Quantum key distribution (QKD) with the decoy-state BB84 protocol is the de facto standard for practical QKD, yet its protocol-level, self-contained, universally composable security proof — the certification-style treatment of Mizutani, Sasaki and Kato (2025) — assumes idealized devices: perfect state preparation and phase randomization, ideal random-number generation, ideal receiver-side phase modulation, identical threshold detectors with fixed efficiency, and no side channels. The authors posed two future-work problems: (i) extend the proof to realistic device imperfections (source modulation/state-preparation flaws and detector non-idealities such as efficiency mismatch), and (ii) modularize security-proof techniques into reusable, composable components so that protocols can be certified by composition rather than end-to-end re-derivation. The subsequent literature (2024–2026) shows rapid but incomplete progress: a general modular entropy-accumulation framework now gives a rigorous and complete proof of decoy-state BB84, but still for idealized devices, with the unified incorporation of device imperfections and side channels explicitly called "an open and formidable task" (Tupkary et al., 2026); a composition theorem and a comprehensive analytical finite-key proof now cover state-preparation flaws, side-channel leakage, pulse correlations, and detection-efficiency mismatch simultaneously for decoy-state QKD, but explicitly exclude imperfections of the decoy-state intensity modulation and of the phase randomization itself, and are not protocol-level certification-grade treatments (Currás-Lorenzo et al., 2025; Sixto et al., 2026); a numerical framework and further works cover strict subsets (loss-tolerant variant with source and detector flaws, leaky receivers, passive detection, unbounded pulse correlations, authentication). No single certification-grade, protocol-level, self-contained composable proof of the standard decoy-state BB84 protocol covering the required source and detector imperfection classes — in particular intensity- and phase-modulation errors — exists. The problem remains open.

Background

Quantum key distribution (QKD) allows two parties, Alice and Bob, to share a secret key whose secrecy is guaranteed information-theoretically against an eavesdropper Eve with unlimited computing power, based on the laws of quantum mechanics. The BB84 protocol is the original prepare-and-measure scheme: Alice encodes random bits in one of two conjugate bases of single photons and Bob measures in a randomly chosen basis; after public comparison of bases, the correctly matched outcomes form a raw key, which is then purified by classical post-processing — error correction, error verification, and privacy amplification (a random universal hash that shortens the key to squeeze out Eve's information). Practical systems use weak coherent laser pulses instead of ideal single photons, which opens the photon-number-splitting attack: Eve splits off extra photons from multi-photon pulses and waits for basis announcement. The decoy-state method defeats this by sending pulses of several randomly chosen intensities so that Alice and Bob can statistically estimate the detection rates attributable to single-photon emissions and bound Eve's information from those alone. Threshold detectors (non-photon-number-resolving avalanche photodiodes) are modeled solely by a detection efficiency and a dark-count probability. Security is demanded in the universal composable framework, meaning the real protocol's output state is close (in trace distance) to an ideal key state, with an explicit total security parameter decomposed into a correctness parameter ϵcorrect\epsilon_{\mathrm{correct}} (probability that Alice's and Bob's keys differ) and a secrecy parameter ϵsecrecy\epsilon_{\mathrm{secrecy}} (Eve's information about the key); composable security guarantees the key is safe in any later use. Mizutani, Sasaki and Kato (arXiv:2504.20417), in an effort connected to a Japanese Quantum Forum security-proof document for certifying QKD systems, gave a flowchart-level description of the entire decoy-state BB84 protocol — including every classical post-processing step — with each operation written as a completely positive trace-preserving (CPTP) map, i.e., the most general physical quantum operation, and a step-by-step self-contained proof in the phase-error-correction approach (Koashi's complementarity-based method, which bounds secrecy via the error rate in the basis conjugate to the key basis), yielding explicit finite-key values of ϵcorrect\epsilon_{\mathrm{correct}}, ϵsecrecy\epsilon_{\mathrm{secrecy}} and the secret-key length. However, their device model is idealized: perfect state preparation, perfect phase randomization (the laser's global phase assumed fully randomized), ideal random numbers, ideal receiver-side phase modulation, identical detector performance, and no side channels (no information leaking from devices to the channel). Real implementations violate all of these: modulators introduce state-preparation flaws (emitted states deviating from the ideal ones, including intensity and phase modulation errors and inter-pulse correlations), detectors suffer efficiency mismatch (the two detectors responding with different efficiencies, possibly time-dependent, which Eve can exploit), and devices leak information through back-reflected Trojan-horse probe light or detector backflashes. Separate literatures handle subsets of these imperfections — the loss-tolerant protocol (a BB84 variant whose proof tolerates source flaws) and its generalizations tolerate state-preparation flaws; entropic-uncertainty-based proofs handle basis-efficiency mismatch — and the proof techniques have historically been scattered across papers with different assumptions and frameworks, which is precisely the obstacle the certification program aims to remove. Since the source paper appeared, composition results have begun to bridge these literatures — a theorem extending phase-error-estimation proofs with source imperfections to also cover detector efficiency mismatch, an analytical finite-key proof for decoy-state QKD with several transmitter and receiver imperfections at once, and a general modular proof framework for decoy-state BB84 — but each still excludes imperfection classes that the certification objective requires (for example, flaws of the decoy intensity modulation and of the phase randomization) or keeps the idealized device model, and none provides the protocol-level certification-grade treatment.

