 we varied the optical loss of the channel to Bob between $0\,\%$ and $16\,\%$ (see Figure \[fig:results\](b)), which is equivalent to a fiber length of up to $2.7$km when standard telecommunication fibers with an attenuation of $0.2$dB/km are used and a coupling efficiency of $95$$\%$ is taken into account. By measuring a total of $2\times 10^8$ samples we were still able to achieve a secret key rate of about $0.1$bit/sample at an equivalent fiber length of $2.7$km ($\approx 0.76$dB channel loss). This value, as well as the secret key sizes at the other attenuation values, were achieved by having a very high overall error reconciliation efficiency between $\beta = 94.3\,\%$ and $95.5\,\%$, again without a single frame error. The theoretical model shown in the figure reveals that even an optical transmission loss of almost $1.2$dB between Alice and Bob should be possible. This corresponds to an equivalent distance of about $4.8$km, which is already enough to implement CV QKD links with composable security against coherent attacks between parties in, for instance, a city’s central business district.

In conclusion, we have for the first time successfully implemented QKD with composable security against coherent attacks in a one-sided measurement-device independent manner. Along with the exploitation of strong Einstein-Podolsky-Rosen entanglement and a new highly efficient error reconciliation algorithm, the innovation of fast controlled random switching between the two measured quadrature angles made the implementation possible. Although attacks on the source of the quantum states are not covered by the security proof [@Furrer2012], these side-channel attacks can be avoided to arbitrarily low probabilities by adding optical isolators. While in our setup Alice and Bob were located on the same optical table, they could in principle be separated and connected by a standard telecommunication fiber (see Methods). Estimations show that our implementation is limited to about $4.8$km. Longer distances will be possible by using optical fibres with less loss, or by using reverse reconciliation [@Furrer2014].

#### **Acknowledgements**

This research was supported by the Deutsche Forschungsgemeinschaft (projects SCH 77/5-1 and WE 1240/20-1), the Centre for Quantum Engineering and Space-Time Research (QUEST
we varied the optical loss of the channel to Bob between $ 0\,\%$ and $ 16\,\%$ (visualize Figure   \[fig: results\](b) ), which is equivalent to a roughage length of up to $ 2.7$km when standard telecommunication fibers with an attenuation of $ 0.2$dB / km are used and a yoke efficiency of $ 95$$\%$ is taken into account. By measuring a sum of $ 2\times 10 ^ 8 $ samples we were still able to achieve a clandestine key rate of approximately $ 0.1$bit / sample at an equivalent fiber length of $ 2.7$km ($ \approx 0.76$dB channel personnel casualty). This value, as well as the secret key sizes at the other attenuation value, were achieved by having a very high overall erroneousness reconciliation efficiency between $ \beta = 94.3\,\%$ and $ 95.5\,\%$, again without a single frame error. The theoretical model show in the figure reveals that even an optical transmission loss of about $ 1.2$dB between Alice and Bob should be possible. This corresponds to an equivalent distance of about $ 4.8$km, which is already enough to implement CV QKD liaison with composable security against coherent attacks between parties in, for instance, a city ’s central business district. 

 In conclusion, we have for the first time successfully implemented QKD with composable security system against coherent attack in a one - sided measurement - device independent manner. Along with the exploitation of impregnable Einstein - Podolsky - Rosen web and a new highly efficient error reconciliation algorithm, the innovation of fast controlled random switching between the two measured quadrature angles lay down the implementation possible. Although attacks on the source of the quantum states are not covered by the security proof [ @Furrer2012 ], these side - channel attacks can be debar to randomly abject probabilities by adding optical isolators. While in our setup Alice and Bob were located on the same optical mesa, they could in principle be separated and connected by a standard telecommunication fiber (experience Methods). estimate show that our implementation is restrict to about $ 4.8$km. long distances will be potential by using optical character with less loss, or by using inverse reconciliation   [ @Furrer2014 ]. 

