Photon-number Splitting Attack Research Articles

A novel quantum key distribution resistant against large‐pulse attacks

AbstractQuantum key distribution (QKD) offers information‐theoretic security by leveraging the principles of quantum mechanics. This means the security is independent of all future advances in algorithm or computational power. However, due to the non‐availability of single‐photon sources, most traditional QKD protocols are vulnerable to various attacks, such as photon number‐splitting (PNS) attacks. Also, the imperfections in the measuring devices open a loophole for side channels that an eavesdropper may exploit to launch attacks such as large‐pulse attacks. As a result, this compromises the security of transmitted information. To address these challenges, the authors present a QKD protocol that is secure against both large‐pulse attacks and PNS attacks at zero‐error, in which the eavesdropper does not introduce any error, but still, the legitimate users of the system cannot distil a secure key. A notable feature of the proposed protocol is that it promotes greater robustness against both attacks than the Bennett‐Brassard 1984 (BB84) protocol or the Scarani‐Acin‐Ribordy‐Gisin 2004 (SARG04) protocol.

Homodyne-detection-based discrete-variable quantum key distribution with a heralded single-photon source

Discrete-variable quantum key distribution (DV-QKD) has recently been implemented using a homodyne detection system, and a notable secret key rate can be achieved by employing an ideal single-photon source. However, most QKD implementations employ practical light sources, including a phase-randomized weak coherent source and a heralded single-photon source, which occasionally produce multiphotons and are vulnerable to photon-number-splitting (PNS) attacks. In this work, we propose a three-decoy-state method using a heralded single-photon source for homodyne-detection-based DV-QKD, thus making it immune to PNS attacks with current technology. Our simulation results demonstrate that our proposed protocol can achieve high-speed and secure key distribution over metropolitan distances. Our work paves a cost-effective path to realize DV-QKD and further incorporate it into classical telecommunication networks.

Analysis of an injection-locking-loophole attack from an external source for quantum key distribution

Many security loopholes exist in quantum key distribution (QKD) due to the imperfections of realistic devices. On the source side, the decoy-state method can defend against the most severe photon-number-splitting (PNS) attack and improve the performance of QKD. Measurement-device-independent QKD and twin-field QKD have further closed all loopholes on the detection side. In this paper, we propose a valuable optical injection-locking loophole for the case when the internal isolator inside the laser is removed. We first introduce the effects of the injection locking with different injection intensities on the source frequency. Through the successive responses of adjacent pulses from frequency ports of the dense wavelength division multiplexer, the decoy state and the signal state can be partially distinguished. The specific injection-locking-loophole analysis of the isolatorless decoy phase-encoding Bennet-Brassard 1984 QKD and decoy phase-matching QKD protocols with external optical injection has been deeply studied. Simulation results show that, if we maintain the same observed gain statistics as normal after an external optical injection locking, the loophole cannot be exploited for a PNS attack when the QKD distance is short. As the QKD distance increases, a PNS attack at a medium distance using the optical injection-locking loophole does not threaten the security; the security is still valid. With the further increase of the QKD distance, the lower-bound secure key rate is higher than the upper-bound secure key rate given by a PNS attack at a long distance, some of the keys must be insecure, and information will be leaked.

Joint photon-number splitting attack on semi-quantum key distribution

Semi-quantum key distribution is based on the basic principle of quantum mechanics, which allows a classical user and quantum user to use information theory to have a secure shared key. In 2021, our research group proved the first proof-of-principle experimental demonstration of semi-quantum key distribution and verified its feasibility. Due to the limitations of existing science and technology, the experimental system still features a combination of multiphoton signal source and loss in the transmission line. This makes semi-quantum key distribution as susceptible to a photon-number splitting attack as quantum key distribution, leading to limitations of secure transmission distance. It seems that practical single-state semi-quantum key distribution can overcome photon-number splitting attack due to the SIRT bits (also known as the “sifted key”). However, its dual-channel feature still opens up an observation window to Eve. We present two joint photon-number splitting attacks suitable for a single-state semi-quantum key distribution system and show that through the joint photon-number splitting attack, Eve can obtain key information without being detected by Alice or Bob.

Detecting the possibility of a type of photon number splitting attack in decoy-state quantum key distribution

The existing decoy-state quantum key distribution (QKD) beating photon-number-splitting (PNS) attack provides a more accurate method to estimate the secure key rate, while it still considers that only single-photon pulses can generate secure keys in any case. However, multiphoton pulses can also generate secure keys if we can detect the possibility of PNS attack in the channel. The ultimate goal of this line of research is to confirm the absence of all types of PNS attacks. In particular, the PNS attack mentioned and detected in this paper is only the weaker version of PNS attack which significantly changes the observed values of the legitimate users. In this paper, under the null hypothesis of no weaker version of PNS attack, we first determine whether there is an attack or not by retrieving the missing information of the existing decoy-state protocols, extract a Cauchy distribution statistic, and further provide a detection method and the type I error probability. If the result is judged to be an attack, we can use the existing decoy-state method and the GLLP formula to estimate the secure key rate. Otherwise, the pulses with the same basis received including both single-photon pulses and multiphoton pulses, can be used to generate the keys and we give the secure key rate in this case. Finally, the associated experiments we performed (i.e., the significance level is 5%) show the correctness of our method.

