Quantum Cryptography is the area of cryptography that uses principles of quantum physics to provide or analyse cryptographic functionality and security properties. The term is most strongly associated with Quantum Key Distribution, in which quantum states are used to establish a shared secret key between communicating parties, but it can also encompass broader research into quantum authentication, quantum secret sharing, quantum digital signatures and cryptographic protocols involving quantum information.
Its defining distinction from conventional cryptography is that some security properties can derive from physical principles governing quantum states rather than solely from assumptions about the computational difficulty of mathematical problems. Quantum Cryptography therefore encompasses both protocols that exploit quantum mechanics directly and theoretical cryptographic constructions that reason about adversaries possessing quantum capabilities.
The best-known motivation for Quantum Cryptography is the possibility of detecting certain forms of eavesdropping through disturbance of quantum states. In a typical Quantum Key Distribution protocol, information is encoded into quantum states and transmitted through a quantum channel. An eavesdropper who interacts with the states without knowing the legitimate measurement choices can introduce detectable statistical discrepancies.
The communicating parties then use a classical authenticated channel to compare selected information, estimate an error rate and determine whether the observed data is compatible with an acceptable security level. If the estimated error rate is too high, the protocol can abort rather than produce a key. If conditions are acceptable, classical post-processing procedures such as error correction and privacy amplification can produce a shared key with quantified security properties.
Quantum Cryptography is not synonymous with encryption itself. Quantum Key Distribution generally establishes shared secret material rather than directly encrypting arbitrary application data. The resulting key can then be used with conventional symmetric cryptographic algorithms such as a one-time pad or a suitable symmetric cipher. Furthermore, the classical communication channel used alongside the quantum channel must normally be authenticated; otherwise an attacker could impersonate the communicating parties through a man-in-the-middle attack. Authentication can itself rely on classical cryptographic credentials, potentially using post-quantum cryptographic mechanisms where appropriate. This means a complete quantum-secure communications architecture combines quantum and classical security components rather than replacing every cryptographic function with a quantum mechanism.
Several protocol families illustrate different approaches to Quantum Cryptography. BB84 uses non-orthogonal quantum states and incompatible measurement bases to establish a key, while the E91 protocol is based on entangled quantum states and correlations related to Bell inequalities. Other protocols use continuous-variable quantum states rather than discrete photon states. Device-independent approaches seek security properties based on observed statistical correlations rather than trusting detailed internal characteristics of the devices, although practical implementations are highly demanding. Measurement-device-independent protocols were developed to address certain detector vulnerabilities while retaining practical deployment advantages. These variations demonstrate that Quantum Cryptography is not one single protocol or technology; security properties depend on the physical encoding, assumptions about devices, channel characteristics, classical authentication and post-processing procedures.
Security analysis in Quantum Cryptography must account for realistic imperfections rather than ideal textbook behaviour. Photon loss, detector noise, imperfect sources, side channels, timing effects, device leakage and implementation flaws can undermine security even when the underlying theoretical protocol is sound. A protocol's formal security proof normally specifies an adversary model and derives bounds on the information an attacker could obtain about the final key.
Security parameters are chosen so that the probability of an unacceptable security failure is bounded according to the protocol's assumptions. Practical implementations therefore require careful calibration, authenticated classical communication, random-number generation, monitoring and finite-key analysis. The distinction between protocol-level security and implementation-level security is essential because an ideal proof does not automatically secure a defective physical device.
Quantum Cryptography also has important relationships with quantum mechanics and information theory. The no-cloning theorem prevents perfect copying of an unknown quantum state, while measurement disturbance and the statistical structure of incompatible measurements provide mechanisms for detecting certain attacks. Entanglement can provide correlations that are stronger than classical local hidden-variable models permit, and these correlations can support specialised cryptographic protocols. At the same time, quantum information theory supplies the formal tools needed to quantify entropy, information leakage and security. Security proofs may involve concepts such as trace distance, min-entropy, accessible information and composable security. These mathematical frameworks allow researchers to define security more rigorously than simply claiming that an eavesdropper would be noticed.
Quantum Cryptography has limitations that are distinct from the security of post-quantum classical cryptography. Quantum communication requires specialised optical or other quantum hardware, and transmission loss restricts distance unless trusted relays, quantum repeaters or other network architectures are used. Current technologies can also be expensive and operationally complex compared with conventional encrypted networks. Quantum Cryptography does not protect endpoints from malware, compromised credentials, poor authentication or insecure application design. It also does not eliminate the need for secure key management. Consequently, the practical security of a deployment depends on the entire system rather than on the quantum channel alone. These constraints are particularly important when comparing quantum cryptographic infrastructure with software-based cryptographic systems designed to resist quantum-capable classical attackers.
The broader significance of Quantum Cryptography lies in demonstrating that quantum physical laws can be incorporated directly into security mechanisms. Its most mature and widely discussed application is Quantum Key Distribution, but research continues into more advanced protocols and architectures. It is also important to distinguish Quantum Cryptography from post-quantum cryptography: the latter generally uses classical algorithms designed to resist attacks by quantum computers and does not require a quantum communication channel.
The two approaches address different engineering and threat-model questions and may coexist in future security architectures. Quantum Cryptography is therefore best understood as a specialised field combining quantum information, cryptography, communication engineering and security analysis, with powerful theoretical properties but substantial implementation, infrastructure and deployment requirements.
