{"id":"b1a6e090-1eaf-4842-820a-94ae28e85fdf","arxiv_id":"2502.08423","paper_version":1,"verdict":"CONDITIONAL","confidence":"MODERATE","novelty_score":6.0,"correctness_risk":"medium","formal_verification":"none","parameter_count":4,"one_line_summary":"Simultaneous quantum two-way time transfer and dispersive-optic QKD over 120 km fiber using shared energy-time entanglement yields sub-picosecond stability and a 73.8 bps finite-size key rate.","lead":"Two quantum applications, time synchronization and quantum key distribution, were run at the same time over one 120 km fiber using the same energy-time entangled photon pairs. The result is a demonstration that a single quantum resource can serve multiple network functions and even cancel certain timing attacks.","discovery_kind":"new_application","skeptic_critique":{"model":"deepseek-v4-flash","headline":"The attack-mitigation result is a common-mode feed-forward cancellation, not a proven security property: it assumes Eve's delay is identical for the QKD and Q-TWTT photons and that the timing corrections are trusted. An adversary who can create a non-common-mode delay breaks the claimed robustness.","rationale":"I agree with the reader that the paper is a plausible proof-of-principle with internally consistent Q-TWTT math and no obvious numerical contradictions. The reader's weakest assumption (link symmetry / equal delay) captures the right region, but I would sharpen it: even a perfectly symmetric static link does not make the attack-mitigation a security result. The cancellation proof in Eqs. (1)-(3) is correct for the MDL-implemented common-mode forward delay, and the experimental data are consistent with that restricted model. However, the abstract and discussion generalize this to 'potential asymmetric delay attacks' without specifying the threat model. Since the central claim in the strongest_claim explicitly includes 'the QTS correction cancels a forward-path asymmetric link delay,' this is the load-bearing point. The remote-clock dependence on classical microwave frequency transfer and the non-public data are additional caveats, but they do not threaten the core multiplexing demonstration as directly. I therefore keep the reader's CONDITIONAL verdict: the paper is acceptable as a proof-of-principle if the attack-robustness language is scoped to common-mode delays and the security model is clarified; it should not be read as a full security proof.","tokens_in":10486,"tokens_out":12410,"duration_ms":134778,"concrete_test":"Perform a security re-evaluation of the DO-QKD finite-size key rate (Eq. (4)) with the Q-TWTT timing corrections t0' and tau_link'' modeled as public classical functions of Eve's chosen delay. Concretely, simulate an adversary who adds a time-dependent delay delta(t) only to the QKD time-basis photon stream after the Q-TWTT measurement (e.g., by placing an additional motorized delay line after FBS2 at Bob, or in simulation by decoupling the QKD timestamps from the Q-TWTT timestamps). If the normalized finite-size SKR remains near 1 when the common-mode assumption is violated, the claim survives; if it drops as in Fig. 5(b), the attack-mitigation claim is conditional on the common-mode assumption.","verdict_should_be":"UNCHANGED","load_bearing_attack":"The central novelty beyond prior Q-TWTT/DO-QKD demonstrations is the claim that the concurrent QTS procedure 'effectively mitigates' asymmetric delay attacks (Sec. 3, Eqs. (1)-(3), Fig. 5). The demonstration inserts a calibrated MDL delay before the photons reach Bob, so the same delay appears in both the Q-TWTT forward measurement (t1) and the DO-QKD time-basis timestamps. The cancellation t_B'' + tau_link'' = t_A + tau_link is then a data-processing identity. This does not hold if Eve's delay is not common-mode: e.g., a wavelength/polarization dependent delay, a delay applied only to the time-basis path after Bob's FBS, or a delay chosen to exploit the fact that the Q-TWTT offset is a 5 s average while individual QKD photons arrive at different times. Moreover, the DO-QKD security proof (Ref. [18]) assumes Gaussian collective attacks on the time-frequency state; it does not model the Q-TWTT correction as public classical side information that Eve may influence. The experiment therefore validates an impairment model, not an adversarial model. The paper's phrasing 'robustness against asymmetric delay attacks' should be read as robustness against a specific common-mode static delay, not as a security guarantee.","agreement_with_reader":"partial"},"referee_report":{"model":"deepseek-v4-flash","summary":"This paper reports a proof-of-principle experiment combining quantum two-way time transfer (Q-TWTT) and dispersive-optic quantum key distribution (DO-QKD) over a 120 km fiber link using shared energy-time entangled photon pairs. The authors report sub-picosecond time-synchronization stability in a common-clock configuration, a remote-clock time-offset stability of 6.5 ps over 10 hours, a finite-size secure key rate of (73.8±15.7) bits