Passive-scheme analysis for solving the untrusted source problem in quantum key distribution

We suggest a combined modulation quantum key distribution (QKD) system which encodes each single-photon signal with both phase modulation and polarization modulation. With the aid of dual-velocity protocol of hybrid QKD system, we construct a scheme to realize this combined modulation QKD which generates two-bit key with one signal for increasing the efficiency of QKD. We also develop a combined modulation Michelson QKD system, then solve the stability problem of the combined modulation QKD system in principle.

Detection-time-bin-shift (DTBS) is a scheme that projects the measurement bases or measured photon values into detection time-bins and then time division multiplexes a single photon detector in a quantum key distribution (QKD) system. This scheme can simplify the structure of a QKD system, reduce its cost and overcome the security problems caused by the dead-time introduced self-correlation and the unbalanced characteristics of detectors. In this paper, we present several DTBS schemes for QKD systems based on attenuated laser pulses and entangled photon sources. We study the security issues of these DTBS schemes, especially the time-bin-shift intercept-resend attack and its countermeasures. A fiber-based DTBS QKD system has been developed and its results are presented in this paper.

A Mach–Zehnder modulator (MZM) is necessary for implementing a decoy-state protocol in a practical quantum key distribution (QKD) system. However, an MZM bias control method optimized for QKD systems has been missing to date. In this study, we propose an MZM bias control method using N (≥2) diagnostic pulses. The proposed method can be efficiently applied to a QKD system without any additional hardware such as light sources or detectors. Furthermore, it does not reduce the key rate significantly because it uses time slots allocated to existing decoy pulses. We conducted an experimental demonstration of the proposed method in a field-deployed 1 × 3 QKD network and a laboratory test. It is shown that our method can maintain the MZM extinction ratio stably over 20 dB (bit error rate ≤1%), even in an actual network environment for a significant period. Consequently, we achieved successful QKD performances.

Single-photon detection concept is the most crucial and often difficult factor to determine the performance of quantum key distribution (QKD) systems. One solution to facilitate understanding this concept is to create a virtual environment for modeling, analyzing, and investigating the performance of single photon detectors. In this paper, a simulator for superconducting single photon detectors with time domain visualizer and configurable parameters is presented. The widely used ID281SNSPD in the QKD area was theoretically modeled in terms of pulse analysis, the impact of biasing current and the temperature on the dark counts rate and single photon-detection efficiency and influence of the number of photons per pulse on the single photon-detection efficiency. The simulated results were in good agreement with the theoretical results and the simulator demonstrated its adaptability.

One of the most important obstacles for the social deployment of Quantum Key Distribution (QKD) systems is the lack of standards for security certification. Proper selection of application will circumvent other obstacles, such as cost, key generation distance, and rate. Nevertheless, security certification of real systems, or “implementation security certification” is indispensable. Such certification should be clear and tractable for non‐experts and should be performed with standardized characterization methods. Otherwise, the potential users cannot adopt the QKD system with confidence, because the highest level of security is what QKD appeals. This report discusses the process of the implementation security certification and the requirements for device characterization. It also presents several case studies on the requirements and experimental characterization of QKD devices for the security certification.

Usually, a shared reference frame is indispensable for practical quantum key distribution (QKD) systems. As a result, most QKD systems need active alignment of reference frame due to the unknown and slowly variances of reference frame introduced by environment. Quite interestingly, reference-free-independent (RFI) QKD can generate secret-key bits without alignment of reference frame. However, RFI QKD may be still vulnerable to detector side channel attacks. Here, we propose a new RFI QKD protocol, in which all detector side channels are removed. Furthermore, our protocol can still tolerate unknown and slow variance of reference frame without active alignment. And a numerical simulation shows that long security distance is probable in this protocol.

We assess the overall performance of our quantum key distribution (QKD) system implementing the measurement-device-independent (MDI) protocol using components with varying capabilities such as different single-photon detectors and qubit preparation hardware. We experimentally show that superconducting nanowire single-photon detectors allow QKD over a channel featuring 60 dB loss, and QKD with more than 600 bits of secret key per second (not considering finite key effects) over a 16 dB loss channel. This corresponds to 300 and 80 km of standard telecommunication fiber, respectively. We also demonstrate that the integration of our QKD system into FPGA-based hardware (instead of state-of-the-art arbitrary waveform generators) does not impact on its performance. Our investigation allows us to acquire an improved understanding of the trade-offs between complexity, cost and system performance, which is required for future customization of MDI-QKD. Given that our system can be operated outside the laboratory over deployed fiber, we conclude that MDI-QKD is a promising approach to information-theoretic secure key distribution.

