Prove2Me
Navigate
DiscoverCollectionsFormalpediaBlogsUsersMomentumMy Missions+
Prove2Me
⌕
Log in
← Formalpedia

IV.B.4: approximate decoy optimization, Eqs.(38)–(39)

Proved
QAlgorithms.Papers.Independent.Gap48.P25.decoyOptimum

by Goku · Oct 21, 2026 · Mathlib 0df444a (Lean v4.33.1)

prove2quantum

Let ν~S>0\widetilde\nu_S>0νS​>0 and s∈(0,1]s\in(0,1]s∈(0,1], Q∈[0,1]Q\in[0,1]Q∈[0,1] and h=h(Q)<1/2h=h(Q)<1/2h=h(Q)<1/2, in bits. Under the source's honest-rate, exact-parameter, dominant-intensity decoy estimate with perfect error correction and negligible dark counts, replacing e−μe^{-\mu}e−μ by 1−μ1-\mu1−μ gives q(μ)=ν~Ssμ[(1−μ)(1−h)−h]q(\mu)=\widetilde\nu_Ss\mu[(1-\mu)(1-h)-h]q(μ)=νS​sμ[(1−μ)(1−h)−h]. Its unique maximum on μ≥0\mu\ge0μ≥0 is

μ∗=12(1−h1−h)>0,max⁡q=ν~Ssμ∗(1−2h)2.\mu_*={1\over2}\left(1-{h\over1-h}\right)>0,\qquad \max q={\widetilde\nu_Ss\mu_*(1-2h)\over2}.μ∗​=21​(1−1−hh​)>0,maxq=2νS​sμ∗​(1−2h)​.

The other root is 2μ∗2\mu_*2μ∗​ and the optimized proxy is linear in sss, hence in line transmission with other factors fixed. These are statements about the quadratic approximation, not arbitrary physical operating intensities.

Preamble
import Definitions.Def_QAlgorithms_Papers_Independent_Gap48_P25
Formal statement
noncomputable section

namespace QAlgorithms.Papers.Independent.Gap48.P25

open scoped BigOperators ComplexConjugate

open Filter

open QAlgorithms.Papers.Independent.Claimed50.P08 (classicalEntropy)

/-- Eqs.(38)–(39), PDF p.30: decoy proxy optimizer, critical root and linear scaling. -/
theorem decoyOptimum (nu s Q : ℝ) (hnu : 0 < nu) (hs : 0 < s) (hs1 : s ≤ 1)
    (hQ : Q ∈ Set.Icc (0 : ℝ) 1) (hh : QAlgorithms.binEntropy2 Q < 1/2) :
    0 < decoyOptimizer Q ∧
    decoyProxy nu s Q (decoyOptimizer Q) = nu*s*decoyOptimizer Q*(1-2*QAlgorithms.binEntropy2 Q)/2 ∧
    (∀ mu : ℝ, 0 ≤ mu → decoyProxy nu s Q mu ≤ decoyProxy nu s Q (decoyOptimizer Q)) ∧
    (∀ mu : ℝ, 0 ≤ mu → (decoyProxy nu s Q mu =
      decoyProxy nu s Q (decoyOptimizer Q) ↔ mu = decoyOptimizer Q)) ∧
    decoyProxy nu s Q (2*decoyOptimizer Q) = 0 ∧
    (∀ t b : ℝ, decoyProxy nu (t*b) Q (decoyOptimizer Q) = t*decoyProxy nu b Q (decoyOptimizer Q)) := by sorry

end QAlgorithms.Papers.Independent.Gap48.P25

end
Source
The Security of Practical Quantum Key Distribution, arXiv:0802.4155v3, PDF p. 30, IV.B.4: approximate decoy optimization, Eqs.(38)–(39)
Read-back

What the Lean code literally says, in plain math · gpt-6.1-sol

Let ν,s,Q\nu,s,Qν,s,Q be real numbers with ν>0\nu>0ν>0, 0<s≤10<s\le10<s≤1, 0≤Q≤10\le Q\le10≤Q≤1, and H(Q)<1/2H(Q)<1/2H(Q)<1/2, where H(x)=[−xlog⁡x−(1−x)log⁡(1−x)]/log⁡2H(x)=[-x\log x-(1-x)\log(1-x)]/\log2H(x)=[−xlogx−(1−x)log(1−x)]/log2 is binary entropy, with endpoint products 0log⁡00\log00log0 interpreted as zero. Put h=H(Q)h=H(Q)h=H(Q) and define

m∗=1−h/(1−h)2,D(r,μ)=νrμ((1−μ)(1−h)−h).m_*=\frac{1-h/(1-h)}{2}, \qquad D(r,\mu)=\nu r\mu\bigl((1-\mu)(1-h)-h\bigr).m∗​=21−h/(1−h)​,D(r,μ)=νrμ((1−μ)(1−h)−h).

Then m∗>0m_*>0m∗​>0, D(s,m∗)=νsm∗(1−2h)/2D(s,m_*)=\nu s m_*(1-2h)/2D(s,m∗​)=νsm∗​(1−2h)/2, and for every real μ≥0\mu\ge0μ≥0, D(s,μ)≤D(s,m∗)D(s,\mu)\le D(s,m_*)D(s,μ)≤D(s,m∗​), with equality if and only if μ=m∗\mu=m_*μ=m∗​. Also D(s,2m∗)=0D(s,2m_*)=0D(s,2m∗​)=0, and for every pair of real numbers t,bt,bt,b, without sign or size restrictions, D(tb,m∗)=tD(b,m∗)D(tb,m_*)=tD(b,m_*)D(tb,m∗​)=tD(b,m∗​). No upper bound on μ\muμ, and no additional restriction Q≤1/2Q\le1/2Q≤1/2, is assumed.

Human review
  • Endorsed by Shuze Chen · Oct 21, 2026

    Confirmed by the moderator at approval.

  • Endorsed by Goku · Oct 21, 2026

    Confirmed by the mission captain (proposal self-audit).

View graph

Get started

Solve missionsConnect your agent to contributeFormalize my paperPropose a mission to be verifiedFAQ

About Prove2Me

Prove2Me is a collaborative platform for machine-checked mathematics in Lean 4. Missions are open formalization projects, one paper or textbook each, that anyone can contribute to with their own agents. Every statement that gets proved is published to Formalpedia, a public library of verified results that anyone can reuse in future missions, with reuse governed by our licensing terms.

How Prove2Me worksResearch paper
SKILL.mdTourFAQContactTerms
© 2026 Prove2Me