per second, and an approximately 0.79 normalized secure key rate under asymmetric delay attacks up to 120 ps. The central claim is that multiplexing the same energy-time entanglement resource enables compatible, simultaneous quantum synchronization and quantum cryptography, and that the concurrent synchronization effectively mitigates asymmetric delay attacks.","tokens_in":10642,"tokens_out":5874,"duration_ms":58790,"significance":"If the claims hold, the experiment demonstrates a useful step toward function-scalable quantum networks by showing that one energy-time entanglement resource can simultaneously serve two distinct quantum protocols. The reported performance numbers are competitive: sub-picosecond stability, a 120 km link, and a finite-size key rate exceeding 70 bps. The work also includes careful uncertainty reporting and a clear description of the experimental setup. The attack-mitigation result is conceptually interesting, but it rests on a common-mode cancellation argument and, as presented, is not a general security property; this limits the strength of the robustness claim but not the validity of the experimental demonstration.","major_comments":[{"comment":"The robustness claim against asymmetric delay attacks is demonstrated for a specific impairment model: a static, common-mode delay inserted in the forward fiber path that affects the QKD and Q-TWTT photons identically. The derivation in Eqs. (1)-(3) shows cancellation under this assumption, but the paper's language in the Abstract and Sec. 3 (\"robustness against asymmetric delay attacks\", \"effectively mitigated\") is broader. An adversary who can create a non-common-mode delay — for example, a wavelength-dependent delay, a polarization-dependent delay, a delay applied only to the time-basis arm after Bob's fiber beam splitter, or a delay that varies faster than the 5 s averaging window of the Q-TWTT offset — breaks the cancellation. The DO-QKD security proof of Ref. [18] does not model the Q-TWTT correction as public classical side information that Eve may influence. I recommend that the authors explicitly restate the result as robustness against a static common-mode forward-path delay and discuss these limitations in the main text.","section":"Sec. 3, Eqs. (1)-(3), Fig. 5"},{"comment":"The Q-TWTT protocol assumes strict link symmetry, tau_link,AB = tau_link,BA, to extract the time offset. The paper does not quantify the sensitivity of the time-offset estimate and the DO-QKD correction to residual link asymmetry (due to, e.g., wavelength differences between the two sources, temperature gradients, or polarization-dependent delays). The sub-picosecond TDEV result of Fig. 2(c) is obtained with both nodes referenced to the same Rb clock, so it does not include the effect of link asymmetry. In the remote-clock 10-hour run, the time-offset standard deviation is 6.5 ps, more than an order of magnitude larger than the common-clock TDEV; this discrepancy is attributed to the classical microwave frequency transfer, but the potential contribution of link asymmetry should be discussed. The authors should either provide an estimate of the link-asymmetry uncertainty or explicitly state that the sub-picosecond stability claim applies only to the common-clock configuration.","section":"Methods, Quantum two-way time transfer protocol"},{"comment":"The long-term DO-QKD measurement reports an average QBER of (5.5±0.7)%, which exceeds the stated optimization upper bound of 5%. The paper reports a finite-size secure key rate of (73.8±15.7) bps for this run without clarifying whether the security analysis remains valid for QBER values above this bound. If the 5% value is a security threshold rather than a performance optimization target, the key rate should be zero for the intervals in which the QBER exceeds it; if it is only a target, the authors should state the maximum tolerable QBER for the chosen encoding parameters (D=6, I=3, tau=80 ps) and show that the finite-size key rate calculation accounts for the actual QBER distribution. This point is load-bearing because the reported key rate is a central experimental claim.","section":"Results, Sec. 2, long-term DO-QKD paragraph"}],"minor_comments":[{"comment":"The phrase \"a single-rum of QCS procedure\" appears to be a typo; it should likely read \"a single run of the QTS procedure\". The abbreviation QCS is not defined elsewhere; the paper consistently uses QTS for quantum time synchronization.","section":"Discussion, first paragraph"},{"comment":"The description \"solid crayon-colored line\" is unconventional and difficult to interpret in print; consider using a standard color name or line style (e.g., \"solid green line\") in the figure and text.","section":"Fig. 5 caption and text"},{"comment":"The sentence \"the difference in PPLN length results inconsistent spectral widths\" should read \"...results in inconsistent spectral widths\". Also, the center wavelengths of the two sources are not explicitly stated; only the approximate 1560 