Sending-or-not-sending quantum key distribution with phase postselection
Pith reviewed 2026-05-24 04:49 UTC · model grok-4.3
The pith
Adding phase postselection to SNS QKD raises sending probability and extends transmission distance.
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
Core claim
By introducing phase postselection into the SNS protocol, the probability of selecting 'sending' can be substantially improved. The numerical simulation shows that the transmission distance can be improved both with and without the actively odd-parity pairing method. With discrete phase randomization, the variant can have both a larger key rate and a longer distance.
What carries the argument
Phase postselection, a post-transmission filtering step that retains selected phase values to increase the effective sending probability within the SNS protocol.
If this is right
- Transmission distance increases in simulations both with and without active odd-parity pairing.
- Key rate and distance both improve when discrete phase randomization is applied.
- Higher sending probability is obtained while preserving the original SNS structure.
Where Pith is reading between the lines
- The technique could be tested for compatibility with other twin-field variants that already use postselection.
- If the postselection can be implemented with low latency, it may reduce the need for high raw sending rates in fiber experiments.
- Security proofs would need to verify that the added postselection step does not open new leakage channels under realistic phase noise.
Load-bearing premise
The numerical simulations accurately capture real device imperfections, loss, and detector behavior, and phase postselection can be performed without introducing new side-channel vulnerabilities or security loopholes.
What would settle it
A laboratory test showing that phase postselection produces no measurable increase in sending probability or no gain in achievable distance would falsify the central performance claim.
Figures
read the original abstract
Quantum key distribution (QKD) could help to share secure key between two distant peers. In recent years, twin-field (TF) QKD has been widely investigated because of its long transmission distance. One of the popular variants of TF QKD is sending-or-not-sending (SNS) QKD, which has been experimentally verified to realize 1000-km level fibre key distribution. In this article, the authors introduce phase postselection into the SNS protocol. With this modification, the probability of selecting "sending" can be substantially improved. The numerical simulation shows that the transmission distance can be improved both with and without the actively odd-parity pairing method. With discrete phase randomization, the variant can have both a larger key rate and a longer distance.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The paper proposes adding phase postselection to the sending-or-not-sending (SNS) twin-field QKD protocol. The modification is claimed to raise the sending probability, thereby extending transmission distance both with and without actively odd-parity pairing; under discrete phase randomization the variant is also reported to yield a higher key rate and longer distance, all demonstrated via numerical simulations.
Significance. If the simulations faithfully capture loss, detector behavior, phase noise, and any side-channels introduced by postselection, the protocol change could improve practical SNS-QKD performance at long distances. No machine-checked proofs, parameter-free derivations, or reproducible code are mentioned, so the result remains simulation-dependent.
major comments (2)
- [Numerical simulation results] Numerical simulation section: the central claims of improved distance and key rate rest entirely on unspecified numerical simulations; no model details, parameter values, error bars, or security-proof excerpts are supplied, so it is impossible to verify whether the reported gains survive realistic imperfections or postselection-induced side channels.
- [Security analysis] Security analysis: the manuscript does not address whether phase postselection can be implemented without leaking phase information or creating new side-channel vulnerabilities; this is load-bearing because the distance and rate improvements are asserted to remain secure.
minor comments (1)
- [Abstract] Abstract: the phrase 'the variant can have both a larger key rate and a longer distance' should specify the reference protocol and the discrete-phase-randomization setting more precisely.
Simulated Author's Rebuttal
We thank the referee for the careful reading and constructive comments. We address the two major comments point by point below and will revise the manuscript accordingly.
read point-by-point responses
-
Referee: [Numerical simulation results] Numerical simulation section: the central claims of improved distance and key rate rest entirely on unspecified numerical simulations; no model details, parameter values, error bars, or security-proof excerpts are supplied, so it is impossible to verify whether the reported gains survive realistic imperfections or postselection-induced side channels.
Authors: We agree that the numerical section requires more detail for independent verification. In the revised manuscript we will add a complete description of the simulation model (including the loss, detector, and phase-noise parameters), the full list of numerical values employed, the precise key-rate formulas taken from the SNS security proof (with the postselection modification), and any statistical error bars obtained from the Monte-Carlo runs. This will allow readers to reproduce the distance and rate improvements under the stated imperfections. revision: yes
-
Referee: [Security analysis] Security analysis: the manuscript does not address whether phase postselection can be implemented without leaking phase information or creating new side-channel vulnerabilities; this is load-bearing because the distance and rate improvements are asserted to remain secure.
