The DOI matches its Crossref record; 6 of the 6 references it cites were found in a registry or an index; none of the 6 sources its claims cite is checked for support yet.
Quantum cryptography: Public key distribution and coin tossing
Open accessAbstract
When elementary quantum systems, such as polarized photons, are used to transmit digital information, the uncertainty principle gives rise to novel cryptographic phenomena unachievable with traditional transmission media, e.g. a communications channel on which it is impossible in principle to eavesdrop without a high probability of disturbing the transmission in such a way as to be detected. Such a quantum channel can be used in conjunction with ordinary insecure classical channels to distribute random key information between two users with the assurance that it remains unknown to anyone else, even when the users share no secret information initially. We also present a protocol for coin-tossing by exchange of quantum messages, which is secure against traditional kinds of cheating, even by an opponent with unlimited computing power, but ironically can be subverted by use of a still subtler quantum phenomenon, the Einstein-Podolsky-Rosen paradox.
Overview
AI snapshot
Written from the paper’s full text.
TL;DR
The paper introduces quantum cryptography using non-orthogonal polarized photon states to distribute a secret random key between users who initially share no secret, with eavesdropping detectable in principle. It also presents a quantum coin-tossing protocol secure against traditional cheating even with unlimited computing power, except for a theoretical EPR-based attack requiring perfect photon storage and detection.
Key findings
- In quantum key distribution, an eavesdropper informed of a photon’s original basis only after measuring it can obtain at most 1/2 expected bits about the key bit; any measurement yielding \(b\) bits (\(b \le 1/2\)) must induce disagreement with probability at least \(b/2\) when the photon is later re-measured in its original basis. The optimum tradeoff example: measuring and retransmitting all intercepted photons rectilinearly learns the correct polarizations of half the photons and induces disagreements in 1/4 of those later re-measured in the original basis.
- Alice and Bob can test for eavesdropping by publicly comparing a random subset—say one third—of correctly received bits; if comparisons agree, the remaining same-basis bits can be used as a one-time pad.
- For coin tossing, Alice sends about one thousand random bits encoded in one basis; Bob guesses the basis; Alice reveals the basis and her original bit string; Bob verifies against his rectilinear and diagonal tables. The honest protocol gives each party exactly 50 per cent chance of winning.
- Cheating by Bob would require guessing Alice’s basis with probability greater than 1/2, which would imply distinguishing randomly polarized photon trains and enable faster-than-light communication via the Einstein-Podolsky-Rosen effect. Alice can cheat using EPR photon pairs, but this requires perfect efficiency of storage and detection of photons, beyond current technology.
Methods
- Theoretical protocol design and security analysis based on quantum mechanics of single polarized photons, Hilbert-space formalism, conjugate rectilinear and diagonal bases, the uncertainty principle, and the no-cloning theorem.
- Quantum key distribution protocol: Alice sends random bits in randomly chosen bases; Bob measures randomly in one of the two bases; public classical discussion identifies successful same-basis bits; optional Wegman-Carter authentication can relax the need for an active-eavesdropping-immune public channel if a small secret key is shared.
- Coin-tossing protocol: Alice sends a photon train in one basis, Bob guesses the basis, Alice reports the actual basis and certifies by revealing her original bit sequence, and Bob verifies against his two measurement tables. The paper provides illustrative examples but no empirical data.
Limitations
- Stated: quantum transmissions are necessarily very weak and cannot be amplified in transit; quantum cryptography does not provide digital signatures, certified mail, or the ability to settle disputes before a judge.
- Stated: the public channel must be immune to active eavesdropping unless Alice and Bob share a small secret key for Wegman-Carter authentication; an eavesdropper can still suppress communication, though users can detect suppression with high probability.
- Stated: the EPR cheating attack is merely theoretical because it requires perfect efficiency of photon storage and detection, beyond current technology; the honestly followed protocol could be realized with current technology. Evident from the text: no experimental implementation or empirical data are reported, and the security arguments are theoretical.
Model-written summary. Check it against the paper before relying on it.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
0 of 6 cited sources checked · 0 supported · 0 flagged
The paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“Thus Bob obtains mean ingful data from only half the photons he detects- those for which he guessed the corre'ct polarization basis.”
Tests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passesThe paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“and that any such measurement yielding b bits of expected information (b s 1/2) must induce a disagreement with probability at least b/2 if the measured photon, or an attempted forgery of it, is later re-measured in its original basis.”
Tests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passesThe paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“when the ea vesdropper measures and retransmits all intercepted photons in the rectilinear basis, thereby learning the correct polarizations of half the photons and inducing disagreements in 1/4 of those that are lat er re-measured in the original basis.”
Tests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passesIn the paper
“such cloning can be shown to be inconsistent with the foundations of quant . um mechanics [WZ)”
What the sources say
- Not checked yetcites [WZ)
Load-bearingStrength:plain· not yet calibratedTests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passesA conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“Even in the presence of active eavesdropping, the two parties can still distribute key securely if they share some secret information initially, provided the eavesdropping is not so active as to suppress connunications completely.”
