Quantum key distribution (QKD) offers the promise of absolutely secure communications. However, proofs of absolute security often assume perfect implementation from theory to experiment. Thus, existing systems may be prone to insidious side-channel attacks that rely on flaws in experimental implementation. Here we replace all real channels with virtual channels in a QKD protocol, making the relevant detectors and settings inside private spaces inaccessible while simultaneously acting as a Hilbert space filter to eliminate side-channel attacks. By using a quantum memory we find that we are able to bound the secret-key rate below by the entanglement-distillation rate computed over the distributed states.
Quantum key distribution (QKD) offers the promise of absolutely secure communications. However, proofs of absolute security often assume perfect implementation from theory to experiment. Thus, existing systems may be prone to insidious side-channel attacks that rely on flaws in experimental implementation. Here we replace all real channels with virtual channels in a QKD protocol, making the relevant detectors and settings inside private spaces inaccessible while simultaneously acting as a Hilbert space filter to eliminate side-channel attacks. By using a quantum memory we find that we are able to bound the secret-key rate below by the entanglement-distillation rate computed over the distributed states.
Based on the idea that there is no side channel in the vacuum state, the side-channel-free quantum key distribution (SCFQKD) protocol was proposed, which is immune to all attacks in the source side-channel space and all attacks in the detectors. In the original SCFQKD protocol, an important assumption is that Alice and Bob can produce the perfect vacuum pulses. But due to the finite extinction ratio of the intensity modulators, the perfect vacuum pulse is impossible in practice. In this paper, we solve this problem and make the quantum key distribution side-channel secure with real source device which does not emit perfect vacuum pulses. Our conclusion only depends on the upper bounds of the intensities of the sources. No other assumptions such as stable sources and stable side channels are needed. The numerical results show that, comparing with the results of SCFQKD protocol with perfect vacuum sources, the key rates and secure distance are only slightly decreased if the upper bound of the intensity of the imperfect vacuum source is less than 10−8 which can be achieved in experiment by two-stage intensity modulator. We also show that the two-way classical communication can be used to the data post-processing of SCFQKD protocol to improve the key rate. Specially, the active odd-parity pairing method can improve the key rates in all distances by about two times and the secure distance by about 40 km. Give that the side channel security based on imperfect vacuum, this work makes it possible to realize side channel secure QKD with real devices.
Quantum key distribution (QKD) theoretically provides unconditional security between remote parties. However, guaranteeing practical security through device characterization alone is challenging in real-world implementations due to the multidimensional spaces in which the devices may be operated. The side channel secure (SCS) QKD protocol, which only requires bounding the upper limits of the intensities for the two states, theoretically provides a rigorous solution to the challenge and achieves measurement-device-independent security in detection and security for whatever multidimensional side channel attack in the source. Here, we demonstrate a practical implementation of SCS-QKD, achieving a secure key rate of 6.67 kbps through a 50.5 km fiber and a maximum distribution distance of 101.1 km while accounting for finite-size effects. Our experiment also represents an approximately 40 times improvement over the previous experiment.
Quantum key distribution (QKD) is secure in principle, but practical security can be undermined by discrepancies between real devices and the idealized models assumed in security proofs. Source side channels, including those exploited by Trojan-horse attacks, are particularly detrimental: neglecting them compromises implementation security, whereas accounting for them reduces performance. Here we propose a QKD source that is intrinsically robust against side-channel attacks. Unlike existing passive and modulator-free schemes, it requires neither post-selection of the emitted pulses nor devices with a perfect extinction ratio to suppress side channels, and it does not introduce correlations between the intensity and the encoded bit or basis. Consequently, under idealized source assumptions commonly adopted in proposals for existing schemes, conventional decoy-state security analyses apply directly, yielding substantially higher key rates. Our proposal appears to be within reach of current technology and therefore provides a clear and practical path toward implementation-secure QKD.