A Single-Photon Avalanche Diode (SPAD) is a specialized optoelectronic device designed for the detection of single photons. It can discern the presence or absence of photons as well as their reception frequency. A significant challenge associated with SPADs is the generation of unintended pulses, which manifest in two primary categories: Dark Count Rate (DCR) and Afterpulse Probability (PAP). Dark counting refers to the occurrence of output pulses in the absence of photon detection, while afterpulse are undesirable outputs resulting from the trapping of carrier’s post-avalanche event within the detector. These trapped carriers are subsequently accelerated by the activation field applied to the detector, causing another avalanche breakdown known as an afterpulse. Both the afterpulse effect and dark counting are considered detrimental phenomena in SPADs, which are commonly utilized in Quantum Key Distribution (QKD) systems. Quantum Key Distribution is a cryptographic method for securely distributing secret keys, leveraging principles of quantum mechanics. Moreover, this method ensures that an eavesdropper cannot intercept or regenerate photon states. In this study, a novel approach is proposed to detect errors induced by these undesirable pulses in a quantum key distribution system. The proposed method, designed to mitigate the effects of unwanted pulses in QKD using the BB84 protocol, employs two quantum channels for photon transmission and a classical channel for coordination between the communicating parties and filtering the secret key (sifting). This method preserves the secure key rate when compared to the traditional BB84 protocol. The reduction of undesirable pulses in the proposed method is contingent upon factors such as the probability of afterpulse occurrence, dark count events, and the efficiency of the single-photon detector, with the reduction being computed in direct proportion to these parameters.

In this paper, we investigate the transmission probabilities in three cases (depending only on the legitimate receiver, depending only the eavesdropper, and depending on both legitimate receiver and eavesdropper) in quantum key distribution (QKD) systems over free-space optical links. To be more realistic, we consider a generalized pointing error scenario, where the azimuth and elevation pointing error angles caused by stochastic jitters and vibrations in the legitimate receiver platform are independently distributed according to a non-identical normal distribution. Taking these assumptions into account, we derive approximate expressions of transmission probabilities by using the Gaussian quadrature method. To simplify the expressions and get some physical insights, some asymptotic analysis on the transmission probabilities is presented based on asymptotic expression for the generalized Marcum Q-function when the telescope gain at the legitimate receiver approaches to infinity. Moreover, from the asymptotic expression for the generalized Marcum Q-function, the asymptotic outage probability over Beckmann fading channels (a general channel model including Rayleigh, Rice, and Hoyt fading channels) can be also easily derived when the average signal-to-noise ratio is sufficiently large, which shows the diversity order and array gain.

In this paper, we propose the first single trace side-channel attack on the key reconciliation process for the quantum key distribution (QKD) system. Through a single power consumption trace measured during the syndrome computation of the key reconciliation process on the sender's side, we were able to fully recover the sifted key and the syndrome. The shared secret key between the two users can be directly obtained from the sifted key and the syndrome. The result of our work shows that the QKD system must consider side-channel attacks on the key reconciliation process for its practical use.

