@article{63451,
  abstract     = {{<jats:p>Superconducting nanowire single-photon detectors (SNSPDs) can enable photon-number resolution (PNR) based on accurate measurements of the detector’s response time to few-photon optical pulses. In this work, we investigate the impact of the optical pulse shape and duration on the accuracy of this method. We find that Gaussian temporal pulse shapes yield cleaner arrival-time histograms and, thus, more accurate PNR, compared to bandpass-filtered pulses of equal bandwidth. For low system jitter and an optical pulse duration comparable to the other jitter contributions, photon numbers can be discriminated in our system with a commercial SNSPD. At 60 ps optical pulse duration, photon-number discrimination is significantly reduced. Furthermore, we highlight the importance of using the correct arrival-time histogram model when analyzing photon-number assignment. Using exponentially modified Gaussian distributions, instead of the commonly used Gaussian distributions, we can more accurately determine photon-number misidentification probabilities. Finally, we reconstruct the positive operator-valued measures of the detector, revealing sharp features that indicate the intrinsic PNR capabilities.</jats:p>}},
  author       = {{Schapeler, Timon and Mischke, Isabell and Schlue, Fabian and Stefszky, Michael and Brecht, Benjamin and Silberhorn, Christine and Bartley, Tim}},
  issn         = {{2835-0103}},
  journal      = {{APL Quantum}},
  number       = {{1}},
  publisher    = {{AIP Publishing}},
  title        = {{{Practical considerations for assignment of photon numbers with SNSPDs}}},
  doi          = {{10.1063/5.0304127}},
  volume       = {{3}},
  year         = {{2026}},
}

@article{65847,
  abstract     = {{Simulating vibronic spectra is a central task in physical chemistry, offering insight into important properties of molecules. Recently, it has been experimentally demonstrated that photonic platforms based on Gaussian boson sampling (GBS) are capable of performing these simulations. However, whether an actual GBS approach is required depends on the molecule under investigation. To develop a better understanding on the requirements for simulating vibronic spectra, we explore connections between theoretical approximations in physical chemistry and their photonic counterparts. Mapping these approximations into photonics, we show that for certain molecules the GBS approach is unnecessary. We place special emphasis on the linear coupling approximation, which in photonics corresponds to sampling from multiple coherent states. By implementing this approach in experiments, we demonstrate improved similarities over previously reported GBS results for formic acid and identify the particular attributes that a molecule must exhibit for this, and other approximations, to be valid. These results highlight the importance in forming deeper connections between traditional methods and photonic approaches.}},
  author       = {{Eickmann, Jan-Lucas and Luo, Kai-Hong and Roiz, Mikhail and Lammers, Jonas and Atzeni, Simone and Pandey, Cheeranjiv and Lütkewitte, Florian and Shirazi, Reza G. and Schlue, Fabian and Brecht, Benjamin and Rybkin, Vladimir V. and Stefszky, Michael and Silberhorn, Christine}},
  issn         = {{2056-6387}},
  journal      = {{npj Quantum Information}},
  number       = {{1}},
  publisher    = {{Springer Science and Business Media LLC}},
  title        = {{{Bridging chemistry and Gaussian boson sampling: a photonic hierarchy of approximations for molecular vibronic spectra}}},
  doi          = {{10.1038/s41534-026-01250-x}},
  volume       = {{12}},
  year         = {{2026}},
}

@unpublished{63107,
  abstract     = {{We construct good GKP (Gottesman-Kitaev-Preskill) codes (in the sense of Conrad, Eisert and Seifert proposed) from standard short integer solution lattices (SIS) as well as from ring SIS and module SIS lattices, R-SIS and M-SIS lattices, respectively. These lattice are crucial for lattice-based cryptography. Our construction yields GKP codes with distance $\sqrt{n/πe}$. This compares favorably with the NTRU-based construction by Conrad et al. that achieves distance $Ω(\sqrt{n/q}),$ with $n\le q^2/0.28$. Unlike their codes, our codes do not have secret keys that can be used to speed-up the decoding. However, we present a simple decoding algorithm that, for many parameter choices, experimentally yields decoding results similar to the ones for NTRU-based codes. Using the R-SIS and M-SIS construction, our simple decoding algorithm runs in nearly linear time. Following Conrad, Eisert and Seifert's work, our construction of GKP codes follows directly from an explicit, randomized construction of symplectic lattices with (up to constants $\approx 1$) minimal distance $(1/σ_{2n})^{1/2n}\approx \sqrt{\frac{n}{πe}}$, where $σ_{2n}$ is the volume of the 2n-dimensional unit ball. Before this result, Buser and Sarnak gave a non-constructive proof for the existence of such symplectic lattices.}},
  author       = {{Blömer, Johannes and Xiao, Yinzi and Raissi, Zahra and Soltan, Stanislaw}},
  booktitle    = {{arXiv:2509.10183}},
  title        = {{{Symplectic Lattices and GKP Codes -- Simple Randomized Constructions from Cryptographic Lattices}}},
  year         = {{2025}},
}

