Slashdot Mirror


First Secure Quantum Crypto Network Up and Running

John Lam was one of many readers to send in news that on Thursday, "at a conference in Vienna, Austria, as reported by the BBC, a European Community science working group built a quantum backbone using 200-km of standard commercial optical fiber running among seven sites and successfully demonstrated the first secure quantum cryptographic key distribution network. In addition, each of the seven links used a different kind of quantum encryption, demonstrating interoperability between the technologies. To paraphrase, the project focused on the trusted repeater paradigm and developed an architecture allowing seamless integration of heterogeneous quantum-key distribution-link devices in a unified framework. Network node-modules managing all classical communication tasks provide the underlying quantum devices with authentic classical channels. The node-module architecture uses a layered model to provision network-wide, end-to-end, provably secure key distribution."

19 of 102 comments (clear)

  1. Re:Teleportation? by argent · · Score: 4, Informative
  2. Better than ssl by sakdoctor · · Score: 5, Funny

    You'll be able to tell if your web traffic has been snooped by the authorities because all your lolcats will arrive dead!

    1. Re:Better than ssl by KGIII · · Score: 2, Funny
      --
      "So long and thanks for all the fish."
  3. If I recall correctly, not the first by fwice · · Score: 4, Informative

    Under DARPA sponsorship, and together with our academic colleagues Harvard University and Boston University, BBN Technologies has recently built and begun to operate the world's first Quantum Key Distribution (QKD) network. The DARPA Quantum Network employs 24x7 quantum cryptography to provide unprecedented levels of security for standard Internet traffic flows such as web-browsing, e-commerce, and streaming video.

    The DARPA Quantum Network became fully operational on October 23, 2003 in BBN's laboratories, and has run continuously since.

    source: http://bbn.com/technology/information_security/quantum_cryptography

    1. Re:If I recall correctly, not the first by Yvanhoe · · Score: 3, Informative

      And the first attacks are there as well...

      --
      The Wise adapts himself to the world. The Fool adapts the world to himself. Therefore, all progress depends on the Fool.
  4. Re:Subspace Encryptions by jellomizer · · Score: 3, Insightful

    You know, Star Trek is fiction, right? Not all the technology in the Star Trek fictional universe is possible, an some others will come out very soon others probably never.

    --
    If something is so important that you feel the need to post it on the internet... It probably isn't that important.
  5. Re:Teleportation? by IceCreamGuy · · Score: 2, Interesting

    it's only Photons that have been 'tele-ported'

    It is actually not a particle like a photon, but only information that is teleported. Just in case your next question is "doesn't this mean we can communicate at the speed of light?" you must have a classical information channel as well in order to make sense of the teleported information.

  6. Re:Teleportation? by Zerth · · Score: 4, Funny
  7. Rumors of their death has been slightly entagled by jonaskoelker · · Score: 5, Funny

    Wanted: Schrödinger's Cat. Dead and alive.

  8. what did he say? by FornaxChemica · · Score: 2

    "To paraphrase..."

    More like: to make the subject even more unintelligible...

  9. Secure Key exchange. by locofungus · · Score: 2, Interesting

    I heard something about this on the radio last night (wasn't paying full attention).

    But they were talking about quantum key exchange. Assuming that they're then using a standard symmetric key to encrypt the link it's still theoretically breakable, just the key exchange that isn't.

    If they're quantum encrypting all the data then that's pretty astonishing - they were talking about video-conferencing so they need a reasonable bit rate and the fidelity rate has to be above 5/6[1] otherwise the link might be vulnerable to a quantum cloning attack.

    [1] Assuming the best attack is a universal quantum cloning machine. The maximum theoretical fidelity isn't known for most non-universal quantum cloning machines (but is trivially known for some - e.g. 3/4 for a naive measure and retransmit). I don't know whether it's possible to prove that the 5/6 is a sufficient lower bound on the fidelity.

    Tim.

    --
    God said, "div D = rho, div B = 0, curl E = -@B/@t, curl H = J + @D/@t," and there was light.
    1. Re:Secure Key exchange. by Bengie · · Score: 2, Interesting

      "[...]Assuming that they're then using a standard symmetric key to encrypt the link it's still theoretically breakable[...]" depends on what you mean by "theoretically". According to my cousins professor in his Computer Science Encrption course, if you had a *perfect* 256bit symmetric key encryption, if you counted just bit flips and no other inefficiency of the system, on average it would take more energy to break the key than there is usable energy in the known universe. and from what I've read about quantum computing, a quantum computer is only about 2xs faster than a regularcomputer at breaking symmetric key encrtion, so no hope there; but they really shine on asymetric sinceyou already have part of the key. All we need is a 512bit symetic key and you're screwed for theory unless there's a HUGE mathematical flaw in it. And most of the known flaws in the current AES are theorectical and haven't been proven, that I know of.

