom · · Score: 5, Interesting

    I'm asking this question again because it came a bit to late to the last discussion I posted it in

    Is quantum crypto provably flawed?

    I've seen tons of blurbs stating the the link is "absolutely" secure, but it seems that isn't really the case. (see the bottom of the page.)

    What strikes me about all this is the following section:
    "each pulse should be attenuated to an average of about .1 photon to reduce the probability of generating a two-photon pulse that could be split and eavesdropped undetectably."


    What that says to me is that there is not way to 100% know you're transmitting just one photon.

    It sounds like there's no device that is capable of transmitting one and only one photon with 100% reliability. If this is the case, a lot of the arguments about how secure this is are vastly overstated.

    In the end QC would be vulnerable to a man-in-the-middle attack by watching for multi-photon emissions.

    If this is the case, a lot of the noise surrounding QC could turn out to be hype. (The big plus for quantum crypto is that it's supposedly immune to this.) Is there a quantum physicist in the house?

    --
    Life is too short to proofread.
    1. Re:Quantum Crypto Provably Flawed? by Anonymous Coward · · Score: 0

      I'm sorry, you're going to have to ask your questions on a board where someone actually knows what they are talking about. Here all you're going to get is conjecture and half-truths. Sad facts, but still facts.

    2. Re:Quantum Crypto Provably Flawed? by gunnk · · Score: 5, Interesting

      I think you're worried about something that happens, but isn't a useful eavesdropping technique. Suppose that you have a device for emitting single photons. Further suppose that the emitter accidentally emits two photons for a single bit 1% of the time.

      If an eavesdropper successfully split the extra photons off, they have successfully captured 1% of the data stream. First off, that's not much data if you want to reconstruct something meaningful in the way of information carried by the stream.

      Another problem, however, is the effect of the splitter on the rest of the stream. When a single photon passes the splitter, which path does it choose? If I'm not mistaken, that choice will be at random. If so, then the presence of the splitter becomes immediately detectable because half the single photon pulses never reach their destination. In fact, the number missing is likely to be so close to 50% that the presence of the splitter should be obvious to the bank.

      --
      Life is short: void the warranty.
    3. Re:Quantum Crypto Provably Flawed? by gr8_phk · · Score: 1
      IIRC they don't send anywhere near 1 photon. It's more like 100 photons and these can possibly be passed through one of those multiplier thingies. Obviously if you've got that kind of access to the fiber, you can perform a man-in-the-middle attack anyway. Just cut the cable and plug in some equipment like they use at the 2 ends. To each party you pretend to be the other party and just relay the messages. If key exchange is done over the wire, you perform that step for each of them. If a key is exchanged via another channel (say by floppy disk) then there is no need for the quantum crypto anyway.

      QC gets you nothing but an increase in complexity - which is helpful against most people, but probably not a big deal to those who can get access to the bank fiber.

    4. Re:Quantum Crypto Provably Flawed? by ruud · · Score: 1

      To each party you pretend to be the other party and just relay the messages.

      the whole point of quantum cryptography is that a man-in-the-middle attack like that is fundamentally impossible.

      --
      bgphints - internet routing news, hints and ti
    5. Re:Quantum Crypto Provably Flawed? by Short+Circuit · · Score: 1

      So keep an eye on the latency from one end of the pipe to the other. If it increases, you know you've got a man in the middle.

    6. Re:Quantum Crypto Provably Flawed? by Anonymous Coward · · Score: 0

      Yes, this has been known for a couple of year now. The attack is not a man-in-the-middle attack in the classical sense, the whole thing goes under the name of "Photon Number Splitting" attack.

      I will answer some other things which have been pointed out by others answering to this post.

      So, the first thing is that this is indeed possible. You can get information on all of the photons, this is not a problem. If the pulse is made by a signle photon, you just throw it away, if not, you just steal one withouth measuring the rest. All copies of the photons encode exactly the same state (say qubit). Now, of course there are two big assumptions: the first one is that there is some attenuation between the two parties, and the second one is that you have noiseless channels to both of the parties (which is quite infeasible). In this way, Bob would not be able to distinguish whether the attenuation is due to the channel or to the eavesdropper. The other thing is that this photon splitting can be done in theory, but I don't think there's a way to do it in practice.

      Some one pointed out that knowing 1% of the qubits isn't a problem. Well it would actually (at least in a theoretical sense), but here you have to notice that there some other purely information-theoretical features (in particular privacy amplification) which in fact wipe out all the adversary information if it is not complete.

      If you want to read something more about it, have look at quant-ph and search for photon number splitting attacks.

    7. Re:Quantum Crypto Provably Flawed? by Anonymous Coward · · Score: 0

      You can't do that without key interception. -1 wrong.

    8. Re:Quantum Crypto Provably Flawed? by gumbi+west · · Score: 1

      Right, but it looks like the detector has to be 100% efficient, otherwise, how do you know if you got a zero (no photon) or if the photons just got absorbed somewhere? As far as I know, there no 100% efficient counter (cooled PMTs can be close, but not that close).

    9. Re:Quantum Crypto Provably Flawed? by gumbi+west · · Score: 1

      I was suprised, but they generate only one photon per pulse. Otherwise, your right, it doesn't work.

    10. Re:Quantum Crypto Provably Flawed? by Chadders · · Score: 1
      In the end QC would be vulnerable to a man-in-the-middle attack by watching for multi-photon emissions.

      Not really, Quantum Cryptography has a nice side effect known as 'privacy amplification'. If you know that an eavesdropper has a chance, call it p, of successfully intercepting a small fraction of your qubits (which is always possible anyway with both the BB84 and BB92 protocols), you simply calculate and use the parity of blocks of n qubits as your key, the number of bits available to the eavesdropper then goes as p to the power n which means you get an exponential drop in the information available to an eavesdropper for only a linear reduction in channel capacity. So a well-designed quantum cryptography system could get around this limitation fairly easily.

      The way the multi-photon problem is dealt with in practice is to reduce the output of the photon source so the mean number of photons per packet is less than one, this means that the probablility of a packet emerging with two or more photons is below some managable threshold. The BB92 protocol is robust to empty packets, so this is ok (again at a loss of channel capacity).

    11. Re:Quantum Crypto Provably Flawed? by Anonymous Coward · · Score: 0

      Wrong. This attack isn't about snooping the photons as they go past, but cutting the fiber and putting a "crypto" machine on each end of the cut.

      All physics tells you is that you're talking to another quantum "cryptography" machine. The exchanged data has to be authenticated with a conventional message authentication code. The link is no more secure than that code. Anyone who says that quantum "cryptography" is unbreakable is an idiot or a liar.

    12. Re:Quantum Crypto Provably Flawed? by bruthasj · · Score: 1

      And even more interesting is that if you got *in* to the place that is generating these photons, you might as well just lift the equipment and everything in the office because you'd make more money with that than trying to sit there and crack the thing to get into bank accounts while Blow Joe security guard is running down the hall.

    13. Re:Quantum Crypto Provably Flawed? by nihilogos · · Score: 1
      If key exchange is done over the wire, you perform that step for each of them. If a key is exchanged via another channel (say by floppy disk) then there is no need for the quantum crypto anyway.

      You should read about the actual quantum key distribution protocol. The two parties do share an initial private key, but unlike any classical cryptographic protocol the encryption scheme is not
      • Exhaustible, as in the case of a one time pad or
      • Subject to extra assumptions for security, such as RSA which assumes the difficulty of factoring large numbers.

      So, there are two advantages the scheme has over conventional cryptography.

      QC gets you nothing but an increase in complexity

      This is akin to saying that quantum mechanics is an increase in complexity over classical physics, and is thus completely wrong.
      --
      :wq
    14. Re:Quantum Crypto Provably Flawed? by whig · · Score: 1

      Hypothetically, QC is provably secure. In practice, it is not.

      If it were possible for the sender to generate precisely one photon per bit, and for the receiver to precisely read the intensity, polarity, and time delay WITHOUT data loss, there is no way that a MITM attack can succeed.

      Otherwise we're relying upon statistical methods that are provably FLAWED.

      Conventional encryption such as DSA and AES are sufficiently safe for all practical purposes, and far less expensive/more convenient.

      --
      Peace and love, y'all
    15. Re:Quantum Crypto Provably Flawed? by piovere · · Score: 1

      In the event that two identical photons were generated, their wavefunctions would be linked. Hence, the man in the middle, upon observing his photon, would collapse the wavefunction of both his photon and the one that had continued interrupted. So, while the information could be compromised, the intended recipient would know about it.

      yay physics.

    16. Re:Quantum Crypto Provably Flawed? by jkantola · · Score: 1

      Is quantum crypto provably flawed?

      Doesn't matter. The point is, one day there will be quantum computers running Shor's algorithm to factorize all the siblings of Avogadro's number in the background when simultaenously determining your average happiness. That day RSA will fall, and quantum cryptography is the solution that lets people have at least the same level of security in the quantum computer era as RSA is providing now.

    17. Re:Quantum Crypto Provably Flawed? by gr8_phk · · Score: 1
      "the whole point of quantum cryptography is that a man-in-the-middle attack like that is fundamentally impossible."

      No, the whole point is that snooping the data is impossible without detection. There is no defense against a man-in-the-middle attack for any system. Suppose you're going to perform a transaction with your bank and I'm in the middle terminating YOUR fiber into my QC machine. I also have whatever conventional authentication key is required to mimic the bank. You complete a transaction and I relay the transaction to the bank by mimicing YOU (I have the conventional keys to do that too). Or perhaps I use 2 machines at the same time to decode/recode all traffic in real time. One poster pointed out that round-trip time might be able to detect this setup, but that has nothing to do with Quantum Cryptography. The security rests on the method used to verify who you're communicating with just as it does with any non-quantum channel. Of course if keys can be derived from snooping the data (like with WEP) then QC would be useful, but a better plan would be to change to a scheme where that's not possible.

  22. Gates' Account by LordHatrus · · Score: 0

    Gates Account, holding his several billion dollars, is the only account in this database to take up ALMOST 5 MICROMETERS OF SPACE!!!!
    ph33r teh $$$ !!!

  23. Heisenberger by jabbadabbadoo · · Score: 5, Funny
    According to Heisenberger, my money is going to be both here and there. And if I'm to check my balance, the result will be inaccurate because I'm checking it up.

    Nah, back to those good ol' electrons.

    1. Re:Heisenberger by Nuklearwanze · · Score: 4, Funny

      well you have to decide: either know where your money is, or how much it is...

    2. Re:Heisenberger by mikeboone · · Score: 3, Funny

      Mmmm...Heisen-burger.

    3. Re:Heisenberger by Anonymous Coward · · Score: 0

      you are a dumbass.

      1. "Heisenberg." Say it with me.

      2. Electrons exhibit wavelike properties as well. In fact, the concept of an electron as a discrete hunk of something is as obsolete as the Bohr model. An electron is a probability function describing a field of potential charge.

    4. Re:Heisenberger by Anonymous Coward · · Score: 0

      I hate to break it to you but those, "good 'ol electrons" you are going stick to, also follow the same Heisenberg uncertainty principle.

    5. Re:Heisenberger by jabbadabbadoo · · Score: 1

      Yeah, I know, but if I said that, I wouldn't be modded up to +5 Funny, now would I? That's for certain.

    6. Re:Heisenberger by Duty · · Score: 1

      I ordered one of those Heisenburgers once, but it disappeared when I tried to take the first bite.

  24. So... by Kenja · · Score: 3, Funny

    So then the money has been both transfered and not transfered? That sounds like an argument waiting to happen.

    --

    "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    1. Re:So... by Anonymous Coward · · Score: 0

      "63% of your money has been transferred, and 37% has not."

      Sounds like a bad excuse for packet loss. Or, a bad excuse for stealing.

  25. How does it defeat repeaters? by Thinkit4 · · Score: 3, Insightful

    What I don't understand is why can't you cut the line and put in something like a repeater. When you read a bit, you change that photon, but then you just transmit a clean one with the same value (or maybe even change it to confuse).

