{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,25]],"date-time":"2026-09-25T16:13:11Z","timestamp":1790352791054,"version":"4.1.0"},"reference-count":44,"publisher":"MDPI AG","issue":"2","license":[{"start":{"date-parts":[[2023,1,24]],"date-time":"2023-01-24T00:00:00Z","timestamp":1674518400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100000780","name":"European Union\u2019s Horizon 2020 research and innovation program","doi-asserted-by":"publisher","award":["857156"],"award-info":[{"award-number":["857156"]}],"id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000780","name":"European Union\u2019s Horizon 2020 research and innovation program","doi-asserted-by":"publisher","award":["830929"],"award-info":[{"award-number":["830929"]}],"id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Entropy"],"abstract":"<jats:p>Quantum key distribution (QKD) has been researched for almost four decades and is currently making its way to commercial applications. However, deployment of the technology at scale is challenging because of the very particular nature of QKD and its physical limitations. Among other issues, QKD is computationally intensive in the post-processing phase, and devices are therefore complex and power hungry, which leads to problems in certain application scenarios. In this work, we study the possibility to offload computationally intensive parts in the QKD post-processing stack in a secure way to untrusted hardware. We show how error correction can be securely offloaded for discrete-variable QKD to a single untrusted server and that the same method cannot be used for long-distance continuous-variable QKD. Furthermore, we analyze possibilities for multi-server protocols to be used for error correction and privacy amplification. Even in cases where it is not possible to offload to an external server, being able to delegate computation to untrusted hardware components on the device itself could improve the cost and certification effort for device manufacturers.<\/jats:p>","DOI":"10.3390\/e25020226","type":"journal-article","created":{"date-parts":[[2023,1,25]],"date-time":"2023-01-25T03:53:18Z","timestamp":1674618798000},"page":"226","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["On the Security of Offloading Post-Processing for Quantum Key Distribution"],"prefix":"10.3390","volume":"25","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1829-4882","authenticated-orcid":false,"given":"Thomas","family":"Lor\u00fcnser","sequence":"first","affiliation":[{"name":"AIT Austrian Institute of Technology, Giefinggasse 4, 1210 Vienna, Austria"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2835-9093","authenticated-orcid":false,"given":"Stephan","family":"Krenn","sequence":"additional","affiliation":[{"name":"AIT Austrian Institute of Technology, Giefinggasse 4, 1210 Vienna, Austria"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4174-659X","authenticated-orcid":false,"given":"Christoph","family":"Pacher","sequence":"additional","affiliation":[{"name":"AIT Austrian Institute of Technology, Giefinggasse 4, 1210 Vienna, Austria"},{"name":"fragmentiX Storage Solutions GmbH, Pl\u00f6cking 1, 3400 Klosterneuburg, Austria"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5374-0078","authenticated-orcid":false,"given":"Bernhard","family":"Schrenk","sequence":"additional","affiliation":[{"name":"AIT Austrian Institute of Technology, Giefinggasse 4, 1210 Vienna, Austria"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2023,1,24]]},"reference":[{"key":"ref_1","first-page":"453","article-title":"Demystifying the information reconciliation protocol cascade","volume":"15","author":"Pacher","year":"2015","journal-title":"Quantum Inf. Comput."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Pedersen, T.B., and Toyran, M. (2015). High performance information reconciliation for QKD with CASCADE. Quantum Inf. Comput., 419\u2013434.","DOI":"10.26421\/QIC15.5-6-4"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Mao, H.K., Qiao, Y.C., and Li, Q. (2021). High-Efficient Syndrome-Based LDPC Reconciliation for Quantum Key Distribution. Entropy, 23.","DOI":"10.3390\/e23111440"},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"327","DOI":"10.1007\/s11128-015-1160-4","article-title":"Attacks on quantum key distribution protocols that employ non-ITS authentication","volume":"15","author":"Pacher","year":"2016","journal-title":"Quantum Inf. Process."},{"key":"ref_5","unstructured":"Maurhart, O., Pacher, C., Happe, A., Lor, T., Tamas, C., Poppe, A., and Peev, M. (2013, January 5\u20139). New release of an open source QKD software: Design and implementation of new algorithms, modularization and integration with IPSec. Proceedings of the QCRYPT 2013, Waterloo, ON, Canada."},{"key":"ref_6","first-page":"1","article-title":"High-speed implementation of length-compatible privacy amplification in continuous-variable quantum key distribution","volume":"10","author":"Wang","year":"2018","journal-title":"IEEE Photonics J."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"14561","DOI":"10.1038\/s41598-020-71534-5","article-title":"High-throughput GPU layered decoder of quasi-cyclic multi-edge type low density parity check codes in continuous-variable quantum key distribution systems","volume":"10","author":"Li","year":"2020","journal-title":"Sci. Rep."