We present general security proof for quantum key distribution (QKD) with imperfect states in whole space including both the operational space and the other space (side-channel space). We show that in a protocol where Alice (Bob) uses two states, the secure key rate for a real protocol using imperfect (mixed) states is the same as that of a perfect protocol if the real protocol can be mapped from the perfect protocol. The calculation of the secure key rate for imperfect sources is reduced to the lower bound of projection probability to vacuum for each state. This paves the operable way to side-channel-secure QKD under more realistic conditions, including imperfections of whole-space states, mixed states, and finite data size. Taking the sending-or-not-sending encoding as an example in calculation, we obtain good key rates and long secure distance for QKD that is both measurement-device-independent and secure with imperfect whole-space source states. Published by the American Physical Society 2024
Cryptography plays a key role in today's digital society. The most widely used encryption method is the public-key algorithm, but its security relies on unproven computational assumptions. In contrast, quantum key distribution (QKD) is an unbreakable encryption algorithm. QKD has been proven to provide information-theoretic security rigorously based on the laws of physics. Despite the beauty of QKD theory, in practice, QKD still suffers from practical side-channel attacks, due to the imperfections of real-life implementations. Such discrepancy between the theory and the practice is fatal to the security of a QKD system. This thesis addresses a number of the discrepancies in a standard QKD implementation, and it offers efficient countermeasures to resolve these discrepancies. A novel protocol -- measurement-device-independent (MDI) QKD - was proposed to remove all detector side-channel attacks. To apply MDI-QKD in real life, I have proposed practical protocols, conducted the first rigorous finite-key security proof, designed methodologies to optimize parameters, and demonstrated MDI-QKD experimentally. These results allow MDI-QKD mature enough to be implemented in real-life. Based on the framework of MDI-QKD, the only security issue left is the source. To solve the loophole due to the imperfect encoder, I have experimentally implemented a recent protocol, which enables QKD loss-tolerant to source flaws. This experiment for the first time shows secure QKD with imperfect state preparations at long distances. Another vulnerable part in the source is the ability to generate true randomness. I have developed a compact and cost-effective quantum random number generator (QRNG) prototype, which has a real-time generation rate of 1 Gbit/s with excellent stability. The simplicity and speed of my prototype prove the feasibility of a robust, low-cost, and fast QRNG. In summary, MDI-QKD enables new scientific developments in the field of quantum cryptography. This thesis solves the major practical issues in the implementation of MDI-QKD. The combination of MDI-QKD, imperfect sources, and QRNG consists of the foundation of a future practical side-channel-free QKD protocol. The success of this protocol can substitute current classical cryptosystems by offering people an unconditionally secure infrastructure, which will be the ultimate dream for researchers in secure communication.
The side-channel-secure (SCS) quantum key distribution (QKD), SCS QKD has attracted much attention due to its higher security compared to the measurement-device-independent protocols. It is not only measurement-device-independent secure, but also secure against source-state side channels provided that Eve has no access to Alice's or Bob's setups inside their labs. In the original protocol for SCS QKD, the side channels and the intensities of the coherent sources are allowed to be different in different time windows, but the vacuum sources of Alice and Bob have to be perfect, which is impossible in practice due to the finite extinction ratio of the intensity modulators. In this paper, we present a method that does not need the perfect vacuum source requested by the original protocol and assures the result as secure as the original protocol. With the upper bounds of the amplitudes of the nonvacuum part of the sources, the secure key rate of our SCS QKD protocol here with imperfect vacuum and unstable sources can be calculated. The numerical results show that, the secure distance of the SCS QKD protocol exceeds 150 km, provided that the intensity of the imperfect vacuum source is less than ${10}^{\ensuremath{-}8}$, which can be achieved in the experiment by a two-stage intensity modulator, where we also show that the active odd-parity pairing method and standard pairing method using two-way classical communication can be applied to the SCS QKD protocol to improve the key rate. Given the side-channel security based on the existing technological level, this work makes it possible to realize side-channel-secure QKD with real devices.