@unpublished{63403,
  abstract     = {{Stateful signatures like the NIST standardized signature schemes LMS and XMSS provide an efficient and mature realization of post-quantum secure signature schemes. They are recommended for long-term use cases like e.g. firmware signing. However, stateful signature schemes require to properly manage a so-called state. In stateful signature schemes like LMS and XMSS, signing keys consist of a set of keys of a one-time signature scheme and it has to be guaranteed that each one-time key is used only once. This is done by updating a state in each signature computation, basically recording which one-time keys have already been used. While this is straightforward in centralized systems, in distributed systems like secure enclaves consisting of e.g. multiple hardware security modules (HSMs) with limited communication keeping a distributed state that at any point in time is consistent among all parties involved presents a challenge. This challenge is not addressed by the current standardization processes. 
In this paper we present a security model for the distributed key management of post-quantum secure stateful signatures like XMSS and LMS. We also present a simple, efficient, and easy to implement protocol proven secure in this security model, i.e. the protocol guarantees at any point in time a consistent state among the parties in a distributed system, like a distributed security enclave. The security model is defined in the universal composabilty (UC) framework by Ran Canetti by providing an ideal functionality for the distributed key management for stateful signatures. Hence our protocol remains secure even if arbitrarily composed with other instances of the same or other protocols, a necessity for the security of distributed key management protocols. Our main application are security enclaves consisting of HSMs, but the model and the protocol can easily be adapted to other scenarios of distributed key management of stateful signature schemes.}},
  author       = {{Blömer, Johannes and Bröcher, Henrik and Krummel, Volker and Porzenheim, Laurens Alexander}},
  keywords     = {{distributed state, hash-based signature, stateful hash-based signature, universal composability, secure enclave}},
  pages        = {{22}},
  title        = {{{Secure Distributed State Management for Stateful Signatures with a Practical and Universally Composable Protocol}}},
  year         = {{2025}},
}

@inproceedings{60587,
  author       = {{Schapeler, Timon and Schlue, Fabian and Stefszky, Michael and Brecht, Benjamin and Silberhorn, Christine and Bartley, Tim}},
  booktitle    = {{Advanced Photon Counting Techniques XIX}},
  editor       = {{Itzler, Mark A. and McIntosh, K. Alex and Bienfang, Joshua C.}},
  publisher    = {{SPIE}},
  title        = {{{Optimizing photon-number resolution with superconducting nanowire multi-photon detectors}}},
  doi          = {{10.1117/12.3054905}},
  year         = {{2025}},
}

@article{61110,
  abstract     = {{<jats:p>By analyzing the physics of multi-photon absorption in superconducting nanowire single-photon detectors (SNSPDs), we identify physical components of jitter. From this, we formulate a quantitative physical model of the multi-photon detector response that combines the local detection mechanism and local fluctuations (hotspot formation and intrinsic jitter) with the thermoelectric dynamics of resistive domains. Our model provides an excellent description of the arrival-time histogram of a commercial SNSPD across several orders of magnitude, both in arrival-time probability and across mean photon number. This is achieved with just three fitting parameters: the scaling of the mean arrival time of voltage response pulses, as well as the Gaussian and exponential jitter components. Our findings have important implications for photon-number-resolving detector design, as well as applications requiring low jitter, such as light detection and ranging (LIDAR).</jats:p>}},
  author       = {{Sidorova, Mariia and Schapeler, Timon and Semenov, Alexej D. and Schlue, Fabian and Stefszky, Michael and Brecht, Benjamin and Silberhorn, Christine and Bartley, Tim}},
  issn         = {{2378-0967}},
  journal      = {{APL Photonics}},
  keywords     = {{Jitter, PNR, SNSPD}},
  number       = {{8}},
  publisher    = {{AIP Publishing}},
  title        = {{{Jitter in photon-number-resolved detection by superconducting nanowires}}},
  doi          = {{10.1063/5.0273752}},
  volume       = {{10}},
  year         = {{2025}},
}