    --
    -I am an elective eunuch.
    1. Re:How does it defeat repeaters? by Anonymous Coward · · Score: 1, Interesting

      When the two photons are sent apart from eachother, heading in opposite directions, their properties are unknown. When you "read" the properties on one of the photons, the other one instantly takes on the opposite property. Since you'd be reading them before the time when they were actually supposed to arrive, you'd spoil the other half that you aren't messing with before they arrived, too.

    2. Re:How does it defeat repeaters? by einstein · · Score: 5, Informative

      because you wouldn't know which photons contain the data. as soon as you touch it, the other end knows it's datastream has been tampered with.

      This is a good overview.

    3. Re:How does it defeat repeaters? by saddino · · Score: 4, Informative

      In order to "read" the photon, you will need to measure the polarization of that photon. But, due to quantum mechanics, as soon as you measure the polarization (for example, with a filter), you will in effect have changed its polarization, and thus its original, actual polarization will be unknown to you. And that's the trick. In essence, the message is "read once." Even if you happen to use the exact same filter as the sender, and read the original photon (and message) for yourself, you can not retransmit the photon with its original, actual polarization -- and thus your "clean one" will arrive at the destination as garbage (thus notifying the receiver that the message has been compromised).

      For more info read this primer.

    4. Re:How does it defeat repeaters? by Amazing+Quantum+Man · · Score: 1

      In essence, the message is "read once."

      In related news, the RIAA announced it was investigating quantum encoding for audio tracks, rendering them uncopyable.

      --
      Fascism starts when the efficiency of the government becomes more important than the rights of the people.
    5. Re:How does it defeat repeaters? by Anonymous Coward · · Score: 0

      In the link you offered the text states, "Quantum cryptographic techniques provide no protection against the classic bucket brigade attack (also known as the "man-in-the-middle attack")."

      How is this different from what Thinkit4 was proposing?

    6. Re:How does it defeat repeaters? by realdpk · · Score: 1

      This may sound like a stupid question, but how long does it take for the second photon to take on the opposite property? Is it based on the distance between the two in space, or is it instantaneous (I think you can guess where I'm going here)?

    7. Re:How does it defeat repeaters? by Anonymous Coward · · Score: 0

      Yes, it's instantaneous, but no, you can't use it for faster-than-light communication. (You just get random noise at each end: there's no way to send an actual message.)

    8. Re:How does it defeat repeaters? by quantumpunk · · Score: 1

      The no-cloning theorem prevents this. Quantum copying machines do not exist. Google no-cloning theorem and read up on it.

      --
      All science is either physics or stamp collecting. Ernest Rutherford (1871-1937)
    9. Re:How does it defeat repeaters? by surprise_audit · · Score: 1
      In essence, the message is "read once."

      Any bets on the RIAA trying to capitalize on this?? I'm sure they'd love to sell tracks that could only be played once,,.

  26. Why bother? by Anonymous Coward · · Score: 0

    Are current encryption schemes crackable?

    1. Re:Why bother? by timealterer · · Score: 1

      As a rule, all systems, are always, always crackable. Always. If we're not pushing the envelope to replace the current technology, then when it's easily crackable, game over. I don't know how many people I've heard say AES 128 is "impossible" to bypass. Right, and 640k should be enough.

      --
      - Allen Pike
      Altering time, one time at a time.
    2. Re:Why bother? by orion41us · · Score: 1

      Most can be cracked, for example md5 and such hashing algorithms can be brut forced; while a public/private key scheamse are varnarable to the man-in-the-middle attack. WAP protocol has predictable keys i it's encription algorithm that show up every so often... There is yet to be an uncrackable encryption, and if there is I bet the NSA is doing all it can to prevent it from being implemented.

    3. Re:Why bother? by cardmagic · · Score: 2, Informative

      The Vernam cipher ( http://en.wikipedia.org/wiki/Vernam_cipher ) which is used to encrypt the data is PROVABLY not crackable. The quantum part is a PROVABLY secure key exchange. It has been proven that this system is uncrackable.

    4. Re:Why bother? by Jerk+City+Troll · · Score: 1
      Are current encryption schemes crackable?

      Yes.

    5. Re:Why bother? by cardmagic · · Score: 1

      The Vernam cipher ( http://en.wikipedia.org/wiki/Vernam_cipher ) which is used to encrypt the data is PROVABLY not crackable. The quantum part is a PROVABLY secure key exchange. It has been proven that this system is uncrackable. It doesn't matter how much computing power you have behind it.

    6. Re:Why bother? by cardmagic · · Score: 1

      No. All but the vernam cipher are theoretically crackable given enough computer power and time.

    7. Re:Why bother? by Jerk+City+Troll · · Score: 1
      All but the vernam cipher are theoretically crackable given enough computer power and time.

      I understand computationally secure cyphers versus a scheme like Vernam, but the pad can be guessed. Using a key once does not somehow make the encyphering irreversable by adversaries. I can, at least, make as many attempts guessing the pad as I like. Ultimately, all I have to know is how to identify spurious results (of course, I am not implying that this is somehow trivial). I think the question of "[is] encryption ... crackable" is correctly answered "yes", insofar as it is always possible to extract the cleartext. Granted that may take billions of years, but possible nevertheless.

      If an encryption scheme allows a message to be recovered, it can be cracked. Is it likely that good encryption will be cracked within a timeframe that the information is relevant or useful? No. Is it likely that messaged encyphered with a one-time pad will be cracked within the span of our universe? No.

    8. Re:Why bother? by cardmagic · · Score: 1

      Have you given encryption any thought? You do not understand ciphers like the Vernam cipher. Unless you know the key, the encrypted text is a completely random string of letters.

      Like: JKFGHFJGFKJGFDNVLKLAKKSLJJDGFKDJFHGJKHEHEIIOUO

      From a completely random string of letters, you can theoretically extract ANY plaintext in the world. That is why the Vernam cipher is uncrackable. Without the key, the message can not be recovered, you will never know when you actually got the right message. For example, playing with enough keys, you might decode the above message as:

      Decoded message 1: THE PASSWORD IS YUCK
      Decoded message 2: THE PASSWORD IS LEFT

      How would you know which of the decrypted messages was right? It could have been something completely different (like DINNER AT FIVE).

  27. snake oil by Kallahar · · Score: 4, Insightful

    Bruce Schneier covered why quantum cryptography doesn't solve any security/secrecy problems in his December 15, 2003 Crypto-Gram.

    "It's like defending yourself against an approaching attacker by putting a huge stake in the ground. It's useless to argue about whether the stake should be fifty feet tall or a hundred feet tall, because the attacker is going to go around it. Even quantum cryptography doesn't "solve" all of cryptography: the keys are exchanged with photons, but a conventional mathematical algorithm takes over for the actual encryption."

    1. Re:snake oil by cardmagic · · Score: 2, Interesting

      But the conventional mathematical algorithm that takes over the actual encryption is the only known unbreakable cypher known to man kind... http://en.wikipedia.org/wiki/Vernam_cipher

    2. Re:snake oil by quetzalc0atl · · Score: 1

      i dont believe that this argument is valid since what we are talking about is _quantum key management_, not quantum crypto. the crypto algorithms are still the same, it is just that keys can be transferred in a way that is guaranteed secure by our current understanding of the laws of physics. if you read the fine print, that is exactly what he is saying. the question is: so what? most of his argument is about one-up-manship. its like saying "hey theres no point locking your car, because someone can always use a slimjim to open it"...yeah yeah, we know, but we all try to lock our cars anyway.

      hey i like Schneier too, but he sometimes throws the baby out with the bathwater. just "because Bruce says so" doesnt really cut it anymore.

    3. Re:snake oil by Anonymous Coward · · Score: 0

      This doesn't cover too much. I see his point about "going around it", but note the rebuttal to this stmt above. And I certainly don't understand the second bit about a "conventional mathematical algorithm" (CMA). Check this out:

      "Even RSA doesn't `solve' all of cryptography: compared with ROT13, the substitutions are exchanged with modulo arithmetic, but a conventional mathematical algorithm still does the actual encryption."

      The CMA of quantum cryptography has provably secure properties that just DO NOT exist in the classic realm, just like RSA has sort-of-proven-but-accepted-by-concensus properties that ROT13 certainly doesn't.

    4. Re:snake oil by Kallahar · · Score: 1

      One time pad's are *not* secure. First of all, the transmission of the pad also has to be secure. Typically this would be done by an armored carrier, and hand delivered to the destination. Even then, you'd have to manually decode it to make sure that the key wasn't compromised in the computer. The second problem is that you can make any message turn into any other message by changing either the decryption pad.

      All of the AES finalists are secure, and they don't have a problem with transmitting the pad.

    5. Re:snake oil by cardmagic · · Score: 1

      The transmission of the pad IS secure because of the quantum key exchange... the laws of physics ensure that this exchange is secure. Quantum cryptography can tell you whether anyone even tried to compromise the key exchange.

      Quantum cryptography solves the transmission problem of the pad.

    6. Re:snake oil by Anonymous Coward · · Score: 0

      First of all, the transmission of the pad also has to be secure. Typically this would be done by an armored carrier, and hand delivered to the destination.

      Or... by Quantum Cryptography, which is what this article is all about.

    7. Re:snake oil by Ageless · · Score: 1

      This is the entire point of quantum crypto, which should actually be called quantum key exchange. Quantum crypto is used to transfer a perfectly random one time pad with no way for an attacker to see the pad. One time pads are provably 100% secure, it's just a matter of getting the key there. Quantum crypto solves the one time pad key transfer problem.

    8. Re:snake oil by ThisIsFred · · Score: 1

      Excellent point! Can someone produce some statistics as to the amount of fraud stemming directly from intercepted EFTs? (With particular emphasis on the cracking of crypto, or tapping of allegedly private, secure lines of communication). I'd venture to guess that outright robbery, fake ATMs, "identity theft", and check-washing are the preferred means by far.

      --
      Fred

      "A fool and his freedom are soon parted"
      -RMS
    9. Re:snake oil by Ararat · · Score: 1

      Doesn't it, like most classical security decisions, depend on the value of what is being transmitted and your threat environment? If the Allies had not cracked the German and Japanese codes in WWII, /. would probably be a German-language forum.

      The Nazis, apparently unable to conceive of a technology 2,000 faster than their electro-mechanical calculators, were probably no less confident of the security of their Ultra channel than we are today in RSApkc. (And no less susceptible to human flaws in implementation and execution, basic science be damned;-)

      QC is interesting because it might become critical for crypto key distribution if the math paradigms behind today's public key cryptosystems crumble before known or unknown threats, technical or mathematical (quantum computing among them). Unlikely in the near term, of course, but not at all impossible.

      The decade-long furor over the NSA's long reach through Echelon, which methodically vacuums the ether and sundry other transport mediums, highlights the fact that a only a small fraction of the world's communication is encrypted today, for reasons social, economic, and political. Which is not to say that the NSA, GCHQ, and all their sibling spook shops around the globe did not -- when confronted with the growth of serious crypto users -- reoriented the bulk of their research budgets to forcus on techniques to subvert the transmission end points, where resistance, if not futile, is rarely rigorous or consistent.

      Sure, few today are likely to jump to QC except as a curiosity -- but, ten years hence, who knows what need will exist in hearts of men?

      OTOH, it could also become something like Tempest, where a real risk of eavesdropping through emanations was exploded all out of proportion to the real-world threat, swallowing billions of dollars desperately needed elsewhere in the security mix.

  28. Asks teller what my mortgage 'principle' is... by openSoar · · Score: 1

    ... i'm not 'certain' - have you asked mr. heisenberg?

    1. Re:Asks teller what my mortgage 'principle' is... by ComputerSlicer23 · · Score: 1
      No, no, no.... That joke should be:

      "Well, I can tell you precisely what the princepal is, but the interest rate will be indeterminate; or I can tell you the interest rate, but then the princepal will be indeterminate.

      Sorry, I can't tell you how much you owe, or how long you have to pay.... It's a that pesky problem with uncertainty. Just keep paying double the monthly payment, I'm sure eventually that'll be enough. Your loan officer will call you to tell you to stop. I'm just sure of it sir."

