Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:1502.02785 · Physical Review A

Security loophole in free-space quantum key distribution due to spatial-mode detector-efficiency mismatch

Shihan Sajeed, Poompong Chaiwongkhot, Jean-Philippe Bourgoin, Thomas D. Jennewein, Norbert Lütkenhaus, Vadim Makarov

Published Jun 2, 2015• 101 citations
arXivHTMLPDF

Abstract

In free-space quantum key distribution (QKD), the sensitivity of the receiver's detector channels may depend differently on the spatial mode of incoming photons. Consequently, an attacker can control the spatial mode to break security. We experimentally investigate a standard polarization QKD receiver and identify sources of efficiency mismatch in its optical scheme. We model a practical intercept-and-resend attack and show that it would break security in most situations. We show experimentally that adding an appropriately chosen spatial filter at the receiver's entrance may be an effective countermeasure.

DOI
10.1103/physreva.91.062301

Related papers

Security proof of practical quantum key distribution with detection-efficiency mismatch

Yanbao Zhang, Patrick J. Coles, Adam Winick +2 more

Quantum key distribution (QKD) protocols with threshold detectors are driving high-performance QKD demonstrations.The corresponding security proofs usually assume that all physical detectors have the same detection efficiency.However, the efficiencies of the detectors used in practice might show a mismatch depending on the manufacturing and setup of these detectors.A mismatch can also be induced as the different spatialtemporal modes of an incoming signal might couple differently to a detector.Here we develop a method that allows to provide security proofs without the usual assumption.Our method can take the detection-efficiency mismatch into account without having to restrict the attack strategy of the adversary.Especially, we do not rely on any photon-number cutoff of incoming signals such that our security proof is directly applicable to practical situations.We illustrate our method for a receiver that is designed for polarization encoding and is sensitive to a number of spatial-temporal modes.In our detector model, the absence of quantum interference between any pair of spatial-temporal modes is assumed.For a QKD protocol with this detector model, we can perform a security proof with characterized efficiency mismatch and without photon-number cutoff assumption.Our method also shows that in the absence of efficiency mismatch in our detector model, the key rate increases if the loss due to detection inefficiency is assumed to be outside of the adversary's control, as compared to the view where for a security proof this loss is attributed to the action of the adversary.

arXiv:2004.04383•Physical Review Research•Jan 25, 2021•50 citations

Practical Countermeasure Against Attacks Exploiting Detection Efficiency Mismatch in Quantum Key Distribution

Ben J. Taylor, Peter R. Smith, James F. Dynes +4 more

We demonstrate a practical countermeasure against a well-known class of attacks on quantum key distribution (QKD) systems that exploit detection efficiency mismatch, where the receiver's detectors do not exhibit identical responses to incoming photons across all degrees of freedom. This class of quantum hacking strategies is broad and significantly includes the time-shift attack, which targets an arrival-time-dependent side channel at the receiver. The four-state countermeasure, previously only proven to be secure in theory, is implemented here on a GHz-clocked prototype QKD system and evaluated for its security and performance. We show that its presence enables almost complete recovery of the system's ideal secret key rate. Our results provide strong justification for adopting this countermeasure as a standard component in future scalable and practical QKD systems.

quant-pharXiv:2605.22580•Physical Review Applied•May 22, 2026•1 citation

Detection Efficiency Mismatch and Finite-Key-Size Attacks on Practical Quantum Cryptography Systems

Poompong Chaiwongkhot

Security verification for the physical implementation of a cryptography system is an important step to ensure the security level promised by theory. As has been shown many times, any physical device has characteristics and behavior that deviate from theoretical expectations. Frequently, those lead to new security loopholes. \n \nThis thesis presents three experimental studies of attacks on quantum key distribution (QKD) systems. The first is the detection efficiency mismatch on free-space systems, which takes advantage of alignment imperfections in Bob's detector to control detection efficiencies. The experiment was done on a polarization-encoding free-space receiver to find the detection efficiencies of each detector for different spatial modes of an incoming photon. Those results were put into an optimization program, which modeled an intercept-and-resend attack on a non-decoy Bennett-Brassard 1984 (BB84) protocol. The result shows that an adversary is able to gain information about the key without being detected by Alice and Bob. The second study is an experimental test of reliability of a spatial filter (a pinhole), which is proposed as a countermeasure for the previous attack. The result shows that, by sending a high-power laser beam focused on the pinhole, the pinhole can be widened without affecting other components in the receiver. Thus, the ability to perform a spatial mode detection efficiency-mismatch attack is recovered. The last experiment is a demonstration of Eve's ability to force a commercial system to distill a key from a raw key of a short length, where the asymptotic assumption of security claimed by the manufacturer might not hold. It was shown that this could be done by inducing transmission loss in the channel at an appropriate time.

