{"id":"b0e5613b-4a39-4d4d-8aed-2267266aa5f8","arxiv_id":"2608.06720","paper_version":1,"verdict":"CONDITIONAL","confidence":"MODERATE","novelty_score":6.0,"correctness_risk":"low","formal_verification":"none","parameter_count":0,"one_line_summary":"A receiver can broadcast quantum-correlated jamming noise and cancel it locally, leaving residual self-noise below the vacuum level and preserving secure communication when Eve's channel is better.","lead":"Bob jams Eve's channel with noise from one half of a two-mode source, then uses the other half to cancel that noise in his own receiver. An entangled source cancels so completely that Bob's residual noise falls below the vacuum floor, which no classical noise source can do.","discovery_kind":"new_method","skeptic_critique":{"model":"deepseek-v4-flash","headline":"Eve's multimode spatial filtering can null the jammer and erase the jamming-enabled secrecy extension; the paper explicitly defers this analysis.","rationale":"The reader's weakest_assumption identifies exactly the same load-bearing concern: the quantitative security extension depends on Eve collecting one mode per symbol in which jamming and signal overlap, with eta_E tied to her signal transmissivity by the collinear relation. My independent reading confirms this is the weakest point, and the paper itself flags it in Sec. V C. The core conditional-variance calculation (Eqs. 25–30) and the classical floor argument (Appendix B) are internally sound at the level of the stated single-mode model; I found no algebraic or logical flaw in the derivation of Delta V_q = -eta_S N_S/(2N_S + 1), the classical bound Delta V >= 0, or the Holevo-information suppression in Appendix D. The issue is not that the math fails but that its operational domain is narrow: the positive-secrecy claim is a property of the bounded-collection, collinear, single-aperture model, and Eve can plausibly violate that model in free-space and wireless geometries using multiple apertures. Since the authors disclose this limitation and explicitly defer multimode analysis, a CONDITIONAL verdict is the correct outcome, and no verdict change is needed.","tokens_in":26697,"tokens_out":5588,"duration_ms":62896,"concrete_test":"Simulate Eve as a K-aperture receiver with distinct spatial signatures for Alice's signal and Bob's jammer: for each symbol, Eve observes K modes with mean vectors proportional to the Alice amplitude and the jamming quadrature, plus independent thermal noise. Compute the MMSE estimate of Alice's message quadrature and the resulting effective SNR_E, including the optimal linear nulling of the jamming spatial mode. For a two-aperture line-of-sight geometry with angular separation between Alice and Bob, extract eta_E^eff and recompute the secrecy-capacity cutoff in Fig. 4; if the cutoff falls back toward eta_ch,B = 0.3 as the null depth increases, the multimode attack defeats the stated jamming-enabled extension.","verdict_should_be":"UNCHANGED","load_bearing_attack":"The headline security claim—positive secrecy even when Eve's direct channel is stronger—rests on Eve being unable to separate Alice's signal from Bob's localized jamming field. The quantitative analysis uses a single detected mode per symbol in which both arrive with the same effective coupling, with Eve's jamming noise entering Eqs. (17)–(18) as eta_E N_S and the collinear single-parameter identification eta_E = eta_n (1 - eta_ch,E) in Sec. II A. If Eve can collect the signal and jammer through separate apertures and apply spatial beamforming or a null toward Bob, her effective jamming coupling eta_E^eff can be driven well below eta_n(1 - eta_ch,E), so her SNR returns toward its unjammed value. At the Fig. 4 operating point (eta_ch,E = 0.7, eta_E = 0.09, N_S = 25), reducing eta_E^eff by even a factor of a few removes the 0.71 secrecy cutoff and restores the conventional condition eta_ch,E < eta_ch,B. The authors identify this as 'the most significant attack considered here' and explicitly state that 'a complete analysis of this attack requires a multimode channel model and lies beyond the present single-mode treatment' (Sec. V C). Thus the central claim is robust only within the bounded-collection, single-mode, collinear threat model; the disclosed limitation is real and load-bearing, not a hidden inconsistency.","agreement_with_reader":"agree"},"referee_report":{"model":"deepseek-v4-flash","summary":"The paper proposes a correlated-jamming protocol for physical-layer security in which Bob broadcasts one mode of a correlated two-mode source as artificial noise while retaining the idler as a local reference. Alice sends a bright coherent signal, and Bob cancels the self-jamming contribution by optimal linear combination of his received quadrature with the retained idler quadrature. The central result is that