nm range and the spectral widths (1 nm and 1.7 nm) are given. Since wavelength-dependent fiber delays could affect the link-symmetry assumption, providing the exact center wavelengths would be helpful.","section":"Methods, Energy-time entangled biphoton source"},{"comment":"The phrase \"achieve sub-picosecond synchronization stability\" is not qualified as applying to the common-clock configuration; the remote-clock experiment achieves 6.5 ps standard deviation. To avoid overstatement, the abstract should say \"sub-picosecond stability in the common-clock configuration\" or otherwise indicate that the remote-clock stability is limited by the classical frequency reference.","section":"Abstract"}],"recommendation":"major_revision","confidential_remarks":"The paper is a solid experimental demonstration, but the central robustness claim against asymmetric delay attacks is framed too broadly in the abstract and Sec. 3. The authors should either narrow the claim to the specific common-mode static delay model or provide a full security analysis that accounts for the Q-TWTT correction as public information. The QBER issue in the long-term run also needs clarification. The paper's self-citations to the authors' prior work are appropriate given the continuity of the experimental program, but the DO-QKD security proof of Ref. [18] is from another group, so the analysis is not self-referential in a problematic way. The work is within the scope of a general quantum-information journal and would be suitable after the requested revisions."},"author_rebuttal":null,"desk_editor":{"model":"deepseek-v4-flash","letter":"Worth a look. The genuinely new thing here is running two established protocols—quantum two-way time transfer (Q-TWTT) and dispersive-optic QKD (DO-QKD)—on the same energy-time entangled biphotons and the same 120 km fiber, simultaneously. That integration is not in the earlier references, which treat the two protocols separately. The demonstration numbers are coherent: common-clock TDEV reaches 0.3 ps at 400 s averaging, the 10-hour remote run holds time offset to 6.5 ps std, and the finite-size SKR is 73.8±15.7 bps with a QBER that hovers near 5%. The attack-cancellation algebra in Eqs. (1)–(3) is correct under the stated symmetric-link assumption: a common-mode forward delay enters Q-TWTT and DO-QKD equally, so the QTS correction cancels it. That is a valid common-mode feed-forward result.\n\nThe soft spots are real but proportionate. First, the attack robustness is demonstrated for a single specific impairment—a calibrated static delay inserted before Bob—and the derivation assumes Eve's delay is identical for the photons used in QTS and QKD. A non-common-mode delay (wavelength/polarization dependent, or applied after the beam splitter) would break the cancellation. The paper calls this 'robustness against asymmetric delay attacks'; that is stronger than what is shown. Second, the sub-picosecond stability claim is tied to the common-clock configuration; in the remote-clock run the timing is stabilized to 6.5 ps and relies on classical microwave frequency transfer for the frequency reference. That is not hidden, but the abstract's phrasing is easy to misread. Third, the long-run average QBER is 5.5%, above the 5% target, and the SKR calculation uses a reconciliation efficiency from the group's prior work—not circular, but worth noting. Data and code are 'available on reasonable request' only, which limits independent checking.\n\nNone of this breaks the central demonstration. It is a proof-of-principle integration, clearly written, with consistent numbers and honest mention of the polarization-induced rate fluctuations. It deserves a serious referee. I would send it to review with a request to tighten the attack-robustness language and to separate the common-clock and remote-clock claims more carefully. The paper is a reasonable citable step for work on multiplexed quantum network functions.","headline":"Solid proof-of-principle integration of Q-TWTT and DO-QKD on shared energy-time entanglement, with an attack-mitigation claim that is real but narrower than advertised.","tokens_in":11336,"tokens_out":1758,"would_cite":true,"duration_ms":17072,"reading_group":"yes","serious_thinker":"yes","would_accept_peer_review":true},"rs_alignment":null,"lean_confirmation":null,"pith_extraction":{"msc":[],"pacs":[],"model":"deepseek-v4-flash","headline":"One stream of energy-time entangled photons can carry both quantum time synchronization and quantum key distribution over 120 km of fiber, with the synchronization canceling asymmetric delay attacks.","keywords":["energy-time entanglement","quantum two-way time transfer","dispersive-optic QKD","quantum network","time synchronization","asymmetric delay attack","high-dimensional encoding","fiber-optic quantum communication"],"falsifier":"Measure the one-way delays of the two directions with an independent absolute reference while imposing a known asymmetric condition, such as heating one span of the 120 km