---
title: Three-State Simplified BB84 QKD
url: https://www.emergentmind.com/topics/three-state-simplified-bb84
type: topic
---

# Three-State Simplified BB84 QKD

A three-state simplified BB84 protocol is a quantum key distribution (QKD) scheme which reduces the number of prepared or measured quantum states from the canonical four of original BB84 to three, while largely preserving both security properties and operational key rates. Such protocols exploit the fact that key-generation and eavesdropper detection can be decoupled in a manner that allows state and measurement simplification without notable security degradation. The three-state approach substantially reduces experimental complexity, hardware requirements, and side-channel vulnerabilities, hence facilitating chip-scale integration and higher repetition rates, and has been validated against general/coherent attacks in both infinite and finite-key regimes [1801.10067, 1808.08259, 1601.00185, 1811.03244, 2208.12154].

## 1. Protocol Specification and State Preparation

In the most common formulation, the three-state protocol employs two $Z$-basis eigenstates (for key generation) and a single $X$-basis state (for phase-error estimation):

- Alice prepares each signal as either $|0\rangle_Z$ or $|1\rangle_Z$ (the computational basis), and, with suitable probability, the $|+\rangle = (|0\rangle + |1\rangle)/\sqrt{2}$ state (the $X$-basis "plus" state).
- No $|-\rangle$ state is ever prepared or transmitted [1808.08259, 1801.10067, 1601.00185, 1811.03244].

Preparation probabilities are typically chosen to maximize key generation in the $Z$ basis, e.g., $p_Z \gg p_X$ with $2p_Z + p_X = 1$ so that raw-key rounds are predominately $Z$-basis [1811.03244]. The same approach applies in polarization or time-bin encodings. In polarization implementations, Alice's laser and modulation system prepare three polarizations: $|H\rangle$, $|V\rangle$ (rectilinear, for $Z$) and $|+\rangle$ (diagonal, for $X$) [1801.10067]. In time-bin encoding, states correspond to "early" ($|0\rangle$), "late" ($|1\rangle$), and "superposition" ($|+\rangle$) pulses [1808.08259].

## 2. Measurement Design and Basis Choices

Bob randomly chooses between the $Z$ basis (direct time-tagging or polarization measurement) and the $X$ basis (interferometric detection or diagonal polarization projection):

- In the $Z$ basis, Bob discerns between $|0\rangle$ and $|1\rangle$ via time-of-arrival or polarization discrimination.
- In the $X$ basis, a single projection is used, often via a Mach-Zehnder or fiber interferometer, with just one output port monitored for a "minus" outcome (as only $|+\rangle$ is transmitted, no $|-\rangle$ is needed) [1808.08259].
- Only two single-photon detectors are required: one for $Z$, one for the $X$ port; this minimal detection setup suffices due to the protocol's state-assignment and measurement reduction [1808.08259, 1801.10067].

The measurement reduction further enables passive basis choice using beam splitters and obviates the need for active switching, auxiliary detectors, or customized filtering [1801.10067, 1808.08259].

## 3. Parameter Estimation, Security Proofs, and Key Rate Formulas

The security of three-state simplified BB84 is based on the explicit estimation of phase error rates using only statistics from the $|+\rangle$ state (in $X$ basis) and the observed bit error rates in $Z$, together with decoy-state analysis to treat photon-number splitting attacks:

- The observed $Z$-basis quantum bit error rate (QBER) quantifies errors in key-generation rounds.
- The phase error in $Z$-basis key rounds (which constrains Eve's possible knowledge) is estimated via statistics from monitoring $X$-basis rounds—specifically, the rate of "minus" detector clicks when $|+\rangle$ is sent [1808.08259, 1601.00185].
- Secret-key rates in the asymptotic regime revert to the familiar BB84 form:
  $$
  r(Q) \approx 1 - 2 h(Q)
  $$
  where $Q$ is the QBER and $h(x)$ is the binary entropy function. This remains valid up to an error threshold of approximately $11\%$—identical to standard four-state BB84 [1601.00185, 2208.12154].

