⚛️ quantum physics

Decoy-state quantum key distribution over 227 km with a frequency-converted telecom single-photon source

The authors demonstrate a decoy-state quantum key distribution scheme using a frequency-converted telecom single-photon source that achieves positive secret key rates over 227 km of optical fiber, representing a tenfold improvement in loss tolerance compared to non-decoy methods.

Original authors: Frederik Brooke Barnes, Roberto G. Pousa, Christopher L. Morrison, Zhe Xian Koong, Joseph Ho, Francesco Graffitti, John Jeffers, Daniel K. L. Oi, Brian D. Gerardot, Alessandro Fedrizzi

Published 2026-08-05

📖 7 min read🧠 Deep dive

CC BY 4.0

Original authors: Frederik Brooke Barnes, Roberto G. Pousa, Christopher L. Morrison, Zhe Xian Koong, Joseph Ho, Francesco Graffitti, John Jeffers, Daniel K. L. Oi, Brian D. Gerardot, Alessandro Fedrizzi

Original paper licensed under CC BY 4.0 (http://creativecommons.org/licenses/by/4.0/). ✨ This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer

Imagine you are trying to send a secret message to a friend using a flashlight in a pitch-black forest. If you just flash the light once, a sneaky spy might be able to sneak a peek without you noticing. But what if you could flash the light in a way that makes it impossible for the spy to know if they are seeing a real message or just a signal? This is the heart of a field called Quantum Key Distribution (QKD). It's a way for two people to create a secret code that is mathematically impossible to crack, thanks to the weird rules of quantum physics. The catch? The "flashlights" used to send these messages are often imperfect. Sometimes, instead of sending just one tiny particle of light (a photon), the source accidentally sends two or three. A clever spy could steal one of those extra photons, read the message, and let the other one pass through, leaving the sender and receiver none the wiser. To stop this, scientists use a clever trick called a "decoy state," where they mix in fake, weaker signals to catch the spy. But until now, this trick worked best with very specific, "perfect" light sources that are hard to build. The big question has been: Can we use the messy, imperfect light sources we actually have in the lab and still send secret codes over really long distances?

This paper says, "Yes, we can." A team of researchers has built a system using a tiny, specialized light source (a quantum dot) that isn't perfect, but they managed to send a secret key over 227 kilometers of optical fiber. That's like sending a secret message from one end of a long tunnel to the other, even though the tunnel is so long that almost all the light gets lost along the way.

Here is how they did it, using a story about a baker and a sneaky thief.

The Baker and the Sneaky Thief
Imagine a baker (Alice) who wants to send secret recipes to a customer (Bob). The baker has a special oven (the quantum dot) that bakes cookies (photons). Ideally, the oven should bake exactly one cookie per batch. But sometimes, due to the heat and the way the oven works, it accidentally bakes two or three cookies in a batch.

A sneaky thief (Eve) is watching the delivery truck. If the baker sends a batch with three cookies, the thief can steal one, eat it to read the recipe, and let the other two continue to the customer. The customer and baker would never know a cookie was stolen.

To stop this, the baker uses a "decoy" strategy. She doesn't just send batches of cookies; she sends three types of batches, but she tells the thief they all look the same from the outside:

The Signal: A batch with a few cookies (the real message).
The Decoy: A batch with fewer cookies (a trap).
The Vacuum: An empty box (no cookies at all).

The baker randomly switches between these three types. If the thief tries to steal from a "Signal" batch, they might get caught because the baker knows exactly how many cookies should arrive. By comparing how many cookies arrived for each type, the baker and customer can estimate the minimum number of single cookies that must have survived the journey. If the numbers don't add up to what is expected for a secure line, they know the thief was stealing and they throw away the message. The decoy batches don't necessarily get caught immediately upon theft; rather, they provide the statistical evidence needed to prove the line is safe or unsafe.