Problem Statement

Extend the protocol-level, self-contained security-proof methodology established for the decoy-state BB84 protocol by Mizutani, Sasaki and Kato (arXiv:2504.20417) — or an equally explicit, self-contained composable framework — to device models capturing realistic implementation imperfections, and modularize the proof techniques. Concretely, the following two deliverables are both mandatory: (1) provide a universally composable, finite-key security proof of the standard decoy-state BB84 protocol — with the same flowchart-level explicitness, every operation specified as a CPTP map, and explicit values of the correctness parameter ϵcorrect\epsilon_{\mathrm{correct}}, the secrecy parameter ϵsecrecy\epsilon_{\mathrm{secrecy}}, and the secret-key length, with a positive secret-key length and nontrivial error parameters (for instance, a total security parameter below 1/2) — under device models that incorporate bounded imperfections of the source (state-preparation flaws, including intensity- and phase-modulation errors, deviations of the emitted states from the ideal ones, and imperfect implementation of the decoy intensity settings and of the phase randomization) and of the detectors (imperfectly characterized detection-efficiency mismatch, including its possible time dependence, beyond the paper's identical fixed-efficiency threshold detectors), without modifying the protocol, where covering at least the enumerated source and detector imperfection classes is sufficient; and (2) structure the proof as reusable modules with clearly specified interfaces — e.g., a detector-model reduction, a statistical-estimation module, and a state-preparation-imperfection treatment — each stating, at minimum, its applicability conditions and the guarantee it delivers, such that subsequent protocols and device models can be certified by composing certified modules rather than repeating an end-to-end proof. The overarching objective is a certification-grade security proof of the actually deployed protocol class: a proof a certification body could evaluate against an implemented system.