      Kirby

  29. How Immediate is Immediate? by Esion+Modnar · · Score: 2, Interesting
    Quantum Key Distribution does not invoke the transport of the key, since it is created at the sender and receiver site immediately.

    Is this instantaneous? Wouldn't that violate the whole speed-o-light thing?

    --

    They say the first thing to go is your penis. Well, it's either that or your brain. I forget which...
    1. Re:How Immediate is Immediate? by mangu · · Score: 4, Informative
      Is this instantaneous? Wouldn't that violate the whole speed-o-light thing?


      Yes and no. (Well, we *are* talking quantum stuff here, aren't we?) Do a google for "bell inequality" and see if you can get anything from the results. Basically, the answer is , yes, it is instantaneous. And no, it doesn't violate the speed-of-light limitation because you cannot get any useful information transmitted that way. You see, there are two photons which are interlocked. The first photn came at the speed of light and it contains the information you are looking for. The second photon, which serves to validate the quantum key is redundant from the information point of view, it doesn't carry the bank account balance, it only serves to detect tampering in the system.

    2. Re:How Immediate is Immediate? by Anonymous Coward · · Score: 0

      According to this page, Quantum Key Distribution is a multi-step protocol which goes at the speed of the wires. It appears to be immune to eavesdropping, but not to a man-in-the-middle attack.

    3. Re:How Immediate is Immediate? by Anonymous Coward · · Score: 0

      It is instantaneous. Time moves at 299,792,458 m/s.

  30. Why MIM doesn't work by gevmage · · Score: 4, Insightful
    I've seen a few presentations/demos on this. Basically the idea is the transmission runs on probability. Each photon has a certain probability of being lost. So the receiving station knows what the general frequency that it can expect, and if its not, the signal is being tampered with.

    The reason that the man-in-the-middle attack doesn't work is that by doing so, you introduce two sets of attenuation rather than one. If the message is intercepted and then re-transmitted, the message has now been sent through the attenuation cycle twice. This means that instead of the signal being modified by the original attenuation function, it's modified by the attenuation function squared, which is easy to distinguish.

    --
    Craig Steffen
    http://www.craigsteffen.net
    1. Re:Why MIM doesn't work by theLOUDroom · · Score: 1

      If the message is intercepted and then re-transmitted, the message has now been sent through the attenuation cycle twice. This means that instead of the signal being modified by the original attenuation function, it's modified by the attenuation function squared, which is easy to distinguish.

      So it sounds like my assessment that you just CAN'T reliably send out single photons is right and quantum crypto is relying very heavily on statistics, whereas tradditional crypto relies on factoring, etc.

      This means that quantum crypto has some problems, although they are not necessarily insurmountable.

      Here's an example:
      Say you're trying to detect eavsedroppers via statistics, and I know you're doing this and I know what algorithm you're using. Say in this case, you're comparing the PDF of your recieved data to your expected result. You have to make a choice about how much data to use (the more samples you use, the longer I can intercept your stream before alarm bells go off) and what deviation from your expected PDF you'll accept (the smaller the window, the higher the likelihood of a false alarm). As a result I can try to beat your statistics.
      For instance, I could calulate that by intercepting your message for only N bits out of every M bits, I will have an X% chance of setting off your alarm.

      This is interesting because I've always heard quantum crypto described as "provably secure". This would not be the truth because there's no way for you to 100% know that a bit you're not getting is being recieved by me instead. And, there's a small chance that for every bit in the message, two photons are emitted, and you never found out about it because I recieved half of them.

      --
      Life is too short to proofread.
    2. Re:Why MIM doesn't work by hweimer · · Score: 1

      If the message is intercepted and then re-transmitted, the message has now been sent through the attenuation cycle twice. This means that instead of the signal being modified by the original attenuation function, it's modified by the attenuation function squared, which is easy to distinguish.

      The signal dampening function is an exponential function of the channel length. If Eve knows the distance to Alice and Bob, she can easily impersonate both by sending "noisy" photons to the other.

      According to their poster the project uses a pre-shared secret. This has the disadvantage of introducing a DoS attack in which Eve intercepts the communication based on the shared secret. Since the pre-shared secret has been used up, there is no way for Alice and Bob to set up the secure quantum channel.

      --
      OS Reviews: Free and Open Source Software
    3. Re:Why MIM doesn't work by Anonymous Coward · · Score: 0
      First of all, there is no "alarm" of any sort. Qubits are transmitted; on average, half of them will be wasted (because the receiver has to guess at which basis to read them in). It'll be a little bit more or less than half, but about half. If Eve is listening in a lot, then the amount of broken qubits will approach 100%. There is some point at which Alice and I will give up because we think the channel is too noisy (i.e., Eve has committed a DOS attack), which is no great victory for Eve, but does kind of suck.

      Once I've got the qubits, I phone up Alice on an insecure channel and we decide which qubits we think have been transferred successfully. If Eve is listening or if the channel is noisy, then sometimes we'll be wrong, but that's okay.

      So at this point we've cut our key approximately in half. Since we know that some of our bits are wrong (according to the noise in the channel), we use some super-keen classical algorithms to shrink our key further.

      At this stage, a very important thing happens. Say we now have an n-bit key that we are reasonably sure we share correctly. We now perform a hash. This means that unless Eve knows exactly every bit that we do, she knows nothing. Again, if Alice and I share a 1000-bit key, and Eve knows 900 bits of that key, she doesn't know much. Well, to be fair, she does know that our key is one of 2^100 possible keys (which is a lot!), but she doesn't know any contiguous region of our OTP.

      Alice and I now communicate over insecure channels via Vernam cipher. Yay.

      It is possible for Eve to learn our key, but it's highly unlikely. For each bit that Alice and I decide to keep (decided randomly, after the fact), Eve would have to choose the correct basis to measure it in every time. Where n is the length of the key, the possibility of of Eve knowing anything about the key is 1/(2^n), which is a very small number. If Eve decides to be a real bastard and just read everything, she's just going to DOS us.

      This would not be the truth because there's no way for you to 100% know that a bit you're not getting is being recieved by me instead.
      Classical cryptography is computationally secure. That means its security depends on certain tasks being considered "hard", such as discrete-log. If quantum computers ever get built on a reasonable scale, this assumption will be false, and may be proven false anyway.

      Quantum cryptography, rather, is considered "unconditionally secure", in that no matter what assumptions we make about the hardness of certain problems, it works just as well. Having all the supercomputers in the world does not help you break quantum cryptography any more than a fair coin does.

      It's true that QC is not absolutely secure. It would be an interesting thought experiment to think of whether any crypto is secure. Sure, Alice and I can go to bunker 50km under the surface of the Earth to share our one-time pad, but very minute vibrations from our meeting still reach the surface....

      Anyway, the nice thing about QC is that its security is completely configurable, divorced from any idea of how much computing power your opponent is. If (1 - 1/(2^n)) security isn't good enough for you, then just double the length of the key and suddenly you get (1 - 1/(2^(2n))) security.

      And, there's a small chance that for every bit in the message, two photons are emitted, and you never found out about it because I recieved half of them.
      Ya this is really an implementation issue. The algorithm works provided we have working hardware. Even if you can read half of our key without us knowing, it's not a huge deal (though obviously if that number got too high, it would be a huge deal). Preferrably, we'd like to know when you read our qubit every now and then so that we can throw it out. But again, even if you read 50% of our key (or 90% or 95% or ....), we can make it arbitrarily secure by increasing the key length.

    4. Re:Why MIM doesn't work by theLOUDroom · · Score: 1

      First of all, there is no "alarm" of any sort. Qubits are transmitted; on average, half of them will be wasted (because the receiver has to guess at which basis to read them in). It'll be a little bit more or less than half, but about half.

      Which is my point. The odds that it is exactly half are tiny, so you are going to be willing to tolerate a range of values.
      As long as I can get something of value without notcibly throwing off your average I'm all set.

      Ya this is really an implementation issue. The algorithm works provided we have working hardware.

      The "perfect implementation" may turn out to be fundamentally impossible.

      Even if you can read half of our key without us knowing, it's not a huge deal

      If I can read half your key it's a HUGE deal. That would mean that quantum crypto just plain sucks. Sure you can apply other security measures on top of quantum crypto to try and fix the problem, but I could apply a lot of those same measures to IP via avain carrier

      All you've done is sidestep my argument.

      Think about it this way:
      You and I are gambling on a coin toss. I do all the tossing and picking so I have the ability to rig a round with my double-headed coin. You want to be able to catch me if I rig a round. You tell me that you will be keeping a running average of the results and if things get too skewed, you're quitting. You give me the specfic number of rounds you will be averaging and how far away from the mean it can get before you'll cry foul.
      Using this information I can calculate the risk I'm taking by rigging any number of rounds. I can then choose to rig a number of rounds that leaves it likely that I can do my rigging, play the rest fair and still most likely fall withing you established limit.

      That's my point about quantum crypto being reliant on statistics. You can accept only a single possible result for, you need to allow a range of results. This leads to a vulnerability: You want to detect eavsdropping, that's kinda the whole point of quantum crypto. You want your probability of false alarm to be low (significantly less than 50%), so you need to accept a wide range of likely results. This means that there's going to be some amount of listenting in I can do where it will still be less than 50% likely that your alarm goes off.
      To me this appears to be a weak point in the concept.
      There are ways to combat this, but it seems that with QC, you're going to be forced to assume that you're handing over a certain number of your bits to the enemy.
      In order to ensure a good probability of detection for a "significant" amount of eavesdropping, you're you going be forced to assume that X number of bits are always being intercepted, since it will not be until X+1 bits are intercepted that you will hit your desired probability of detection.
      This then requires the design of a protocol where X bits can be intercepted, but it is still to hard to guess the message, so you start employing privacy amplification. While I'm not all that familiar with privacy amplification, I expect there are fundamental limits to it's effectiveness, just the same as in the fields of compression and error correction.

      But again, even if you read 50% of our key (or 90% or 95% or ....), we can make it arbitrarily secure by increasing the key length.

      Same thing with carrier pigeons......which is why I'm getting the impression that QC is overrated.

      --
      Life is too short to proofread.
  31. is this as big as I think? by meshko · · Score: 2, Interesting

    My knowledge of cryptography is limited to the entry level college course of which I remember quite little, and my knowledge of physics is as limited as it can be.
    To me this story is rather sensational -- I didn't realize that quantum crypto is that close to actually being used; it also seems to me that wide use of quantum crypto is going to revolutionalize the field.
    Can someone who knows a lot about this explain to the rest of us: is this "WOW!!!" or just "neat!"?

    --
    I passed the Turing test.
    1. Re:is this as big as I think? by Anonymous Coward · · Score: 0

      This is "WOW" for a few reasons.

      1) It's unbreakable. Truly unbreakable. The exception of course is key interception, but there's no way around that one.

      2) It's absolutely vital. It's the only form of cryptography currently known that will stand up to quantum computing. We need this before quantum computers hit, because they make anything we currently have encryption-wise other than one-time pads into toilet paper.

      3) It's completely nonsusceptible to man-in-the-middling.

      Reason for 1) See reason for 3. Basically, if you try the wrong combination, you make garbage out of the photons. As a result, you can't try every possible combination; you can only try one.

      Reason for 2) Current encryption works on the principle that it's difficult to factor large numbers made up of large primes. A quantum computer, rather than having to test one combination per processor cycle, can test them all at once and return the answer in a trivial amount of time.

      Reason for 3) If you sort the photons the wrong way, you get garbage. You also make garbage out of the photons. When the person at the other end receives either nothing or a jumble of random data, they're going to know something's up.

  32. Insightful? Hardly. by Andorion · · Score: 1

    This is a solution to a different problem. Inventing a more effective toothbrush won't get kids to brush their teeth either, but who cares?

    ~Berj

  33. Quick! by Anonymous Coward · · Score: 0

    Call the producers of Quantum Leap!!

  34. Unfortunately by Anonymous Coward · · Score: 1, Funny

    The more accurately you know how much money to send, the less you know about where to send the money.

    1. Re:Unfortunately by surprise_audit · · Score: 1

      A bit like the Heineken Uncertainty Principle - you can never be entirely sure how many beers you had last night...