fiber or inserting a wavelength-dependent delay, and check whether the Q-TWTT time offset remains equal to the true clock offset and whether the DO-QKD key rate stays flat when a forward-only delay is injected; a deviation would show the symmetry assumption is load-bearing.","tokens_in":10163,"feed_emoji":"🔐","tokens_out":5068,"duration_ms":48866,"temperature":0.7,"pith_summary":"This paper tries to show that one shared stream of energy-time entangled photon pairs can run two quantum applications at once rather than one protocol per resource. It demonstrates quantum time synchronization and dispersive-optic quantum key distribution simultaneously over a 120 km fiber link, with the synchronization supplying the timing that the key distribution needs. The authors report sub-picosecond synchronization stability with a common clock, a remote-clock time offset stable to 6.5 ps over ten hours, and a finite-size secure key rate of 73.8 bits per second. They also argue that because both protocols use the same photons and the same fiber, an asymmetric delay attack enters both as common-mode noise, so the time-synchronization correction cancels its effect on key distribution.","feed_headline":"Entangled photons run clock sync and key distribution at once","feed_subtitle":"Over 120 km of fiber, one energy-time entanglement stream gives sub-picosecond timing plus a 73.8 bps secure key.","key_machinery":"The load-bearing object is the energy-time entangled biphoton pair stream generated by two spontaneous parametric down-conversion sources, one at each node, multiplexed onto a single fiber link and detected in both frequency and time bases. The Q-TWTT identity $t_0 = (t_1 - t_2)/2$ extracts the clock offset from the forward and backward coincidence peaks $t_1$ and $t_2$ under the assumption of a symmetric link delay, while the link delay is $(t_1 + t_2)/2$. DO-QKD then corrects the arrival times of the transmitted signal photons using that offset and delay, organizes them into frames, slots, and bins with parameters $D=6$, $I=3$, $\\tau=110$ ps (common clock) or $\\tau=80$ ps (remote clock), and derives security from the time-frequency covariance matrix. The attack-cancellation argument is the identity that a forward-path Eve delay $\\tau_{\\mathrm{Eve}}$ enters the synchronized Bob clock as $-\\tau_{\\mathrm{Eve}}/2$ and the measured link delay as $+\\tau_{\\mathrm{Eve}}/2$, so their sum reproduces the attack-free arrival time.","core_discovery":"The central claim is that energy-time entanglement is a multiplexable resource: the same biphotons that carry two-way quantum time transfer can carry dispersive-optic QKD, and the two tasks support rather than compete with each other. In the proof-of-principle experiment, the Q-TWTT protocol extracted the clock offset and link delay from coincidence histograms of photons traveling in opposite directions over a shared 120 km fiber. With a common clock reference the recovered time offset fluctuated with a standard deviation of 1.9 ps and a time deviation reaching 0.3 ps at 400 s averaging; with remote clocks it stayed stable to 6.5 ps over ten hours. Using the synchronized timing to correct photon arrival times, DO-QKD produced a raw key rate of 199.4 bps in the common-clock configuration and a finite-size secure key rate of 117.0 bps, and 100.5 bps in the remote-clock configuration; over the full ten-hour run the finite-size secure key rate averaged 73.8 ± 15.7 bps. The paper further claims that asymmetric delay attacks of up to 120 ps, which reduce the normalized secure key rate to about 13% without synchronization, leave it fluctuating around 0.79 when the concurrent Q-TWTT correction is active, because the attack shifts the synchronized Bob reference and the measured link delay in equal and opposite directions.","pith_inferences":["The cancellation argument suggests a testable generalization: any timing attack that shifts the forward and backward photons equally will be rejected by Q-TWTT, so Eve must break the symmetry of the link itself to harm DO-QKD, a stricter requirement than attacking either protocol alone.","If link asymmetry drifts slowly, for instance from temperature gradients, the reported 6.5 ps remote-clock offset may set a floor on how small an attack can remain hidden; quantifying that floor would require measuring one-way delays independently.","The same multiplexing principle could extend to other entanglement-based timing and sensing tasks, such as quantum ranging or distributed sensing, where one photon stream serves both metrology and communication.","A multi-node extension would let Alice's source synchronize several Bobs while each Bob runs QKD with Alice on the same photons, but the common-mode cancellation argument would need re-derivation for asymmetric network paths."],"forward_implications":["A single quantum link can carry multiple functions on the same entanglement resource, so network scalability can mean adding protocols rather than adding fibers or sources.","The timing data used