Tests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passes- The authors state this as an assumption: The public classical channel used in the protocol is susceptible to eavesdropping but not to injection or alteration of messages.
The paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“the transmitted photons, in passing through the P polarizer, enoerge with exactly P polariza tion, having lost a,11 memory of their previous po larization a.”
Tests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passesA conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“we also present a protocol for coin-tossing by exchange of quantWII noes sages, which is secure against traditional kinds of cheating, even by an opponent· with unlinited computing power”
Load-bearingStrength:plain· not yet calibratedTests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes? Based: unclearThe paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“being transmit ted with probability cos 2 (a-P) and absorbed with the comple11entary probability sin 7 («-P).”
Tests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passesA conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“The eavesdropper cannot even gain partial information about such a trans11is sion without altering it a random and uncontrollable way likely to be detected by the channel's legiti mate users.”
Tests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passesA conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“Except where otherwise noted the protocols are provably secure even against an opponent with superior technology and unli11ited COftputing power, barring fundamental violations of accepted physical laws.”
Load-bearingStrength:plain· not yet calibratedTests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passes
- The quote only partly states this claim. 4
- Probably not a substantial claim. 3
- It may state two separate claims as one. 8
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“Here we show that quantum coding by itself achieves one of the main advantages of public key cryptography by per mitting secure distribution of random key informa tion between parties who share .no secret information”
Tests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passesThe quote only partly states this claim.
- The authors state this as an assumption: The public classical channel used in the protocol is susceptible to eavesdropping but not to injection or alteration of messages.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“Moreover, quantum cryptography does not provide di gital signatures, or applications such as certified 11ail or the ability to settle disputes before a judge.”
Strength:plain· not yet calibratedTests✓ Asserted: passes✓ Checkable: passes✗ Load-bearing: fails✗ Based: failsProbably not a substantial claim. The paper’s conclusions may not depend on it. The paper may give no reason why it holds. It may state two separate claims as one.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“This cheat requ.i. 1:.-s that Alice be able to store the twin photons fc-r 3 considerable time and then measure them wit!, hcqh detection efficien cy”
Tests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passesIt may state two separate claims as one. The quote only partly states this claim.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“However, in either case, Alice and Bob will conclude with high proba bility that their secret communications are being suppressed,. and will not be fooled into thinking their communicaticns are secure when in fact they're not.”
Load-bearingStrength:hedged· not yet calibratedTests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passesIt may state two separate claims as one.
- The authors state this as an assumption: The public classical channel used in the protocol is susceptible to eavesdropping but not to injection or alteration of messages.
The paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“By contrast, in traditional coin-tossing schemes, analogous attempts to seize a lucky victory frOft the jaws of defeat, though unlikely to succeeed, are unaccompanied by any danger of detection.”
Load-bearingStrength:plain· not yet calibratedTests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✗ Based: failsProbably not a substantial claim. The paper may give no reason why it holds.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“The eavesdropper can still prevent communication by suppressing messages in the public channel, as of course he can by sup pressing or excessively perturbing the photons sent through the quantum channel.”
Strength:plain· not yet calibratedCausal:direct· not yet calibratedTests✓ Asserted: passes✓ Checkable: passes? Load-bearing: unclear✓ Based: passesIt may state two separate claims as one.
- The authors state this as an assumption: The public classical channel used in the protocol is susceptible to eavesdropping but not to injection or alteration of messages.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“The bit positions used in this comparison should be a random subset (say one third) of the correctly received bits, so that eavesdropping on more than a few pho tons is unlikely to escape detection.”
Tests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passesProbably not a substantial claim.
The paper states this without a source or data behind it here, so there is nothing to check it against. The quote shows it is in the paper.
In the paper
“This iaplausible-sounding explanation is supported by formal quantum mechanics, which represents the state of a pair of photons as a vector in a 4-dimensional Hilbert space obtained by taking the tensor product of two 2-dimensional Hilbert spaces.”
Strength:plain· not yet calibratedCausal:direct· not yet calibratedTests✓ Asserted: passes✓ Checkable: passes? Load-bearing: unclear✓ Based: passesIt may state two separate claims as one. The quote only partly states this claim.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“Bob woulr: nc,,d to guess Alice's basis ·:-th i:robability greate: than 1/2.”
Tests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passesIt may state two separate claims as one.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“If all the comparisons agree, Alice and Bob can conclude that the quantum transmission has been free of signifi cant eavesdropping; and those of the remaining bits that were sent and received with the same basis also agree, and can safely be used as a one time pad for subsequent secure communications over the public channel.”
Tests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passesIt may state two separate claims as one.
- The authors state this as an assumption: The public classical channel used in the protocol is susceptible to eavesdropping but not to injection or alteration of messages.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“she would need to convince Bob that her photons were :Hagonally polarized, which she can only do by prod ucing a sequence of bits in perfect agreement with Bob's diagonal table.”
Tests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passesThe quote only partly states this claim.
A conclusion the paper draws from its own results — it cites no other source for it, so there is none to check. The quote shows it is in the paper.