  35. quantum jokes galore by TMB · · Score: 4, Funny

    Yeah, but filling out the slip for "1/sqrt(2) |deposit> - i/sqrt(2) |withdrawal>" is a pain, and thanks to the epoch of inflation my balance is now much smaller than the rest of the universe... luckily, even in an income vacuum my balance randomly jumps up, but only for REEEEAAALLLLYY short lengths of time. I've been hawking radiation for a while but everyone says it's just a two slit operation.

    Okay, I'm done now.

    [TMB]

    1. Re:quantum jokes galore by Hal-9001 · · Score: 1

      Conserve energy...commute with the Hamiltonian!

      --
      "It take 9 months to bear a child, no matter how many women you assign to the job."
  36. But don't delay cashing the check by njchick · · Score: 1

    Otherwise the money will go to other accounts due to tunnel effect.

  37. Quantum foam, take me home... by nova20 · · Score: 1
    has anyone read Michael Crichton's Timeline? Isn't it possible that my account balance will will transport itself to another multiverse?

    /nova20

    1. Re:Quantum foam, take me home... by surprise_audit · · Score: 1
      possible that my account balance will will transport itself to another multiverse?

      ...where it will be one of: a) extremely large; b) extremely small; c) a fish...

  38. The history of cryptography by Vlar · · Score: 3, Informative

    I remember reading a book all about the history of cryptography. It outlined the evolution of cryptograpy from simple albhabet substitutions to the concept of quantum cryptography. It shows all the pros and cons and weighs them against eachother.

    Excelent read for anyone interested in the field or just currious about it.

    ISBN: 0385495315

    1. Re:The history of cryptography by Vlar · · Score: 0

      Forgot to mention the information on the book other than ISBN.

      The Code Book
      by Simon Singh

  39. so if.... by presmike · · Score: 1

    the lights get turned off, where does all my money go?

    --
    presmike
  40. Entanglement by ztirffritz · · Score: 3, Interesting

    As I understand it (according to Bill Bryson's "A Short History of Nearly Everything") entangelment does in fact violate Einsteins theory. It says that two entangled photons at any distance apart from each other will react identically instantaneously. **Notice** Instantaneously! That is faster than the speed of light. Einstein did not believe that this was possible, but experiments have shown this to be true, at least as we understand it. The part that impresses me the most is that someone devised a logic experiment that could determine the results with near certainty without altering the results. An excellent source for more information is the book "Mind at Light Speed", I forget the author's name. "A Short History of Nearly Everything" is also a great book which covers so many topics that it made my head spin.

    --
    Why doesn't anything interesting happen when I have mod points?
    1. Re:Entanglement by Vengie · · Score: 1

      Wrong. When you have an EPR pair, you need to transfer CLASSICAL data (the ket that came from the first qbit) in order to make use of the quantum state of the other half of the pair. The classical data you transmit is still limited by th speed of light.

      Sorry, this is something that would be covered in first two weeks of any introductory course on quantum mechanics or quantum information theory.

      --
      When in doubt, parenthesize. At the very least it will let some poor schmuck bounce on the % key in vi. (Larry Wall)
    2. Re:Entanglement by Anonymous Coward · · Score: 0
      It says that two entangled photons at any distance apart from each other will react identically instantaneously. **Notice** Instantaneously!
      Nope. The photons need not react or change in any way. They just have to respond in a correlated way. (Share a "nonlocal hidden variable", in physics-speak.)
    3. Re:Entanglement by carlossch · · Score: 1
      Well, not really. The current interpretation of Einstein's general relativity theory is that information cannot travel FTL. So, in the case of the famous entanglement experiment, as though the entangled photons do change their state simultaneously, there is no way for information to travel from one photon to the other without another photon being emitted. Since photons travel at c, there's no violation.

      I don't have my quantum computing book nearby to fill out the details, but that's the main idea.

    4. Re:Entanglement by Anonymous Coward · · Score: 2, Insightful

      Lets say I make two boxes. I put one penny in one box, and I close them behind my back.

      Now, I give you one of the boxes. I walk Reallly far away, and you open your box. Now, if you see a penny in yours, you know mine doesn't have a penny. You know this immediately when you open your box.

      Does this somehow violate the speed of light? No.

    5. Re:Entanglement by Anonymous Coward · · Score: 0

      How do I know you didn't slip a penny into the other box too?

    6. Re:Entanglement by jkantola · · Score: 1


      mod this AC up.

  41. Entertaining but Not Useful by billstewart · · Score: 2, Insightful
    Quantum crypto is an entertaining concept for securing data on locations connected by a single dedicated piece of fiber, but from a cryptographical standpoint, it's not really very useful - you can already do uncrackable crypto at much lower costs, and quantum crypto still needs you to run reliable communication protocols. It's kind of like using an armored car service to carry your credit card receipt from the front of the restaurant to the office in the back next to the unlocked door - you get a really secure feeling about how strongly you've protected the strongest link in the chain, but it doesn't do anything to help the weakest link.

    So it's really about social-engineering potential customers.

    --

    Bill Stewart
    New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
  42. Man-in-the-middle by Thinkit4 · · Score: 1

    http://www.cs.dartmouth.edu/~jford/crypto.html shows what I was thinking of. Look to number 6. The key is pretending to be the other to both sender and reciever.

    --
    -I am an elective eunuch.
  43. Bank transfer? by Maljin+Jolt · · Score: 2, Funny

    first Bank Transfer via Quantum Cryptography Based on Entangled Photons

    I would expect transfering some data would be pretty ok, but they entangled and transfered a bank? Unbelievable. Did some bank office clerks survive their quantum encryption?

    --
    There you are, staring at me again.
  44. Uncrackable to date with current tech by Ra5pu7in · · Score: 1

    Incorrect. It has simply proven uncrackable to date with the current technology and understanding of the universe we have. (Makes me think of idiots who have never had a hacker crack their system, so they brag about their system being uncrackable and list their address. Suddenly, they've got cracks all over.)

    --
    I was taking one day at a time, but then several days got together and ambushed me. (from a Rhymes with Orange comic)
    1. Re:Uncrackable to date with current tech by kristoferkarlsson · · Score: 2, Informative

      Did you even read the contents of that link? One time pads are mathematically secure - this doesn't mean that one time pads can be implemented - but the theory behind it is completely sound. You can not crack a one time pad simply because every possible sentence of a given length could be produced by the same cryptotext and you have no idea which one it is.

      It's not a question of current technology at all. RTFL.

    2. Re:Uncrackable to date with current tech by freeJustin · · Score: 1

      Have you ever taken a math class? The proof uses simple induction and has nothing to do about technology. It is inpossible to crack, you are trying to say that with more powerful computers we will be able to brove that pi has an end, NO cause it was proven irrational. (starting your post with "Incorrect." makes you sound like a jackass)

  45. Hell, why wait? by InvaderSkooge · · Score: 1

    You can simulate this probabalistic balance behavior right now by getting married and getting a joint checking account.

    --
    Erik
    YOU ARE SAYING IMPUDENCE TO ME! THAT IS IMPUDENCE!
    1. Re:Hell, why wait? by jabbadabbadoo · · Score: 1
      "You can simulate this probabalistic balance behavior right now by getting married and getting a joint checking account."

      I tried that and observed what is called the "Heisenberger shopping principle". Whenever I checked the account, my wife appeared to be shopping at two or three stores at the same time.

      A true Heisen-bitch.

  46. a medical doctor / writer talking about physics by QEDog · · Score: 1

    Anyone that takes Crichton's Physics seriously should be transported to another multiverse

    --
    "There is no teacher but the enemy."-Mazer Rackham
  47. What Luck! by ObsessiveMathsFreak · · Score: 1

    19AA3 F5440 97529 89DA2 9C4C9 48E9D 96978 79E44 95968 4938D 8D828 C3B3A 8D8C8 C8984 86757 B7276 2F2E8 08574 57292 86A27 6E7B7 37170 57

    --
    May the Maths Be with you!
  48. An epic poem of Schroedinger's Cat by Cruciform · · Score: 0, Offtopic

    From The Straight Dope

    Schroedinger, Erwin! Professor of physics!
    Wrote daring equations! Confounded his critics!
    (Not bad, eh? Don't worry. This part of the verse
    Starts off pretty good, but it gets a lot worse.)
    Win saw that the theory that Newton'd invented
    By Einstein's discov'ries had been badly dented.
    What now? wailed his colleagues. Said Erwin, "Don't panic,
    No grease monkey I, but a quantum mechanic.
    Consider electrons. Now, these teeny articles
    Are sometimes like waves, and then sometimes like particles.
    If that's not confusing, the nuclear dance
    Of electrons and suchlike is governed by chance!
    No sweat, though--my theory permits us to judge
    Where some of 'em is and the rest of 'em was."
    Not everyone bought this. It threatened to wreck
    The comforting linkage of cause and effect.
    E'en Einstein had doubts, and so Schroedinger tried
    To tell him what quantum mechanics implied.
    Said Win to Al, "Brother, suppose we've a cat,
    And inside a tube we have put that cat at--
    Along with a solitaire deck and some Fritos,
    A bottle of Night Train, a couple mosquitoes
    (Or something else rhyming) and, oh, if you got 'em,
    One vial prussic acid, one decaying ottom
    Or atom--whatever--but when it emits,
    A trigger device blasts the vial into bits
    Which snuffs our poor kitty. The odds of this crime
    Are 50 to 50 per hour each time.
    The cylinder's sealed. The hour's passed away. Is
    Our pussy still purring--or pushing up daisies?
    Now, you'd say the cat either lives or it don't
    But quantum mechanics is stubborn and won't.
    Statistically speaking, the cat (goes the joke),
    Is half a cat breathing and half a cat croaked.
    To some this may seem a ridiculous split,
    But quantum mechanics must answer, "Tough @#&!
    We may not know much, but one thing's fo' sho':
    There's things in the cosmos that we cannot know.
    Shine light on electrons--you'll cause them to swerve.
    The act of observing disturbs the observed--
    Which ruins your test. But then if there's no testing
    To see if a particle's moving or resting
    Why try to conjecture? Pure useless endeavor!
    We know probability--certainty, never.'
    The effect of this notion? I very much fear
    'Twill make doubtful all things that were formerly clear.
    Till soon the cat doctors will say in reports,
    "We've just flipped a coin and we've learned he's a corpse."'
    So saith Herr Erwin. Quoth Albert, "You're nuts.
    God doesn't play dice with the universe, putz.
    I'll prove it!" he said, and the Lord knows he tried--
    In vain--until fin'ly he more or less died.
    Win spoke at the funeral: "Listen, dear friends,
    Sweet Al was my buddy. I must make amends.
    Though he doubted my theory, I'll say of this saint:
    Ten-to-one he's in heaven--but five bucks says he ain't."

    --CECIL ADAMS

    1. Re:An epic poem of Schroedinger's Cat by Cruciform · · Score: 1

      Jeez, do the mods even read?

  49. (not any less oily than others) by griffjon · · Score: 4, Insightful

    First, Schneier really loves his stake-in-the-ground idea. He used it to describe cryptography in general in his "Secrets and Lies" book (which, IMHO, doesn't hold a candle to the quality of his applied crypto books. In fact, it feels more like a book-long commercial for his managed security business)

    Anyway, sure. QC alone ain't gonna help you. But if it's a stake in a ground that's part of a fence, it damn well matters if it's 100 ft tall vs 1 ft tall, or even 10 ft tall.

    Does it 'solve' security problems? No, of course not, because as many many many people have already said, in this post and in many other places, the way to defeat the best crypto in the world is to look under a keyboard and copy down the relevant password/phrase that the user wrote on a sticky-note there. (or other social engineering tricks)

    It does make security easier, as it prevents MITM attacks, requires (for now) specialized hardware, and provides really-tough-to-decode crypto. So, if you have the rest of your process working, yes, QC can help by being a more secure technology.

    But think of the inverse. OK, so, crypto is like a stake in the ground, it doesn't matter what size or where it is. So, let's all use DES, because it's an established standard!