References

  1. Akihiro Mizutani, Toshihako Sasaki, Go Kato, "Protocol-level description and self-contained security proof of decoy-state BB84 QKD protocol", arXiv:2504.20417 (2025), https://arxiv.org/abs/2504.20417
  2. Toyohiro Tsurumaru, Akihiro Mizutani, Toshihiko Sasaki, "Security loophole in error verification in quantum key distribution", Phys. Rev. Research 7, 043245 (2025), arXiv:2507.21416, https://arxiv.org/abs/2507.21416, https://doi.org/10.1103/3vms-bx5d
  3. Akihiro Mizutani, Shun Kawakami, Go Kato, "Finite-key security analysis of the decoy-state BB84 QKD with passive measurement", Quantum Science and Technology 11, 015010 (2025), arXiv:2511.21253, https://arxiv.org/abs/2511.21253, https://doi.org/10.1088/2058-9565/ae20b9
  4. Devashish Tupkary, Shlok Nahar, Ernest Y.-Z. Tan, "Authentication in Security Proofs for Quantum Key Distribution", arXiv:2601.17960 (2026), https://arxiv.org/abs/2601.17960
  5. Guillermo Currás-Lorenzo, Margarida Pereira, Go Kato, Marcos Curty, Kiyoshi Tamaki, "Security framework for quantum key distribution with imperfect sources", Optica Quantum 3, 525-534 (2025), arXiv:2305.05930, https://arxiv.org/abs/2305.05930, https://doi.org/10.1364/OPTICAQ.569424
  6. Devashish Tupkary, Shlok Nahar, Pulkit Sinha, Norbert Lütkenhaus, "Phase error rate estimation in QKD with imperfect detectors", Quantum 9, 1937 (2025), arXiv:2408.17349, https://arxiv.org/abs/2408.17349, https://doi.org/10.22331/q-2025-12-11-1937
  7. Alessandro Marcomini, Akihiro Mizutani, Fadri Grünenfelder, Marcos Curty, Kiyoshi Tamaki, "Loss-tolerant quantum key distribution with detection efficiency mismatch", Quantum Science and Technology 10, 035002 (2025), arXiv:2412.09684, https://arxiv.org/abs/2412.09684, https://doi.org/10.1088/2058-9565/adc8cc
  8. Margarida Pereira, Guillermo Currás-Lorenzo, Akihiro Mizutani, Davide Rusca, Marcos Curty, Kiyoshi Tamaki, "Quantum key distribution with unbounded pulse correlations", Quantum Science and Technology 10, 015001 (2024), arXiv:2402.08028, https://arxiv.org/abs/2402.08028, https://doi.org/10.1088/2058-9565/ad8181
  9. Álvaro Navarrete, Margarida Pereira, Guillermo Currás-Lorenzo, Akihiro Mizutani, Marcos Curty, Kiyoshi Tamaki, "Phase-error estimation for quantum key distribution with leaky receivers", arXiv:2608.09674 (2026), https://arxiv.org/abs/2608.09674
  10. Kiyoshi Tamaki, Marcos Curty, Akihiro Mizutani, Álvaro Navarrete, "Deterministic QKD source robust against side-channel attacks", arXiv:2607.28063 (2026), https://arxiv.org/abs/2607.28063
  11. Devashish Tupkary, Ernest Y.-Z. Tan, Shlok Nahar, Lars Kamin, Norbert Lütkenhaus, "Security proofs for practical QKD: variations, techniques, gaps, and limitations", arXiv:2502.10340 (2025), https://arxiv.org/abs/2502.10340
  12. Jerome Wiesemann, Jan Krause, Devashish Tupkary, Norbert Lütkenhaus, Davide Rusca, Nino Walenta, "A consolidated and accessible security proof for finite-size decoy-state quantum key distribution", Quantum 10, 2037 (2026), arXiv:2405.16578, https://arxiv.org/abs/2405.16578, https://doi.org/10.22331/q-2026-03-23-2037
  13. Marco Tomamichel, Anthony Leverrier, "A largely self-contained and complete security proof for quantum key distribution", Quantum 1, 14 (2017), arXiv:1506.08458, https://arxiv.org/abs/1506.08458, https://doi.org/10.22331/q-2017-07-14-14
  14. Guillermo Currás-Lorenzo, Margarida Pereira, Shlok Nahar, Devashish Tupkary, "Security of quantum key distribution with source and detector imperfections through phase-error estimation", arXiv:2507.03549 (2025), https://arxiv.org/abs/2507.03549
  15. Devashish Tupkary, Shlok Nahar, Amir Arqand, Ernest Y.-Z. Tan, Norbert Lütkenhaus, "A rigorous and complete security proof of decoy-state BB84 quantum key distribution", arXiv:2601.18035 (2026), https://arxiv.org/abs/2601.18035
  16. Xoel Sixto, Guillermo Currás-Lorenzo, Margarida Pereira, Víctor Zapatero, Álvaro Navarrete, Marcos Curty, "Finite-key security analysis of decoy-state QKD with source and detector imperfections", arXiv:2606.29943 (2026), https://arxiv.org/abs/2606.29943
  17. Álvaro Navarrete, Guillermo Currás-Lorenzo, Margarida Pereira, Marcos Curty, "Numerical security analysis for practical quantum key distribution", arXiv:2605.12984 (2026), https://arxiv.org/abs/2605.12984
  18. Guillermo Currás-Lorenzo, Margarida Pereira, Alessandro Marcomini, Kiyoshi Tamaki, Marcos Curty, "Security of decoy-state quantum key distribution with correlated bit-and-basis encoders", arXiv:2605.11767 (2026), https://arxiv.org/abs/2605.11767
  19. Zhiyao Wang, Devashish Tupkary, Shlok Nahar, "Phase error estimation for passive detection setups with imperfections and memory effects", arXiv:2508.21486 (2025), https://arxiv.org/abs/2508.21486
  20. Ernest Y.-Z. Tan, Shlok Nahar, "Incorporating device characterization into security proofs", arXiv:2508.15383 (2025), https://arxiv.org/abs/2508.15383
  21. Egor Ivchenko, Aleksandr Khmelev, Vladimir Kurochkin, Anton Trushechkin, "Security of quantum key distribution with passive basis choice and detection-efficiency mismatch for a realistic satellite setup", arXiv:2608.09793 (2026), https://arxiv.org/abs/2608.09793