Authors: The original text assumed that the existing SNS security analysis continues to apply once the postselection is incorporated into the phase-error estimation. We acknowledge that an explicit discussion of possible side channels is missing. Phase postselection is performed locally by each party on its own phase information and does not require public disclosure of the selected phases; therefore it does not introduce an additional classical leakage channel. In the revision we will insert a short subsection that shows how the postselection probability enters the existing phase-error bound without altering the underlying assumptions or creating new side channels. If the referee identifies a concrete implementation detail that could leak information, we are happy to address it. revision: yes
Circularity Check
No significant circularity; claims rest on numerical simulations of protocol modification
full rationale
The paper introduces phase postselection into the SNS QKD protocol and attributes performance gains (higher sending probability, longer distance, higher key rate under discrete randomization) to numerical simulations. No quoted equations or self-citations reduce a central derivation to its own inputs by construction. The simulation results are presented as empirical outcomes rather than tautological predictions or self-defined quantities. This is the common case of a protocol paper whose central claims are externally falsifiable via implementation and do not collapse into fitted parameters renamed as predictions.
Axiom & Free-Parameter Ledger
Reference graph
Works this paper leans on
-
[1]
State preparation. Alice (Bob) randomly chooses to send a weak coherent state with a proba- bility p or to send a vacuum state with a probability 1 − p. When Alice (Bob) chooses to send a weak coherent state, she (he) records a local classical bit 1 (0), else she (he) records a local classical bit 0 (1). When Alice (Bob) decides to send a weak coher- ent ...
-
[2]
State measurement. If Charlie is honest, he will perform an interferometric measurement with the two states from Alice and Bob. We assume that the left detector corresponds to the constructive inter- ference and the right detector corresponds to the destructive interference for pulses with the same phase. Then Charlie will declare a left-click event, a ri...
-
[3]
Phase postselection. After enough rounds of the first two steps, Alice and Bob keep the rounds with successful events and discard the others. Then Al- ice and Bob announce the phases they saved in the first step publicly. For every left-click event, if ||θA − θB| − π| ≤ ∆, they keep the round as a sifted left-click event. And for every right-click event, if...
-
[4]
Alice and Bob use decoy states [31–33] to estimate the phase error rates
Parameter estimation and postprocessing. Alice and Bob use decoy states [31–33] to estimate the phase error rates. Then Alice and Bob con- duct error correction and privacy amplification to the classical bits of the remaining rounds to get the final key. They may use some two-way error rejec- tion methods to improve the performance of the protocol, for exam...
-
[5]
2π M } (M > 0 is an even number) and prepare a state⏐ ⏐αeiθA ⟩ ( ⏐ ⏐αeiθB ⟩ ). When she (he) chooses to send a vac- uum state, she (he) also records a random phase θA (θB) from {0, 2π M , 2 2π M , . . . ,(M − 1) 2π M }. In step. 3, for left-click events, the rounds that |θA − θB|= π are kept. And for right-click events, the rounds that θA = θB are kept. T...
-
[6]
M = 2 In the case of M = 2, Alice and Bob only prepare their states in two phases {0, π}. The sifting efficiency is 1 /2. For right-click events, the sifting condition is θA = θB ≡ θ. At the condition of a fixed common phase, the equivalent protocol and the phase error probability is the same as the one in Section.(III) with δ = 0. The state prepared by Alic...
-
[7]
M = 4 With a same method, we can give the phase error prob- ability of M = 4 case, which is shown in eq.(C5). P R− 4 ph ≤ p(1 − p) { ∞∑ j=0 e− µµj j! P R( |0⟩a |j⟩b + |j⟩a |0⟩b√ 2 ) + ∑ j̸=k e− µ √ µ4j+4k 4j!4k! √ P R( |0⟩a |4j⟩b + |4j⟩a |0⟩b√ 2 ) √ P R( |0⟩a |4k⟩b + |4k⟩a |0⟩b√ 2 ) + ∑ j̸=k e− µ √ µ4j+4k+2 (4j + 1)!(4k + 1)! √ P R( |0⟩a |4j + 1⟩b + |4j +...