The Problem with "Real" Ovens
For a long time, this "decoy" trick worked great, but only if the baker used a very specific, perfect oven that always followed strict rules (like a laser that was carefully dimmed). However, the best ovens for the future of the internet are these "quantum dot" ovens. They are tiny, fast, and efficient, but they are a bit messy. They don't always follow the strict rules of the perfect ovens, and scientists weren't sure if the decoy trick would work with them over long distances.

The Big Experiment
The researchers in this paper decided to test this messy oven. They built a setup where their "baker" (the quantum dot) was excited by a laser to bake cookies at a specific color (942 nm). But since that color gets lost easily in long fiber optic cables, they used a special crystal to change the color of the cookies to a "telecom" color (1550 nm), which travels much better through the cables, like a super-fast delivery truck.

They then sent these cookies through 227 kilometers of fiber optic cable. That is a huge distance, equivalent to losing 43.4 decibels of signal strength. To make sure the thief couldn't sneak in, they used a dynamic method to control how many cookies the oven baked. Instead of just turning the oven down (which wastes light), they changed the "pulse area" of the laser hitting the oven. This let them create the three different batches (Signal, Decoy, and Vacuum) perfectly.

The Results
The experiment was a success. Even with the "messy" oven and the incredibly long distance, they were able to generate a positive secret key rate. This means they successfully created a secret code that no one else could know.

Here is what they found:

Distance: They achieved a secure key over 227 km of optical fiber.
Comparison: Without using the decoy trick, the system would have failed much earlier, at around 191 km. The decoy method extended the range by a significant margin.
Imperfection: Even though their light source wasn't perfect (it had a tiny bit of "multi-photon" noise, meaning it sometimes sent more than one photon), the decoy method was so good at catching the thief that the system performed almost as well as if they had used a theoretically perfect light source.
Real-world limits: They also looked at what happens if you only have a limited amount of time to send the message (like 20 minutes). In this realistic scenario, the decoy method still worked well, keeping the key rate positive up to 209 km, while the non-decoy method failed at 190 km.

Why This Matters
This paper proves that we don't need to wait for "perfect" light sources to build a secure quantum internet. We can use the imperfect, realistic sources we have right now, as long as we use the right "decoy" tricks. It's like proving that even if your flashlight flickers a bit, you can still signal your friend across a long canyon without the spy figuring out your code.

The authors are careful to note that while this works in the lab and in simulations, real-world networks have other challenges, like detector efficiency and noise. However, this work shows that the "decoy state" protocol is a powerful tool that can make quantum key distribution much more practical and accessible for the future, allowing us to send secret keys over distances that were previously thought impossible for these types of light sources. They didn't just suggest it might work; they measured it, and the numbers show it does.

Technical Summary: Decoy-State Quantum Key Distribution over 227 km with a Frequency-Converted Telecom Single-Photon Source

Problem Statement
While Quantum Key Distribution (QKD) has matured into a viable technology, most high-rate, long-distance implementations rely on Weak Coherent Pulses (WCPs) derived from attenuated lasers. A fundamental limitation of WCPs is the presence of multi-photon terms, which necessitate the use of decoy-state protocols to secure against Photon-Number Splitting (PNS) attacks. However, even with decoy states, WCP-based schemes are constrained by the need to keep the mean photon number low to minimize multi-photon events, limiting peak transmission rates at short distances and capping achievable distances compared to an ideal single-photon source (SPS).

Although genuine SPSs, such as quantum dots (QDs), offer a pathway to surpass these limits, they face challenges in long-distance deployment. Specifically, non-ideal SPSs possess residual multi-photon content and are often coupled with detector noise (dark counts), which can degrade performance over long fiber spans. While recent demonstrations have achieved QKD with frequency-converted SPSs over ~175 km, there remains a need to rigorously apply decoy-state techniques to non-ideal SPSs to extend these distances further and establish security bounds that account for finite-key effects.