Detecting a Photon-Number Splitting Attack in Decoy-State Measurement-Device-Independent Quantum Key Distribution via Statistical Hypothesis Testing.

Measurement-device-independent quantum key distribution (MDI-QKD) is innately immune to all detection-side attacks. Due to the limitations of technology, most MDI-QKD protocols use weak coherent photon sources (WCPs), which may suffer from a photon-number splitting (PNS) attack from eavesdroppers. Therefore, the existing MDI-QKD protocols also need the decoy-state method, which can resist PNS attacks very well. However, the existing decoy-state methods do not attend to the existence of PNS attacks, and the secure keys are only generated by single-photon components. In fact, multiphoton pulses can also form secure keys if we can confirm that there is no PNS attack. For simplicity, we only analyze the weaker version of a PNS attack in which a legitimate user’s pulse count rate changes significantly after the attack. In this paper, under the null hypothesis of no PNS attack, we first determine whether there is an attack or not by retrieving the missing information of the existing decoy-state MDI-QKD protocols via statistical hypothesis testing, extract a normal distribution statistic, and provide a detection method and the corresponding Type I error probability. If the result is judged to be an attack, we use the existing decoy-state method to estimate the secure key rate. Otherwise, all pulses with the same basis leading to successful Bell state measurement (BSM) events including both single-photon pulses and multiphoton pulses can be used to generate secure keys, and we give the formula of the secure key rate in this case. Finally, based on actual experimental data from other literature, the associated experimental results (e.g., the significance level is 5%) show the correctness of our method.

Loss-tolerant prepare and measure quantum key distribution protocol

We propose a modified version of the Bennett–Brassard 1984 quantum key distribution protocol intended to tolerate losses, certain forms of noise, and the so-called photon-number splitting attack. These are the issues facing the realization of practical quantum key distribution. The modified protocol is based on quantum non-demolition measurements for systems using weak coherent pulses. Our scheme ensures that emissions corresponding to zero photon pulses, multi-photon pulses, and detector double-clicks are discarded before sifting to improve sifting efficiency and increase the secret key rate. Moreover, we perform the finite key analysis to obtain the maximal achievable secret-key fraction and the corresponding optimal number of signals. Also, we compare our proposed protocol to the decoy-state quantum key distribution protocol. We observe that our proposed quantum key distribution scheme enables a more extended transmission distance than the decoy-state quantum key distribution protocol. Thus, this an advance in quantum communication because current limitations on quantum key distribution involve transmitting secret keys over more considerable distances in the presence of noise or losses in optical fibres.

Upper Security Bounds for Coherent-One-Way Quantum Key Distribution.

The performance of quantum key distribution (QKD) is severely limited by multiphoton pulses emitted by laser sources due to the photon-number splitting attack. Coherent-one-way (COW) QKD has been introduced as a promising solution to overcome this limitation, and thus extend the achievable distance of practical QKD. Indeed, thanks to its experimental simplicity, the COW protocol is already used in commercial applications. Here, we derive simple upper security bounds on its secret key rate, which demonstrate that it scales at most quadratically with the system's transmittance, thus solving a long-standing problem. That is, in contrast to what has been claimed, this approach is inappropriate for long-distance QKD transmission. Remarkably, our findings imply that all implementations of the COW protocol performed so far are insecure.

Improving key rates of the unbalanced phase-encoded BB84 protocol using the flag-state squashing model

All phase-encoded BB84 implementations have signal states with unbalanced amplitudes in practice. Thus, the original security analyses a priori do not apply to them. Previous security proofs use signal tagging of multi-photon pulses to recover the behaviour of regular BB84. This is overly conservative, as for unbalanced signals, the photon-number splitting attack does not leak full information to Eve. In this work, we exploit the flag-state squashing model to preserve some parts of the multi-photon generated private information in our analysis. Using a numerical proof technique, we obtain significantly higher key rates compared with previously published results in the low-loss regime. It turns out that the usual scenario of untrusted dark counts runs into conceptual difficulties in some parameter regime. Thus, we discuss the trusted dark count scenario in this paper as well. We also report a gain in key rates when part of the total loss is known to be induced by a trusted device. We highlight that all these key rate improvements can be achieved without modification of the experimental setup.

