Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:1701.07252 · Optica

Long-distance quantum key distribution secure against coherent attacks

Bernd Fröhlich, Marco Lucamarini, J. F. Dynes, L. C. Comandar, Winci Tam, Alan Plews, A. W. Sharpe, Zhiliang L. Yuan, Andrew J. Shields

Published Jan 18, 2017• 198 citations
arXivHTMLPDF

Abstract

Quantum key distribution (QKD) permits information-theoretically secure transmission of digital encryption keys, assuming that the behaviour of the devices employed for the key exchange can be reliably modelled and predicted. Remarkably, no assumptions have to be made on the capabilities of an eavesdropper other than that she is bounded by the laws of Nature, thus making the security of QKD "unconditional". However, unconditional security is hard to achieve in practice. For example, any experimental realisation can only collect finite data samples, leading to vulnerabilities against coherent attacks, the most general class of attacks, and for some protocols the theoretical proof of robustness against these attacks is still missing. For these reasons, in the past many QKD experiments have fallen short of implementing an unconditionally secure protocol and have instead considered limited attacking capabilities by the eavesdropper. Here, we explore the security of QKD against coherent attacks in the most challenging environment: the long-distance transmission of keys. We demonstrate that the BB84 protocol can provide positive key rates for distances up to 240 km without multiplexing of conventional signals, and up to 200 km with multiplexing. Useful key rates can be achieved even for the longest distances, using practical thermo-electrically cooled single-photon detectors.

DOI
10.1364/optica.4.000163

Related papers

Experimental Side-Channel-Secure Quantum Key Distribution over 200 km

Zhou, Yang, Jing-Yang Liu, Chunhui Zhang +4 more

Quantum key distribution (QKD) enables two remote parties to share encryption keys with information-theoretic security guaranteed by physical laws. Side-channel-secure QKD (SCS-QKD) has attracted considerable attention because it simultaneously removes source and detector side-channel vulnerabilities. Although a recent experiment demonstrated SCS-QKD over 50 km, practical implementation remains challenging due to imperfect vacuum preparation and finite-key constraints under coherent attacks. Here, following the theoretical framework of Jiang et al. [Phys. Rev. Res. 6, 013266 (2024)], we experimentally implement a practical SCS-QKD protocol using an imperfect whole-space source and rigorous finite-key analysis. Benefiting from a stable GHz-level system operating at 1.25 GHz, we extend the transmission distance to 200 km and achieve high secure key rates of 18.31 kbps, 2.55 kbps, and 196.03 bps at 100 km, 150 km, and 200 km, respectively. Our results establish a new distance record for SCS-QKD and demonstrate the feasibility of high-speed, long-distance, and practically secure quantum key distribution.

arXiv:2505.03524•May 6, 2025•0 citations

Quantum key distribution with hacking countermeasures and long term field trial

A. R. Dixon, J. F. Dynes, Marco Lucamarini +11 more

Quantum key distribution's (QKD's) central and unique claim is information theoretic security. However there is an increasing understanding that the security of a QKD system relies not only on theoretical security proofs, but also on how closely the physical system matches the theoretical models and prevents attacks due to discrepancies. These side channel or hacking attacks exploit physical devices which do not necessarily behave precisely as the theory expects. As such there is a need for QKD systems to be demonstrated to provide security both in the theoretical and physical implementation. We report here a QKD system designed with this goal in mind, providing a more resilient target against possible hacking attacks including Trojan horse, detector blinding, phase randomisation and photon number splitting attacks. The QKD system was installed into a 45 km link of a metropolitan telecom network for a 2.5 month period, during which time the system operated continuously and distributed 1.33 Tbits of secure key data with a stable secure key rate over 200 kbit/s. In addition security is demonstrated against coherent attacks that are more general than the collective class of attacks usually considered.

Scientific Reports•May 10, 2017•46 citations

Proof-of-principle experimental demonstration of side-channel-secure quantum key distribution over 200 km

Yang Zhou, Jing-Yang Liu, Chun-Hui Zhang +4 more

Quantum key distribution (QKD) enables two remote parties to share encryption keys with information-theoretic security guaranteed by physical laws. Side-channel-secure QKD (SCS-QKD) has attracted considerable attention because it simultaneously removes source and detector side-channel vulnerabilities. Although a recent experiment demonstrated SCS-QKD over 50 km, practical implementation remains challenging due to imperfect vacuum preparation and finite-key constraints under coherent attacks. Here, following the theoretical framework of Jiang et al. [Phys. Rev. Res. 6, 013266 (2024)], we experimentally implement a practical SCS-QKD protocol using an imperfect whole-space source and rigorous finite-key analysis. Benefiting from a stable GHz-level system operating at 1.25 GHz, we extend the transmission distance to 200 km and achieve high secure key rates of 18.31 kbps, 2.55 kbps, and 196.03 bps at 100 km, 150 km, and 200 km, respectively. Our results establish a new distance record for SCS-QKD and demonstrate the feasibility of high-speed, long-distance, and practically secure quantum key distribution.

