What Is Quantum Cryptography?

Quantum cryptography is a field that applies quantum-mechanical principles to the design and analysis of cryptographic protocols, enabling forms of security that derive from the laws of physics rather than from unproven computational hardness assumptions. Its most developed branch, quantum key distribution (QKD), allows two parties to establish a shared secret key whose secrecy is guaranteed by the impossibility of measuring an unknown quantum state without disturbing it. Beyond key distribution, quantum cryptography also encompasses post-quantum cryptography, which designs classical mathematical algorithms resilient to attacks from quantum computers, and device-independent cryptography, which grounds security proofs in observed correlations rather than trust in hardware.

The discipline traces its roots to the BB84 protocol proposed by Charles Bennett and Gilles Brassard in 1984, which showed that photon polarization could carry cryptographic keys in a physically secure manner. Classical cryptography, including widely deployed systems such as RSA and elliptic-curve schemes, derives its security from the presumed difficulty of factoring large integers or solving the discrete logarithm problem. Peter Shor's 1994 quantum factoring algorithm demonstrated that a sufficiently powerful quantum computer would break those foundations, motivating both the development of QKD and a global effort to replace classical algorithms.

Quantum Key Distribution

In a QKD protocol, a sender and receiver exchange quantum states, typically single photons, over a quantum channel. Because any eavesdropper must interact with the photons to extract information, noise introduced by interception is detectable through statistical tests on a subset of exchanged bits. After the exchange, a classical post-processing phase distills a secure key from the agreed-upon bits. The BB84 protocol, and later variants such as E91 (which uses entangled photon pairs), have been demonstrated over fiber-optic links up to a few hundred kilometers and over free-space links via satellite. Rigorous security proofs, accessible through arXiv's treatment of BB84 security analysis, establish that the key rate remains positive even against arbitrary collective attacks on the quantum channel.

Post-Quantum Cryptography

Post-quantum cryptography (PQC) addresses the threat quantum computers pose to classical public-key infrastructure by developing algorithms based on mathematical problems believed to be hard even for quantum machines. These problems include learning-with-errors (LWE), shortest vector problems on lattices, hash-based signatures, and code-based schemes. After an eight-year standardization effort, NIST finalized its first post-quantum standards in August 2024: FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA), replacing the Kyber and Dilithium algorithm names with formal designations. These standards are designed for drop-in deployment alongside existing internet protocols, addressing the "harvest now, decrypt later" threat where adversaries collect encrypted traffic today for future decryption once quantum hardware matures.

Device-Independent and Quantum-Safe Security

Device-independent quantum cryptography removes the need to trust that QKD hardware performs as specified, grounding security proofs instead in the correlations observed between measurement outcomes. If Alice and Bob observe correlations that violate a Bell inequality, the correlations cannot be reproduced by any local hidden variable model, and security follows from fundamental quantum mechanics regardless of how the devices were built. This approach remains experimentally challenging, requiring high-efficiency detectors and low-loss channels to close detection loopholes. Full coverage of quantum-safe security options is detailed in NIST's post-quantum cryptography project at CSRC, which tracks algorithm evaluation and deployment guidance for organizations transitioning away from quantum-vulnerable systems.

Applications

Quantum cryptography has applications in a range of fields, including:

• Government and defense communications, where long-term secrecy requirements motivate early QKD deployment
• Financial networks, where QKD links protect high-value transaction infrastructure
• Critical infrastructure protection, where post-quantum algorithms secure power grids, water systems, and telecommunications
• Certificate authorities and public key infrastructure, transitioning to NIST-standardized lattice-based algorithms
• Quantum networks, where QKD provides authenticated entanglement distribution for distributed quantum computing