BB84¶

A quantum key-distribution protocol in which randomly chosen conjugate encoding bases let two parties sift correlated bits and estimate whether interception disturbed the channel before deriving a shorter secret key.

Version: v3 · 2026-09-19 · History
Domain-specific #: 1360
Domain group: Natural Sciences
Origin domain: Physics
Subdomain: Quantum Cryptography and Quantum Communication → Physics
Aliases: Bennett–Brassard 1984 protocol, BB84 protocol

Core Idea¶

BB84 is a quantum key-distribution protocol in which a sender encodes random bits in quantum states chosen from two incompatible bases and a receiver measures each signal in a randomly chosen basis. After transmission, they publicly compare bases and retain only positions where the choices matched. They reveal a sample to estimate errors; excessive disturbance leads them to abort, while an acceptable rate permits classical error correction and privacy amplification.

The security intuition is measurement disturbance: an eavesdropper who does not know the basis cannot reliably inspect unknown signals without introducing detectable errors. A full security claim nevertheless depends on an authenticated classical channel, a threat model, device assumptions, finite-key statistics, source and detector behavior, and a proved post-processing construction.

How would you explain it like I'm…

Peek-Proof Secret Password

Two friends far apart want to make the same secret password. One sends tiny bits of light, and each one can be read in one of two ways; reading it the wrong way gives a random answer. They later say which way they read each one, and keep only the ones where they matched. A sneaky spy who peeks has to guess the way and makes mistakes the friends can notice, so if there are too many mistakes they throw it away.

Secret Keys From Light

BB84 lets two people share a secret key, a string of random 0s and 1s, using tiny particles of light. The sender codes each bit using one of two setups chosen at random, and the receiver measures each one using a setup they also pick at random. Afterward they say out loud which setups they used (but not the bits) and keep only the ones where they matched. Then they compare a small sample: an eavesdropper who didn't know the setup would have caused errors, so too many errors means they stop. BB84 only makes the key; locking the actual messages is a separate step.

Quantum Key Sharing Protocol

BB84 is a quantum key-distribution protocol, a method for two parties to share a secret random key. The sender encodes each random bit in a quantum state chosen from one of two incompatible bases, and the receiver measures each signal in a randomly chosen basis. They then publicly compare which bases they used and keep only the positions where the bases matched. They reveal a sample of those bits to estimate the error rate: too many errors means someone likely interfered, so they abort; an acceptable rate lets them fix errors and shrink the key to remove anything an eavesdropper might know. The security idea is that measuring an unknown quantum state in the wrong basis disturbs it. BB84 produces key material only; it doesn't encrypt data itself, and it doesn't prove who is on the other end.

BB84 is a quantum key-distribution protocol. The sender prepares each random bit in a state drawn from one of two incompatible (conjugate) bases; the receiver measures each incoming signal in an independently random basis. Over a public classical channel they then sift, discarding positions where bases differed. A random sample of the sifted key is disclosed to estimate the quantum bit error rate; if disturbance exceeds a threshold they abort, otherwise they run classical error correction and privacy amplification to distill a shorter, secret key. The intuition for security is measurement disturbance: an eavesdropper who doesn't know the basis cannot inspect the signals without introducing detectable errors. A rigorous security claim, however, also requires an authenticated classical channel, a specified threat model, device and source/detector assumptions, finite-key statistics, and a proven post-processing construction. BB84 distributes key material; it does not itself encrypt application data or authenticate previously unknown parties.

Scope of Application¶

BB84 is literal in quantum-information theory, QKD experiments, protocol analysis, and standards-oriented security engineering.

Protocol foundations. Demonstrating prepare-and-measure QKD.
Security proofs. Bounding adversary information from observed statistics.
Finite-key analysis. Accounting for sampling uncertainty and limited signal counts.
Implementation evaluation. Relating source/detector deviations to proof assumptions.
Network design. Combining quantum links with authenticated classical control.
Education. Illustrating incompatible measurement and information disturbance.
Comparative protocol analysis. Distinguishing BB84 from E91, B92, decoy-state extensions, and device-independent schemes.

Clarity¶

State encoding states, basis probabilities, source and detector model, channel, classical authentication, sifting, parameter-estimation sample, error metric, abort rule, error-correction leakage, privacy-amplification method, finite-size assumptions, and security definition. Separate the ideal protocol from engineering countermeasures and avoid quoting a key rate without its loss and adversary model.

Manages Complexity¶

Two bases convert an otherwise invisible interception problem into observable disturbance statistics, and classical distillation compresses imperfect correlation into bounded secrecy. The abstraction isolates quantum evidence from classical post-processing. Real devices add dimensions, timing, intensity, loss, and detector behavior that can invalidate an idealized proof unless incorporated.

Abstract Reasoning¶

Fix security and device assumptions.
Generate random bits and basis choices.
Prepare and transmit the corresponding quantum states.
Measure in independently chosen bases.
Authenticate basis disclosure and sift matches.
Estimate disturbance on a random sample.
Abort or bound adversary information.
Correct residual disagreements and amplify privacy to the proved length.

Knowledge Transfer¶

BB84 is a specialized case of measurement-and-disturbance reasoning: observation in an unknown incompatible basis changes the evidence-bearing system. That parent structure travels; qubits, bases, authenticated sifting, error thresholds, and key distillation keep the protocol domain-specific.

Measurement and Disturbance is the strict parent because the security signal arises when measuring an unknown state in a potentially incompatible basis changes the correlations available to later checks. The transferable skeleton is encode alternatives in incompatible observables → sample disturbance → bound hidden information → compress to a safer residual.

Relationships to Other Abstractions¶

Current abstraction BB84 Domain-specific

Parents (1) — outgoing typed relations

BB84 is a kind of Measurement and Disturbance Prime

Measurement and Disturbance is the strict parent because BB84 turns the unavoidable disturbance from measuring unknown nonorthogonal encodings into security evidence.

Hierarchy paths (2) — routes to 2 parentless roots

BB84 → is a kind of Measurement and Disturbance → presupposes Observability

Show alternative path (1)

Neighborhood in Abstraction Space¶

BB84 sits in a sparse region of the domain-specific corpus (83^rd percentile for distinctiveness): few abstractions share its structure, so a faithful description tends to retrieve it precisely.

Family — Cryptographic Protocols & Ciphers (15 abstractions)

Nearest neighbors

Computed from structural-signature embeddings · 2026-10-25