•Jan 14, 2016•0 citations

Safeguarding Quantum Key Distribution Through Detection Randomization

Thiago Ferreira da Silva, Gustavo Castro do Amaral, GUILHERME BARRETO XAVIER +2 more

We propose and experimentally demonstrate a scheme to render the detection apparatus of a quantum key distribution system immune to the main classes of hacking attacks in which the eavesdropper explores the back-door opened by the single-photon detectors. The countermeasure is based on the creation of modes that are not deterministically accessible to the eavesdropper. We experimentally show that the use of beamsplitters and extra single-photon detectors at the receiver station passively creates randomized spatial modes that erase any knowledge the eavesdropper might have gained when using bright-light faked states. Additionally, we experimentally show a detector-scrambling approach where the random selection of the detector used for each measurement-equivalent to an active spatial mode randomization-hashes out the side-channel open by the detection efficiency mismatch-based attacks. The proposed combined countermeasure represents a practical and readily implementable solution against the main classes of quantum hacking attacks aimed on the single-photon detector so far, without intervening on the inner working of the devices.

arXiv:1410.0701•IEEE Journal of Selected Topics in Quantum Electronics•Oct 22, 2014•18 citations

Quantum man-in-the-middle attack on the calibration process of quantum key distribution

Yangyang Fei, Xiangdong Meng, Ming Yuan Gao +2 more

Quantum key distribution (QKD) protocol has been proved to provide unconditionally secure key between two remote legitimate users in theory. Key distribution signals are transmitted in a quantum channel which is established by the calibration process to meet the requirement of high count rate and low error rate. All QKD security proofs implicitly assume that the quantum channel has been established securely. However, the eavesdropper may attack the calibration process to break the security assumption of QKD and provide precondition to steal information about the final key successfully. In this paper, we reveal the security risk of the calibration process of a passive-basis-choice BB84 QKD system by launching a quantum man-in-the-middle attack which intercepts all calibration signals and resends faked ones. Large temporal bit-dependent or basis-dependent detector efficiency mismatch can be induced. Then we propose a basis-dependent detector efficiency mismatch (BEM) based faked states attack on a single photon BB84 QKD to stress the threat of BEM. Moreover, the security of single photon QKD systems with BEM is studied simply and intuitively. Two effective countermeasures are suggested to remove the general security risk of the calibration process.

arXiv:1803.04407•Scientific Reports•Mar 5, 2018•52 citations

Implementation security of quantum key distribution due to polarization-dependent efficiency mismatch

Kejin Wei, Weijun Zhang, Yan-Lin Tang +2 more

Superconducting nanowire single-photon detector (SNSPD) is a promising candidate for achieving high-rate quantum key distribution (QKD) over long distances, and it has been widely employed in recent QKD experiments. However, SNSPD is naturally polarization sensitive, which, if unchecked, could leave a back door for an eavesdropper to perform quantum hacking. Here, we experimentally study the polarization dependency on the detection efficiency of SNSPD and propose a quantum hacking attack to exploit this vulnerability. We experimentally characterize the polarization-dependent efficiencies of different SNSPDs and perform risk analysis on the security of a standard phase-encoding QKD implementation. Our experimental data and security analysis show that, if the effect of polarization-dependent efficiency is unnoticed, an eavesdropper can successfully hack the QKD implementation using the polarization-rotation attack. Countermeasures are also discussed. The result is important for the future design of secure implementations of QKD.

