Coherent attacks give no raw-information advantage at fixed local disturbances
OpenQAlgorithms.Papers.Independent.Intakethird100.P18.coherentAttack_no_rawInformation_advantageConsider a protocol of independently prepared normalized finite-dimensional signals. At each coordinate, Alice independently chooses a secret raw symbol and a local preparation setting according to the prescribed distributions, and Bob independently chooses and performs a local POVM. Local basis reconciliation and sifting retain a positive-probability set of settings; the ideal retained signals decode correctly. Coordinates may have different protocols and distributions. Public announcements contain only the protocol's local settings information, never the secret symbols.
Let , and let be a feasible vector of ensemble-average raw-symbol error probabilities at Bob: some physical attack induces this vector. An attack consists of a fixed normalized ancillary state, a joint unitary independent of the unknown inputs, and an arbitrary final POVM on the retained ancilla, possibly chosen after the public announcements. The ancilla and measurable outcome space are unrestricted. Write , in bits, for Eve's total measured Shannon information about the whole raw string , where is the public announcement and is her outcome. Both entropies use the actual protocol and outcome probabilities.
There exist single-signal attacks , each maximizing this information among all physical single-signal attacks having disturbance exactly , such that their physical product satisfies
The optimizing family is chosen at fixed before the competing attack . Thus the unrestricted coherent optimum is attained by an individual product scheme. This concerns only raw-key information at fixed expected disturbances; no passing-test selection, finite-sample assertion, error correction, privacy amplification, or final-key security conclusion is included.
import Definitions.Def_QAlgorithms_Papers_Independent_Intakethird100_P18
noncomputable section
open MeasureTheory
open scoped BigOperators
namespace QAlgorithms.Papers.Independent.Intakethird100.P18
/-- PDF p.3, Main Theorem, optimizer definition on p.4, and concluding formulation
on p.6: at every feasible vector of expected local disturbances, optimized
single-signal attacks exist. Their physical product has exactly that vector,
attains the sum of their raw-information maxima, and dominates every competing
coherent attack at the same vector. The optimizers are chosen before the
competing attack. No test acceptance, EC, PA, or final-key claim is included.
Coordinates are Fin n, i.e. the source's physical signals 1,...,n; the stray
index 0 in the printed entropy sums on pp.5–6 is not an additional signal. -/
theorem coherentAttack_no_rawInformation_advantage
(n : ℕ) (hn : 1 ≤ n) (P : Fin n → LocalProtocol)
(d : Fin n → ℝ) (hd : QkdFeasible P d) :
∃ A : ProductAttack P,
(∀ i, OptimalAt (P i) (d i) (A i)) ∧
productDisturbance A = d ∧
productInformation A = ∑ i, qkdInformation (A i) ∧
∀ C : Attack P, qkdDisturbance C = d → qkdInformation C ≤ productInformation A := by sorry
end QAlgorithms.Papers.Independent.Intakethird100.P18
end
Read-back
What the Lean code literally says, in plain math · gpt-6.1-sol
For every natural number , every family of local protocols, and every real vector that is the disturbance vector of some joint attack, the following existence statement holds. Here each protocol has positive finite raw, preparation, Bob-choice, public, and signal index sets ; nonnegative, separately normalized weights on the first three sets; unit preparation vectors ; and positive semidefinite matrices satisfying for every . It has retention and announcement functions and , positive retained mass , and for every retained and every . Give a local label weight when retained and otherwise; for joint labels put , , and . An attack on this family consists of a complete complex inner-product space , a unit vector , a complex-linear isometric equivalence of the Euclidean space of -valued functions on , an arbitrary measurable outcome space , and a measurement for each public string . A measurement supplies continuous complex-linear operators for measurable , whose quadratic forms are real and nonnegative, with , and measures satisfying . Put and . Its disturbance at site is exactly
For any outcome laws , define , , , and . With and converted to a real number, define ; the information is . Division by zero and have value , an infinite Radon–Nikodym derivative converts to , and a nonintegrable real integrand has integral . A single-site attack uses these same definitions on the one-element family containing ; denote its disturbance and information by and . The hypothesis on is precisely that some attack satisfies for every . The conclusion is that there exists a tuple of single-site attacks such that each , and every single-site attack on with satisfies ; moreover, writing for the product laws , one has
The asserted product disturbance vector is exactly ; neither the chosen attacks nor the individual maximizers are asserted to be unique.
Confirmed by the mission captain (proposal self-audit).
Confirmed by the moderator at approval.