Score:4

Does Quantum Key Distribution (aka: QKD) qualify as "Cryptography"?

ci flag

This may be a polemic question, but since I did read the rules of the site and "terms and definitions" appear to be legitimate subjects, I want to raise this because I find this interesting, and I want to find out if someone can give me a new perspective on the matter.

Historically, Cryptography was not concerned with the communication channel. The whole point of most Cryptographic devices, protocols, algorithms, etc. was to transform information in a way that no matter how it is carried, where it is stored, etc. remains incomprehensible to an adversary. Classical Cryptography assumes that the channel is completely accessible and open to any attacker and has no innate special properties.

Now, it is obvious that in QKD the situation is quite the opposite: the whole basis of QKD protocols is the reliance on a Quantum Channel. Without allowing for the quantum phenomenon of superposition, entanglement, etc. which are enabled by such a channel, these protocols simply cannot work as intended - they are built around the assumption that the channel allows for such phenomena, and hence QKD protocols exploit them in very ingenious ways.

However, it may be argued, that even if we say that QKD protocols are security protocols, as opposed to cryptographic protocols, it is still clear that their application is directly related to Cryptography: establishing a mutual secret key, which later can be used to carry out secret communication via any channel (be it classical or a quantum channel. or even a raven :)).

I do think it's important to use language consistently. In fact, my trigger for writing this question was a disagreement about this with someone in the comment section in another Q. By no means do I write this just to "see who is right" however, I think disagreements can be a productive source for refining our ideas and in this case, our language :) So, I'll be glad to hear your thoughts on the matter, whatever they may be.

lamontap avatar
cn flag
Cryptography is about information and information can be quantum. Classical cryptography also makes "physical" assumptions, e.g. that Alice and Bob's computers are outside Eve's reach. Quantum cryptography actually allows us to weaken that assumption (i.e. device-independent quantum cryptography).
Amit avatar
ci flag
@lamontap - Classical cryptography can be done without computers (and indeed it was, via special purpose machines or even manually). So it's not about computers being out of reach, these are *abstract* requirements like the ability of parties to keep their keys secret locally in any way they can. That's not quite the same as the very specific demand for a quantum channel introduced in QKD. (Note the OP is about QKD in particular, not Quantum Cryptography which is a much wider area).
Score:5
my flag

The whole point of most Cryptographic devices, protocols, algorithms, etc. was to transform information in a way that no matter how it is carried, where it is stored, etc. remains incomprehensible to an adversary.

I believe the point of cryptography is to achieve the security goals (for example, privacy); the means to that end, for most cryptography, may be to transform that data to be incomprehensible, true, however that's not necessarily the only way.

Classical Cryptography assumes that the channel is completely accessible and open to any attacker

QKD also does not assume a trusted channel, that is, one that cannot be monitored (privacy, of course, would be trivial with such a channel). Instead, QKD relies on being able to detect when that channel is monitored (which would allow the end points to take appropriate action).

So, if the question is about definitions, yes, in my opinion, QKD does fall within the definition of 'cryptography'.

BTW: QKD is not synonymous with Quantum Cryptography; certainly, QKD is one example of Quantum Cryptography (and certainly the most well-known one), however other cryptographic uses of Quantum Mechanics have been proposed.

Score:1
in flag

QKD is a method for key establishment. I guess that is part of cryptography by definition. If you have a fast QKD system you could even use the key stream as an OTP, and in that case you could even encrypt messages directly, only using XOR as an addition (and of course some method of advancing through the plaintext / ciphertext, but yeah).

As everybody will probably accept that key establishment is part of cryptography then QKD should be considered part of cryptography.


The rest of your question is about how QKD may not be part of cryptography because of the way it operates. That's in my opinion besides the point; if it is part of a numerical system that can be used to achieve message confidentiality then it is part of cryptography. I'd also indicate that modern cryptography contains algorithms such as CSPRNG's and many other notions that are not directly about message confidentiality in a channel.

If Caesar or Vigenere would like to disagree on the definition they only have to say. They might however indicate that we should be talking about cryptology instead of cryptography in this scenario. Languages and definitions change; applying terms from classical cryptography to QKD is - in my opinion - an act of futility.

Amit avatar
ci flag
It's true that Cryptography evolved to encompass more things: for example it is quite a modern development to include within Cryptography various methods for authentication and data integrity (in particular, where we may not even *encrypt* anything as such, but generate some signatures / tags for objects). My conceptual difficulty with QKD-as-Crypto however is not that it operates *differently* but rather the particular reliance on specific *physical* phenomenon that make it work. But perhaps it would be reasonable to say that it is not part of "Mathematical Cryptography"? Just a thought
Maarten Bodewes avatar
in flag
I guess you could say that. You could also say that about entropy sources I guess. However, I don't see "mathematical cryptography" used anywhere, so make of that what you will - I guess it is relatively clear from the separate terms what you mean by it, especially if you provide context.
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.