Methodology
The authors implement a decoy-state QKD scheme using a telecom C-band single-photon source based on an InGaAs quantum dot. The experimental setup involves the following key components:

Source Generation: A quantum dot is resonantly excited at 4 K to emit photons at 942 nm. These photons are frequency-converted to the telecom C-band (1550 nm) via difference frequency generation in a periodically-poled lithium-niobate (PPLN) waveguide using a 2.4 µm continuous-wave seed laser.
Decoy-State Encoding: Unlike WCP schemes that attenuate the source intensity, the authors generate decoy states by dynamically varying the optical excitation pulse area of the quantum dot. This modulates the photon number distribution without introducing additional insertion loss. Three states are prepared:
1. Signal state ( $\delta^{(1)}$ ): High pulse area ( $0.96\pi$ ) to maximize mean photon number ( $\langle n_1 \rangle \approx 1.16 \times 10^{-2}$ ).
2. Decoy state ( $\delta^{(2)}$ ): Lower pulse area ( $0.18\pi$ ) to optimize protocol performance ( $\langle n_2 \rangle \approx 7.6 \times 10^{-3}$ ).
3. Vacuum state ( $\delta^{(0)}$ ): No driving ( $\langle n_3 \rangle = 0$ ).
Protocol: The system operates under a BB84 protocol with polarization encoding. The receiver (Bob) uses a passive measurement setup with fiber polarizing beam splitters and superconducting nanowire single-photon detectors (SNSPDs). A time-gating window of 1.25 ns is employed to mitigate dark counts.
Security Analysis: The authors provide an updated security analysis based on existing proofs, adapted for sub-Poissonian light sources. They calculate secret key rates in both the asymptotic limit and the finite-key regime (using the multiplicative Chernoff bound) to account for statistical fluctuations in realistic acquisition times.

Key Results

Distance Extension: The experiment successfully demonstrates positive secret key rates over 227 km of optical fiber, corresponding to a channel loss of 43.4 dB.
Performance Comparison:
- Asymptotic Limit: The decoy-state protocol enables positive key rates up to 227 km, whereas the standard non-decoy protocol fails beyond 191 km (37 dB).
- Finite-Key Regime: For a practical block size of $10^{11}$ signals (approx. 20 minutes acquisition), the decoy protocol maintains a positive key rate up to 209 km (40 dB), while the non-decoy protocol drops to zero at 190 km.
- Source Purity: The performance of the imperfect SPS (with $g^{(2)}(0) \approx 0.016$ ) using the decoy protocol closely approaches the theoretical limit of an ideal SPS ( $g^{(2)}(0)=0$ ) of the same brightness, which the model predicts could reach 233 km.
Loss Tolerance: The decoy-state scheme provides a loss tolerance one order of magnitude greater than non-decoy schemes in the high-loss regime.

Significance and Claims
The paper claims that this work broadens the scope of single-photon sources for future quantum networks by enabling long-distance QKD with realistic levels of single-photon purity. Key contributions include:

Validation of Decoy States for SPSs: The authors demonstrate that decoy-state techniques, traditionally associated with WCPs, can be effectively adapted for quantum dot sources by modulating excitation rather than attenuating output.
Relaxed Purity Requirements: The results indicate that the requirement for perfect single-photon purity ( $g^{(2)}(0)=0$ ) to achieve long-distance QKD can be loosened. The protocol's performance is limited more by the signal-to-noise ratio at the receiver (dark counts) than by the intrinsic multi-photon impurity of the source.
Practical Applicability: By utilizing dynamic optical excitation, the method avoids the insertion losses associated with external intensity modulators, which is critical for SPSs where brightness cannot be arbitrarily increased to compensate for loss.
Future Outlook: The authors suggest that as SPS brightness improves (e.g., via Purcell enhancement) and repetition rates increase to the GHz range, the crossover point where decoy states offer an advantage over non-decoy protocols will shift toward shorter acquisition times, making this approach highly relevant for practical, deployed fiber networks.

The work concludes that this approach opens the door to practical QKD using low-purity SPSs and expands the utility of high-performance quantum-dot sources as general-purpose components in future quantum internet architectures.

Technical Summary: Decoy-State Quantum Key Distribution over 227 km with a Frequency-Converted Telecom Single-Photon Source

More like this