    2. Re:Secure Key exchange. by locofungus · · Score: 2, Informative

      Hmmm, not sure I agree with that assessment.

      if you had a *perfect* 256bit symmetric key encryption, if you counted just bit flips and no other inefficiency of the system, on average it would take more energy to break the key than there is usable energy in the known universe

      A perfect computer can have no entropy change provided it never forgets anything.

      Storing all 2^256 keys would require 2^264 bits. There are estimated to be roughly 10^80 particles in the universe ~ 2^265. It's not immediately obvious to me that the problem is theoretically intractable in the known universe.

      A perfect 256bit symmetric cypher key falls to an oracle for messages >> 256 bits. Quantum key exchange together with OTP is safe against an oracle (in that you can never show the oracle to be correct)

      Tim.

      --
      God said, "div D = rho, div B = 0, curl E = -@B/@t, curl H = J + @D/@t," and there was light.
    3. Re:Secure Key exchange. by meringuoid · · Score: 2, Informative
      But they were talking about quantum key exchange. Assuming that they're then using a standard symmetric key to encrypt the link it's still theoretically breakable, just the key exchange that isn't.

      Let the key be at least as long as the message itself; then you have a one-time pad, which is unbreakable.

      --
      Real Daleks don't climb stairs - they level the building.
  10. Quantum this, Quantum that by jonaskoelker · · Score: 3, Funny

    So, we have quantum computers with quantum networks doing quantum cryptography. What's next, buying music with quantum DRM, i.e. the song is both there and not there until the sound card observes it? ;)

  11. Still vulnerable to MITM by ThreeGigs · · Score: 3, Insightful

    ..." trusted repeater paradigm "...

    Okay, so basically you're only 'secure' up to about 30 miles, and that's only if you have a real, honest to goodness, point to point fiber link. Otherwise they're still converting photons to electrons, and making new photons, at the repeaters.

    It's no more secure than current fiber, except that you've limited the attack vector and locations to known points, namely the repeaters.

  12. Re:Not so sercure then by david_thornley · · Score: 2, Interesting

    Yeah, but the same crypto that allows digital signatures also allows secure key exchange.

    In other words, although this is an impressive achievement, it isn't clear to me that there's any practical application as yet. Particularly when we consider that modern crypto is almost certainly secure, so that intercepting the bits en route is pointless, and that you don't need crypto over a physically secure route.

    Quantum computation and communications may well be very useful some year, but 2008 isn't it.

    --
    "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  13. "no cloning" theorem dictates how repeaters work by Cordath · · Score: 4, Informative

    Quantum key distribution (QKD) relies on the fact that a single measurement can only reveal partial information about its state. i.e. The same fundamental physical property that makes QKD work also makes it impossible to "read" a photon at a trusted repeater station and then resend an identical copy. This would violate the "no cloning" theorem. Instead, the trusted repeater would have to exchange a key with both the sender and receiver. This obviously requires trust and slows things down, but it's not unreasonable in a European bank network where many banks that both trust each other are physically located within a short distance of each other. (Current QKD is limited to links of distances of about 150 km due to loss in fiber, and the secret key bitrates at these distances are not good.)

    End point to end point QKD is possible with what are called quantum repeaters. In this scheme, the repeater station creates single photon pairs and sends them to the adjacent links in the chain. At each link, bell state measurements are performed that create a daisy-chain of entanglement swapping until, ultimately, the sender and receiver at the two ends of the chain are left with an entangled pair that they can use to create a key. In this scheme, the repeaters actually gain no information about the entangled pair that the sender and receiver wind up with, and the sender and receiver are able to detect tampering just as they can with other forms of QKD. The result is a repeater network over which secure communication is possible even if the repeaters are untrusted. The worst case scenario, theoretically, is that the eavesdropper just cuts the line so that communication isn't possible.

    This technology works experimentally, but will not be practical until quantum memory (i.e. light storage) becomes practical. The problem is that, without memory, each link in the entanglement chain has to receive photons at the same instant in time. With loss happening randomly in all the links, the probability of this happening is no greater than the probability of a photon traveling directly from the sender to the receiver. Ergo, you gain nothing.

    Quantum memory is a hot field of research and several experimental groups have shown promising results using a variety of approaches. In short, QKD will not be limited to trusted relay networks for long.

  14. Re:Teleportation? by PhasmatisApparatus · · Score: 2, Funny

    No, xkcd is always almost relevant.