KLJN-Assisted QKD Protocols

• KLJN-assisted QKD protocols leverage classical statistical-physical methods to bypass public basis reconciliation and incorporate extra key bits alongside standard BB84 operation.
• Generalized KLJN schemes, including RR-KLJN and RRRT-KLJN, enable the use of continuum-valued resistances and temperatures to enhance flexibility and secure key exchange.
• Robust synchronization and timing integrity mechanisms are integrated to mitigate clock attacks, ensuring secure coordination between optical and wired channels.

KLJN-assisted QKD protocols are hybrid or adjacent key-distribution constructions in which Kirchhoff-law-Johnson-noise (KLJN) secure key exchange is used alongside, or in support of, quantum key distribution (QKD). In the most explicit recent formulation, an optical BB84-type QKD link is coordinated with a parallel wired KLJN link so that KLJN handles basis information, contributes basis-derived secret bits, or co-generates raw key bits under ideal KLJN assumptions (Basar, 14 May 2026). Earlier KLJN work is directly relevant to these hybrids because it broadens the classical primitive beyond the original binary, equal-temperature setting: the random-resistor-random-temperature (RRRT-) KLJN scheme shows that secrecy can persist with continuum-valued resistances and temperatures and even at non-zero power flow, with the fluctuation-dissipation theorem rather than equilibrium alone carrying the security argument (Kish et al., 2015). A separate line of work treats synchronization as a security-critical subsystem for KLJN, in explicit analogy with QKD clock vulnerabilities, and proposes authenticated and integrity-check-based timing protocols intended to resist arbitrary time-delay attacks (Kish, 2022).

1. KLJN in the QKD security landscape

KLJN is presented in the cited literature as an information-theoretically secure or unconditionally secure key-exchange technology that is conceptually parallel to QKD but grounded in classical physics rather than quantum physics (Kish, 2022). In that comparison, QKD is tied to quantum physics and the Quantum No-Cloning Theorem, whereas KLJN is tied to classical statistical physics and, in the original formulation, the Second Law of Thermodynamics. The RRRT generalization refines that picture by arguing that when secure operation is maintained at non-zero power flow, the relevant physical law is not the Second Law of Thermodynamics in the usual equilibrium sense but the fluctuation-dissipation theorem via the Johnson-Nyquist noise relation (Kish et al., 2015).

Within KLJN-assisted QKD, KLJN is not introduced as a replacement for BB84. The hybrid architecture instead uses a standard BB84-type optical quantum link together with a wired KLJN subsystem, with the specific aim of eliminating public basis reconciliation and the associated bit-sifting loss, or of deriving additional secure bits from the KLJN side channel (Basar, 14 May 2026). This places KLJN in the role of a classical secure key-distribution layer that can complement quantum transmission.

A second commonality between KLJN and QKD is operational rather than foundational. Both are described as potentially vulnerable to active attacks if Eve takes over the control of the clocks of Alice and Bob (Kish, 2022). In that sense, KLJN-assisted QKD protocols are not only about combining two secrecy mechanisms; they also inherit a shared requirement that timing integrity be treated as part of the security model rather than as a purely engineering concern.

2. Generalized KLJN primitives: RR-KLJN and RRRT-KLJN

The original KLJN scheme uses two fixed resistors, but the 2015 generalization introduces two broader constructions: Random-Resistor (RR-) KLJN and Random-Resistor-Random-Temperature (RRRT-) KLJN (Kish et al., 2015). In RR-KLJN, Alice and Bob choose resistors randomly from a quasi-continuum set. In RRRT-KLJN, both the resistances and the temperatures are continuum random variables. The paper motivates RR-KLJN by noting that the original KLJN concept already allowed Alice and Bob to infer unknown resistance values from line measurements, even though prior work did not exploit a continuum of random resistances because it was considered impractical. RRRT-KLJN is then motivated by the Vadai-Mingesz-Gingl result that secure KLJN operation can exist at non-zero power flow.

