Comment Re:sigh, the "quantum" buzzword (Score 0) 69
You are missing something. I don't blame you. Almost every description of quantum cryptography forgets to mention this step, and without it you are indeed vulnerable to a man in the middle attack.
The thing is, there is something similar to a one time pad but for authentication instead of encryption. See universal hashing. You authenticate your messages over the classical channel with universal hashing using a little bit of key generated from a previous round. Eve doesn't have this key so she cannot forge messages. Just like with one time pads you cannot reuse the key, but unlike one time pads you can authenticate large messages using a small key so you can make sure you lose less key material each round than you gain from running the protocol.
The thing is, there is something similar to a one time pad but for authentication instead of encryption. See universal hashing. You authenticate your messages over the classical channel with universal hashing using a little bit of key generated from a previous round. Eve doesn't have this key so she cannot forge messages. Just like with one time pads you cannot reuse the key, but unlike one time pads you can authenticate large messages using a small key so you can make sure you lose less key material each round than you gain from running the protocol.