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"3935","DOI":"10.1109\/JLT.2020.2985408","article-title":"High-Speed Post-Processing in Continuous-Variable Quantum Key Distribution Based on FPGA Implementation","volume":"38","author":"Yang","year":"2020","journal-title":"J. Lightwave Technol."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"47687","DOI":"10.1109\/ACCESS.2021.3065776","article-title":"An FPGA-Based LDPC Decoder with Ultra-Long Codes for Continuous-Variable Quantum Key Distribution","volume":"9","author":"Yang","year":"2021","journal-title":"IEEE Access"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"85006","DOI":"10.1088\/1367-2630\/11\/8\/085006","article-title":"Composability in quantum cryptography","volume":"11","author":"Renner","year":"2009","journal-title":"New J. Phys."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"265","DOI":"10.1016\/0022-0000(81)90033-7","article-title":"New Hash Functions and Their Use in Authentication and Set Equality","volume":"22","author":"Wegman","year":"1981","journal-title":"J. Comput. Syst. Sci."},{"key":"ref_12","unstructured":"Hofheinz, D., and Rosen, A. Composable and Finite Computational Security of Quantum Message Transmission. Proceedings of the Theory of Cryptography."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"3301","DOI":"10.1103\/PhysRevA.59.3301","article-title":"Estimates for practical quantum cryptography","volume":"59","year":"1999","journal-title":"Phys. Rev. A"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"3427","DOI":"10.1109\/JLT.2018.2843136","article-title":"10-Mb\/s Quantum Key Distribution","volume":"36","author":"Yuan","year":"2018","journal-title":"J. Lightwave Technol."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"9454","DOI":"10.1038\/s41598-021-88468-1","article-title":"Demonstration of high-speed and low-complexity continuous variable quantum key distribution system with local local oscillator","volume":"11","author":"Ren","year":"2021","journal-title":"Sci. Rep."},{"key":"ref_16","unstructured":"Neppach, A., Pfaffel-Janser, C., Wimberger, I., Loruenser, T., Meyenburg, M., Szekely, A., and Wolkerstorfer, J. (2008, January 26\u201329). Key management of quantum generated keys in IPSEC. Proceedings of the International Conference on Security and Cryptography SECRYPT 2008, Porto, Portugal."},{"key":"ref_17","unstructured":"Bennett, C.H., and Brassard, G. (1984, January 9\u201312). Quantum cryptography: Public key distribution and coin tossing. Proceedings of the IEEE International Conference on Computers, Systems, and Signal Processing, Bangalore, India."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"144003","DOI":"10.1063\/5.0021468","article-title":"Performance and security of 5 GHz repetition rate polarization-based quantum key distribution","volume":"117","author":"Boaron","year":"2020","journal-title":"Appl. Phys. Lett."},{"key":"ref_19","unstructured":"Brassard, G., and Salvail, L. (1993, January 23\u201327). Secret-Key Reconciliation by Public Discussion. Proceedings of the Advances in Cryptology\u2014EUROCRYPT \u201993, Workshop on the Theory and Application of of Cryptographic Techniques, Lofthus, Norway."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Pacher, C., Grabenweger, P., Martinez-Mateo, J., and Martin, V. (2015, January 14\u201319). An information reconciliation protocol for secret-key agreement with small leakage. Proceedings of the 2015 IEEE International Symposium on Information Theory (ISIT), Hong Kong, China.","DOI":"10.1109\/ISIT.2015.7282551"},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Elkouss, D., Martinez, J., Lancho, D., and Martin, V. (September, January 30). Rate compatible protocol for information reconciliation: An application to QKD. Proceedings of the 2010 IEEE Information Theory Workshop on Information Theory (ITW 2010), Dublin, Ireland.","DOI":"10.1109\/ITWKSPS.2010.5503195"},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"062419","DOI":"10.1103\/PhysRevA.103.062419","article-title":"Multiedge-type low-density parity-check codes for continuous-variable quantum key distribution","volume":"103","author":"Mani","year":"2021","journal-title":"Phys. Rev. A"},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"471","DOI":"10.1109\/TIT.1973.1055037","article-title":"Noiseless coding of correlated information sources","volume":"19","author":"Slepian","year":"1973","journal-title":"IEEE Trans. Inf. Theory"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1109\/TIT.1976.1055508","article-title":"The rate-distortion function for source coding with side information at the decoder","volume":"22","author":"Wyner","year":"1976","journal-title":"IEEE Trans. Inf. Theory"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"1301","DOI":"10.1103\/RevModPhys.81.1301","article-title":"The security of practical quantum key distribution","volume":"81","author":"Scarani","year":"2009","journal-title":"Rev. Mod. Phys."