Quantum Tamper-Indicating Seals

• Quantum-enabled tamper-indicating seals are constructs that use quantum principles such as entanglement and the no-cloning theorem to detect unauthorized tampering.
• They employ advanced protocols including entanglement-based optical seals, quantum tamper detection codes, and device-level quantum PUFs for robust security.
• Practical applications span secure asset monitoring and cryptographic module protection, with designs demonstrating near-perfect detection rates and low false alarms.

Quantum-enabled tamper-indicating seals are physical or logical constructs that leverage quantum mechanical principles—chiefly the no-cloning theorem, entanglement, and measurement disturbance—to provide definitive evidence of unauthorized access or tampering. Unlike classical seals, which are fundamentally vulnerable to copying and replay attacks, quantum seals impose intrinsic constraints that make undetected tampering either physically impossible or exponentially unlikely under assumed adversarial models. This article surveys models, constructions, physical instantiations, security analyses, and the practical bounds that underpin the field.

1. Theoretical Underpinnings and Security Models

Quantum tamper-indicating seals exploit the measurement-disturbance relationship and the no-cloning property of quantum information. In the archetypal protocol, a “sealer” prepares an entangled or superposed quantum state encoding a secret message and delivers part of the state (or a derived quantum codeword) to a verifier or an untrusted party. The seal is designed so that any significant extraction of information about the encoded message by an adversary necessarily incurs a disturbance that can be detected with high probability upon later inspection by the legitimate verifier. Formally, a quantum seal scheme consists of the following components:

• Encoding: A map $E:\mathcal{M} \to \mathcal{H}$ where $\mathcal{M}$ is the classical (or quantum) message space and $\mathcal{H}$ is a Hilbert space.
• Opening/Decoding: A (public or secret-key) procedure to extract the message from the encoded state if desired.
• Verification/Detection: A measurement or projective test, performed by the sealer or a trusted party, with outcomes indicating “intact” or “tampered.”

Security goals are evaluated on a two-dimensional trade-off:

• Completeness (Correctness): If no tampering occurs, verification always accepts.
• Soundness (Tamper Detection): Any unauthorized attempt to extract information results in statistical deviation from the ideal state, leading to a high tamper detection probability.

Distinctions are made between information-theoretic and computational security, symmetric vs. public-keyverifiable schemes, and various adversarial models (e.g., unrestricted CPTP maps, split-state models, unitary-only adversaries).

2. Canonical Constructions: Protocol Taxonomy

2.1 Entanglement-Based Physical Layer Seals

Quantum optical seals utilize entanglement (e.g., polarization, time-bin) across spatial channels. The transmitter generates entangled photon pairs via spontaneous parametric down-conversion (SPDC). The integrity of the channel is tested via Bell inequality (CHSH) violations; intercept-resend attacks, being equivalent to measurements, reduce nonlocal correlations below a threshold, providing high-confidence indication of tampering. Hong–Ou–Mandel interference additionally enforces path-length sensitivity at sub-millimeter resolution. Detection probabilities $P_D > 0.9999$ and false-alarm rates $P_{FA} \sim 10^{-9}$ have been experimentally demonstrated for 10 s integration windows (Williams et al., 2015, Humble, 2014).

2.2 Quantum Tamper Detection Codes

Quantum tamper detection codes (QTDCs) encode messages into subspaces of a larger Hilbert space such that legitimate decoding is possible only if the state remains inside the code subspace. Haar-random isometries are used for optimal encoding:

$E_U(m) = U(|m\rangle^A \otimes |0\rangle^B),$

with decoding via $U^\dagger$ and ancilla measurement. Soundness against arbitrary CPTP tampering is established provided constraints on adversarial family size, Kraus rank, and entanglement fidelity are satisfied. For code parameters with message length $k$ and code space $d=2^n$, exponentially small soundness error $ε=\exp(-Ω(k))$ can be achieved if $\mathcal{M}$0, $\mathcal{M}$1, and $\mathcal{M}$2 for constants $\mathcal{M}$3 (Broadbent et al., 16 Sep 2025, Boddu et al., 2021).

2.3 Split-State Quantum Codes

Multipartite codes in the $\mathcal{M}$4-split-state model encode a message into $\mathcal{M}$5 quantum shares, each stored distinctively. Security is guaranteed against adversaries applying local quantum channels or limited entanglement across a subset of shares. EPR-pair “traps” are embedded to certify share integrity via Bell-basis measurement. Practical instantiations achieve detection errors comparable to non-malleable code errors, with rate and share size dictated by the code structure (e.g., for three shares, blocklength $\mathcal{M}$6) (Bergamaschi et al., 2023).

2.4 Tamper-Evident Encryption (QTEE)

QTEE schemes are symmetric-key cryptosystems mapping classical messages to quantum ciphertexts, with decryption outputting the message and an accept/reject flag. Prepare-and-measure constructions (Wiesner/BB84 style) provide information-theoretic security via random-basis encoding. Security proofs show that any message recovery attempt (eavesdropping) that passes verification with probability $\mathcal{M}$7 leaks at most $\mathcal{M}$8 information about the message (Lord, 2024).

2.5 Quantum Seals with Human-Invertible Steps

Incorporating human-invertible one-way functions (e.g., CAPTCHAs) into the seal architecture introduces an essential irreversibility mechanism, ensuring that any genuine unsealing (requiring a human) is a fundamentally incoherent operation, collapsing the superposition and making undetected tampering exponentially unlikely. This hybrid OAEP-style protocol achieves exponential security that is information-theoretically impossible with quantum operations alone (Lutomirski, 2013).