@article{55174,
  abstract     = {{<jats:p>We apply principal component analysis (PCA) to a set of electrical output signals from a commercially available superconducting nanowire single-photon detector (SNSPD) to investigate their photon-number-resolving capability. We find that the rising edge as well as the amplitude of the electrical signal have the most dependence on photon number. Accurately measuring the rising edge while simultaneously measuring the voltage of the pulse amplitude maximizes the photon-number resolution of SNSPDs. Using an optimal basis of principal components, we show unambiguous discrimination between one- and two-photon events, as well as partial resolution up to five photons. This expands the use case of SNSPDs to photon-counting experiments, without the need of detector multiplexing architectures.</jats:p>
          <jats:sec>
            <jats:title/>
            <jats:supplementary-material>
              <jats:permissions>
                <jats:copyright-statement>Published by the American Physical Society</jats:copyright-statement>
                <jats:copyright-year>2024</jats:copyright-year>
              </jats:permissions>
            </jats:supplementary-material>
          </jats:sec>}},
  author       = {{Schapeler, Timon and Lamberty, Niklas and Hummel, Thomas and Schlue, Fabian and Stefszky, Michael and Brecht, Benjamin and Silberhorn, Christine and Bartley, Tim}},
  issn         = {{2331-7019}},
  journal      = {{Physical Review Applied}},
  number       = {{1}},
  publisher    = {{American Physical Society (APS)}},
  title        = {{{Electrical trace analysis of superconducting nanowire photon-number-resolving detectors}}},
  doi          = {{10.1103/physrevapplied.22.014024}},
  volume       = {{22}},
  year         = {{2024}},
}

@article{53202,
  abstract     = {{At large scales, quantum systems may become advantageous over their classical counterparts at performing certain tasks. Developing tools to analyze these systems at the relevant scales, in a manner consistent with quantum mechanics, is therefore critical to benchmarking performance and characterizing their operation. While classical computational approaches cannot perform like-for-like computations of quantum systems beyond a certain scale, classical high-performance computing (HPC) may nevertheless be useful for precisely these characterization and certification tasks. By developing open-source customized algorithms using high-performance computing, we perform quantum tomography on a megascale quantum photonic detector covering a Hilbert space of 106. This requires finding 108 elements of the matrix corresponding to the positive operator valued measure (POVM), the quantum description of the detector, and is achieved in minutes of computation time. Moreover, by exploiting the structure of the problem, we achieve highly efficient parallel scaling, paving the way for quantum objects up to a system size of 1012 elements to be reconstructed using this method. In general, this shows that a consistent quantum mechanical description of quantum phenomena is applicable at everyday scales. More concretely, this enables the reconstruction of large-scale quantum sources, processes and detectors used in computation and sampling tasks, which may be necessary to prove their nonclassical character or quantum computational advantage.}},
  author       = {{Schapeler, Timon and Schade, Robert and Lass, Michael and Plessl, Christian and Bartley, Tim}},
  journal      = {{Quantum Science and Technology}},
  number       = {{1}},
  publisher    = {{IOP Publishing}},
  title        = {{{Scalable quantum detector tomography by high-performance computing}}},
  doi          = {{10.1088/2058-9565/ad8511}},
  volume       = {{10}},
  year         = {{2024}},
}

@article{50840,
  abstract     = {{<jats:p>Superconducting nanowire single-photon detectors (SNSPDs) have been widely used to study the discrete nature of quantum states of light in the form of photon-counting experiments. We show that SNSPDs can also be used to study continuous variables of optical quantum states by performing homodyne detection at a bandwidth of 400 kHz. By measuring the interference of a continuous-wave field of a local oscillator with the field of the vacuum state using two SNSPDs, we show that the variance of the difference in count rates is linearly proportional to the photon flux of the local oscillator over almost five orders of magnitude. The resulting shot-noise clearance of (46.0 ± 1.1) dB is the highest reported clearance for a balanced optical homodyne detector, demonstrating their potential for measuring highly squeezed states in the continuous-wave regime. In addition, we measured a CMRR = 22.4 dB. From the joint click counting statistics, we also measure the phase-dependent quadrature of a weak coherent state to demonstrate our device’s functionality as a homodyne detector.</jats:p>}},
  author       = {{Protte, Maximilian and Schapeler, Timon and Sperling, Jan and Bartley, Tim}},
  issn         = {{2837-6714}},
  journal      = {{Optica Quantum}},
  number       = {{1}},
  publisher    = {{Optica Publishing Group}},
  title        = {{{Low-noise balanced homodyne detection with superconducting nanowire single-photon detectors}}},
  doi          = {{10.1364/opticaq.502201}},
  volume       = {{2}},
  year         = {{2024}},
}

@article{26040,
  author       = {{Stefszky, Michael and Ricken, R. and Eigner, Christof and Quiring, V. and Herrmann, Harald and Silberhorn, Christine}},
  issn         = {{2331-7019}},
  journal      = {{Physical Review Applied}},
  title        = {{{Waveguide Cavity Resonator as a Source of Optical Squeezing}}},
  doi          = {{10.1103/physrevapplied.7.044026}},
  year         = {{2017}},
}