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Martinez-Mateo, J., Elkouss, D., and Martin, V. (2012). Blind Reconciliation. arXiv.","DOI":"10.26421\/QIC12.9-10-5"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"733","DOI":"10.1109\/18.256484","article-title":"Secret key agreement by public discussion from common information","volume":"39","author":"Maurer","year":"1993","journal-title":"IEEE Trans. Inf. Theory"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"042325","DOI":"10.1103\/PhysRevA.90.042325","article-title":"Reverse-reconciliation continuous-variable quantum key distribution based on the uncertainty principle","volume":"90","author":"Furrer","year":"2014","journal-title":"Phys. Rev. A"},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Leverrier, A., Grosshans, F., and Grangier, P. (2010). Finite-size analysis of a continuous-variable quantum key distribution. Phys. Rev. A, 81.","DOI":"10.1103\/PhysRevA.81.062343"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Ben-Or, M., Goldwasser, S., and Wigderson, A. (1988, January 2\u20134). Completeness theorems for non-cryptographic fault-tolerant distributed computation. Proceedings of the Twentieth Annual ACM Symposium on Theory of Computing (STOC \u201988), Chicago, IL, USA.","DOI":"10.1145\/62212.62213"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Chaum, D., Crepeau, C., and Damgdr, I. (1988, January 2\u20134). Multiparty unconditionally secure protocols. Proceedings of the Twentieth Annual ACM Symposium on Theory of Computing (STOC \u201988), Chicago, IL, USA.","DOI":"10.1145\/62212.62214"},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"612","DOI":"10.1145\/359168.359176","article-title":"How to Share a Secret","volume":"22","author":"Shamir","year":"1979","journal-title":"Commun. ACM"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Raeini, M.G., and Nojoumian, M. (2018, January 8\u201310). Secure error correction using multiparty computation. Proceedings of the 2018 IEEE 8th Annual Computing and Communication Workshop and Conference (CCWC 2018), Las Vegas, NV, USA.","DOI":"10.1109\/CCWC.2018.8301702"},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"599","DOI":"10.1109\/18.910577","article-title":"The capacity of low-density parity-check codes under message-passing decoding","volume":"47","author":"Richardson","year":"2001","journal-title":"IEEE Trans. Inf. Theory"},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Gallager, R.G. (1963). Low-Density Parity-Check Codes, MIT Press.","DOI":"10.7551\/mitpress\/4347.001.0001"},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Lor\u00fcnser, T., and Wohner, F. (2020, January 8\u201310). Performance Comparison of Two Generic MPC-frameworks with Symmetric Ciphers. Proceedings of the 17th International Joint Conference on e-Business and Telecommunications, SCITEPRESS\u2014Science and Technology Publications, Virtual Conference.","DOI":"10.5220\/0009831705870594"},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Feldman, J., Wainwright, M.J., and Karger, D.R. (2005). Using linear programming to decode binary linear codes. IEEE Trans. Inf. Theory, 51.","DOI":"10.1109\/TIT.2004.842696"},{"key":"ref_38","unstructured":"Feldman, J. (2003). Decoding Error-Correcting Codes via Linear Programming. [Ph.D. Thesis, Massachusetts Institute of Technology]."},{"key":"ref_39","first-page":"90","article-title":"Solving Linear Programs Using Multiparty Computation","volume":"Volume 5628 LNCS","author":"Toft","year":"2009","journal-title":"Lecture Notes in Computer Science (Including Subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)"},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Lor\u00fcnser, T., Wohner, F., and Krenn, S. (2022). A Verifiable Multiparty Computation Solver for the Assignment Problem and Applications to Air Traffic Management. arXiv.","DOI":"10.1145\/3560810.3564263"},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Milovancev, D., Honz, F., Vokic, N., Laudenbach, F., H\u00fcbel, H., and Schrenk, B. (2021, January 13\u201316). Ultra-Low Noise Balanced Receiver with >20 dB Quantum-to-Classical Noise Clearance at 1 GHz. Proceedings of the European Conference on Optical Communication, (ECOC 2021), Bordeaux, France.","DOI":"10.1109\/ECOC52684.2021.9606023"},{"key":"ref_42","first-page":"1","article-title":"Towards Integrating True Random Number Generation in Coherent Optical Transceivers","volume":"26","author":"Pacher","year":"2020","journal-title":"IEEE J. Sel. Top. Quantum Electron."},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"20","DOI":"10.1088\/1367-2630\/11\/4\/045013","article-title":"Fully automated entanglement-based quantum cryptography system for telecom fiber networks","volume":"11","author":"Treiber","year":"2009","journal-title":"New J. Phys."},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Loruenser, T., Querasser, E., Matyus, T., Peev, M., Wolkerstorfer, J., Hutter, M., Szekely, A., Wimberger, I., Pfaffel-Janser, C., and Neppach, A. (2008, January 2\u20134). Security processor with quantum key distribution. Proceedings of the Application-Specific Systems, Architectures and Processors (ASAP 2008), Leuven, Belgium.","DOI":"10.1109\/ASAP.2008.4580151"}],"container-title":["Entropy"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1099-4300\/25\/2\/226\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T18:15:01Z","timestamp":1760120101000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1099-4300\/25\/2\/226"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,1,24]]},"references-count":44,"journal-issue":{"issue":"2","published-online":{"date-parts":[[2023,2]]}},"alternative-id":["e25020226"],"URL":"https:\/\/doi.org\/10.3390\/e25020226","relation":{},"ISSN":["1099-4300"],"issn-type":[{"value":"1099-4300","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,1,24]]}}}