2.6 Device-Level Quantum PUFs

Single-electron tunneling through quantum-confined structures, such as RTDs, yields unique, device-specific I-V signatures robust to environmental noise. These quantum PUFs act as physical seals at the nanoscale: any local modification (e.g., mechanical, chemical, thermal) alters the quantum well profile, resulting in a measurable (multivariate) deviation from the enrolled signature (Roberts et al., 2015).

3. Security Analysis, Bounds, and Separations

Rigorous quantitative analysis establishes the inherent limits and trade-offs in quantum sealing:

• No-Go Theorems: For information-theoretic (stateless) quantum seals, the sum of an adversary’s message recovery probability $\mathcal{M}$9 and twice the sealing party’s detection probability $\mathcal{H}$0 satisfies $\mathcal{H}$1. Thus, schemes permitting perfect message recovery ($\mathcal{H}$2) are limited to $\mathcal{H}$3, unless computational assumptions or extra-physical constraints (e.g., human-only inversion) are applied (Kimmel et al., 2018).
• Quantum vs. Classical Separation: In classical codes, tamper detection against constant functions is impossible even in the average case. Quantum encoding overcomes this, allowing rejection probability exponentially close to one for code length $\mathcal{H}$4 (Broadbent et al., 16 Sep 2025).
• Exceeding Information-Theoretic Bounds: By leveraging trapdoor claw-free function families (TCFs, e.g., based on LWE), one can explicitly construct quantum seals with detection probability $\mathcal{H}$5 (for $\mathcal{H}$6 branches), exceeding the information-theoretic 0.5 bound under computational assumptions (Cheng et al., 2023).
• Metric-Dependent Detection: Helstrom-type and no-false-positive (NFP) metrics formalize detection capabilities in terms of trace distance and optimal two-outcome POVMs, respectively (Kimmel et al., 2018).

4. Physical Realizations and Implementation Considerations

Numerous platforms facilitate the construction of quantum-enabled seals, each matched to different operational and environmental constraints:

Platform	Physical Mechanism	Notable Features
SPDC/Photonics	Entanglement, Bell test	Fiber/channel monitoring, sub-ms path sensitivity, $\mathcal{H}$7 pair/s
Superconducting/Ion Trap Qubits	Encoded qubit subspaces, EPR pairs	High-fidelity entanglement, deterministic operations
RTD PUF Chips	Quantum confinement, I-V signature	Room-temperature, nanoscale, physically unclonable
Trapped Ion/Circular Polarization	Wiesner/BB84 state prep	Tamper-evident quantum encryption

Critical considerations include coherence time, error-tolerant measurement/readout (often requiring fault-tolerant projective measurements), error correction for device-level PUFs, and integration with classical tamper sensors for system-level linkage. In many designs, state-preparation and verification errors are incorporated into adversarial models for worst-case analyses (Williams et al., 2015, Bergamaschi et al., 2023, Roberts et al., 2015).

5. Practical Applications and Performance Metrics

Quantum tamper-indicating seals find broad application in unattended asset monitoring, secure containment verification, cryptographic module protection, anti-spoofing in network security (fiber links), and robust device authentication. Key performance metrics include:

• Tamper detection probability $\mathcal{H}$8 and false-alarm rate $\mathcal{H}$9: Quantified under Gaussian/statistical models for experimental setups (Williams et al., 2015, Humble, 2014).
• Seal throughput and update rate: Determined by photon pair generation and detection rates for optical platforms, memory/repetition rates for qubit registers, and sweep/side-channel characteristics for PUFs.
• Environmental robustness: Mitigated via active compensation, design of code parameters to absorb decoherence/noise, and error-correction coding (Bergamaschi et al., 2023, Roberts et al., 2015).
• Integration with higher-layer protocols: Seal status can trigger routing, port deactivation, or cryptographic key management in communication stacks (Humble, 2014).

6. Extensions, Limitations, and Open Problems

Key extensions in the literature address multipartite threshold/ramp seals, composable frameworks for tamper-evident encryption, and universal tamper detection conjectures for arbitrary CPTP maps. However, limitations persist:

• Impossibility of perfect (information-theoretic) seals: Fundamental no-go results require trade-offs or the imposition of computational/human constraints.
• Physical resource limitations: Demands for long-term quantum memory, high-fidelity random isometries, and robust entanglement limit practicality in large-scale applications.
• Scalability: Resource requirements for code-length, share size, and gate complexity impact realizability for high-rate or high-data-capacity seals.
• Open questions: Existence of universal codes for arbitrary adversarial families with constant expansion, achieving near-perfect detection under computational assumptions, and constructing efficient, hardware-optimized schemes for pervasive deployment (Broadbent et al., 16 Sep 2025, Cheng et al., 2023).

---

Quantum-enabled tamper-indicating seals constitute a nascent but theoretically rigorous class of tamper-detection mechanisms that offer fundamental advantages over classical counterparts. By unifying principles from quantum coding, entanglement, and cryptography, these systems achieve security properties grounded in the laws of quantum mechanics and, when necessary, computational complexity. Their continued development is poised to define a new standard for physical and information-theoretic integrity verification in high-assurance applications.