Imagine you're shipping sealed envelopes through a postal system where you don't trust the envelope factory. You can't inspect the paper thickness, the glue chemistry, or whether the factory is skimming copies. All you know is one thing: the probability that a spy at the factory can guess which letter is inside each envelope. This paper asks: is that single number enough to guarantee your mail is private? The answer, surprisingly, is yes — for quantum envelopes. The committed claim: a single bound on the guessing probability of Alice's input — quantified over everything her source emits, intended signal and side channels alike — is sufficient to prove security of prepare-and-measure QKD against collective attacks. No assumptions on state dimension, energy, purity, or Bob's measurement device (beyond the standard no-leak requirement). This is a genuine relaxation of the trust model: standard device-dependent QKD assumes you know what your laser is doing. Device-independent QKD assumes almost nothing but requires entanglement and loophole-free Bell tests. This paper carves a middle lane — semi-device-independent with a single, operationally clean assumption. The ladder matters here. Standard BB84 tolerates an 11% quantum bit error rate (QBER) in the fully device-dependent setting. Under this paper's far weaker assumptions, the best protocols tolerate visibilities down to 0.84, corresponding to ~8% QBER. That's a real cost — you lose 3 percentage points of noise tolerance for dramatically fewer assumptions. In the ideal (noiseless) limit, the protocols achieve 1 secret bit per round, which is the theoretical maximum. The key negative result is equally important: the textbook B92 and BB84 protocols certify zero key under this minimal leakage assumption. You need closely related but distinct protocols. The technical engine is semidefinite programming (SDP) relaxations. The security proof reduces to bounding Eve's information given only the leakage constraint and the observed statistics. Because nothing is assumed about state dimension, the optimization is infinite-dimensional in principle. The authors handle this via an SDP hierarchy that converges to the true value — a standard trick in device-independent cryptography, now adapted to the prepare-and-measure leakage setting. The proofs address collective attacks; full composable security against general attacks would require de Finetti–type arguments or entropy accumulation, which the authors flag but do not complete. Integrity is solid for a theoretical cryptography paper. The security proofs are mathematical, not simulation-based. The SDP relaxations are a well-established tool in the DI-QKD community (Navascués-Pironio-Acín hierarchy and descendants). The key rates are computed numerically, with convergence checked across hierarchy levels. No experimental implementation is claimed or faked. The main limitation is the restriction to collective attacks — the gap to general attacks is acknowledged plainly. The milestone to watch: closing the gap between collective-attack security and composable security against general (coherent) attacks. The authors note this explicitly. In the DI-QKD world, the entropy accumulation theorem bridged this gap; whether an analogous tool works under the leakage-bound assumption is the next load-bearing question. If it does, this framework becomes a practical protocol candidate. If not, it remains a beautiful proof of concept. The experiment not run — and the honest read — is a photonic implementation. The protocols are defined abstractly, the key rates computed for idealized noise models. A real fiber-optic or free-space demonstration would require engineering the leakage bound as a testable constraint on actual hardware. This is likely (c): the authors are theorists building the proof framework, and the experimental paper is either a collaboration waiting to happen or a next-paper move.