In the paper
“Any pholons lost by Alice during storage or measurement would result in holes in her pretended bit sequence, which she would have to fill by guessing, and these guesse3 would risk detection by Bob if they failed to agr·?c, with his tables.”
Tests✓ Asserted: passes✓ Checkable: passes✓ Load-bearing: passes✓ Based: passesIt may state two separate claims as one.
The authors state this as an assumption.
The public classical channel used in the protocol is susceptible to eavesdropping but not to injection or alteration of messages.
“susceptible to eavesdropping but not to the injection or alteration of messages.”
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The check wasn’t confident either way, so it gives no verdict — never disputed.
In the citing paper
“QKD protocols such as BB84 and E91 have been successfully implemented since 2003.”
From Quantum-resistance in blockchain networks (2023) · cites this paper as [31]
Experimental — accuracy not yet measured
Citations
Cites
A single quantum cannot be cloned
Wootters, W. K., & Zurek, W. H. (1982) · Nature · doi:10.1038/299802a0 · Cited by 5,406
Aspect, A., Grangier, P., & Roger, G. (1982) · Physical Review Letters · doi:10.1103/physrevlett.49.91 · Cited by 2,687
Wiesner, S. (1983) · ACM SIGACT News · doi:10.1145/1008908.1008920 · Cited by 1,520
New hash functions and their use in authentication and set equality
Wegman, M. N., & Carter, J. L. (1981) · Journal of Computer and System Sciences · doi:10.1016/0022-0000(81)90033-7 · Cited by 1,402
Coin flipping by telephone a protocol for solving impossible problems
Blum, M. (1983) · ACM SIGACT News · doi:10.1145/1008908.1008911 · Cited by 516
Quantum Cryptography, or Unforgeable Subway Tokens
Bennett, C. H., Gilles Brassard, A., Breidbart, S., & Wiesner, S. J. (1983) · Springer eBooks · doi:10.1007/978-1-4757-0602-4_26 · Cited by 197
Self-citation
Flagged first, then by citations
Research works printed but not linked: 1
- David Bohm, Quantum Theory (Prentice-Hall, Englewood Cliffs, NJ, 1951), pp. 614–619.
Cited by
Sorted by citations
Polynomial-time algorithms for prime factorization and discrete logarithms on a quantum computer
Shor, P. W. (1999) · SIAM Review · doi:10.1137/s0036144598347011 · Cited by 3,904
Simple Proof of Security of the BB84 Quantum Key Distribution Protocol
Shor, P. W., & Preskill, J. (2000) · Physical Review Letters · doi:10.1103/physrevlett.85.441 · Cited by 3,047
Pappu, R., Recht, B., Taylor, J., & Gershenfeld, N. (2002) · Science · doi:10.1126/science.1074376 · Cited by 2,053
Advances in quantum cryptography
Pirandola, S., Andersen, U. L., Banchi, L., Berta, M., Bunandar, D., Colbeck, R., Englund, D., Gehring, T., Lupo, C., Ottaviani, C., et al. (2020) · Advances in Optics and Photonics · doi:10.1364/aop.361502 · Cited by 2,033
The Physics of Quantum Information
(2000) · doi:10.1007/978-3-662-04209-0 · Cited by 1,086
Metadata
- Authors
- Bennett, C. H., & Brassard, G.
- Affiliations
- IBM (United States) (US)
- Corresponding author
- Bennett, Charles H.
- ORCID
- Bennett, Charles H.
- Venue
- Theoretical Computer Science
- Publisher
- Elsevier BV
- Published
- 2014-12
- Volume
- 560
- Pages
- 7-11
- ISSN
- 0304-3975 (ISSN-L)
- OpenAlex
- W2015179126
- Semantic Scholar
- 17c16c133ab46e66ea0a08f40d19b3308733c348
- Cited by
- 8,299
- References
- 6
- Citations by year
- 2026: 479 · 2025: 773 · 2024: 554 · 2023: 518 · 2022: 463 · 2021: 616 · 2020: 519 · 2019: 512 · 2018: 374 · 2017: 377 · 2016: 326 · 2015: 343 · 2014: 308
- FWCI
- 449.98
- Type
- journal article
- Language
- en
- Open access
- hybrid
- doi.org
- Licence
- Locations
- Theoretical Computer Science (publishedVersion, cc-by-nc-nd)
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Topics
- Physical Sciences › Physics and Astronomy › Atomic and Molecular Physics, and Optics › Quantum Information and Cryptography
- Physical Sciences › Computer Science › Computer Networks and Communications › Cryptography and Data Security
- Physical Sciences › Engineering › Electrical and Electronic Engineering › Wireless Communication Security Techniques
- Keywords
- quantum cryptography, public key distribution, quantum key distribution, polarized photons, uncertainty principle, eavesdropping detection, quantum channel security, EPR paradox
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
A language model drew the claims from the paper on 2026-10-10, under version 3 of the claim definition (model deepseek-v4.1-flash, prompt extract-v3).
A second model labelled each claim on 2026-10-10 (model jev-1.13-20260917, definition revision gold-guideline-v0.2).
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review