The RRRT construction is defined through local parameter choices on both ends and three line observables: the noise spectra of voltage and current, $S_u(f)$ and $S_i(f)$, together with the power flow $P_{AB}$ (Kish et al., 2015). The paper introduces the dimensionless parameters

$R_B=\alpha R_A,\qquad T_B=\beta T_A.$

A representative set of line relations is written as

$S_u(f)= 4kT_A R_A \frac{1+a(a+\beta)}{(1+a)^2},$

$$S_i(f)= \frac{4kT_A}{R_A}\,\frac{1+a\beta}{(1+a)^2}.$$

The derived dimensionless forms include

$$Y=\frac{S_u(f)}{4kT_A R_A}=\frac{a(a+\beta)}{(1+a)^2},$$

$$Z=\frac{S_i(f)R_A}{4kT_A}= \frac{1+a\beta}{(1+a)^2}.$$

The security argument is organized around asymmetric knowledge. Alice and Bob know their own local resistance and temperature and can use the measured wire data to solve for the remote side’s parameters. Eve, by contrast, knows $S_u(f)$, $S_i(f)$, and $S_i(f)$0, but not $S_i(f)$1, $S_i(f)$2, $S_i(f)$3, or $S_i(f)$4, so she has four unknowns but only three equations (Kish et al., 2015). The paper states that there are infinitely many parameter combinations consistent with Eve’s observations, which prevents unique reconstruction of the remote side’s state.

For KLJN-assisted QKD, the significance of RRRT-KLJN is structural. It enlarges the class of admissible KLJN secure exchanges from discrete, equal-temperature, binary operation to continuum-valued resistances and temperatures. The paper explicitly frames this as improving speed and flexibility and as rendering many earlier attack models invalid or incomplete in their known form, while also acknowledging that new attacks may still be possible if Eve finds an additional independent observable such as a mean-square-voltage difference between the two ends (Kish et al., 2015).

3. Hybrid BB84-KLJN protocol family

The 2026 hybrid architecture combines an optical fiber QKD link carrying BB84-style polarization-encoded states with a wired KLJN link consisting of multiple parallel wire pairs (Basar, 14 May 2026). The two links are coordinated through local mapping, buffer, and trigger logic. The paper distinguishes two operational modes. In real-time gated mode, each KLJN decision corresponds to one optical pulse, and this mode is required for Protocol III. In asynchronous buffered mode, KLJN bits are generated continuously in the background and stored locally so that Protocols I and II can drive high-speed optical BB84 bursts without continuously throttling the laser.

The three protocols differ by the role assigned to the KLJN subsystem.

Protocol	KLJN role	Stated outcome
I	Secure basis handling only	Same sifted secure key as BB84, without public basis disclosure and immediate basis sifting
II	Basis-derived key extraction	Eliminates public basis disclosure and bit sifting and adds secure bits from basis overlap
III	Raw key generation in tandem with BB84 under ideal KLJN conditions	Can generate a secure bit in every interval in the ideal lossless limit

Protocol I preserves the same quantum key generation logic as BB84 but moves basis reconciliation onto the KLJN line (Basar, 14 May 2026). The paper specifies the cross-mapping

$S_i(f)$5

$S_i(f)$6

Under this mapping, equal bases correspond to the mixed-resistance states $S_i(f)$7 or $S_i(f)$8 and therefore to an intermediate noise level, while different bases correspond to $S_i(f)$9 or $P_{AB}$0 and therefore to low or high variance. Alice and Bob can thus determine whether their bases match without public discussion and can discard mismatched events immediately. The paper states that Protocol I yields the same sifted secure key as BB84 but still requires classical post-processing for error correction and privacy amplification of the BB84-derived bits.