the residual self-jamming noise is ΔV = η_S (V_{S|I} − 1/2) (Eq. 25), that every classically correlated source obeys V_{S|I} ≥ 1/2 (Eq. 27), and that a two-mode squeezed-vacuum source reaches ΔV_q = −η_S N_S/(2N_S + 1) → −η_S/2 (Eq. 30). The paper then evaluates the Gaussian wiretap secrecy capacity (Eq. 36), including a collective-attack analysis via Eve's Holevo information in Appendix D, and reports positive secrecy for a range of parameters in which Eve's direct channel transmissivity exceeds Bob's (Fig. 4).","tokens_in":26944,"tokens_out":8640,"duration_ms":85229,"significance":"If the stated bounded-collection, single-mode threat model is accepted, the paper gives a clean and largely parameter-free quantum advantage: the residual-noise formulas are exact, the classical lower bound is derived from the nonnegative-P representation, and Appendix D provides an exact closed-form Holevo information as well as a monotonicity argument showing that jamming suppresses collective Eve. These derivations are internally consistent and should be checked against standard Gaussian steering and wiretap-channel results, which they match. The experimental sections are cautious and identify realistic loss and storage constraints. The main limitation is not a technical inconsistency but the scope of the security claim: the positive-secrecy extension depends on Eve being unable to separate Alice's signal from Bob's jamming field in separate spatial modes, an attack the authors identify as the most significant one considered and explicitly defer.","major_comments":[{"comment":"The positive-secrecy claim that correlated jamming preserves secrecy even when Eve's direct channel is stronger than Bob's is computed under a single-mode, collinear model in which Eve collects Alice's signal and Bob's jamming field in the same detected mode with η_E = η_n (1 − η_ch,E). The authors correctly state in Sec. V C that a multimode attacker could collect the two fields through separate apertures and null the localized jammer, and they explicitly defer a complete analysis. This attack is load-bearing for the central security claim: if Eve can reduce her effective jamming coupling η_E^eff well below η_n (1 − η_ch,E), the secrecy cutoff in Fig. 4 can revert to the conventional condition η_ch,E < η_ch,B. Because the manuscript itself labels this 'the most significant attack considered here,' I request either a two-mode analysis (even a simplified model with signal and jammer in different spatial modes and a beam-forming Eve) or a revised abstract and conclusions that state unambiguously that the positive-secrecy result applies only when signal–jammer mode overlap is enforced, e.g. in guided channels, and not to general free-space or wireless geometries.","section":"Sec. V C (and Sec. II A, abstract)"},{"comment":"The bounded-collection assumption does more work than a standard collection-efficiency bound. A passive bound on η_ch,E and η_E is insufficient if Eve can actively separate the two fields; the required bound is on her ability to null the jamming mode, which depends on the spatial-mode structure that the paper does not model. The statement that 'the bounded-collection assumption must therefore apply to the total collection efficiency across all modes accessible to Eve' is a reformulation of the problem rather than a justification. I would like the paper to either prove that such a bound follows from the geometry or explicitly state that the security guarantee holds under this additional, non-derived assumption.","section":"Sec. V A (i) and Sec. V C"}],"minor_comments":[{"comment":"The phrase 'sub-vacuum jamming' may mislead readers: the broadcast jamming field itself is a thermal state with positive photon number, and the sub-vacuum property applies to the conditional variance of Bob's residual noise. Please qualify this terminology in the abstract or introductory paragraphs.","section":"Abstract and title"},{"comment":"The range conversions, including the statements '0.649 d_B', '54% farther', and '7.4 km', rely on the single-parameter relation η_E = η_n(1 − η_ch,E) and on a d ∝ η^{−1/2} propagation law. The text labels these as illustrative, but the numbers are presented as concrete operational results; please add an explicit caveat that they are not derived from a physical propagation model and therefore do not constitute a general eavesdropper-exclusion guarantee.","section":"Sec. IV C"},{"comment":"The sentence 'Since SNR_E cancels between the two capacities' is imprecise: SNR_E is common to both C_q and C_cl but does not numerically cancel in the difference of logarithms; it cancels only in the sense that the difference is independent of SNR_E when the two capacities are evaluated at the same Eve. Please rephrase.","section":"Sec. IV B, text after Eq. (38)"},{"comment":"There is a