Quantum key-distribution protocols allow two honest distant parties to establish a common truly random secret key in the presence of powerful adversaries, provided that the two users share beforehand a short secret key. This pre-shared secret key is used mainly for authentication purposes in the post-processing of classical data that have been obtained during the quantum communication stage, and it prevents a man-in-the-middle attack. The necessity of a pre-shared key is usually considered as the main drawback of quantum key-distribution protocols, which becomes even stronger for large networks involving more that two users. Here we discuss the conditions under which physical unclonable function can be integrated in currently available quantum key-distribution systems, in order to facilitate the generation and the distribution of the necessary pre-shared key, with the smallest possible cost in the security of the systems. Moreover, the integration of physical unclonable functions in quantum key-distribution networks allows for real-time authentication of the devices that are connected to the network.
翻译:量子关键分配协议允许两个诚实的遥远方在强大的对手面前建立一个共同的、真正随机的秘密密钥,条件是两个用户事先共享一个简短的秘密密钥。这个预先共享的秘密密钥主要用于对在量子通信阶段获得的古典数据进行后处理过程中的认证目的,防止中继人袭击。预共享密钥的必要性通常被视为量子关键分配协议的主要缺陷,对于涉及两个以上用户的大型网络来说,这种协议变得更加强大。在这里,我们讨论物理不可调密功能能够融入现有量子关键分配系统的条件,以便利必要的预共享密钥的生成和分配,而系统的安全费用则尽可能小。此外,在量子关键分配网络中整合物理不可调密功能,可以实时验证与网络连接的装置。