Protocol II uses the same basis-to-resistance mapping as Protocol I but additionally extracts secure bits from the basis overlap itself (Basar, 14 May 2026). The paper gives the explicit mappings

$P_{AB}$1

$P_{AB}$2

In the ideal KLJN case, Eve cannot distinguish $P_{AB}$3 from $P_{AB}$4, so the overlapping basis identity becomes an additional secret shared resource. The paper states that, in its example table, nine additional key bits are created by Protocol II from the KLJN-assisted basis overlap.

Protocol III changes both the mapping and the timing discipline (Basar, 14 May 2026). It uses

$P_{AB}$5

and interprets the four basis combinations as low-noise, intermediate-noise, or high-noise KLJN states. Same-basis cases use QKD measurements for secure key generation, whereas different-basis cases use the KLJN line only. The paper gives the KLJN-generated mappings

$P_{AB}$6

$P_{AB}$7

Because basis overlap is revealed through the KLJN noise level in this protocol, the paper states that Protocol III must be run in real-time gated synchronous mode, with the optical pulses fired before KLJN operation.

4. Analytical model, bandwidth constraints, and rate formulas

The hybrid analysis assumes ideal KLJN operating conditions, ideal capacitance compensation, and quasi-static wave-limit operation (Basar, 14 May 2026). The cable is required to behave as a lumped electrical system, with transmission distance much smaller than the signal wavelength: $P_{AB}$8 The lowest standing-wave frequency is written as

$P_{AB}$9

which leads to the safe KLJN bandwidth bound

$R_B=\alpha R_A,\qquad T_B=\beta T_A.$0

The KLJN subsystem is explicitly modeled as a rate-limited classical resource. With safe KLJN noise bandwidth $R_B=\alpha R_A,\qquad T_B=\beta T_A.$1, the ADC sampling rate is

$R_B=\alpha R_A,\qquad T_B=\beta T_A.$2

If each decision requires $R_B=\alpha R_A,\qquad T_B=\beta T_A.$3 samples and the system uses $R_B=\alpha R_A,\qquad T_B=\beta T_A.$4 parallel wire pairs, the KLJN decision-bit rate is

$R_B=\alpha R_A,\qquad T_B=\beta T_A.$5

For one-to-one gated synchronization, the effective system trigger rate is

$R_B=\alpha R_A,\qquad T_B=\beta T_A.$6

The paper emphasizes that in practice $R_B=\alpha R_A,\qquad T_B=\beta T_A.$7 is usually dominated by $R_B=\alpha R_A,\qquad T_B=\beta T_A.$8, which decreases with distance because $R_B=\alpha R_A,\qquad T_B=\beta T_A.$9.

The normalized key rates are presented in secure bits per transmission cycle (Basar, 14 May 2026). Standard BB84 and Protocol I have the same normalized rate: $S_u(f)= 4kT_A R_A \frac{1+a(a+\beta)}{(1+a)^2},$0 Protocols II and III add a KLJN-derived contribution: $S_u(f)= 4kT_A R_A \frac{1+a(a+\beta)}{(1+a)^2},$1 The paper identifies this extra $S_u(f)= 4kT_A R_A \frac{1+a(a+\beta)}{(1+a)^2},$2 term as an unconditional KLJN contribution in the ideal case with unbiased basis selection, and it states that this yields a baseline $S_u(f)= 4kT_A R_A \frac{1+a(a+\beta)}{(1+a)^2},$3 secure bits per cycle independent of optical loss.

Absolute throughput is obtained by multiplying normalized rates by the relevant trigger frequency: $S_u(f)= 4kT_A R_A \frac{1+a(a+\beta)}{(1+a)^2},$4

$S_u(f)= 4kT_A R_A \frac{1+a(a+\beta)}{(1+a)^2},$5

$S_u(f)= 4kT_A R_A \frac{1+a(a+\beta)}{(1+a)^2},$6

For Protocols I and II, the paper also allows buffered asynchronous operation in which KLJN runs continuously in the background and the optical QKD system later transmits at native speed once enough basis bits exist. In that burst mode,

$S_u(f)= 4kT_A R_A \frac{1+a(a+\beta)}{(1+a)^2},$7

The same source is careful to add that the long-term average throughput remains bounded by the KLJN replenishment rate and thus follows the earlier throughput expressions.