typographical error in 'broadcast paltform'; it should read 'broadcast platform'.","section":"Sec. II A"}],"recommendation":"major_revision","confidential_remarks":null},"author_rebuttal":null,"desk_editor":{"model":"deepseek-v4-flash","letter":"The core result is the conditional-variance criterion: residual self-jamming noise at Bob is proportional to V_S|I - 1/2, classical sources cannot push this below zero, and a TMSV source goes to -eta_S/2. That derivation is exact, parameter-free, and internally consistent. The paper also gets credit for defining the right classical benchmark—a bright idler with optimal electronic combining—rather than the strawman symmetric source, and for showing the quantum advantage survives idler loss above a clean threshold. The Holevo appendix is a genuine extra: jamming thermalizes Eve's states so thoroughly that collective measurements buy her almost nothing, with the gap closing as 1/n^2. That is a useful, nontrivial observation.\n\nThe soft spot is the one the authors admit: the headline \"positive secrecy even when Eve has a stronger direct channel\" lives inside a single-mode, collinear, bounded-collection model. The multimode spatial-filtering attack—Eve using separate apertures to null the jammer—is listed as the most significant attack and explicitly deferred to a future multimode analysis. That is not a hidden flaw, but it is load-bearing. If Eve can separate signal from jammer spatially, the secrecy extension shrinks back toward the conventional condition eta_ch,E < eta_ch,B. The paper's own Sec. V C says the bounded-collection assumption must apply across all modes Eve can access, which is a strong assumption for wireless or free-space links. Guided channels are less exposed, and the protocol may be most defensible there.\n\nTwo smaller points. First, the quantum advantage over the optimized classical jammer is modest—about 0.15 bit per channel use in the bright limit—and the paper is honest that classical correlated jamming captures most of the benefit in high-SNR regimes. Second, the N_S = 25 operating point corresponds to roughly 20 dB of two-mode squeezing, beyond current demonstrated sources; the paper flags this as an illustrative asymptote rather than an immediate target.\n\nOverall: the math is sound, the threat model is stated plainly, and the limitations are disclosed rather than buried. The paper is a proof of principle within a specific adversarial model, not a general security guarantee. It deserves serious referee attention because the mechanism is real and the conditional-variance framing will be useful to people working on quantum-enhanced physical-layer security.","headline":"Solid, honest protocol paper: the sub-vacuum cancellation math checks out, and the security claim is carefully scoped to a bounded-collection, single-mode threat model that the authors themselves flag as incomplete.","tokens_in":27466,"tokens_out":1724,"would_cite":true,"duration_ms":17275,"reading_group":"maybe","serious_thinker":"yes","would_accept_peer_review":true},"rs_alignment":null,"lean_confirmation":null,"pith_extraction":{"msc":[],"pacs":["03.67.Dd","42.50.Ex"],"model":"deepseek-v4-flash","headline":"A retained idler from a two-mode squeezed source lets a jammer cancel its own noise below the vacuum floor, preserving secrecy even when Eve's direct channel is stronger than Bob's.","keywords":["physical-layer security","correlated jamming","two-mode squeezed vacuum","sub-vacuum noise","wiretap channel","Gaussian quantum information","conditional variance","self-interference cancellation"],"falsifier":"Take a two-mode squeezed-vacuum source with brightness $N_S = 25$, retain the idler with efficiency above 50% on a cold line, and use Bob's optimized linear combiner; if his post-cancellation quadrature variance does not fall below the idler-optimized classical floor by $\\eta_S N_S/(2N_S+1)$, the central sub-vacuum claim fails. A multimode variant would give Eve two apertures, one aimed at Alice and one able to null the jammer, and check whether her signal-to-noise ratio stops growing with the jamming brightness $N_J$.","tokens_in":26506,"feed_emoji":"🔐","tokens_out":9084,"duration_ms":81186,"temperature":0.7,"pith_summary":"This paper introduces a correlated-jamming protocol in which the intended receiver, Bob, broadcasts one mode of a correlated two-mode noise source and keeps the second mode as a local reference. The claim is that this arrangement jams an eavesdropper with full thermal noise while Bob cancels his own self-interference, and that entanglement is required for the cancellation to go below the vacuum-noise floor. Concretely, the residual self-jamming noise at Bob is governed by the conditional variance of the broadcast quadrature given the retained idler: any classically correlated source leaves $\\Delta