Passive Decoy State Protocols in QKD

• Passive decoy state protocols are quantum key distribution schemes that generate decoy states through fixed optical interference and classical post-selection, eliminating active modulation.
• They rely on precise statistical modeling of conditional photon-number distributions using linear optics, heralded detections, and threshold detectors to prevent side-channel attacks.
• These protocols integrate seamlessly with advanced QKD systems like MDI-QKD and Twin-Field QKD, offering robust security despite a sifting penalty compared to active methods.

Passive decoy state protocols are quantum key distribution (QKD) schemes in which decoy states are generated without active intensity modulation. Instead, the required photon-number statistics are achieved by fixed optical interference and classical post-selection, typically using multiple phase-randomized lasers, beam splitters, and local detectors. Eliminating actively driven modulators, passive decoy state protocols intrinsically avoid modulator-induced side channels and support implementation with off-the-shelf linear optical components, enhancing the security of QKD sources and enabling high-repetition-rate operation. These protocols have evolved from simple heralded threshold-detection schemes to fully protocol-independent architectures that can combine passive decoy-state generation and passive basis encoding, and support integration into advanced protocols such as measurement-device-independent QKD and Twin-Field QKD.

1. Conceptual Foundations and Source Architectures

Passive decoy-state operation removes active intensity modulation by exploiting the intrinsic randomness of phase and amplitude outcomes in coherent interference networks or parametric down-conversion (PDC) sources. Notable architectures include:

• Phase-randomized coherent sources: Schemes using two or more independent pulsed lasers whose outputs interfere on beam splitters. The post-selection on local detection outcomes (e.g., click/no-click) creates distinct intensity classes corresponding to decoy and signal (Sun et al., 2016, Li et al., 2013, Zapatero et al., 2022).
• Fully-passive linear-optical sources: Four phase-randomized lasers interfere pairwise at beam splitters to create variable intensities and polarizations. Classical photodiode monitoring yields the full classical record (intensity $\mu_H$, $\mu_V$, and relative phase) used for binning into continuous “decoy regions” and for passive state encoding (Wang et al., 2022, Zapatero et al., 2023).
• Heralded single-photon sources (HSPS) from PDC: Alice (or Bob) monitors the idler photon from a PDC crystal using threshold detectors; the corresponding signal pulse (in the other arm) is tagged as signal or decoy based on detector patterns (Sun et al., 2014, Zhang et al., 2019, Zhou et al., 2014, Ying et al., 2024, Ying et al., 18 Feb 2025).

The essential design principle is that observed classical outcomes on auxiliary beams (intensity and/or detection pattern) define probabilistic bins with different photon statistics, eliminating the need for modulator-driven random number generators and active switching (Wang et al., 2022).

2. Statistical Modeling and Decoy-State Parameter Estimation

Passive protocols rely on precise characterization of the photon statistics conditioned on local measurement outcomes. The core analysis involves:

• Conditional photon-number distributions: For example, after interfering two phase-randomized lasers, the joint photon-number probability depends on the interference phase and can be calculated analytically (Li et al., 2013, Curty et al., 2011, Sun et al., 2016, Wang et al., 2022).
• Binning and region definition: Signals are binned into decoy classes via threshold detection (click/no-click) or via sector-shaped acceptance regions in the $(\mu_H, \mu_V)$ plane as determined by measured intensities (Wang et al., 2022, Zapatero et al., 2022).
• Linear program (LP) decoy analysis: In each bin, the statistical gain $Q_i$ (fraction of pulses where Bob detects a click) and error $Q_i E_i$ are measured; these are used to solve LPs for lower bounds on the single-photon yield $Y_1$ and upper bounds on the single-photon error rate $e_1$ (Wang et al., 2022, Zapatero et al., 2022, Zapatero et al., 2023, Li et al., 2013, Sun et al., 2014).
• Finite-key analysis: Modern security proofs incorporate finite-size statistical corrections via Azuma’s inequality, Serfling bounds, and smooth entropy methods, quantifying the privacy amplification required even for relatively small numbers of transmitted pulses (Zapatero et al., 2023, Zhou et al., 2014).

In passive protocols, the final statistical estimation critically depends on thorough calibration of the optical setup and monitoring measurement noise, particularly in the presence of intensity fluctuations or imperfect phase randomization (Li et al., 2013, Zhou et al., 2014).

3. Protocol Implementations: BB84, MDI-QKD, Twin-Field, and Beyond

Passive decoy-state methodology supports a range of QKD protocols:

• BB84 and six-state QKD: Passive decoy-state selection combined with passive polarization or phase encoding fully supports standard protocols. The source can output any arbitrary qubit state via post-selection, providing protocol independence (Wang et al., 2022, Zapatero et al., 2022, Curty et al., 2011, Ying et al., 18 Feb 2025).
• Measurement-device-independent QKD (MDI-QKD): Passive sources labeled by classical monitoring can be incorporated into MDI protocols, yielding immunity against both detector-side and modulator-side channel attacks (Zhang et al., 2019, Wang et al., 2023).
• Twin-Field QKD: Passive decoy-state QKD can be adapted to twin-field architecture by controlling intensity via interference between independent lasers and defining decoy regions from phase slices or local detection outcomes (Teng et al., 2020, Wang et al., 2023).
• Quantum Secure Direct Communication (QSDC): Passive heralded sources have been applied to QSDC, significantly increasing secrecy message capacity by suppressing the vacuum component and enhancing single-photon generation (Ying et al., 2024).