    You are only as secure as your weakest link, obviously. You'd be stupid if crypto turns out to be your weakest link, as even not counting QC, there's lots of good, secure crypto processes available.

    --
    Returned Peace Corps IT Volunteer
    1. Re:(not any less oily than others) by cardmagic · · Score: 1

      "... provides really-tough-to-decode crypto ..."

      Correction, it provides provably imposible to crack cryptography.

  50. It worked! by cachorro · · Score: 1

    The encryption works:

    > cat balance
    cat: cannot open balance

  51. Hype by dnoyeb · · Score: 3, Interesting

    After spending an hour in the wikepedia I have concluded that this is all just hype. Quantum Cryptography is still only theoretically encrypted. It has not been proven yet because quantum mechanics is not fully understood yet.

    Furthermore, this is really just a Quantum Key exchange. So tack on whatever protocol you wish to use once you have the key. Quantum encryption is something that would require quantum computing first.

    Also please note, the quantum transmission is not even "secure." Its just that if anyone but you reads it, you are secure in the knowledge that you will know about it.

    At least this is what I have understood. Still hype. Notwithstanding, as science this is probably an advancement. Its just not what its being marketed as.

    1. Re:Hype by Anonymous Coward · · Score: 3, Informative

      No, quantum cryptography is unbreakable as long as the key is secure. A single missorting permanently randomizes all missorted photons/whatever, and as such not only is it impossible to try to break it more than once, it's impossible to try to break it without the receiver knowing that something is up. Quantum computing isn't needed in the least.

    2. Re:Hype by janbjurstrom · · Score: 3, Insightful

      I came away with a different understanding of what they did (granted, I only read the press release, pdf link; and I have just about no knowledge in quantum mechanics, so chances are I don't get it right).

      From the press release (emphasis mine):

      The measuring results are then converted into a string of 0s and 1s the cryptographic key. The sequence of the numbers 0 and 1 is, due to the laws of quantum physics, completely random. Identical strings of random numbers, used as the key for encoding the information, are produced both in the bank and the City Hall.

      The information is encoded using the so-called "one time pad" procedures. Here, the key is as long as the message itself. The message is linked with the key bit by bit and then transferred via the glass fibre data channel.

      I read this as, they not only exchanged keys, but in fact transmitted an encrypted message as well(?)

      On the interception/security issue, the press release says (again, my emphasis):

      Eavesdropping can be detected already during the production of the key before the transfer of the encoded message has even started. Any intervention into the transfer of the photons changes the sequence of the number strings at the measuring stations. In case of eavesdropping, both partners receive an unequal sequence. By comparing part of the key, any eavesdropping effort can be discerned. Though the eavesdropper is able to prevent the transfer of the message, he is unable to gain any information contained in the message!

      From what I read, a message cannot be stolen. If I understand this correctly, communication can be prevented (which is a weakness of course), but cannot be intercepted and decrypted by an eavesdropper. Am I misunderstanding, and/or are they possibly mixing theory with their actual accomplishment?

      --
      668.5
    3. Re:Hype by dnoyeb · · Score: 1

      I read this as, they not only exchanged keys, but in fact transmitted an encrypted message as well(?)

      Yes, but only one of the two had anything to do with Quantim Mechanics. The "ordinary" key was exchanged using the Quantum technique. This "ordinary" key was used to encrypt/decrypt the message. Thus, the message was encrypted/decrypted in an ordinary fashion. Its the key exchange that was Quantum.

      Otherwise, generally you have the right idea.

      There statement "Entangled photon pairs enable absolutely secure transfer of information." is absolute bullshit. The message can be cracked without the key of course. Just takes a while. Note, this does not involve quantum computation.

    4. Re:Hype by Anonymous Coward · · Score: 1

      dnoyeb, you are correct insofar as Quantum Entanglement plays a critical part only in the "creation" and "secure transfer" of the key. Once both parties have the key, simple encryption is used, without any strange quantum business.

      But it is the encryption method itself that is unbreakable. If you could find some other secure way to create and transfer the key to the receiver, you wouldn't need Quantum Entanglement. All you need is the simple encryption algorithm which uses a key the size of the message as a one time pad, and it is is STILL UNBREAKABLE.

      For example, an alternative is to grab a stream of random 1s and 0s from nature and burn them onto a CD. Make a copy and give the copy to your friend "personally". As long as you both keep the CDs to yourselves you can encrypt and transfer messages over the Internet and nobody but the both of you can break them.

      Personally handing over the CD is one way to ensure that the key is not intercepted. I would say this method of transferring the key is secure, but impractical, and that is why perfect encryption was not popular until Quantum Entanglement came along.

    5. Re:Hype by maxwell+demon · · Score: 1

      With one key CD (say, of 700MB), you can only provably safely transmit exactly that amount of data per one-time pad. Because as soon as you reuse a part of the key, the eavesdropper could just do an xor of both messages using the same part of the key, and the result would be an xor of the two plaintext messages (since the key xors itself out). And I wouldn't bet on the safety of that "encryption".

      After all, there's a reason this is called one-time pad.

      --
      The Tao of math: The numbers you can count are not the real numbers.
    6. Re:Hype by meringuoid · · Score: 2, Insightful
      The message can be cracked without the key of course. Just takes a while.

      Not if the key is as long as, or longer than, the message. In that case there's no way to crack it by cryptanalysis - your only hope is in more cloak-and-dagger methods like having a spy at one end of the channel.

      As a practising geek I can suppose that you're familiar with ROT13. This is, of course, trivially cracked. An attacker knows in advance - because it is a USENET standard and has been for many years - that your key is 13 and can easily read your message.

      You might step up your security by switching to another key at random, but that's still easily cracked. Just try all 26 possibilities.

      Now perhaps you get a little clever. Suppose you pick a key of 14-22-8, or something like that. Then the first letter of your message is encoded with ROT14, the second with ROT22, the third with ROT8, the fourth with ROT14 again, and so on. That'll fox 'em!

      Unfortunately it won't. This cipher was considered secure for a long time, but with sufficient statistical analysis it can be broken, especially for short keys. A three-character key is particularly bad because it's very likely to encode 'the' to the same string several times over - and if the attacker sees a repeating string of three characters he'll surely try 'the' first.

      However, repeating patterns like this are less frequent as the key length approaches the message length. If the key is as long as the message then there's no way to crack it by analysis - sure, if their brute-force attack guesses the right key they'll read your message, but they'll also find the key that decrypts your message to a shopping list, or to a pornographic short story, or in fact to every possible message of that length. Assuming your key was truly random (which is a separate problem, but also solvable by quantum mechanics, which gives us randomness par excellence!), then they have no possible way of knowing which of this vast array of possible communications is the real one.

      The trouble with this is the old problem of key distribution. One solution is to meet in person, or use a trusted courier - then hand over a DVD full of keys and use those, one at a time, and never, ever reuse one. Here's the chance for your attacker: get hold of that disc and copy it! And that's what quantum crypto solves. You create the key, make it as long as you want, communicate it using the quantum connection. If it was compromised, you'll know about it and you won't use it - generate another one and try again (and send some security goons to check the line and try to catch the foolish spy who tried to listen in!) If it wasn't, you can be sure of its security and use it to transmit your _real_ message over classical channels.

      --
      Real Daleks don't climb stairs - they level the building.
    7. Re:Hype by julesh · · Score: 2, Informative

      Furthermore, this is really just a Quantum Key exchange. So tack on whatever protocol you wish to use once you have the key. Quantum encryption is something that would require quantum computing first.

      Also please note, the quantum transmission is not even "secure." Its just that if anyone but you reads it, you are secure in the knowledge that you will know about it.


      OK - here's what you missed. Its a two phase process. Yes, the clever part is the key exchange - you can exchange a key and know with certainty if it has been intercepted. You then use that information to determine whether or not to send the message encrypted using a traditional encryption algorithm (note that if your key is large enough, traditional encryption methods become truly unbreakable -- the 'one time pad' that is usually used as proof of this concept uses a key that is the same size as the message). If anybody know the key, you don't send the message. Thus, an eavesdropper cannot gain any useful information. After all, what use is knowing an encryption key that will never be used?

    8. Re:Hype by misterpies · · Score: 1

      Don't put any more faith in Wikipedia than you would put in /. as a source of info. They're mostly used by the same crowd!

      >>It has not been proven yet because quantum mechanics is not fully understood yet.

      I'd argue that quantum mechanics is as well understood (by physicists) as any physical theory. Aspects of it remain unclear - mostly how it interacts with gravity - but nothing which would affect the operation of quantum cryptography, which works on principles understood for 70 years.
      Your argument is akin to criticising a mathematical proof on the grounds that mathematics is not fully understood.

      >>Furthermore, this is really just a Quantum Key exchange. So tack on whatever protocol you wish to use once you have the key.

      Right. And the one-time pad used in QC is an unbreakable protocol. Thus if you have unbreakably secure key exchange, you can create an unbreakable system.

      >>Also please note, the quantum transmission is not even "secure." Its just that if anyone but you reads it, you are secure in the knowledge that you will know about it.

      Right, but think this through. As you say, QC is really just key exchange. No message is sent over the quantum channel - just the key. Once you have the key, you encrypt the message and transmit it publicly. If you discover that the key has been compromised, you don't send the message. Of course that means that a determined eavesdropper could prevent you from ever exchanging a secure key (and so stop you sending the message), but that's the trade off for being know how secure your key is. Any key exchange system can be compromised - the difference with QC is that it can't be compromised without you knowing.

      >>Its just not what its being marketed as.

      Again, you're right up to a point - but the problem is with the marketing, not the science. The point about QC is not that it is 100% secure. In reality, no system is 100% secure. The great advance of QC is that it allows you to place an accurate lower bound on how secure your encryption is--as part of the key exchange, you can tell with precision the proportion of the key that might have been compromised. This is in stark contrast with other cryptography schemes, where you rely on the inherent difficulty of the scheme to crack but can never tell if it has been cracked or not.

      The more secure you want the system to be, the longer you're going to have to spend on key exchange. In practice, 100% security would need an infinitely long time to generate the key. But you're never going to need 100% security. Say you achieve 99% - that means the eavesdropper knows 1% of your one-time pad. So he can decode 1 in every 100 bits you're sending, scattered randomly throughout your message. Unless you're repeatedly sending the same message, an eavesdropper is unlikely to get any useful information out of that. If you are sending the same message 100 times, then you wait until your key is 99.99%, say, and then transmit. That's the beauty of QC - that you can be as secure as you need to be in practice, not that you can be 100% secure in theory.

      --
      The author of this post asserts his moral rights.
    9. Re:Hype by dnoyeb · · Score: 1

      Interesting. Thanks.

      I am loosing my understanding of why the key can not be intercepted though. I know reading the key destroys it, but what can't someone read the key, destroy it, and send a different one in its place. How will the receiver ever know?

  52. What about mandated wiretap access? by Anonymous Coward · · Score: 1, Interesting

    If this method is secure from end to end, and taps are detectable, it clashes with Governments demanding the ability to wiretap at will. Only the people that should be watched will be unwatchable? Banks are notoriously corrupt when large transactions are going from big gangstercorporation to big gangstercorporation.

  53. Unwanted side effect... by chinton · · Score: 4, Funny

    Don't look to closely at your account balances, lest they become more uncertain.

    1. Re:Unwanted side effect... by Spunk · · Score: 1

      I think my bank uses this already.

  54. a quantum leap by N3wsByt3 · · Score: 1

    in cryptography! :-)

    This is really amazing; think of the possibilities that this offers. If this sort of system gets affordable, mass-produced and hits the market, it will invoke a whole new era of communication!

    Gone are the hackers who snif out passwords and creditcardnumbers; the moment they try to intercept it, it is discovered. Brute force attacks become meaningless, since the key is generated completely at random and is of a one-path nature, which is theoretically proven to be unbreakable (in contrast with every ordinary assymetric - and most symmetric - encryption used today on the Net).

    An those old encryption methods and mathimatical formula's *will* become obsolete, by that very same thing: quantum mechanics. It's no secret that a lot of people (especially in the military branche) are working hard to create a quantum-computer capable of breaking any currently existing encryption in mere minutes.