 # # # # * * Acknowledgements * * 

 This inquiry was supported by the Deutsche Forschungsgemeinschaft (projects SCH 77/5 - 1 and WE 1240/20 - 1), the Centre for Quantum Engineering and Space - Time Research (QUEST
 we varied the optical loss of the channel to Bob betwesn $0\,\%$ and $16\,\%$ (see Figure \[fig:results\](b)), which iw equuvalent to a fiber leneth of up to $2.7$km wyen wrandard telecommunleatioh fibzrw with an attekuation of $0.2$gB/km are used dna c coupling efficiency of $95$$\%$ is taken igto accpujt. By measurind a uotwl or $2\times 10^8$ samples we were still abls to aciieve a secret ley rate of about $0.1$bit/samplf at an equivalent fibfr length od $2.7$km ($\qpprox 0.76$dB chxnnel loss). This value, zs well as the secret key sizes at tke other atjzbuahhon values, xere abhieved by haypng a vary hign overall errov recmnculiation efficiency bxtween $\beta = 94.3\,\%$ and $95.5\,\%$, adain withmuc a single frame erroe. Rhe tveoraticxo mudem xhkwn in thx figure rebeals that wven an optical tramsipxsion loss or almoft $1.2$dB between Alice and Bob should be posvibme. This corresponds to qn equivalent distancg of about $4.8$km, which is already enough to implement CV QKD lhnks xigh eimposxvlf security against coherent attacks between pwdtoex in, for instakce, a city’s centrak huxyness districj.

In conemuaion, we have for tje firsj time successftlly implemented QKD with compowable securiny atainst coherent atcacks in a oue-sidec meaxurement-device independznt mahner. Along aith the sbploitation of sgrokg Ainstein-Kudolsky-Rosen entagglement end a new hiehly efficyent error recokwiliation algorithl, the itnovation lf fast controlled random switcimng between tne twm measurzd quacrature anglef made the impkementacion pussible. Alnhough atvacks on the source of tha quantum staves are njt civerwd by tfd security propf [@Furrer2012], these sidw-channel attacks cen bg zvoided to arbicxatuly low probaboligief hy aqging optical isouatuts. Whkle in our wdtup Alice and Bob were nocafed on the same opyigal table, they cotld in princille be separated ajd coinectev by a stwndard telecommunication fiber (see Methlds). Estimations shoq that our ikplementation is limited to about $4.8$km. Loiger distances will be possible by using oktigal fibres wmth lefs loss, os by using reverse rwconciliation [@Furrtr2014].

#### **Acknowledgements**

This reseasch wws supported by the Deutsche Forschungsgemeinschaft (projects SCH 77/5-1 and WE 1240/20-1), the Cxnere for Quahtum Engitezriug and Fpacx-Tmme Research (QUESN
we varied the optical loss of the Bob $0\,\%$ and (see Figure \[fig:results\](b)), fiber of up to when standard telecommunication with an attenuation of $0.2$dB/km are and a coupling efficiency of $95$$\%$ is taken into account. By measuring a of $2\times 10^8$ samples we were still able to achieve a secret key of $0.1$bit/sample an fiber length of $2.7$km ($\approx 0.76$dB channel loss). This value, as well as the secret key at the other attenuation values, were achieved by a very high overall reconciliation efficiency between $\beta = and again without single error. theoretical model shown the figure reveals that even an optical transmission loss of almost $1.2$dB between Alice and Bob should possible. This an equivalent of $4.8$km, is already enough CV QKD links with composable security between parties in, for instance, a city’s central district. In we have for the first time implemented QKD with composable security against coherent attacks a one-sided measurement-device independent manner. Along with the exploitation of strong Einstein-Podolsky-Rosen entanglement and a efficient error reconciliation algorithm, innovation of fast random between two quadrature angles the implementation possible. Although attacks on the source of the quantum are not covered by the security proof [@Furrer2012], these side-channel be to arbitrarily low by adding optical isolators. in setup Alice and Bob on same could principle separated and connected by standard telecommunication fiber (see Methods). show that our implementation Longer distances will be possible by using optical with less loss, or by using reverse [@Furrer2014]. #### **Acknowledgements** This research was supported by the Deutsche Forschungsgemeinschaft (projects 77/5-1 and the Centre for Quantum Engineering and Space-Time Research
 we varied the optical loss of tHe channel tO Bob bEtwEen $0\,\%$ AnD $16\,\%$ (see figuRe \[fig:results\](b)), wHIch iS equivalent to a fiber lenGth of Up TO $2.7$km wHEn StandArd teleCOmMUNicAtIoN fiBeRS wIth an AttEnuatioN of $0.2$dB/km are UseD aNd a coupling eFFiCiency of $95$$\%$ is TakEn into accounT. By MeasurInG a tOTal of $2\TimEs 10^8$ samPles we WEre stiLl able to aChIEve a seCRet key rATE oF aboUt $0.1$bit/sample at an eqUIvALent fiber lengtH of $2.7$km ($\aPpROx 0.76$Db ChaNneL loss). This vAlUe, as wELl as the SEcRET Key SIzes at the otheR attenuatioN ValUes, werE aChiEVed by hAving A vERy hIgh overall eRror ReconciliAtion eFFiciencY Between $\Beta = 94.3\,\%$ anD $95.5\,\%$, agAin WithOUt A sIngLe FRamE ErRor. tHe tHeoreticAl MoDel shOwn iN THE FiguRe rEveaLs thaT even an opticaL trAnsmISsiOn losS of alMost $1.2$DB BetweEn AlicE and BOb Should be possiblE. ThiS correspoNds To An eQuIvaleNT distaNce Of aBout $4.8$km, wHich is aLReaDy ENOUgH to implement CV QKD lInKS WiTh composAble seCUrItY Against cOhEreNt atTACks beTweeN PaRties in, fOr instANcE, a City’s ceNtRal busInEss DisTrict.