Tables summarizing the architectures and applications:

Scheme Type	Passive State Preparation	Decoy-State Generation
BB84, Six-State	Linear optics, post-selection	Threshold detector, intensity bins
MDI-QKD	Linear optics, passive encoding	Heralded HSPS, detection bins
Twin-Field QKD	Phase-randomized interference	Intensity bins from passive phase monitoring
QSDC	PDC-based heralding	Detector-trigger-labeled states

4. Performance, Robustness, and Comparative Assessment

Extensive simulations and experimental demonstrations have established the following performance characteristics:

• Asymptotic key rates: Passive protocols typically yield a per-pulse key rate about 1 order of magnitude below active decoy-state schemes, due to sifting loss from post-selection and the necessity of discarding pulses outside acceptance regions. However, reasonable rates are attainable—e.g., $R\sim10^{-3}$ at 50 km in fully-passive BB84 (Wang et al., 2022).
• Side-channel immunity: Removal of active modulators eliminates all side-channel risks associated with intensity or phase modulation, including Trojan-horse attacks, wavelength/pulse-shape discrimination, and modulation-induced correlations (Wang et al., 2022, Zhang et al., 2019, Wang et al., 2023).
• Operation under intensity fluctuations: Simulations show passive decoy schemes outperform active two-intensity protocols and approach active three-intensity performance under realistic fluctuation levels, with greater robustness to hardware instability (Li et al., 2013).
• Finite-size and real-world implementation: Finite-key security is rigorously proven: N = 10⁹ pulses permit positive key rates at $\sim$30 km distances; over 10¹³ pulses, passive-decoy schemes match active protocols at 180 km (Zhou et al., 2014, Zapatero et al., 2023).
• Integration into advanced protocols: Passive decoy-state sources are compatible with MDI-QKD and TF-QKD, offering global security against both modulator and detector side-channels (Wang et al., 2023, Wang et al., 2023).

5. Experimental Realizations and Practical Considerations

Passive decoy-state QKD has received extensive experimental validation:

• Heralded PDC-based transmitters: Systems using a pulsed pump laser, PDC in nonlinear waveguides, and up-conversion single-photon detectors have demonstrated secure transmission at 50 km with key rates $\sim$100 bit/s (Sun et al., 2014). Upgrades to detectors, waveguide loss, and repetition rates suggest scalability to 150 km or beyond.
• Linear optics with phase-randomized lasers: All-passive encoding and decoy-state generation implemented with four lasers, beam splitters, and classical polarization measurement yields protocol-independent operation with rigorous security proofs (Wang et al., 2022, Zapatero et al., 2022).
• Comparison with active schemes: Passive implementations require fewer high-speed components, no fast modulators, and simplified electronics. They are compatible with commercial lasers and photodiodes, but may incur greater overhead in classical post-selection and require accurate calibration of the phase/interference statistics (Sun et al., 2016).

6. Limitations, Challenges, and Extensions

Key limitations and open challenges are:

• Reduction in key rate: Sifting loss due to passive post-selection causes an $\sim$10× rate penalty compared to active modulation in the asymptotic regime (Wang et al., 2022, Zapatero et al., 2023). Techniques such as finely tuned acceptance region optimization and continuous/interpolated decoy analysis mitigate this penalty (Kamin et al., 2024).
• Requirement for true phase randomization: Passive schemes require statistically independent laser phases, best achieved via gain-switched lasers under electronic isolation (Wang et al., 2022, Li et al., 2013).
• Precise calibration of photon-number statistics: Accurate characterization of the conditional photon distributions underlies the security analysis; intensity and detector fluctuations must be tightly controlled (Li et al., 2013, Zhou et al., 2014).
• Ongoing security analysis of side channels: Recent work analyzes joint attacks on polarization and passive side-channel degrees of freedom, requiring high-visibility interference ($\sim$99.9%) for security over long fiber links (Babukhin et al., 2022).
• Extensions and generalizations: Fully passive sources have been proposed using PDC to simultaneously provide decoy states and passive encoding, with substantially increased key rates and extension to MDI-QKD architectures. Continuous-variable and squashing protocols are under active development (Ying et al., 18 Feb 2025, Kamin et al., 2024, Wang et al., 2023).

7. Summary and Outlook

Passive decoy state protocols offer a hardware-efficient route to QKD transmissions with maximal immunity to modulator-induced side channels. Key innovations include the use of linear optics and classical detection for joint decoy-state and encoding generation, heralded schemes with PDC for single-photon augmentation, and rigorous finite-key security analyses calibrated to experimental conditions. Although passive post-selection typically incurs an $O(1)$ sifting penalty in key rate, practical implementations achieve robust QKD performance with simplified transmitter architecture, reduced side-channel risk, and full compatibility with advanced protocols including MDI-QKD, Twin-Field QKD, and quantum secure direct communication. Future developments include optimizing post-selection for higher throughput, generalizing to continuous-variable regimes, and extending passive architectures to networked and multi-user QKD scenarios (Wang et al., 2022, Zhang et al., 2019, Ying et al., 18 Feb 2025).