    So, by the time this quantum-encrytion hits the consumer, we'll need it!

    --
    --- "To pee or not to pee, that is the question." ---
    1. Re:a quantum leap by realdpk · · Score: 1

      As I understand it, it wouldn't be possible to create a trustworthy "quantum-aware" switch. This is all "point to point", as in physically laying a wire from you to your bank, or wherever.

    2. Re:a quantum leap by N3wsByt3 · · Score: 1

      Indeed, a switch could never actually use the quantums too determine the direction it should send it too, without altering it. However, a purely lightreflecting switch would not alter anything, it would merely reflect the photons (as does the glass-cable now).

      Remains the question how to determine the destination...I suppose a sequence of photons that may be altered could do the trick, after which the actual message comes (once the destination has been reached).

      --
      --- "To pee or not to pee, that is the question." ---
  55. Protocal by Gyorg_Lavode · · Score: 1

    Did they impliment this using the BB84 or B92 protocal? The BB84 is very simple but the B92 is much more secure. As with all things, "perfectly secure" in theory does not necesarily mean "perfectly secure" in the real world and BB84 is more seceptible than B92.

    --
    I do security
  56. does this work by gumbi+west · · Score: 1

    It look to me like you could use a beam splitter to defeat this--unless it is a single photon, in which case I don't understand how you don't loose lots of data. Also, both the transmission point and the end point need to know what the polarization is going to be before hand...if you know that, why not just use that sequence as your encription key?

    1. Re:does this work by aXis100 · · Score: 1

      You didnt read the article, did you?

  57. Au contraire by InvaderSkooge · · Score: 3, Funny
    The more money being transferred, the greater the uncertainty of the momentum of the money (for the same velocity), the more certain we'll be who has it.

    This principle is generally true in classical economic transfers as well: Bill Gates keeps having lots of money, but I only sometimes have money; I know I owe lots of money to my bank for student loans, but I only have a suspicion that my friend owes me 50 cents.

    --
    Erik
    YOU ARE SAYING IMPUDENCE TO ME! THAT IS IMPUDENCE!
  58. theory and SF are 'entangled' too, it seems by N3wsByt3 · · Score: 2, Interesting

    An interesting theory trying to explain this seemingly inexplicable result, is by taking the hypothetical possibility that the bands are created by photons that exceed the speed of light. Only when they revert to another (visible) quantummechanical state (by hitting the wall, for instance) do they become noticable.

    This is not impossible, because, contrary to what most ppl think, lightspeed is in fact an average; within one beam, there can be photons that are moving slightly slower, and photons that move slightly faster then the speed of light.

    This, however, leads to the conclusion that those particular photons come from - at least potentially - another time or space. So, the film 'paycheck' might not be complete bullocks after all (though it's doubtfull we are ever going to be able to create a usefull 'time-viewing' tool out of it).

    Then again, never say never, as Bill Gates with his '640K is enough for everyone' can vow.

    The theory about another 'space', in contrast, leads us to the possibility that those photons actually come from parallell universes. It seems SF, but it are, in effect, valid scientific hypotheses which deserve further investigation.

    After all, apart from these theories, there *is* no explication for the result of that experiment.

    --
    --- "To pee or not to pee, that is the question." ---
    1. Re:theory and SF are 'entangled' too, it seems by Anonymous Coward · · Score: 0

      Actually the 640k plan was a good one. He wasn't refering to forever but rahther that specific application. Give the guy a break it was a very appropriet decision at the time, not a lack of forsight. It's so out of context it's not funny.

      Not to mention it's not fair to blame bill gates for problems with MS code even if they are legacy issues because chances are he's never even seen the code that caused Internet Explorer to crash for 1,000,000 people today.

      Now on the other hand I could be wrong.

    2. Re:theory and SF are 'entangled' too, it seems by phritz · · Score: 1
      This is not impossible, because, contrary to what most ppl think, lightspeed is in fact an average; within one beam, there can be photons that are moving slightly slower, and photons that move slightly faster then the speed of light.

      Uhh ... what? No. I've never heard of such a crazy thing. Not in any accepted theories of physics, anyway. The speed of light is a fundamental property of the geometry of space-time.

    3. Re:theory and SF are 'entangled' too, it seems by N3wsByt3 · · Score: 2, Interesting

      Well, I've heard of it.

      That photons can be slowed down is not even disputed anymore, there have been numerous examples of it in various degrees (depending on the medium it passes through). I even believe there was a slashdot-article about it, when some researchers managed to slow it down to a crawl.

      For faster then light photons (obviously, only possible with non-mass quantummechanical particles) there is more discusion about it, since it's extremely difficult to prove. However, this experiment actually *would* be a possible contestant in proving the hypothesis.

      --
      --- "To pee or not to pee, that is the question." ---
    4. Re:theory and SF are 'entangled' too, it seems by E_elven · · Score: 1

      Well, no. The faster photons are actually the speed of light and everything else is just slower :)

      --
      Marxist evolution is just N generations away!
    5. Re:theory and SF are 'entangled' too, it seems by blincoln · · Score: 1

      I agree with the other posters that you seem to be a little confused about the speed of light. When people refer to "the speed of light," they generally mean "the speed of light in a vacuum," which is a constant, and cannot be exceeded except by theoretical particles like tachyons.

      In some media, like water, the speed of light is slower. In fact, in water it is slow enough that when you put control rods from a reactor into it, they emit particles that exceed the speed of light *in water* (but not the speed of light in a vacuum), and you get the blue Cherenkov glow.

      This doesn't mean that the speed of light in a vacuum is an average, or that regular particles can exceed it.

      I read a little further in TEU and it discusses how quantum physics explains the two-slit experiment. There are two ways of thinking about it, and they both generate the same results.

      One is that the photons (or electrons, or whatever) are represented by probability waves (or "wave functions") rather than discreet particles, and they can cause interference with themselves that way.

      The other is that each particle takes every possible path on its way to its destination, but the less probable ones end up cancelling each other out and all you're left with is the one that actually happened, or something like that (which is what Feynman came up with). I'm a little fuzzier on this one.

      --
      "...always new atoms but always doing the same dance, remembering what the dance was yesterday." -Richard Feynman
    6. Re:theory and SF are 'entangled' too, it seems by Anonymous Coward · · Score: 0

      The interpretation in Feynman's QED (admittedly written for laymen, but also written by Feynman!) involved photons sometimes exceeding the speed of light. Indeed, in this interpretation, the speed of light is an average property.

      General relativity would disagree, but we knew they didn't get along didn't we?

    7. Re:theory and SF are 'entangled' too, it seems by Anonymous Coward · · Score: 0

      Sorry, just relativity, not just "general", special doesn't like it either :-)

  59. What A Feeling by FrankDrebin · · Score: 3, Funny

    It will be cool one day, imagining that for a brief moment, the photons, being in a superposition of states, *could* be transferring all the known wealth of the universe to my bank account. Sadly, when observed, minus service fees, it's probably only like a buck-fifty.

    --
    Anybody want a peanut?
    1. Re:What A Feeling by 0x0d0a · · Score: 1

      It will be cool one day, imagining that for a brief moment, the photons, being in a superposition of states, *could* be transferring all the known wealth of the universe to my bank account.

      I move that theoretical physicists be added to that "homeland security watch list", if they aren't there already. If they suddenly start making lots of money, I'm going to be suspicious.

  60. Re:first post... by merdark · · Score: 0, Offtopic

    BUT, the post is still offtopic with regards to the STORY, which is the point. It may be more usefull if all responses to offtopic posts inheireted the offtopic moderation, since, naturally, they are also off topic.

  61. Re:first post... by Anonymous Coward · · Score: 0

    BUT the beauty of Slashdot comments is that you never know what tangents are gonna shoot off from a topic of discussion. Say in a story about programmer salaries someone mentions about a really bad job they had once and someone replies saying 'Oh yeah I worked there too, my female boss was a real bitch' and a little conversation thread continues, why should the posters fear the all mighty OT mod and post anonymously when they are replying to a post and not creating a new thread? It's not like they have to be modded up or anything, but off shoot threads are hardly obstructing people's Slashdot reading times

    There are also times when offtopic is used instead of troll or flamebait, which is wrong. Is offtopic the first type of moderation in the list or something?

  62. Re:Complicated - Schrodinger's Crib experiment by SmackCrackandPot · · Score: 1

    Simple: fold the futon up when you want to use it as a couch and then fold it back down when you want to use it as a bed.

    But at night you can't tell what state the futon is in, without at first knowing where it is.

    This is known in Quantum Mechanics as Schrodinger's Crib experiment.

  63. So.. by StarfishOne · · Score: 0
    sounds like I think I have a postive balance while don't having it at the same time.

    So what is new here? ;)

  64. Quantum Cryptographic Communications & 1-time by chongo · · Score: 4, Informative
    I have seen several postings related to the "unbreakable Vernam / One-Time pad cipher". The Vernam Cipher, or one-time pad is not a the ''super-duper unbreakable solves all your problems'' cipher that some people think it is.

    Yes, Quantum Cryptographic Communications (QCC) can help with the requirement that the one-time pad must be transmitted in private. However the one-time pad cannot be reused so your key must be the same size as your text. Thus far, Quantum Cryptographic Communications is not a speedy high bandwidth form of communication. It might be OK to transmit a small key but to date it is not OK for sending, in a reasonable period of time, huge one-time pad keys that are as big as your original message.

    Another thing people sometimes gloss over about Vernam one-time pads is that your cipher is only as good as your random number generator! If you generate your one-time pad using the v7 libc rand(3) function your one-time pad is next to useless.

    Another important aspect of Quantum Cryptography (Quantum Cryptography is not simply limited to communications) is random number generation. Quantum Cryptographic Random Number Generation (QCRNG) is a useful tool in generating keys (one-time pads, block cypher keys, public/private key pairs, etc.).

    The importance of QCRNG goes beyond Vernam one-time pads. You want a cryptographically strong RNG such as a QCRNG when you generate your session keys. Sending predictable keys over a QCC protected link is next to useless!

    Now IF you have:

    • near perfect communication privacy (such as with QCC)
    • near perfect one-time pad generation (such as with QCRNG)
    • near perfect key management (one-time use, no leakage, destruction after use, etc.)
    • near perfect ... etc.

    then you will begin to approach the ''unbreakable cypher level'' that some people think you get with Vernam One-Time Pad Ciphers.

    --
    chongo (was here) /\oo/\
  65. It seems impractical by Orthogonal+Jones · · Score: 4, Insightful


    OK, I am not a believer in quantum cryptography for one big reason -- fiber loss. Someone please enlighten me if I'm wrong.

    The loss of standard single-mode fiber is about 0.1-0.2 dB/km. Therefore, unless the distance is short (as in this demonstration), the transmitter must send multiple photons to ensure a decent probability of providing the receiver with one photon.

    For example, if the span is 100 km long (20 dB loss), then on average only 1 out of every 100 transmitted photons will reach the receiver.

    The situation is worse for autocompensating quantum-crypto systems (e.g., polarization-based encoding), because the photons must survive a round trip through the fiber.

    Therefore, the relatively high power at the transmitter implies that an attacker can tap into the fiber near the transmitter, subtract (on average) only 1 photon, and remain undetected by the receiver.

    Furthermore, typical optical amplifiers add noise (3 dB noise figure for your standard erbium-doped amplifier). The added noise photons would screw up the link, so amplifiers are out.

    In the end, it seems to me that quantum crypto is good for table-top demos, and maybe for short jaunts across a metro area. But it is NOT absolutely perfect, at which point computationally difficult encryption is more attractive.

    1. Re:It seems impractical by Anonymous Coward · · Score: 2, Informative

      You raise some very good points.

      In fact, in quantum cryptography you usually can't provide the receiver with one photon: you transmit (approximately) one photon, and the receiver successfully gets it, say, about 1% of the time. Assuming the system can maintain a low error rate, QKD is robust against losses (even 99% loss). Signal-to-noise is what counts here.

      Autocompensating systems have the same range as their non-round-trip counterparts. You can make the source twice as bright, because you're only worried about eavesdropping on the return leg of the journey.