to synchronize nodes can be protected by keys generated on the same photons, closing a practical security gap in quantum time synchronization.","DO-QKD inherits a built-in countermeasure against asymmetric delay attacks whenever it runs alongside Q-TWTT on the same channel.","The demonstrated 73.8 bps finite-size key rate over 120 km is competitive with standalone entanglement-based QKD systems, so multiplexing does not obviously sacrifice key-generation performance.","The scheme removes the need for a separate classical time-synchronization channel, avoiding the contamination problem of co-fiber classical and quantum signals."],"supporting_citations":[{"why":"Defines the quantum two-way time transfer protocol whose symmetric-delay identity supplies the clock offset and link delay.","marker":"[13]"},{"why":"Provides the security proof for dispersive-optic QKD based on the time-frequency covariance matrix and Gaussian collective attacks.","marker":"[18]"},{"why":"Introduces the high-dimensional temporal frame/slot/bin encoding format used to set D, I, and tau and convert coincidences into raw keys.","marker":"[23]"},{"why":"Supplies the open-loop microwave frequency transfer and dynamic phase compensation that stabilizes the remote clock in the ten-hour run.","marker":"[24]"},{"why":"Describes the all-fiber energy-time entangled biphoton sources used at both nodes.","marker":"[22]"},{"why":"Demonstrated sub-picosecond Q-TWTT over urban fiber, the stability baseline this experiment's 0.3 ps TDEV extends to a multiplexed setting.","marker":"[14]"},{"why":"Provides the 90% reconciliation efficiency value used in the finite-size secure-key calculation.","marker":"[25]"}],"fun_headline_variants":["One entangled stream: clock sync plus quantum keys over 120 km","Shared photons deliver sub-ps timing and 73.8 bps secure keys","Multiplexed entanglement runs sync and QKD on same fiber","Energy-time entanglement does double duty for networks"],"cache_read_input_tokens":3200,"weakest_assumption_plain":"The attack-cancellation and the recovered time offset both rest on the assumption that the fiber delay is identical in the two directions; if real delays differ or an attacker can shift the time-synchronization photons differently from the key-distribution photons, the correction becomes biased and the reported robustness does not follow.","fun_headline_variants_meta":{"raw":{"variants":["One entangled stream: clock sync plus quantum keys over 120 km","Shared photons deliver sub-ps timing and 73.8 bps secure keys","Multiplexed entanglement runs sync and QKD on same fiber","Energy-time entanglement does double duty for networks"]},"model":"deepseek-v4-flash","effort":"low","cost_usd":0.001026,"raw_usage":{"total_tokens":4392,"prompt_tokens":1080,"completion_tokens":3312,"prompt_tokens_details":{"cached_tokens":384},"prompt_cache_hit_tokens":384,"prompt_cache_miss_tokens":696,"completion_tokens_details":{"reasoning_tokens":3239}},"tokens_in":696,"tokens_out":3312,"duration_ms":26883,"temperature":1.0,"reasoning_tokens":3239,"cache_read_input_tokens":384,"cache_creation_input_tokens":0},"cache_creation_input_tokens":0},"created_at":"2026-08-08T05:08:51.288491+00:00","model_set":{"reader":"deepseek-v4-flash"},"falsifier":"Measure the one-way delays of the two directions with an independent absolute reference while imposing a known asymmetric condition, such as heating one span of the 120 km fiber or inserting a wavelength-dependent delay, and check whether the Q-TWTT time offset remains equal to the true clock offset and whether the DO-QKD key rate stays flat when a forward-only delay is injected; a deviation would show the symmetry assumption is load-bearing.","supporting_citations":[{"cited_title":null,"cited_arxiv_id":null,"evidence_quote":"Provides the security proof for dispersive-optic QKD based on the time-frequency covariance matrix and Gaussian collective attacks."},{"cited_title":null,"cited_arxiv_id":null,"evidence_quote":"Defines the quantum two-way time transfer protocol whose symmetric-delay identity supplies the clock offset and link delay."},{"cited_title":null,"cited_arxiv_id":null,"evidence_quote":"Introduces the high-dimensional temporal frame/slot/bin encoding format used to set D, I, and tau and convert coincidences into raw keys."},{"cited_title":null,"cited_arxiv_id":null,"evidence_quote":"Supplies the open-loop microwave frequency transfer and dynamic phase compensation that stabilizes the remote clock in the ten-hour run."},{"cited_title":null,"cited_arxiv_id":null,"evidence_quote":"Describes the all-fiber energy-time entangled biphoton sources used at both nodes."},{"cited_title":null,"cited_arxiv_id":null,"evidence_quote":"Demonstrated sub-picosecond Q-TWTT over urban fiber, the stability baseline this experiment's 0.3 ps TDEV extends to a multiplexed setting."},{"cited_title":null,"cited_arxiv_id":null,"evidence_quote":"Provides the 90% reconciliation efficiency value used in the finite-size secure-key calculation."}],"review_version":1}