-
[8]
C. H. Bennett and G. Brassard, Quantum cryptography: public key distribution and coin tossing int, in Conf. on Computers, Systems and Signal Processing (Bangalore, India, Dec. 1984) (1984) pp. 175–179
work page 1984
- [9]
-
[10]
P. W. Shor and J. Preskill, Simple proof of security of the bb84 quantum key distribution protocol, Phys. Rev. Lett 85, 441 (2000)
work page 2000
-
[11]
W. K. Wootters and W. H. Zurek, A single quantum cannot be cloned, Nature 299, 802 (1982)
work page 1982
-
[12]
S. Pirandola, R. Garc ´ ıa-Patr´ on, S. L. Braunstein, and S. Lloyd, Direct and reverse secret-key capacities of a quantum channel, Physical review letters 102, 050503 (2009)
work page 2009
-
[13]
S. Pirandola, R. Laurenza, C. Ottaviani, and L. Banchi, Fundamental limits of repeaterless quantum communica- tions, Nature communications 8, 15043 (2017)
work page 2017
-
[14]
M. Takeoka, S. Guha, and M. M. Wilde, Fundamental rate-loss tradeoff for optical quantum key distribution, Nature communications 5, 5235 (2014)
work page 2014
-
[15]
M. Lucamarini, Z. L. Yuan, J. F. Dynes, and A. J. Shields, Overcoming the rate–distance limit of quantum key distribution without quantum repeaters, Nature 557, 400 (2018)
work page 2018
-
[16]
X. Ma, P. Zeng, and H. Zhou, Phase-matching quantum key distribution, Physical Review X 8, 031043 (2018)
work page 2018
-
[17]
X.-B. Wang, Z.-W. Yu, and X.-L. Hu, Twin-field quan- tum key distribution with large misalignment error, Physical Review A 98, 062323 (2018)
work page 2018
- [18]
- [19]
- [20]
- [21]
-
[22]
S. Wang, D.-Y. He, Z.-Q. Yin, F.-Y. Lu, C.-H. Cui, W. Chen, Z. Zhou, G.-C. Guo, and Z.-F. Han, Beat- ing the fundamental rate-distance limit in a proof-of- principle quantum key distribution system, Physical Re- view X 9, 021046 (2019)
work page 2019
- [23]
- [24]
-
[25]
X.-T. Fang, P. Zeng, H. Liu, M. Zou, W. Wu, Y.-L. Tang, Y.-J. Sheng, Y. Xiang, W. Zhang, H. Li, et al. , Imple- mentation of quantum key distribution surpassing the linear rate-transmittance bound, Nature Photonics 14, 422 (2020)
work page 2020
-
[26]
J.-P. Chen, C. Zhang, Y. Liu, C. Jiang, W. Zhang, X.-L. Hu, J.-Y. Guan, Z.-W. Yu, H. Xu, J. Lin, et al. , Sending- or-not-sending with independent lasers: Secure twin-field quantum key distribution over 509 km, Physical review letters 124, 070501 (2020)
work page 2020
- [27]
-
[28]
M. Pittaluga, M. Minder, M. Lucamarini, M. San- zaro, R. I. Woodward, M.-J. Li, Z. Yuan, and A. J. Shields, 600-km repeater-like quantum communications with dual-band stabilization, Nature Photonics 15, 530 (2021)
work page 2021
-
[29]
C. Clivati, A. Meda, S. Donadello, S. Virz ` ı, M. Genoves e, F. Levi, A. Mura, M. Pittaluga, Z. Yuan, A. J. Shields, et al. , Coherent phase transfer for real-world twin-field quantum key distribution, Nature communications 13, 157 (2022)
work page 2022
-
[30]
H. Liu, C. Jiang, H.-T. Zhu, M. Zou, Z.-W. Yu, X.-L. Hu, H. Xu, S. Ma, Z. Han, J.-P. Chen, et al. , Field test of twin-field quantum key distribution through sending-or- not-sending over 428 km, Physical Review Letters 126, 250502 (2021)
work page 2021
-
[31]
J.-P. Chen, C. Zhang, Y. Liu, C. Jiang, W.-J. Zhang, Z.- Y. Han, S.-Z. Ma, X.-L. Hu, Y.-H. Li, H. Liu, et al., Twin- field quantum key distribution over a 511 km optical fibre linking two distant metropolitan areas, Nature Photonics 15, 570 (2021)
work page 2021
-
[32]
S. Wang, Z.-Q. Yin, D.-Y. He, W. Chen, R.-Q. Wang, P. Ye, Y. Zhou, G.-J. Fan-Yuan, F.-X. Wang, W. Chen, et al. , Twin-field quantum key distribution over 830-km fibre, Nature photonics 16, 154 (2022)
work page 2022
- [33]
-
[34]
C. Jiang, Z.-W. Yu, X.-L. Hu, and X.-B. Wang, Uncondi- tional security of sending or not sending twin-field quan- tum key distribution with finite pulses, Physical Review Applied 12, 024061 (2019)
work page 2019
- [35]
-
[36]
C. Jiang, X.-L. Hu, H. Xu, Z.-W. Yu, and X.-B. Wang, Zigzag approach to higher key rate of sending-or-not- sending twin field quantum key distribution with finite- key effects, New Journal of Physics 22, 053048 (2020)
work page 2020
-
[37]
C. Jiang, X.-L. Hu, Z.-W. Yu, and X.-B. Wang, Com- posable security for practical quantum key distribution with two way classical communication, New Journal of Physics 23, 063038 (2021)
work page 2021
-
[38]
W.-Y. Hwang, Quantum key distribution with high loss: toward global secure communication, Physical review let- ters 91, 057901 (2003). 10
work page 2003
-
[39]
H.-K. Lo, X. Ma, and K. Chen, Decoy state quantum key distribution, Phys. Rev. Lett. 94, 230504 (2005)
work page 2005
-
[40]
X.-B. Wang, Beating the photon-number-splitting atta ck in practical quantum cryptography, Physical review let- ters 94, 230503 (2005)
work page 2005
discussion (0)
Sign in with ORCID, Apple, or X to comment. Anyone can read and Pith papers without signing in.