5. Synchronization, timing integrity, and clock-attack resistance

The synchronization paper treats timing as part of the physical security of KLJN rather than as an external service (Kish, 2022). Its starting point is that Alice and Bob compare measured voltage and current data to detect active attacks and verify that the line has not been tampered with. This only works if they agree on which measurements correspond to the same bit exchange period (BEP). If their measurement windows are misaligned, the comparison can produce false inconsistencies and trigger alarm warnings even when no attack is present.

The timing requirement is described as much looser than in QKD. The relevant justification is the autocorrelation of bandlimited white noise: $S_u(f)= 4kT_A R_A \frac{1+a(a+\beta)}{(1+a)^2},$8 Because “virtually nothing” happens within a small fraction of the inverse bandwidth, synchronization accuracy needs only to be much smaller than $S_u(f)= 4kT_A R_A \frac{1+a(a+\beta)}{(1+a)^2},$9 and in practice on the order of the cable’s flying time. The heuristic relation given is

$$S_i(f)= \frac{4kT_A}{R_A}\,\frac{1+a\beta}{(1+a)^2}.$$0

For a 2-km range, the required synchronization resolution is stated to be on the order of 10 microseconds, which the paper describes as about a million times longer than what QKD requires.

Three synchronization approaches are proposed (Kish, 2022). The first is a simple undefended synchronization of absolute times based on a two-way timestamp exchange: $$S_i(f)= \frac{4kT_A}{R_A}\,\frac{1+a\beta}{(1+a)^2}.$$1

$$S_i(f)= \frac{4kT_A}{R_A}\,\frac{1+a\beta}{(1+a)^2}.$$2

From these,

$$S_i(f)= \frac{4kT_A}{R_A}\,\frac{1+a\beta}{(1+a)^2}.$$3

The paper states that this protocol is not secure because Eve can intercept, remove, or replace messages and can also alter the channel during the exchange.

The second approach authenticates the timestamp messages by attaching a hash fingerprint encrypted using a few secure bits from a previously established KLJN key (Kish, 2022). This prevents covert message substitution but does not fully solve the problem, because Eve could still change the length of the line when Bob sends the response back and thereby alter the propagation delay.

The strongest method is the robust and secure synchronization using system integrity check, described as the “ultimate” protocol (Kish, 2022). During each BEP, Alice and Bob measure and store voltage data, current data, and local timestamps in a file $$S_i(f)= \frac{4kT_A}{R_A}\,\frac{1+a\beta}{(1+a)^2}.$$4. They exchange $$S_i(f)= \frac{4kT_A}{R_A}\,\frac{1+a\beta}{(1+a)^2}.$$5 through an authenticated file transfer using an encrypted hash $$S_i(f)= \frac{4kT_A}{R_A}\,\frac{1+a\beta}{(1+a)^2}.$$6, producing a ciphertext $$S_i(f)= \frac{4kT_A}{R_A}\,\frac{1+a\beta}{(1+a)^2}.$$7. Each party then feeds the received data into a cable simulator and compares simulated and measured current or voltage. The simplest model may be Ohm’s law plus the wire resistance. Bob’s time offset is recovered by varying a trial shift $$S_i(f)= \frac{4kT_A}{R_A}\,\frac{1+a\beta}{(1+a)^2}.$$8 until measured and simulated currents match best, giving

$$S_i(f)= \frac{4kT_A}{R_A}\,\frac{1+a\beta}{(1+a)^2}.$$9

The paper states that this robust protocol simultaneously synchronizes clocks, checks line integrity, and detects active attacks, and that it is resistant to arbitrary time-delay attacks, both symmetric and asymmetric ones.