Physical Review A•Aug 20, 2019•45 citations
In free-space quantum key distribution (QKD), the sensitivity of the receiver's detector channels may depend differently on the spatial mode of incoming photons. Consequently, an attacker can control the spatial mode to break security. We experimentally investigate a standard polarization QKD receiver and identify sources of efficiency mismatch in its optical scheme. We model a practical intercept-and-resend attack and show that it would break security in most situations. We show experimentally that adding an appropriately chosen spatial filter at the receiver's entrance may be an effective countermeasure.
Quantum key distribution (QKD) protocols with threshold detectors are driving high-performance QKD demonstrations.The corresponding security proofs usually assume that all physical detectors have the same detection efficiency.However, the efficiencies of the detectors used in practice might show a mismatch depending on the manufacturing and setup of these detectors.A mismatch can also be induced as the different spatialtemporal modes of an incoming signal might couple differently to a detector.Here we develop a method that allows to provide security proofs without the usual assumption.Our method can take the detection-efficiency mismatch into account without having to restrict the attack strategy of the adversary.Especially, we do not rely on any photon-number cutoff of incoming signals such that our security proof is directly applicable to practical situations.We illustrate our method for a receiver that is designed for polarization encoding and is sensitive to a number of spatial-temporal modes.In our detector model, the absence of quantum interference between any pair of spatial-temporal modes is assumed.For a QKD protocol with this detector model, we can perform a security proof with characterized efficiency mismatch and without photon-number cutoff assumption.Our method also shows that in the absence of efficiency mismatch in our detector model, the key rate increases if the loss due to detection inefficiency is assumed to be outside of the adversary's control, as compared to the view where for a security proof this loss is attributed to the action of the adversary.
We demonstrate a practical countermeasure against a well-known class of attacks on quantum key distribution (QKD) systems that exploit detection efficiency mismatch, where the receiver's detectors do not exhibit identical responses to incoming photons across all degrees of freedom. This class of quantum hacking strategies is broad and significantly includes the time-shift attack, which targets an arrival-time-dependent side channel at the receiver. The four-state countermeasure, previously only proven to be secure in theory, is implemented here on a GHz-clocked prototype QKD system and evaluated for its security and performance. We show that its presence enables almost complete recovery of the system's ideal secret key rate. Our results provide strong justification for adopting this countermeasure as a standard component in future scalable and practical QKD systems.
Security verification for the physical implementation of a cryptography system is an important step to ensure the security level promised by theory. As has been shown many times, any physical device has characteristics and behavior that deviate from theoretical expectations. Frequently, those lead to new security loopholes. \n \nThis thesis presents three experimental studies of attacks on quantum key distribution (QKD) systems. The first is the detection efficiency mismatch on free-space systems, which takes advantage of alignment imperfections in Bob's detector to control detection efficiencies. The experiment was done on a polarization-encoding free-space receiver to find the detection efficiencies of each detector for different spatial modes of an incoming photon. Those results were put into an optimization program, which modeled an intercept-and-resend attack on a non-decoy Bennett-Brassard 1984 (BB84) protocol. The result shows that an adversary is able to gain information about the key without being detected by Alice and Bob. The second study is an experimental test of reliability of a spatial filter (a pinhole), which is proposed as a countermeasure for the previous attack. The result shows that, by sending a high-power laser beam focused on the pinhole, the pinhole can be widened without affecting other components in the receiver. Thus, the ability to perform a spatial mode detection efficiency-mismatch attack is recovered. The last experiment is a demonstration of Eve's ability to force a commercial system to distill a key from a raw key of a short length, where the asymptotic assumption of security claimed by the manufacturer might not hold. It was shown that this could be done by inducing transmission loss in the channel at an appropriate time.
We propose and experimentally demonstrate a scheme to render the detection apparatus of a quantum key distribution system immune to the main classes of hacking attacks in which the eavesdropper explores the back-door opened by the single-photon detectors. The countermeasure is based on the creation of modes that are not deterministically accessible to the eavesdropper. We experimentally show that the use of beamsplitters and extra single-photon detectors at the receiver station passively creates randomized spatial modes that erase any knowledge the eavesdropper might have gained when using bright-light faked states. Additionally, we experimentally show a detector-scrambling approach where the random selection of the detector used for each measurement-equivalent to an active spatial mode randomization-hashes out the side-channel open by the detection efficiency mismatch-based attacks. The proposed combined countermeasure represents a practical and readily implementable solution against the main classes of quantum hacking attacks aimed on the single-photon detector so far, without intervening on the inner working of the devices.
Quantum key distribution (QKD) protocol has been proved to provide unconditionally secure key between two remote legitimate users in theory. Key distribution signals are transmitted in a quantum channel which is established by the calibration process to meet the requirement of high count rate and low error rate. All QKD security proofs implicitly assume that the quantum channel has been established securely. However, the eavesdropper may attack the calibration process to break the security assumption of QKD and provide precondition to steal information about the final key successfully. In this paper, we reveal the security risk of the calibration process of a passive-basis-choice BB84 QKD system by launching a quantum man-in-the-middle attack which intercepts all calibration signals and resends faked ones. Large temporal bit-dependent or basis-dependent detector efficiency mismatch can be induced. Then we propose a basis-dependent detector efficiency mismatch (BEM) based faked states attack on a single photon BB84 QKD to stress the threat of BEM. Moreover, the security of single photon QKD systems with BEM is studied simply and intuitively. Two effective countermeasures are suggested to remove the general security risk of the calibration process.
Superconducting nanowire single-photon detector (SNSPD) is a promising candidate for achieving high-rate quantum key distribution (QKD) over long distances, and it has been widely employed in recent QKD experiments. However, SNSPD is naturally polarization sensitive, which, if unchecked, could leave a back door for an eavesdropper to perform quantum hacking. Here, we experimentally study the polarization dependency on the detection efficiency of SNSPD and propose a quantum hacking attack to exploit this vulnerability. We experimentally characterize the polarization-dependent efficiencies of different SNSPDs and perform risk analysis on the security of a standard phase-encoding QKD implementation. Our experimental data and security analysis show that, if the effect of polarization-dependent efficiency is unnoticed, an eavesdropper can successfully hack the QKD implementation using the polarization-rotation attack. Countermeasures are also discussed. The result is important for the future design of secure implementations of QKD.