On a New Attack on Quantum Key Distribution: Joint Unambiguous Measurements of Probe States and the PNS Attack on Information States

A new attack on the quantum key distribution is proposed involving joint collective unambiguous measurements of reflected probe states from an intensity modulator and photon number splitting (PNS) measurements, i.e., nondestructive measurements of the number of information photons in the quantum communication channel. This attack does not change the relative statistics of photocounts of states with different numbers of photons, does not lead to errors on the receiver side, and, thereby, is not detected by any of known methods, including the modified decoy state method. The attack results only in additional losses in the communication channel, which are not “controlled” by the decoy state method. The dependence of introduced losses on the intensity of reflected probe states is estimated. The critical level of losses depends on a particular physical implementation of the quantum cryptography system, which determines the upper bound of the intensity of reflected probe states. The knowledge of this bound is fundamentally necessary to ensure the security of keys. The fact that the attack does not lead to errors on the receiver side and does not change the relative statistics of photocounts but only results in additional losses, which depend on the intensity according to the distinguishability of reflected probe states, does not mean that this attack transforms quantum cryptography systems from the type of cryptographic systems where the security of keys is guaranteed by fundamental quantum mechanical laws to the type of systems where this security is guaranteed by technical restrictions. Even in the presence of side channels of information leakage, the security of keys is still guaranteed by fundamental quantum mechanical restrictions on the distinguishability of states. A low level of distinguishability (“intensity”) of quantum states in side channels is naturally reached by technical tools.

Photon-number Splitting Attack on SARG04 Protocol

Network protection, an essential interest has migrated within this area particularly with the development of hacking, the strategies, as well as the penetration of the most effective blanketed networks. It can be stated that all the methods and protocols applied failed to forestall the intruder’s attacks, consequently many researches grew to favor quantum mechanics over create non-intrusive methods. Many scientists and researchers have introduced other cryptographic subjects in quantum computing which is known as quantum key distribution protocol. In this paper, which is an extension to our preceding work (Mustafa et al., 2019), the simulation of the overall performance of SARG04 protocol had been examined in opposition to the most time-honored attack: Photon-number splitting (PNS) assault in the quantum channel. The data received showed results that obtained high resistance against PNS attack, due to the method that was used in the sifting stage.

Hacking Quantum Key Distribution via Injection Locking

Unconditionally secure communication, being pursued for thousands of years, however, hasn't been reached yet due to continuous competitions between encryption and hacking. Quantum key distribution (QKD), harnessing the quantum mechanical nature of superposition and non-cloning, may promise unconditional security by incorporating the one-time pad algorithm rigorously proved by Claude Shannon. Massive efforts have been made in building practical and commercial QKD systems, in particular, decoy states are employed to detect photon-number splitting attack against single-photon source loophole, and measurement-device-independent (MDI) QKD has further closed all loopholes in detection side, which leads to a seemingly real-life application. Here, we propose and experimentally demonstrate an MDI-QKD hacking strategy on the trusted source assumption by using injection locking technique. Eve injects near off-resonance photons in randomly chosen polarization into sender's laser, where injection locking in a shifted frequency can happen only when Eve's choice matches with sender's state. By setting a shifted window and switching the frequency of photons back afterwards, Eve in principle can obtain all the keys without terminating the real-time QKD. We observe the dynamics of a semiconductor laser with injected photons, and obtain a hacking success rate reaching 60.0% of raw keys. Our results suggest that the spear-and-shield competitions on unconditional security may continue until all potential loopholes are discovered and closed ultimately.

Improved secure bounds for passive decoy state quantum key distribution system

The decoy-state method was proposed as an effective way to resist photon-number splitting attack in quantum key distribution (QKD) system. However, due to the limitation of computing power, the final key rate of the QKD system is affected by statistical fluctuation. Until now, the key rate of active decoy-state method under statistical fluctuations has been rigorously analysed and improved by applying the improved Chernoff bound. In this paper, the improved Chernoff bound method is applied in the passive decoy-state method and an improved bound for estimating the final key rate is obtained. The simulation results show that the maximum secure transmission distance by our method can reach 205 km under standard optical fiber, which is very close to the asymptotic limit of 212 km. With a number of pulses up to 1013, our method can reach the highest final key rates among existing results, which can be considered as the best choice for QKD implementations with passive mudulation.

Experimental 4-intensity decoy-state quantum key distribution with asymmetric basis-detector efficiency

The decoy-state method has been developed rapidly in quantum key distribution (QKD) since it is immune to photon-number splitting attacks. However, two basis detector efficiency asymmetry, which exists in realistic scenarios, has been ignored in the prior results. By using the recent 4-intensity decoy-state optimization protocol, we report the first implementation of high-rate QKD with asymmetric basis detector efficiency, demonstrating 1.9 to 33.2 times higher key rate than previous protocols in the situation of large basis detector efficiency asymmetry. The results ruled out an implicitly assumption in QKD that the efficiency of Z basis and X basis are restricted to be same. This work paves the way towards a more practical QKD setting.

