In the recent decade, it has been discovered that QKD systems are extremely vulnerable to side-channel attacks. In particular, by exploiting the internal working knowledge of practical detectors, it is possible to bring them to an operating region whereby only certain target detectors are sensitive to detections. Crucially, the adversary can use this loophole to learn everything about the secret key without introducing any error to the quantum channel. In this paper, as a step toward overcoming detector blinding attacks, we focus on an experimentally convenient countermeasure, where the efficiency of the detectors is randomly varied.
In the recent decade, it has been discovered that QKD systems are extremely vulnerable to side-channel attacks. In particular, by exploiting the internal working knowledge of practical detectors, it is possible to bring them to an operating region whereby only certain target detectors are sensitive to detections. Crucially, the adversary can use this loophole to learn everything about the secret key without introducing any error to the quantum channel. In this paper, as a step toward overcoming detector blinding attacks, we focus on an experimentally convenient countermeasure, where the efficiency of the detectors is randomly varied.
In the last decade, efforts have been made to reconcile theoretical security with realistic imperfect implementations of quantum key distribution (QKD). Implementable countermeasures are proposed to patch the discovered loopholes. However, certain countermeasures are not as robust as would be expected. In this paper, we present a concrete example of ID Quantique's random-detector-efficiency countermeasure against detector blinding attacks. As a third-party tester, we have found that the first industrial implementation of this countermeasure is effective against the original blinding attack, but not immune to a modified blinding attack. Then, we implement and test a later full version of this countermeasure containing a security proof [C. C. W. Lim et al., IEEE Journal of Selected Topics in Quantum Electronics, 21, 6601305 (2015)]. We find that it is still vulnerable against the modified blinding attack, because an assumption about hardware characteristics on which the proof relies fails in practice.
In the last decade, efforts have been made to reconcile theoretical security with realistic imperfect implementations of quantum key distribution (QKD). However, in the process gaps have recently emerged between academic and industrial approaches to closing loopholes created by implementation imperfections. In academic research labs, many practical security problems appear to be reliably solved, in principle, by advanced schemes and protocols. Meanwhile the industry prefers practical and easier solutions, even without security verification in some cases. In this paper, we present a concrete example of ID Quantique's random-detector-efficiency countermeasure against detector blinding attacks. As a third-party tester, we have found that the first industrial implementation of this countermeasure is effective against the original blinding attack, but not immune to a modified blinding attack. Moreover, we show experimentally that the full countermeasure as in academic proposal [C. C. W. Lim et al., IEEE J. Sel. Top. Quantum Electron. 21, 6601305 (2015)] is still vulnerable against the modified blinding attack. Our testing results show several specific disparities between the industrial practical solution and the academic perfect solutions. Our work illustrates that forming an implementation-and-testing closed loop is necessary to bridge the gaps and improve the practical security of QKD systems.
In practical quantum key distribution systems, imperfect physical devices open security loopholes that challenge the core promise of this technology. Apart from various side channels, a vulnerability of single-photon detectors to blinding attacks has been one of the biggest concerns and has been addressed both by technical means as well as advanced protocols. In this work, we present a countermeasure against such attacks based on self-testing of detectors to confirm their intended operation without relying on specific aspects of their inner working and to reveal any manipulation attempts. We experimentally demonstrate this countermeasure with a typical InGaAs avalanche photodetector, but the scheme can be easily implemented with any single photon detector.
In real-life implementations of quantum key distribution (QKD), the physical systems with unwanted imperfections would be exploited by an eavesdropper. Based on imperfections in the detectors, detector control attacks have been successfully launched on several QKD systems, and attracted widespread concerns. Here, we propose a robust countermeasure against these attacks just by introducing a variable attenuator in front of the detector. This countermeasure is not only effective against the attacks with blinding light, but also robust against the attacks without blinding light which are more concealed and threatening. Different from previous technical improvements, the single photon detector in our countermeasure model is treated as a blackbox, and the eavesdropper can be detected by statistics of the detection and error rates of the QKD system. Besides theoretical proof, the countermeasure is also supported by an experimental demonstration. Our countermeasure is general in sense that it is independent of the technical details of the detector, and can be easily applied to the existing QKD systems.
Quantum Key Distribution (QKD) promises information-theoretic security based on the fundamental laws of quantum mechanics. However, practical implementations deviate from idealized models and are therefore susceptible to side-channel attacks that exploit physical imperfections rather than theoretical vulnerabilities. Over the past two decades, a wide range of attacks have been demonstrated against QKD systems, including those targeting detectors, sources, timing information, power consumption, and electromagnetic emissions. This paper addresses a selection of a few side-channel attacks reported in the literature, classifying them according to their underlying physical mechanisms and attack strategies. We analyze their impact on the security of different QKD protocols and platforms, and highlight how experimental demonstrations have shaped the community's understanding of implementation security. In addition, we present and evaluate mitigation techniques proposed to date, such as device-independent and measurement-device-independent QKD, hardware countermeasures, monitoring strategies, and so on. We also identify open challenges and promising directions for enhancing the robustness of future quantum communication systems.
The physical imperfections of quantum key distribution systems compromise their information-theoretic security. By exploiting the imperfections on the detection unit, an eavesdropper can launch various detector-control attacks to steal the secret key. Recently, in Optica 6 , 1178 ( 2019 ) OPTIC8 2334-2536 10.1364/OPTICA.6.001178 entitled “Robust countermeasure against detector control attack in a practical quantum key distribution system,” Qian et al. proposed a countermeasure using variable attenuators in the detection unit that was claimed to be effective against detector-control attacks with or without blinding light. We comment on this paper, disputing this countermeasure by showing that their assumptions for proving this effectiveness are unrealistic.