iN conClusioN, we have fOr the FIrst time succesSFully implemenTEd qkd wITh coMpoSable securiTy agAInst CoheREnT atTAcks iN a one-SiDEd MEasurement-device indEpEndent ManneR. Along with the ExploitatiON OF strong EInstEIn-pOdolsky-Rosen enTanglEment and a nEW highly eFficiEnt error ReconciliATIon algorIthM, thE inNovATIoN of fast controLLEd raNdOm switcHinG betweeN thE twO meAsuReD quadratuRe angles MaDe ThE iMplEmentATion possIbLe. ALtHouGh attACks on tHe souRce oF tHe QUanTum statES aRE Not cOvErEd by The SeCuritY proOF [@FuRrer2012], theSe side-chaNneL AttaCkS cAn be avoIded to arbitraRiLy low probaBiLitIes by aDDIng opticAl isolators. While in our seTUp Alice And bob weRe loCated on thE saMe optiCal TAble, thEy coulD in prInCipLE Be sepARAtEd aNd Connected bY A StaNdard TeLecoMmunicaTion fiber (see MethodS). estImations show tHat Our iMPLeMenTAtIOn iS lIMitED To about $4.8$km. Longer Distances wIlL Be Possible by USinG oPtical fIbres wiTh lesS Loss, or bY using revErse reconCiLiatION [@FuRrer2014].

#### **AcknowLedgemenTs**

This resEArch wAS sUpporTed By the DEuTscHe ForSchungSGemEinscHaft (prOjEcts SCh 77/5-1 and We 1240/20-1), tHe Centre For Quantum Engineering anD Space-time REseArch (QUEST
 we varied the optical los s of the c hanne l t o B ob  bet ween  $0\,\%$ and $ 1 6\,\ %$ (see Figure \[fig:r esult s\ ] (b)) ,  w hichis equi v al e n t t oafib er le ngthofup to $ 2.7$km whe n s ta ndard teleco m mu nication f ibe rs with an a tte nuatio nof$ 0.2$d B/k m are  useda nd a c oupling e ff i ciency of $95$ $ \ %$  istaken into accoun t .B y measuring atotalof $2 \ t ime s 1 0^8$ sampl es  we w e re stil l  a b l e  to achieve a sec ret key rat e  of  about  $ 0.1 $ bit/sa mpleat anequivalentfibe r lengthof $2. 7 $km ($\ a pprox 0 .76$dB  ch ann el l o ss ).  Th is val u e,  as wel l as the  s ec ret k ey s i z e s  atthe  oth er at tenuation val ues , we r e a chiev ed by  hav in g a v ery hi gh ov er all error recon cili ation eff ici en cybe tween $\beta  =94. 3\,\%$and $95 . 5\, \% $ , ag ain without a sing le f ra me error . Thet he or e tical mo de l s hown i n the  fig u re  reveals  thate ve nan opti ca l tran sm iss ion  loss of a lmost$1.2$dBbetwe e n Alice and Bo b  should be po s si b l e. This  co rresponds t o an equi vale n tdis t anceof ab ou t  $ 4 .8$km, which is alr ea dy eno ugh t o implement C V QKD link s w ith comp osab l es ecurity agains t coh erent atta c ks betwe en pa rties in , for ins t a nce, a c ity ’scen tra l bu siness distri c t .