      I'm not an expert on EDFAs, but my understanding is that they don't have a flat noise spectrum. So one might hope to find a quiet wavelength, away from the EDFA noise, to do quantum cryptography on.

    2. Re:It seems impractical by casehardened · · Score: 1

      You're quite right. You can't have anything other than passive elements in the circuit; EDFA's will destroy the polarization state of a given photon, removing entanglement. You can have arbitrarily long links, but the data rates will be very low. An attacker, however, can't tap into the fiber near the transmitter, grab a photon, and remain undetected. Data's usually sent in time-synced single photon pulses, so an attacker would be apparent.

    3. Re:It seems impractical by Orthogonal+Jones · · Score: 1


      Thanks for the information, especially for pointing out that autocompensation doesn't limit the range.

      As far as the SNR and BER, it seems that we're thermal-noise limited here, so we have to cool the receiver quite a bit. Bummer.

      Even if the thermal noise can be subtracted, the photons incident on the receiver are presumably still governed by Poisson statistics, so it seems a little hard to have both one photon per bit and good BER

  66. Uncertainty + international bank transfers?. by Shoten · · Score: 2, Funny

    Now someone can be both Miriam Abacha AND Sese-Seko in their 419 scams at the same time!

    --

    For your security, this post has been encrypted with ROT-13, twice.
  67. It IS BREAKABLE, it's just hard to do by aeoo · · Score: 1
    I've read your link and the algorithm is indeed succeptible to the man in the middle attach. The thing is, if Alice (sender) and Bob (receiver) communicate the right way, they can reduce the chance of the man in the middle attach succeeding. That doesn't mean that an attack is impossible. So in other words, this is very similar to current algorithms. They all reduce the chances but none of them are utterly bullet proof, except maybe one time pads or something insane like that.

    Here, let me quote the bit that explain how the man in the middle attack can succeed:

    This provides a way for Alice and Bob to arrive at a shared key without publicly announcing any of the bits. If an eavesdropper Eve tries to gain information about the key by intercepting the photons as they are transmitted from Alice to Bob, measuring their polarization, and then resending them so Bob does receive a message, then since Eve, like Bob, has no idea which basis Alice uses to transmit each photon, she too must choose bases at random for her measurements. If she chooses the correct basis, and then sends Bob a photon matching the one she measures, all is well. However, if she chooses the wrong basis, she will then see a photon in one of the two directions she is measuring, and send it to Bob. If Bob's basis matches Alice's (and thus is different from Eve's), he is equally likely to measure either direction for the photon. However, if Eve had not interfered, he would have been guaranteed the same measurement as Alice. In fact, in this intercept/resend scenario, Eve will corrupt 25 percent of the bits [7]. So if Alice and Bob publicly compare some of the bits in their key that should have been correctly measured and find no discrepancies, they can conclude that Eve has learned nothing about the remaining bits, which can be used as the secret key. Alternatively, Alice and Bob can agree publicly on a random subset of their bits, and compare the parities. The parities will differ in 50 percent of the cases if the bits have been intercepted. By doing 20 parity checks, Alice and Bob can reduce the probability of an eavesdropper remaining undetected to less than one in a million [8]. It is of course crucial that they do not discuss the orientation of the polarization filters until after the message has been sent, or Eve could use this to intercept and resend the photons correctly.

  68. Illegal for Export by LithiumX · · Score: 1

    We're not allowed to export some of the mainstream encryption out there for national security reasons... So does this mean that, Australian or not, if a US individual or company exports this technology themselves, they get the thumbscrews?

    --
    Do not confuse "Freedom of Choice" with "Free Will".
    1. Re:Illegal for Export by upside · · Score: 1

      Austr.... Nah, not worth it.

      --
      I'm sorry if I haven't offended anyone
  69. Didn't read the article but, ... by Sam+Nitzberg · · Score: 0, Flamebait

    I'll laugh if the back-end were an unpatches windows 2000 running an unpatched MS Sql server...

    - Sam

  70. a mix of different crypto by Anonymous Coward · · Score: 0

    I'm sure they incorporate current crypto. Its just the last step is over the quantum crypto. So, even if one manages to man in the middle a photon or two its going to be jibberish. And even after you find out its encrpyted jibberish they "know" because you cannot reporduce an entangled photon.

    Ya, stealing passwords, pilot error, spyware on computers are always going to be a problem. But we are talking about the "tech" part of the problem here. So, lets not resort to a cop out.

  71. It kind of defeats the purpose by Anonymous Coward · · Score: 0

    Do a perfectly secure transaction with quantum cryptography and then tell the whole world about it. That's like walking a tightrope then jumping off the platform on the end.

  72. is it really secure? by Keruo · · Score: 1

    using quantum mirrors, you could possibly split the light stream into two separate streams without altering the quantum state, and get perfect copy of the data real time

    --
    There are no atheists when recovering from tape backup.
    1. Re:is it really secure? by aXis100 · · Score: 1

      They didnt use light....they used individual photons.

  73. Re:Quantum Cryptographic Communications & 1-ti by casehardened · · Score: 3, Informative

    You're missing the point here... Quantum cryptography _creates_ a set of 1 time pads that both the sender and receiver have. So, a fairly small one-time pad is generated, and then the data is encoded & transmitted over a fast line. This is why it's often referred to as QKD (quantum key distribution). For absolute security, you only send data encrypted directly with your key, which is slow, but can't be decoded by a 3rd party.

  74. Not oily but useless by sidney · · Score: 1

    The problem with this is not that it doesn't 'solve' any security problems, but that it does not do anything that is not already done well enough and cheaper using conventional methods.

    I can already perform a transaction with my bank's server without anyone being able to eavesdrop or perform man-in-the-middle attacks or modify the transaction. SSL works, nobody has the technology today to crack 128 bit codes, and cryptographically strong pseudo-random number generators seeded with proper care are no less secure in practice than random numbers generated using physical quantum processes.

    I can perform that secure transaction to my bank without having a special use untappable optical fiber cable installed between my house and the bank. What extra security would I get for the cost of the fiber and the quantum cryptography equipment? Protection from some mythical person who can crack AES or RSA?

    The stake in the ground analogy has to do with concentrating on only one aspect of security while ignoring the rest. If you look at the whole picture, yes, the protection of the transmission line is one post in a fence rather than an isolated stake in the ground. At that point you can make sure that the post is not one foot high (like using DES for the crypto) but it may be that having it 10 feet high (AES/RSA) makes the fence strong enough and building it 100 feet high (QC over dedicated fiber) is just a foolish unnecessary expense.

    Quantum cryptography is not at all the same thing as quantum computing. The former is just a very expensive way to make sure someone doesn't tap your line, something which can be done much more easily using SSL or SSH or any other VPN technology.

    1. Re:Not oily but useless by cardmagic · · Score: 1

      You are technically incorrect when you say:

      The former is just a very expensive way to make sure someone doesn't tap your line, something which can be done much more easily using SSL or SSH or any other VPN technology.

      SSL, SSH, and VPNs are all susceptible to man in the middle attacks. QC could never ever be susceptible to man in the middle attacks. That makes quite a difference.

      Also, regarding:

      nobody has the technology today to crack 128 bit codes

      Have you heard the famed quote supposedly from Bill Gates saying "no one will ever need more than 4 megabytes of RAM."? Furthermore, the NSA hires more mathematicians than any other organization in the world, and the NSA keeps their knowledge to themselves, so there is no telling what capabilities they have.

      Nevertheless, no matter how long you wait, no matter how much computer power you put behind it, you could never decipher a message encrypted in the QC system.

      To sum up, QC is a big deal:
      1) eliminate the remotest possibility of wire-taps
      2) provably undecipherable messages

      There are a lot of places where security can be enhanced, but these two areas are substancial and worth notice.

    2. Re:Not oily but useless by sidney · · Score: 1

      SSL, SSH, and VPNs are all susceptible to man in the middle attacks

      Would you please publish your breakthrough discovery on Bugtraq? Many security experts would be interested in learning the details of a MITM vulnerability in SSL, SSH, and all known VPN protocols.

      nobody has the technology today to crack 128 bit codes

      "no one will ever need more than 4 megabytes of RAM."

      A dictionary will help you understand the difference between today and ever.

      no matter how much computer power you put behind it, you could never decipher a message encrypted in the QC system

      Unless you put your tap in outside of the QC system, use a keyboard logger, bug someone's office, get a trojan horse into one end of the system, guess a weak password, etc., etc. In other words precisely the things you would have to do if you want any chance at cracking a system protected by current state of the art non-QC crypto running over inexpensive ethernet.

      To sum up, QC is no big deal because
      1) standard encryption to defeat wiretaps
      and
      2) messages that can't be decrypted without the key

      are inexpensive commodities.

      And

      3) QC does nothing to tell you who you really are talking to on the other end of that expensive secure untappable fiber, and that's the only part of the problem that is hard to solve.

    3. Re:Not oily but useless by cardmagic · · Score: 1

      Actually, I misspoke, and you made a complete fool of yourself. SSH, SSL, and VPNs are all vulnerable to man in the middle attacks, but so is quantum cryptography. Read about it because you obviously don't know a thing about MITM attacks. They are not vulnerabilities in the software behind the programs, they are vulnerabilities due to the nature of communication.

      What quantum encryption provides is provable protection against wiretaps. Nobody can passively listen in because the act of listening changes it.

      Regarding your closed minded naive thoughts about current encryption being the holy grail for our current needs, I am surprised you are even using the internet because if we follow your train of mind, we would all just keep talking on the phone and sending snail mail because they are inexpensive commodities... you don't have to worry about web servers, cable internet, computers crashing, etc.

      You obviously have no taste for innovation.

    4. Re:Not oily but useless by cardmagic · · Score: 1

      Actually, just to keep things technically correct, in order to do man in the middle attack on quantum encryption, you need to do two simultaneous man in the middle attacks... a lot harder. You probably wouldn't have known that, you should read up on your quantum encryption before making comments like you do.

  75. The late 19th century called... by Anonymous Coward · · Score: 1, Funny

    They want their disproven 'ether' theory back.

  76. Re:Quantum Cryptographic Communications & 1-ti by Anonymous Coward · · Score: 2, Informative

    The quantum state of the particles IS the random number generator. You aren't using a software RNG to feed the quantum device, you're relying on the inherently random nature of quantum fluctuations to Create your random data.

    This, my friend, is as random as it gets, until someone develops the Theory Of Everything.

  77. for $500 M by Anonymous Coward · · Score: 0

    I'd happily swim to the bahamas. even from here on the west coast.

  78. Can someone dumb it down for the rest of us? by WinterpegCanuck · · Score: 1

    Geek license firmly stapled to my wallet, I was always good in physics but could not hold a lecture on quantum theory. are you actually sending the particle or using the information on where the particle problably is at that moment as the key? I bow my head in shame :-S

  79. Re:Quantum Cryptographic Communications & 1-ti by cardmagic · · Score: 2, Informative

    I believe you are approaching this topic all wrong:

    The Vernam Cipher, or one-time pad is not a the ''super-duper unbreakable solves all your problems'' cipher that some people think it is.

    Yes, the Vernam cipher is unbreakable, because the cipher itself requires all of the things you mention. You talk about random keys as if they might be optional, but they are actually standard necessities. It is a subtle difference, but I hope you can see it. If someone misuses the Vernam cipher, it becomes crackable, but in its nature, it is super-duper unbreakable solve all your problems.

  80. Re:first post... by merdark · · Score: 0, Offtopic

    Why would you fear OT? I just post anyways. If you have an account you get notified of replys and such, so you can easily follow the thread.

  81. Unfortunately not by poemofatic · · Score: 1

    since there is no (QC) authentication, so you are not *securely* transferring anything. Moreover, even if there was authentication, only a fraction of the data is assumed confidential. To get a key stream, you have to apply a classical hash, but leaking a portion of a one time pad leaks data, so the whole system is as secure as the classical crypto hash and the classical means of authenticating whoever you are sending the key stream to in the first place. Snake oil (so far.)

    --

    When in doubt, have a man come through a door with a gun in his hand.

