aiqbench analysis
This research introduces a Quantum Authenticated Key Expansion (QAKE) protocol that unifies authentication and key expansion while enabling the recycling of quantum keys, addressing critical efficiency needs in remote access and cloud security. The study provides both theoretical security analysis within an adapted QAKE framework and experimental validation using post-selection techniques on decoy state BB84 systems. By integrating these functions into a single protocol, the work advances practical quantum communication architectures beyond the limitations of traditional separate QKD implementations.
Quantum Authenticated Key Expansion with Key Recycling
arXiv:2409.16540v2 Announce Type: replace Abstract: Data privacy and authentication are two main security requirements for remote access and cloud services. While QKD has been explored to address data privacy concerns, oftentimes its use is separate from the client authentication protocol despite implicitly providing authentication. Here, we present a quantum authentication key expansion (QAKE) protocol that (1) integrates both authentication and key expansion within a single protocol, and (2) provides key recycling property - allowing all authentication keys to be reused. We analyse the security of the protocol in a QAKE framework adapted from a classical authentication key exchange (AKE) framework, providing separate security conditions for authentication and data privacy. We experimentally implemented the protocol with appropriate post-selection. Additional results on the security of pseudorandom basis generation in QAKE and decoy state BB84 are provided.
Abstract:Data privacy and authentication are two main security requirements for remote access and cloud services. While QKD has been explored to address data privacy concerns, oftentimes its use is separate from the client authentication protocol despite implicitly providing authentication. Here, we present a quantum authentication key expansion (QAKE) protocol that (1) integrates both authentication and key expansion within a single protocol, and (2) provides key recycling property - allowing all authentication keys to be reused. We analyse the security of the protocol in a QAKE framework adapted from a classical authentication key exchange (AKE) framework, providing separate security conditions for authentication and data privacy. We experimentally implemented the protocol with appropriate post-selection. Additional results on the security of pseudorandom basis generation in QAKE and decoy state BB84 are provided.
arXiv:2409.16540 [quant-ph]
(or arXiv:2409.16540v2 [quant-ph] for this version)
https://doi.org/10.48550/arXiv.2409.16540 Focus to learn more arXiv-issued DOI via DataCite
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Full text under the publisher's open licence · 218 words