Ambiguous discrimination among linearly dependent quantum states and its application to two-way deterministic quantum key distribution

It is impossible to distinguish a set of linearly dependent quantum states, which ensures the security of quantum key distribution (QKD). When considering some features such as symmetry, one may distinguish a part of the quantum states from another part, called ambiguous discrimination. In this paper, we demonstrate that two-way deterministic QKD (TDQKD) is immune to photon-number-splitting (PNS) attacks for two-photon signals. When there are three or more photons in signals, the eavesdropper can gain the key bits probabilistically, without introducing any error rate. When the average number of photons per pulse takes the value of 0.1, the successful probability of PNS attacks on nonempty pulses is about 0.001, and the corresponding channel loss is about 30 dB. Our results show that TDQKD is robust against PNS attacks.

Security of a control key in quantum key distribution

Quantum key distribution (QKD) schemes rely on the randomness to exchange secret keys between two parties. A control key to generate the same (pseudo)-randomness for the key exchanging parties increases the key exchange rate. However, the use of pseudo-randomness where true randomness is required makes a classical system vulnerable to the known plain-text attack. Contrary to the belief of unavailability of this attack in QKD, we show that this attack is actually possible whenever a control key is employed. In this paper, we show that it is possible to make use of the uncertainty principle to not only avoid this attack, but also remove the hazards of photon-number splitting attack in quantum setting. We define the secrecy of control key based on the guessing probability, and propose a scheme to achieve this defined secrecy. We show the general applicability of our framework on the most common QKD schemes.

Implementation of decoy states in a subcarrier wave quantum key distribution system

Subcarrier wave quantum key distribution systems demonstrate promising capabilities for secure quantum networking. However for this class of devices no implementation of secure decoy states protocol was developed. It leaves them potentially vulnerable to photon-number splitting attacks on quantum channel and limiting the key distribution distance. We propose a practical solution to this problem by calculating the required parameters of light source and modulation indices for signal and decoy states in a subcarrier wave system and describing the corresponding experimental scheme.

Revealing of photon-number splitting attack on quantum key distribution system by photon-number resolving devices

Quantum cryptography allows distributing secure keys between two users so that any performed eavesdropping attempt would be immediately discovered. However, in practice an eavesdropper can obtain key information from multi-photon states when attenuated laser radiation is used as a source of quantum states. In order to prevent actions of an eavesdropper, it is generally suggested to implement special cryptographic protocols, like decoy states or SARG04. In this paper, we describe an alternative method based on monitoring photon number statistics after detection. We provide a useful rule of thumb to estimate approximate order of difference of expected distribution and distribution in case of attack. Formula for calculating a minimum value of total pulses or time-gaps to resolve attack is shown. Also formulas for actual fraction of raw key known to Eve were derived. This method can therefore be used with any system and even combining with mentioned special protocols.

Revealing beam-splitting attack in a quantum cryptography system with a photon-number-resolving detector

We discuss a method for revealing a photon-number-splitting (PNS) attack in a quantum key distribution (QKD) system, which is based on analyzing the statistical distribution of photon numbers detected in each time interval. A relation for estimating the difference between the expected photon-number distribution and the one appearing in the course of a PNS attack is derived. An equation defining the minimum number of counts necessary for revealing the attack with desired probability is given. Formulas for calculating the amount of raw keys known to an illegitimate user due to a PNS attack are obtained depending on the system’s total loss. The main advantage of the method is the possibility of using it in QKD systems without significant modifications in the protocol or experimental setup.

Using Modeling and Simulation to Study Photon Number Splitting Attacks

Quantum key distribution (QKD) is an innovative technology, which exploits the laws of quantum mechanics to generate and distribute unconditionally secure shared cryptographic keying material between two geographically separated parties. The unique nature of QKD that ensures eavesdropping on the key distribution channel necessarily introduces detectable errors and shows promise for high-security environments, such as banking, government, and military. However, QKD systems are vulnerable to advanced theoretical and experimental attacks. In this paper, the photon number splitting (PNS) attack is studied in a specialized QKD modeling and simulation framework. First, a detailed treatment of the PNS attack is provided with emphasis on practical considerations, such as performance limitations and realistic sources of error. Second, ideal and non-ideal variations of the PNS attack are studied to measure the eavesdropper’s information gain on the QKD-generated secret key bits and examine the detectability of PNS attacks with respect to both quantum bit error rate and the decoy state protocol. Finally, this paper provides a repeatable methodology for efficiently studying advanced attacks, both realized and notional, against QKD systems and more generally quantum communication protocols.