npj Quantum Information•Aug 11, 2026•0 citations

Overcoming Intensity Limits for Long-Distance Quantum Key Distribution

Ibrahim A. Almosallam

Quantum Key Distribution (QKD) enables the sharing of cryptographic keys secured by quantum mechanics. The BB84 protocol assumes single-photon sources, but practical systems rely on weak coherent pulses vulnerable to Photon-Number-Splitting (PNS) attacks. The Gottesman-Lo-Lütkenhaus-Preskill (GLLP) framework addresses these imperfections, deriving secure key rate bounds under limited PNS scenarios. The decoy-state protocol further improves performance by refining single-photon yield estimates, but still considers multi-photon states as insecure, thereby limiting intensities and constraining key rate and distance. More recently, finite-key security bounds for decoy-state QKD have been extended to address general attacks, ensuring security against adversaries capable of exploiting arbitrary strategies. In this work, we focus on a specific class of attacks, the generalized PNS attack, and demonstrate that higher pulse intensities can be securely used by employing Bayesian inference to estimate key parameters directly from observed data. By raising the pulse intensity to 10 photons, we achieve a 50-fold increase in key rate and a 62.2% increase in operational range (about 200 km) compared to the decoy-state protocol. Furthermore, we accurately model after-pulsing using a Hidden Markov Model (HMM) and reveal inaccuracies in decoy-state calculations that may produce erroneous key-rate estimates. While this methodology does not address all possible attacks, it provides a new approach to security proofs in QKD by shifting from worst-case assumption analysis to observation-dependent inference, advancing the reach and efficiency of discrete-variable QKD protocols.

arXiv:2412.20265•Entropy•May 27, 2025•2 citations

Practical long-distance quantum key distribution system using decoy levels

Danna Rosenberg, C G Peterson, J W Harrington +9 more

Quantum key distribution (QKD) has the potential for widespread real-world applications. To date no secure long-distance experiment has demonstrated the truly practical operation needed to move QKD from the laboratory to the real world due largely to limitations in synchronization and poor detector performance. Here we report results obtained using a fully automated, robust QKD system based on the Bennett Brassard 1984 protocol (BB84) with low-noise superconducting nanowire single-photon detectors (SNSPDs) and decoy levels. Secret key is produced with unconditional security over a record 144.3 km of optical fibre, an increase of more than a factor of five compared to the previous record for unconditionally secure key generation in a practical QKD system.

arXiv:0806.3085•New Journal of Physics•Apr 30, 2009•84 citations

Security and Practical Models for Quantum Key Distribution

Juliette van Mil

This report reviews two quantum key distribution (QKD) protocols: the BB84 protocol and the measurement device independent (MDI) QKD protocol. The goal of this report is to recreate the security proof of the BB84 protocol, to generate the secret key rate for a practical application of the BB84 protocol, both with and without decoy states, and to review the MDI-QKD protocol and look at the advantages it has for practical QKD. The proof security of the BB84 protocol is done by designing an equivalent theoretical protocol and proving its security by bounding the information of the eavesdropper to an exponentially small number. The best distance over which secret key rate can be generated with the practical model of the BB84 protocol that is presented in this report, is 165 km. This is achieved by employing decoy states and is more than three times as far as the model can achieve without decoy states, which gave a distance of 52 km at best. The zero distance key rate of the model with decoy states is R = 1.21 · 10-2 bits per pulse (bpp), at best. This is an order of magnitude larger than R =1.02 · 10-3 bpp, which is what the model without decoy states could produce. The decoy state method is therefore an improvement for practical QKD. By reviewing the MDI-QKD protocol it can be concluded that because it eliminates the measurement device side channels, it is very useful for practical QKD, since it makes security analysis simpler and more precise. It also necessarily employs decoy states, which improves the secret key rate. MDI-QKD therefore is a promising protocol to use for future quantum communications.