For KLJN-assisted QKD, the relevance is direct. The synchronization work explicitly links KLJN and QKD through their shared exposure to clock attacks and suggests that KLJN can serve as a secure timing and authentication backbone. It further states that ideas used to harden KLJN synchronization may also be relevant to strengthening QKD systems, especially against delay-based or timing-control attacks (Kish, 2022).

6. Security boundaries, practical regime, and unresolved issues

The hybrid BB84-KLJN architecture is presented as a short-haul design rather than a long-haul replacement for BB84 (Basar, 14 May 2026). The numerical study claims that Protocols II and III achieve strong short-haul supremacy below about 4 km, outperforming standard BB84 due to the many parallel KLJN pairs. It also states that Protocol I performs worse in throughput because it only saves on basis sifting, without gaining the extra key-bit contribution from KLJN. Because the KLJN bandwidth scales as $$Y=\frac{S_u(f)}{4kT_A R_A}=\frac{a(a+\beta)}{(1+a)^2},$$0, the hybrid throughput decays roughly inversely with distance; around 7.5 km, the hybrid throughput crosses below the unthrottled BB84 curve; and over the considered 10 km range, the system still achieves on the order of $$Y=\frac{S_u(f)}{4kT_A R_A}=\frac{a(a+\beta)}{(1+a)^2},$$1 bps under the ideal KLJN assumptions (Basar, 14 May 2026). The infrastructures explicitly singled out are metropolitan area networks (MANs), data center interconnects, and other short-range, low-latency secure links.

Several limitations are stated without qualification in the sources. The strongest gains rely on ideal KLJN behavior and perfect capacitance compensation; the security model of the hybrid construction is described as incomplete and in need of a more sophisticated threat model that includes Eve’s access to the optical channel, KLJN line, timing information, and active attacks (Basar, 14 May 2026). Protocol III cannot use asynchronous buffering because basis information is exposed through the KLJN noise level and therefore must remain synchronous. Even in the hybrid schemes, the BB84-generated bits still require classical error correction and privacy amplification, so the post-processing penalty $$Y=\frac{S_u(f)}{4kT_A R_A}=\frac{a(a+\beta)}{(1+a)^2},$$2 remains (Basar, 14 May 2026).

The RRRT-KLJN work introduces a separate but related security boundary. It argues that many earlier attacks—specifically attacks by Hao, Scheuer-Yariv, cable-resistance attacks, the cable-capacitance attack, and the transient attack—do not work in their known form once resistances and temperatures are ad hoc random continuum values unknown to the parties except for their allowed ranges (Kish et al., 2015). At the same time, that paper explicitly admits that new attacks may still be possible if Eve can identify an additional independent observable that supplies another equation. The resulting controversy is therefore not whether the RRRT construction changes the attack surface—it clearly does—but whether the remaining degeneracy survives under richer measurement models.

A second point of clarification concerns the physical basis of security. The synchronization paper associates KLJN with classical statistical physics and the Second Law of Thermodynamics in the usual high-level comparison to QKD (Kish, 2022). The RRRT paper narrows that claim by asserting that, once secure operation at non-zero power flow is allowed, the physical law guaranteeing security is not the Second Law of Thermodynamics but the fluctuation-dissipation theorem (Kish et al., 2015). Taken together, these papers describe a shift from equilibrium-centered interpretations of KLJN toward a broader fluctuation-dissipation account, especially for generalized and hybridized protocols.

KLJN-assisted QKD protocols therefore occupy a specific technical niche. They use KLJN not merely as an authenticated side channel, but as a coordinated statistical-physical subsystem that can remove BB84 basis disclosure, encode basis overlap into secret bits, support synchronous raw key generation under ideal assumptions, and provide timing-integrity mechanisms against clock and delay attacks. Their stated advantages are strongest in short-haul settings and under idealized KLJN conditions; their stated limitations center on bandwidth-distance scaling, synchronization discipline, and the need for a more complete active-adversary threat model (Basar, 14 May 2026).