V \\geq 0$, while a two-mode squeezed-vacuum source gives $\\Delta V_q = -\\eta_S N_S/(2N_S+1)$, approaching $-\\eta_S/2$ in the bright-source limit. Within a bounded-collection wiretap model, that sub-vacuum residual keeps the secrecy capacity positive even when Eve's direct channel is stronger than Bob's, and the advantage survives an upgrade of Eve to collective measurements. The protocol uses a bright classical message, so no fragile quantum state carrying data has to survive the channel.","feed_headline":"Entangled jamming cuts self-noise below vacuum floor","feed_subtitle":"Bob can jam Eve with full thermal noise while cancelling his own, keeping secrecy even when Eve is closer to Alice.","key_machinery":"The load-bearing object is the conditional variance $V_{S|I}$ of the broadcast jamming quadrature $X_S$ given Bob's retained idler quadrature $X_I$, together with the optimized linear estimator $X_{\\mathrm{out}} = X_B - g X_I$ with $g^* = \\langle X_B X_I\\rangle/\\mathrm{Var}(X_I)$ that realizes it. The paper shows that the post-cancellation residual is exactly $\\eta_S(V_{S|I} - 1/2)$, so the entire protocol reduces to a single inequality: classical sources have $V_{S|I} \\geq 1/2$, while the two-mode squeezed-vacuum source has $V_{S|I} < 1/2$. The classical bound follows from the Cauchy--Schwarz inequality applied to the $P$ function, and the quantum side from $V_{S|I} \\geq 0$; imperfect idler storage enters through a threshold $\\eta_I > (2N_{en}+1)/(2N_{en}+2)$, above which the entangled advantage survives.","core_discovery":"The paper's central discovery is a new resource relation: residual self-jamming noise is governed by the conditional variance $V_{S|I} = \\mathrm{Var}(X_S) - \\langle X_S X_I\\rangle^2/\\mathrm{Var}(X_I)$, with $\\Delta V = \\eta_S(V_{S|I} - 1/2)$ for ideal idler retention. For every source with a nonnegative Glauber--Sudarshan $P$ function, $V_{S|I} \\geq 1/2$, so the best a classical jammer can do is restore Bob to his unjammed vacuum floor. A two-mode squeezed-vacuum source violates this bound, giving $V_{S|I} = 1/(4N_S+2)$ and hence $\\Delta V_q = -\\eta_S N_S/(2N_S+1)$, which saturates the absolute quantum bound $-\\eta_S/2$ as the source brightens. This sub-vacuum conditional inference is the mechanism behind the paper's security claim: the jamming penalty at Eve grows with $N_S$, while Bob's residual noise stays bounded or falls below his unjammed floor, so the wiretap condition $\\mathrm{SNR}_B > \\mathrm{SNR}_E$ can hold even when $\\eta_{ch,E} > \\eta_{ch,B}$.","pith_inferences":["If the single-mode security model is the right one, the protocol should be most attractive in waveguides, where Eve cannot easily separate Alice's signal from Bob's jamming; in free space a multi-aperture Eve with spatial filtering is the natural threat, and the paper leaves that analysis open.","The conditional-variance inequality is directly testable with existing two-mode-squeezed sources: a measurement of Bob's optimized residual below the classical floor would certify the effect before any security claim is invoked.","One could extend the protocol to secret-key distillation by treating Bob's idler photocurrent as correlated side information; the paper's secrecy-rate expression is already a lower bound on the key rate, so this extension is a wiretap-channel exercise rather than new physics.","The fixed $\\eta_S/2$ noise-figure improvement suggests that in shot-noise-limited links the entanglement margin is best specified as a receiver requirement, such as idler storage above 50%, rather than as an operational rate gain."],"forward_implications":["Secrecy capacity remains positive well past the usual wiretap cutoff $\\eta_{ch,E} = \\eta_{ch,B}$; in the paper's example the secure region extends from $\\eta_{ch,E} \\approx 0.30$ to roughly $0.71$ with classical jamming and $0.76$ with entangled jamming.","In the bright-jamming limit the entanglement margin is a fixed receiver-noise improvement of $\\eta_S/2$, independent of signal and jamming power, so the quantum advantage does not fade as the message is brightened.","Upgrading Eve from homodyne detection to an optimal collective measurement costs less than 0.5% in the strongly jammed regime; correlated jamming nearly closes the gap between the two adversary models.","Because Alice's signal is a bright coherent state, the protocol bypasses the repeaterless rate--loss bound that caps quantum key distribution and can coexist with classical traffic on the same link.","Classical correlated jamming captures most of the secrecy gain, while the entangled source adds a bounded margin and removes the need to store a classical record of the jamming waveform."],"supporting_citations":[{"why":"Defines the original wiretap-channel setting this paper adopts for its secrecy