- In the finite-key regime, smooth min-entropy and composable security frameworks apply:
  $$
  \ell \le D_{0,Z} + D_{1,Z} [1-h(\hat{e}_x)] - \lambda_{\mathrm{EC}} - 2\log_2 (1/\varepsilon_{\mathrm{cor}}) - 6\log_2(19/\varepsilon_{\mathrm{sec}})
  $$
  where $D_{0,Z}, D_{1,Z}$ are vacuum/single-photon detections (est. via decoy), $\hat{e}_x$ is the $X$-basis phase error bound, and $\lambda_{\mathrm{EC}}$ accounts for error correction [1808.08259, 1811.03244, 2208.12154].

- Security proofs have progressed to cover collective attacks, coherent attacks, and fully composable frameworks. These use entropic uncertainty, Azuma’s inequality, and information-disturbance tradeoffs to achieve proofs as strong as those available for full BB84 [1808.08259, 2208.12154].

## 4. Experimental Implementations and System Integration

Three-state simplified BB84 enables concrete resource and performance advantages:

- In polarization-based systems, a single pulsed laser, a dual-level intensity modulator, and a three-level phase modulator suffice. At 625 MHz repetition rate, secret-key rates of 23 bps over 200 km of telecom optical fiber were achieved, maintaining full finite-size security [1801.10067].
- Time-bin encoding on the transmitter can be implemented with a single intensity modulator for early/late/both carving, followed by phase control for superpositions. Passive beam splitting enables basis randomization and detector assignment on the receiver [1808.08259, 1811.03244].
- These implementations require fewer modulators and detectors compared to the four-state scheme, halving hardware complexity (three modulator states instead of six or more), and eliminating auxiliary devices.

The simplification also reduces random number consumption (since fewer state preparations are needed) and side-channel opportunities, particularly in polarization qubits where phase calibration and differential attacks present practical risk [1801.10067].

## 5. Security Thresholds, Performance, and Resource Requirements

Comprehensive security analyses have confirmed:

- The maximal tolerable QBER of three-state simplified BB84 is essentially identical to that of standard BB84: $p_a \approx 11\%$ [1601.00185, 2208.12154].
- Asymptotic and finite-size secret-key rates are virtually indistinguishable from four-state BB84, except that, in high-loss or extremely finite settings, slightly larger sample sizes may be required for sufficiently tight phase error estimation [1601.00185, 2208.12154].
- For composable security with total soundness $10^{-6}$ at QBER $\sim5\%$, only $N \sim 10^5$–$10^6$ quantum signals are necessary [2208.12154].

Resource minimization also increases scalability prospects—requiring only two detectors and one modulator, while lowering insertion loss and permitting higher pulse rates [1808.08259, 1811.03244].

## 6. Protocol Variants and Extensions

Three-state simplification admits multiple protocol variants:

- Reference-Frame-Independent (RFI) BB84 protocols can also be realized with just three states (two $Z$-basis, one $X$-basis). Such schemes retain reference-frame independence and match the secret-key rates and distances of full RFI BB84, robust even under large misalignment [1811.03244].
- Variants accommodate both polarization and time-bin qubits, and can operate with one or two decoy intensities; one decoy suffices for practical performance with minimal loss [1801.10067].
- Generalizations have extended full composable security proofs to three-state BB84 and related protocols against general attacks, with operationally tight security bounds [2208.12154].

## 7. Comparative Analysis and Practical Implications

Empirical and theoretical work indicates three-state simplified BB84 achieves:

- Equivalent asymptotic secret-key rates to standard BB84, including matching the $11\%$ QBER noise threshold [1601.00185, 1808.08259, 2208.12154].
- Comparable finite-key performance, provided appropriate statistics are gathered for phase error estimation.
- Markedly reduced hardware and calibration requirements, enabling greater integration potential, reduced side-channel risk, and higher clock rates [1801.10067, 1808.08259].
- In RFI contexts, improved robustness to misalignment over standard BB84 [1811.03244].

A plausible implication is that three-state BB84 can replace standard four-state BB84 in most practical QKD deployments, especially where component count, simplicity, or efficiency are at a premium, while retaining rigorous unconditional security guarantees.

---

*Key references: [1601.00185], [1801.10067], [1808.08259], [1811.03244], [2208.12154].*

Source: https://www.emergentmind.com/topics/three-state-simplified-bb84