Quantum key distribution (QKD) enables the establishment of shared keys between two distant users, Alice and Bob, based on the fundamental principles of quantum mechanics, and it has proven to possess information-theoretic security. In most of QKD systems, Alice and Bob require a shared reference frame, and real-time calibration of the reference frame increases system costs and reduces its performance. Fortunately, the reference-frame-independent QKD protocol has been proposed, overcoming reference-frame drift issues and receiving widespread attention. However, in practical QKD systems, the non-ideal characteristics of realistic devices introduce certain inconsistency between the theory and the practice. In real-world quantum key distribution systems, device imperfections can lead to security vulnerabilities, thereby reducing system security. For example, imperfections in the encoding apparatus at the source end may result in errors in the quantum states. The inherent defects in the detection part may cause after-pulse effects and dead-time effects, thus reducing the key rate. Therefore, in this work, we propose a practical state-preparation error tolerant reference-frame-independent quantum key distribution protocol by taking imperfections in both the source and the detectors into account. Moreover, a three-intensity decoy-state scheme for modeling analysis and numerical simulations is employed. In this protocol, we reduce the influence of state-preparation errors on the key rate by utilizing virtual state methods to precisely estimate the phase-error rate. Furthermore, by characterizing the effects of after-pulses and dead-time on the key rate, our protocol exhibits higher robustness and can effectively address issues related to detector imperfections. This approach can also be extended to other quantum key distribution protocols with higher security levels, such as measurement-device-independent quantum key distribution protocol and twin-field quantum key distribution, further mitigating the influence of device imperfections on practical implementation of QKD system. Therefore, our present work provide important reference value for putting the quantum key distributions into practical application.

We report here a new side channel attack on a practical continuous-variable (CV) quantum key distribution (QKD) system. Inspired by blinding attack in discrete-variable QKD, we formalize an attack strategy by inserting an external light into a CV QKD system implemented Gaussian-modulated coherent state protocol and show that our attack can compromise its practical security. In this attack, we concern imperfections of a balanced homodyne detector used in CV QKD. According to our analysis, if one inserts an external light into Bob’s signal port, due to the imperfect subtraction from the homodyne detector, the leakage of the external light contributes a displacement on the homodyne signal which causes detector electronics saturation. In consequence, Bob’s quadrature measurement is not linear with the quadrature sent by Alice. By considering such vulnerability, a potential Eve can launch a full intercept-resend attack meanwhile she inserts an external light into Bob’s signal port. By selecting proper properties of the external light, Eve actively controls the induced displacement value from the inserted light which results saturation of homodyne detection. In consequence, Eve can bias the excess noise due to the intercept-resend attack and the external light, such that Alice and Bob believe their excess noise estimation is below the null key threshold and they can still share a secret key. Our attack shows that the detector loopholes also exist in CV QKD, and it seems influence all the CV QKD systems using homodyne detection, since all the practical detectors have finite detection range.

With practical quantum key distribution (QKD) systems, estimating the safe transmission distance and the safe bit rate under some transmission distance is quite important. For the practical QKD setup, with decoy states, the photon count distribution of the faint laser pulse with signal states can be optimized to acquire the maximum transmission distance. With this goal, we implement a method combining mathematical derivation and numerical simulation to find the optimal photon count distribution under realistic conditions; the numerical simulation results show that the new distributions can be employed in the decoy QKD system to reach safe transmission distances farther than those reached by systems with the Poisson distribution.

Quantum key distribution (QKD) establishes a shared secret between remote parties and is proven unbreakable in theory. Unfortunately, practical implementations of QKD exhibit device imperfections that lead to security vulnerabilities. Most of these vulnerabilities have been verified in a white-box testing scenario, when one has access to the system hardware for analysis. Here we implement automated penetration testing of a QKD system in a black-box setting, using only its public communication lines and a limited operator's manual. Our implementation parses information transmitted over the classical communication line and toggles an optical delay in the quantum communication line. This enables it to tamper with the timing settings of detector gates in the QKD system during its calibration procedure and to passively eavesdrop on 98.97% of the sifted key. The entire testing process is fully automated and takes only minutes to initiate eavesdropping. Our work paves the way for automated penetration testing of QKD installations as a method of security verification.

The decoy-state method was proposed as an effective way to resist photon-number splitting attack in quantum key distribution (QKD) system. However, due to the limitation of computing power, the final key rate of the QKD system is affected by statistical fluctuation. Until now, the key rate of active decoy-state method under statistical fluctuations has been rigorously analysed and improved by applying the improved Chernoff bound. In this paper, the improved Chernoff bound method is applied in the passive decoy-state method and an improved bound for estimating the final key rate is obtained. The simulation results show that the maximum secure transmission distance by our method can reach 205 km under standard optical fiber, which is very close to the asymptotic limit of 212 km. With a number of pulses up to 1013, our method can reach the highest final key rates among existing results, which can be considered as the best choice for QKD implementations with passive mudulation.