Experimental quantum key distribution certified by Bell's theorem.

Cryptographic key exchange protocols traditionally rely on computational conjectures such as the hardness of prime factorization1 to provide security against eavesdropping attacks. Remarkably, quantum key distribution protocols such as the Bennett-Brassard scheme2 provide information-theoretic security against such attacks, a much stronger form of security unreachable by classical means. However, quantum protocols realized so far are subject to a new class of attacks exploiting a mismatch between the quantum states or measurements implemented and their theoretical modelling, as demonstrated in numerous experiments3-6. Here we present the experimental realization of a complete quantum key distribution protocol immune to these vulnerabilities, following Ekert's pioneering proposal7 to use entanglement to bound an adversary's information from Bell's theorem8. By combining theoretical developments with an improved optical fibre link generating entanglement between two trapped-ion qubits, we obtain 95,628 key bits with device-independent security9-12 from 1.5 million Bell pairs created during eight hours of run time. We take steps to ensure that information on the measurement results is inaccessible to an eavesdropper. These measurements are performed without space-like separation. Our result shows that provably secure cryptography under general assumptions is possible with real-world devices, and paves the way for further quantum information applications based on the device-independence principle.

Noisy Preprocessing Facilitates a Photonic Realization of Device-Independent Quantum Key Distribution.

Device-independent quantum key distribution provides security even when the equipment used to communicate over the quantum channel is largely uncharacterized. An experimental demonstration of device-independent quantum key distribution is however challenging. A central obstacle in photonic implementations is that the global detection efficiency, i.e., the probability that the signals sent over the quantum channel are successfully received, must be above a certain threshold. We here propose a method to significantly relax this threshold, while maintaining provable device-independent security. This is achieved with a protocol that adds artificial noise, which cannot be known or controlled by an adversary, to the initial measurement data (the raw key). Focusing on a realistic photonic setup using a source based on spontaneous parametric down conversion, we give explicit bounds on the minimal required global detection efficiency.

Device-Independent Detection of Genuine Multipartite Entanglement for All Pure States.

We show that genuine multipartite entanglement of all multipartite pure states in arbitrary finite dimension can be detected in a device-independent way by employing bipartite Bell inequalities on states that are deterministically generated from the initial state via local operations. This leads to an efficient scheme for large classes of multipartite states that are relevant in quantum computation or condensed-matter physics, including cluster states and the ground state of the Affleck-Kennedy-Lieb-Tasaki (AKLT) model. For cluster states the detection of genuine multipartite entanglement involves only measurements on a constant number of systems with an overhead that scales linearly with the system size, while for the AKLT model the overhead is polynomial. In all cases our approach shows some robustness against experimental imperfections.

Revealing genuine optical-path entanglement.

How can one detect entanglement between multiple optical paths sharing a single photon? We address this question by proposing a scalable protocol, which only uses local measurements where single photon detection is combined with small displacement operations. The resulting entanglement witness does not require postselection, nor assumptions about the photon number in each path. Furthermore, it guarantees that entanglement lies in a subspace with at most one photon per optical path and reveals genuinely multipartite entanglement. We demonstrate its scalability and resistance to loss by performing various experiments with two and three optical paths. We anticipate applications of our results for quantum network certification.