analysis.","marker":"[1]"},{"why":"Establishes the broadcast-channel-with-confidential-messages framework and the marginal-distribution basis for secrecy capacity.","marker":"[2]"},{"why":"Supplies the Gaussian wiretap capacity formula used to compute the secrecy rate from the two signal-to-noise ratios.","marker":"[4]"},{"why":"Introduces artificial-noise jamming as the classical baseline that the correlated-jamming protocol generalizes.","marker":"[5]"},{"why":"Provides the full-duplex self-interference cancellation architecture used as the classical implementation route.","marker":"[12]"},{"why":"Supplies the steering-type inference criterion that identifies the conditional variance as a signature of stronger-than-classical correlation.","marker":"[22]"},{"why":"Is the Gaussian quantum information toolkit the paper uses for states, measurements, and entropy calculations.","marker":"[29]"},{"why":"Establishes quantum illumination as the conceptual model for a quantum correlation advantage that need not survive propagation.","marker":"[38]"},{"why":"Gives the rate used to lower-bound secrecy against collective attacks on Eve's Gaussian output states.","marker":"[69]"}],"fun_headline_variants":["Entangled jammer cancels its own noise","Sub-vacuum jamming beats classical limits","Quantum correlations cancel self-jamming noise","Jamming without self-interference via entanglement","Secure links with sub-vacuum noise cancellation"],"cache_read_input_tokens":3200,"weakest_assumption_plain":"The quantitative secrecy claim assumes that Eve collects exactly one spatial pattern of light per symbol in which Alice's signal and Bob's jamming overlap, and that the jamming she collects is set by the same single-parameter geometry as her signal transmissivity; if Eve can spatially separate the two fields and null the jammer with multiple apertures, the jamming penalty can be suppressed and the positive-secrecy claim may fail.","fun_headline_variants_meta":{"raw":{"variants":["Entangled jammer cancels its own noise","Sub-vacuum jamming beats classical limits","Quantum correlations cancel self-jamming noise","Jamming without self-interference via entanglement","Secure links with sub-vacuum noise cancellation"]},"model":"deepseek-v4-flash","effort":"low","cost_usd":0.000206,"raw_usage":{"total_tokens":1477,"prompt_tokens":1103,"completion_tokens":374,"prompt_tokens_details":{"cached_tokens":384},"prompt_cache_hit_tokens":384,"prompt_cache_miss_tokens":719,"completion_tokens_details":{"reasoning_tokens":306}},"tokens_in":719,"tokens_out":374,"duration_ms":3858,"temperature":1.0,"reasoning_tokens":306,"cache_read_input_tokens":384,"cache_creation_input_tokens":0},"cache_creation_input_tokens":0},"created_at":"2026-08-10T21:53:17.673860+00:00","model_set":{"reader":"deepseek-v4-flash"},"falsifier":"Take a two-mode squeezed-vacuum source with brightness $N_S = 25$, retain the idler with efficiency above 50% on a cold line, and use Bob's optimized linear combiner; if his post-cancellation quadrature variance does not fall below the idler-optimized classical floor by $\\eta_S N_S/(2N_S+1)$, the central sub-vacuum claim fails. A multimode variant would give Eve two apertures, one aimed at Alice and one able to null the jammer, and check whether her signal-to-noise ratio stops growing with the jamming brightness $N_J$.","supporting_citations":[{"cited_title":null,"cited_arxiv_id":null,"evidence_quote":"Defines the original wiretap-channel setting this paper adopts for its secrecy analysis."},{"cited_title":"Csisz´ ar and J","cited_arxiv_id":null,"evidence_quote":"Establishes the broadcast-channel-with-confidential-messages framework and the marginal-distribution basis for secrecy capacity."},{"cited_title":null,"cited_arxiv_id":null,"evidence_quote":"Supplies the Gaussian wiretap capacity formula used to compute the secrecy rate from the two signal-to-noise ratios."},{"cited_title":"Goel and R","cited_arxiv_id":null,"evidence_quote":"Introduces artificial-noise jamming as the classical baseline that the correlated-jamming protocol generalizes."},{"cited_title":"Zheng, I","cited_arxiv_id":null,"evidence_quote":"Provides the full-duplex self-interference cancellation architecture used as the classical implementation route."},{"cited_title":null,"cited_arxiv_id":null,"evidence_quote":"Supplies the steering-type inference criterion that identifies the conditional variance as a signature of stronger-than-classical correlation."},{"cited_title":null,"cited_arxiv_id":null,"evidence_quote":"Establishes quantum illumination as the conceptual model for a quantum correlation advantage that need not survive propagation."},{"cited_title":"Devetak and A","cited_arxiv_id":null,"evidence_quote":"Gives the rate used to lower-bound secrecy against collective attacks on Eve's Gaussian output states."}],"review_version":2}