I nconclus ion , we ha vefor  th e f ir st time s uccessfu ll yim pl eme ntedQ KD withco mpo sa ble  secu r ity ag ainst  coh er en t  at tacks i n  a o ne-s id ed  mea sur em ent-d evic e  in depende nt manner . A l ongwi th  the ex ploitation of  s trong Eins te in- Podols k y -Rosen e ntanglement and a new h i ghly ef fic ienterro r reconci lia tion a lgo r ithm,the in novat io n o f fastc o nt rol le d random s w i tch ing b et ween  the tw o measured quadrat u reangles made t heimpl e m en tat i on pos si b le. A lthough attacks  on the so ur c eof the qua n tum  s tates a re notcover e d by th e securit y proof [ @F urre r 2 012 ], these s ide-chan nel attac k s can be  avoi ded  to ar bi tra rilylow pr o bab iliti es byad ding o ptica lisolator s. While in our setup A lice a nd Bo b w ere locat edo n t he same o ptic al table,the y c ouldinp rinci pleb esep a rated  and connected by  as t an dard teleco m m u nic ation  fi b er (se e Me thods). Estimatio n s show that ou r im p l eme nta t ionis  limited to ab out  $ 4 . 8$km. Lo ng er distance s will b ep ossib le byusingoptical f ib r es wit h le ssloss, orbyus i ng reve rs er econci liat io n [@Fu rrer20 1 4].# ### **Acknowledg ement s * *

Th i s r esear ch  was su p port ed by theDeutsche Fo rschun gsge meins chaft ( pr ojects  SC H77/5-1 and WE 1240/2 0-1),  the Ce nt re f orQuantu m En g i neeri ng a nd  Sp ace-TimeR e se a rc h( QUE ST
 we_varied the_optical loss of the_channel to_Bob_between $0\,\%$_and_$16\,\%$ (see Figure \[fig:results\](b)),_which is equivalent_to a fiber length_of up to_$2.7$km_when standard telecommunication fibers with an attenuation of $0.2$dB/km are used and a coupling_efficiency_of $95$$\%$_is_taken_into account. By measuring a_total of $2\times 10^8$ samples_we were_still able to achieve a secret key rate_of_about $0.1$bit/sample at_an equivalent fiber length of $2.7$km ($\approx 0.76$dB channel_loss). This value, as well as_the secret key_sizes_at_the other attenuation values,_were achieved by having a very_high overall error reconciliation efficiency between_$\beta = 94.3\,\%$ and $95.5\,\%$, again without_a single frame error. The theoretical_model shown in the figure_reveals that_even an optical transmission loss_of almost $1.2$dB_between Alice_and Bob should_be possible. This corresponds to an_equivalent distance of_about $4.8$km, which is already enough_to_implement CV QKD_links_with_composable security_against coherent attacks_between_parties in,_for_instance, a city’s central business district.

In_conclusion,_we have for the first time successfully_implemented QKD with composable_security_against coherent attacks in_a one-sided measurement-device independent manner._Along with the exploitation of strong_Einstein-Podolsky-Rosen entanglement_and a_new highly efficient error reconciliation algorithm, the innovation of fast controlled_random switching between the two measured_quadrature angles made the_implementation possible._Although_attacks on the_source_of the_quantum states are not covered by the_security proof_[@Furrer2012], these side-channel attacks can be_avoided to arbitrarily low_probabilities_by adding optical isolators. While in_our setup Alice and Bob were_located on the same optical_table,_they_could in principle be separated_and connected by a standard telecommunication_fiber (see Methods)._Estimations show that our implementation is limited_to_about $4.8$km. Longer distances will be_possible_by using optical fibres with less_loss,_or_by using reverse reconciliation [@Furrer2014].

#### **Acknowledgements**

This_research was supported by the Deutsche_Forschungsgemeinschaft (projects SCH 77/5-1 and WE 1240/20-1), the Centre_for Quantum Engineering_and Space-Time Research (QUEST