    1. Re:Unfortunately not by Ageless · · Score: 1

      You need to spend some time reading and understanding the protocols used. Authentication happens in an out of band channel.

    2. Re:Unfortunately not by poemofatic · · Score: 1

      I recommend spending time reading the thread. Out of band channel means traditional crypto, or no crypto at all. In other words, they have not solved the problem of securely distributing keys. which is the claim to which my original post was responding.

      One more time:

      Case 1:
      You are going to rely on traditional crypto for the security of the key agreement protocol, why rely on Quantum Crypto in lieu of a Diffie-Hellman step?

      1a-If you are worried about "infinitely" powerful quantum computers, then those computers will break the traditional crypto you rely on and compromise the system.

      1b-If you are not worried about this, then why not rely on practically secure crypto throughout -- this way you are not vulnerable to the "fickle physics" attack.

      Case 2: You do not rely on traditional crypto at all. You rely on non-crypto "out of band" security:

      The non-crypto out of band security must deal with the 80%+ bits which can be determined by an attacker via cloning attacks. Therefore your pipe needs to provide confidentiality via physical security. --- why bother with a key exchange if you have an always on confidential physically secure pipe?

      --

      When in doubt, have a man come through a door with a gun in his hand.

    3. Re:Unfortunately not by cardmagic · · Score: 1

      I would recommend spending time reading the thread and reading papers on the topic, because obviously you have NO IDEA about quantum computing.

      In other words, they have not solved the problem of securely distributing keys. which is the claim to which my original post was responding.

      If you knew anything about QC, you would know that it solves the problem of securely distributing keys, that is its main function. The encryption itself takes place out of band using the Vernam cipher.

      If you are going to talk, at least know about the terms you are using.

  82. But why? by dtfinch · · Score: 1

    It's an interesting way to exchange keys, but does this have any practical use in the field of cryptography? We can already exchange keys very securely, and can do it quickly over any communication medium.

    All you need is for some man in the middle to tap the line before you've finished hooking it all up and tested the line conditions, and you probably won't be able to detect it at that point.

    1. Re:But why? by NerveGas · · Score: 1

      That's exactly the point, if someone DOES tap into the line, it's immediately detectable. In other words, as soon as someone eavesdrops even one single bit, you can terminate the process. That's pretty cool.

      steve

      --
      Oh, you're not stuck, you're just unable to let go of the onion rings.
    2. Re:But why? by cardmagic · · Score: 1

      Not entirely true, in order to perform an undetected man in the middle attack, you need to do two simultaneous man in the middle attacks. Not quite as easy as you might think.

  83. Real-time Mars rover remote control. by MacDork · · Score: 1
    The way I understand the whole entangled photon business is that one spins in one direction, the other spins in the opposite. Even if separated by vast distances (light years) flipping one's rotation results in the instantaneous flipping of the other, thus producing faster than light communication of some kind between the two photons.

    Given this information, which do you think would have a greater impact here on Earth... Being able to drive that Mars rover in real-time, or being able to deduct 20 bucks from the ATM with a new kind of encryption? Oh, the White House has a bigger budget than NASA? Nevermind <sigh />

    1. Re:Real-time Mars rover remote control. by NonSequor · · Score: 2, Informative

      While quantum entanglement can be used to achieve a sort of faster than light communication, you can't control what you "send" and once you've used one pair of photons you'll need another pair if you want to "send" anything else. Basically all this technique is good for is providing a means for ensuring that two parties have the same random string of bits. This is perfect for generating one time pads which provide an unbreakable form of encryption if they are only used once.

      Entangled particles can be used for other interesting forms of communication, but in every case a classical communication channel must also be used.

      --
      My only political goal is to see to it that no political party achieves its goals.
  84. it doesn't prevent MITM by The+Cookie+Monster · · Score: 1

    But quantum crypto doesn't prevent man in the middle attacks, it only prevents evesdropping.

    The only thing quantum crypto gives you is knowledge that the guy at the other end of the line is the only guy getting your message, it doesn't tell you who that person is, or even where the other end of the line is - someone could have cut the cable and set themselves up as 'the other end'.

    So quantum crypto falls back on traditional crypto to establish who is at the other end, making it as mathematically weak as conventional crypto but needing special infrastructure.

    1. Re:it doesn't prevent MITM by cardmagic · · Score: 1

      It might not prevent man in the middle attacks, but it requires two simultaneous man in the middle attacks.

  85. heh..indeed by N3wsByt3 · · Score: 1

    I dunno why you got a zero for that remark, but actually you are right. I've mentionned it in my post too, and there I got a 4, so I dunno how the moderating-system works around here :-).

    There *is*, in fact, a theory that tries to explain it by the hypothesis of parallel universes.

    --
    --- "To pee or not to pee, that is the question." ---
  86. Hackers and Physicists Making Money by Teancum · · Score: 1

    I'd suggest that you spend a little bit of time looking up Neural Nets and AI a little bit. I spent a little time a while back trying to find more information about these topics combined, and it ended up with a couple of pages that said essentially:

    "We decided to try some of these techniques in trying to work with the stock market. Since we have made so much money from that, we are unwilling to disclose the exact techniques and have closed this line of research."

    Or something to that effect.

    If this has real world applications as you are sort of suggesting, it is very possible for these folks to start making huge piles of money... together with some financially savvy people who will make even more off of them (the physicists). The only suspicion that you should have is if they made a real breakthrough but are not telling anybody else in the world as well.

  87. Spooky EPR Paradox by Preferred+Customer · · Score: 1

    So how is this different than EPR pardox?:

    Pull the four aces out of a deck of cards. Don't look at them. Give any 3 of them to a friend and keep one. Send the friend on a 2000 mile plane trip. Nobody knows which 3 cards the friend has. They could be any of the aces. After the friend reaches his destination, look at your card. It's the ace of spades, for example. You instantly know that the friend's 3 cards are the aces of diamonds, hearts, and clubs.

    Author taps tinfoil hat.

    1. Re:Spooky EPR Paradox by eluusive · · Score: 1

      You're missing the point.. Hidden variable theory has been disproven already. And according to Quantum Mechanics none of the cards are specifically one thing or the other till you look at them. By looking at your card you change the state of your card, and you force the other 3 into the state of being the one of the ace of diamonds, hearts and clubs. But your card is no longer the ace of spades after you've looked at it.

      So.. the quantum cryptography is more like this:

      You have the 4 aces, you take one. You give him the other three. You wait till he gets to europe and you look at yours. You call him on your cell phone and say hey, i've got the ace of spades, therefore you must have the ace of hearts diamonds and clubs. So he looks at his cards. If he doesn't have those cards, he knows somebody else has looked at his before he got to them. Due to the fact that if anybody looked before him, they'd see the ace of hearts, diamonds and clubs, but after that they would not be those cards anymore.

  88. The Fabric of the Cosmos by missing000 · · Score: 1

    If you like TEU, I recommend the book I'm reading now, Brian Greene's latest - "The Fabric of the Cosmos".

    I had the good fortune of hearing Brian talk about the book at a book signing. He discussed the implications of string theory and the EPR paradox at length which suggests that the book will have shed some light on the subject. (I haven't gotten that far yet)

    There is also a great discussion of the arrow of time in the book, something I find fascinating.

  89. Lasers not required by hughk · · Score: 1

    In our case we used a sodium lamp in high-school for Young's slit experiment. The idea was that it was monochromatic and several orders of magnitude cheaper than a low-end laser in those days. The slits weren't that small.

    --
    See my journal, I write things there
  90. One more link by missing000 · · Score: 2, Interesting

    I was interested in how they generated the entangled photon pairs, so I googled and came up with an interesting paper that touches on the subject:

    "The entangled photon pairs created by Kwiat's team are produced using two thin, nonlinear optical crystals to split the "parent" photons from a laser into entangled "daughter" photons. In previous research at Los Alamos, these entangled photons have been used for quantum cryptography to create unbreakable cryptographic keys that can be used to lock or unlock encrypted messages.

    Decoherence is a problem in quantum systems because the fragile quantum superpositions of entangled states are destroyed by unwanted coupling to the environment through which the photons are passing. Decoherence in Kwiat's system is intentionally created by passing the entangled photons through a roughly 10 millimeter piece of quartz. This optical environment produces a collective decoherence in the photons where one particular entangled photon state is, as predicted by quantum theory, essentially decoherence-free. These photons could serve as the basis of information carriers for quantum communications."

  91. no, it's not by N3wsByt3 · · Score: 1

    I'm getting tired of this 'no way, josé' thingy.

    While not an absolute fact (there never is, in science), the concept of faster-then-light photons is *not* ridiculed or disregarded by physicists.

    For instance, Professor Feynman is a distinguished physicist who has explained the theory behind it many times. (He is also a member of the American Physical Society, the American Association for the Advancement of Science; the National Academy of Science; in 1965 he was elected a foreign member of the Royal Society, London (Great Britain)...)

    I know it's a deeply believed dogma that nothing can go faster then light, but, for quantummechanical particles, the data suggests it *is* possible.

    --
    --- "To pee or not to pee, that is the question." ---
    1. Re:no, it's not by E_elven · · Score: 1

      It's funny, silly. See, if a part of the light goes faster than the other part, the faster part i s, by definition, the speed of light. Whether it is faster than the current definition of the speed of light is a different matter :)

      --
      Marxist evolution is just N generations away!
    2. Re:no, it's not by phritz · · Score: 1

      As I said, I've never heard of this; could you refer me to a source? As it is, it sounds like you're confusing the properties of the wavefunctions of the particules with the properties of the particles themselves. The collapse of the wavefunction is indeed superluminal, and the phase velocity of a wavepacket can definitely be faster than the speed of light. However, were one to measure the speed of a photon, you'd always get c (or less than c, depending on the medium).

  92. ah, I see by N3wsByt3 · · Score: 1

    I didn't know you were argumenting semantics. I try to avoid that, since it never leads to anything constructive.

    For all normal purposes in this discussion, the 'speed of light' is regarded as a constant. Otherwise, playing semantics, this leads to meaningless statements. For instance; what if another quantum-particle achieves faster-then-light speed, even if it ain't a photon? Using semantics, I could argue that it's not exceeding the speed of light at all, because it's not a photon.

    The whole thing would become stranded in the absurdity of pedantic semantic definitions.

    --
    --- "To pee or not to pee, that is the question." ---
  93. ..and ignorance and thoughtlessness too, it seems. by Anonymous Coward · · Score: 0

    Errr... how does making photons go faster explain the fact that you get the same result if you send the photons one at a time? Which is the spooky essence of the experiment, after all.

  94. goddamnit by N3wsByt3 · · Score: 1

    I read it in some science book or magazine years ago, but since I'm no physicist myself, I'm not going to debate it endlessly.

    As far as I can remember it also covered light in a vacuum, since in a medium where light is slowed down, it's not very farfetched and rather obvious to expect it is possible for photons to be faster *in that medium*.

    I think the theory was, that particles with no mass and with the speed of light (or subatomic particles very close to the speed of light) might make a 'quantum-jump' and go faster then light. Nothing prohibits something going faster then light, as far as I recall, just reaching that point is deemed impossible. But for quantummechanical particles you have a possibility thanks to the strange laws governing there.

    Well, whatever, if you say it's absolutely impossible, I'll bow to your wisdom! ;-)

    --
    --- "To pee or not to pee, that is the question." ---
  95. Actually... by HiggsBison · · Score: 1
    According to Heisenberger, my money is going to be both here and there.

    If your concern is your bank balance, then where the money actually is is neither here nor there. :-)

    --
    My other car is a 1984 Nark Avenger.
  96. No need for laser... by jsampaio · · Score: 1

    With the double slit scheme you don't need a coherent light source (the 2 slits work as 2 in-phase light sources). The slits (both their thickness and distance) need to be (loosely) the wavelenght size (that meaning, with visible light, you need special slits made in film; you can do one with photographical methods I suppose, or buy one (easier :) ). If you wan't to "see" the effect happen, maybe you should try with waterwaves.
    The fourier transform property is used widely, and you can do amazing stuff simply with carefully painted films, like filter-out low space frequencies to have just the high-freq details etc (more commonly used to clean noise).