•Jan 1, 2021•0 citations
Quantum key distribution (QKD) permits information-theoretically secure transmission of digital encryption keys, assuming that the behaviour of the devices employed for the key exchange can be reliably modelled and predicted. Remarkably, no assumptions have to be made on the capabilities of an eavesdropper other than that she is bounded by the laws of Nature, thus making the security of QKD "unconditional". However, unconditional security is hard to achieve in practice. For example, any experimental realisation can only collect finite data samples, leading to vulnerabilities against coherent attacks, the most general class of attacks, and for some protocols the theoretical proof of robustness against these attacks is still missing. For these reasons, in the past many QKD experiments have fallen short of implementing an unconditionally secure protocol and have instead considered limited attacking capabilities by the eavesdropper. Here, we explore the security of QKD against coherent attacks in the most challenging environment: the long-distance transmission of keys. We demonstrate that the BB84 protocol can provide positive key rates for distances up to 240 km without multiplexing of conventional signals, and up to 200 km with multiplexing. Useful key rates can be achieved even for the longest distances, using practical thermo-electrically cooled single-photon detectors.
Quantum key distribution (QKD) enables two remote parties to share encryption keys with information-theoretic security guaranteed by physical laws. Side-channel-secure QKD (SCS-QKD) has attracted considerable attention because it simultaneously removes source and detector side-channel vulnerabilities. Although a recent experiment demonstrated SCS-QKD over 50 km, practical implementation remains challenging due to imperfect vacuum preparation and finite-key constraints under coherent attacks. Here, following the theoretical framework of Jiang et al. [Phys. Rev. Res. 6, 013266 (2024)], we experimentally implement a practical SCS-QKD protocol using an imperfect whole-space source and rigorous finite-key analysis. Benefiting from a stable GHz-level system operating at 1.25 GHz, we extend the transmission distance to 200 km and achieve high secure key rates of 18.31 kbps, 2.55 kbps, and 196.03 bps at 100 km, 150 km, and 200 km, respectively. Our results establish a new distance record for SCS-QKD and demonstrate the feasibility of high-speed, long-distance, and practically secure quantum key distribution.
Quantum key distribution's (QKD's) central and unique claim is information theoretic security. However there is an increasing understanding that the security of a QKD system relies not only on theoretical security proofs, but also on how closely the physical system matches the theoretical models and prevents attacks due to discrepancies. These side channel or hacking attacks exploit physical devices which do not necessarily behave precisely as the theory expects. As such there is a need for QKD systems to be demonstrated to provide security both in the theoretical and physical implementation. We report here a QKD system designed with this goal in mind, providing a more resilient target against possible hacking attacks including Trojan horse, detector blinding, phase randomisation and photon number splitting attacks. The QKD system was installed into a 45 km link of a metropolitan telecom network for a 2.5 month period, during which time the system operated continuously and distributed 1.33 Tbits of secure key data with a stable secure key rate over 200 kbit/s. In addition security is demonstrated against coherent attacks that are more general than the collective class of attacks usually considered.
Quantum key distribution (QKD) enables two remote parties to share encryption keys with information-theoretic security guaranteed by physical laws. Side-channel-secure QKD (SCS-QKD) has attracted considerable attention because it simultaneously removes source and detector side-channel vulnerabilities. Although a recent experiment demonstrated SCS-QKD over 50 km, practical implementation remains challenging due to imperfect vacuum preparation and finite-key constraints under coherent attacks. Here, following the theoretical framework of Jiang et al. [Phys. Rev. Res. 6, 013266 (2024)], we experimentally implement a practical SCS-QKD protocol using an imperfect whole-space source and rigorous finite-key analysis. Benefiting from a stable GHz-level system operating at 1.25 GHz, we extend the transmission distance to 200 km and achieve high secure key rates of 18.31 kbps, 2.55 kbps, and 196.03 bps at 100 km, 150 km, and 200 km, respectively. Our results establish a new distance record for SCS-QKD and demonstrate the feasibility of high-speed, long-distance, and practically secure quantum key distribution.
Quantum Key Distribution (QKD) enables the sharing of cryptographic keys secured by quantum mechanics. The BB84 protocol assumes single-photon sources, but practical systems rely on weak coherent pulses vulnerable to Photon-Number-Splitting (PNS) attacks. The Gottesman-Lo-Lütkenhaus-Preskill (GLLP) framework addresses these imperfections, deriving secure key rate bounds under limited PNS scenarios. The decoy-state protocol further improves performance by refining single-photon yield estimates, but still considers multi-photon states as insecure, thereby limiting intensities and constraining key rate and distance. More recently, finite-key security bounds for decoy-state QKD have been extended to address general attacks, ensuring security against adversaries capable of exploiting arbitrary strategies. In this work, we focus on a specific class of attacks, the generalized PNS attack, and demonstrate that higher pulse intensities can be securely used by employing Bayesian inference to estimate key parameters directly from observed data. By raising the pulse intensity to 10 photons, we achieve a 50-fold increase in key rate and a 62.2% increase in operational range (about 200 km) compared to the decoy-state protocol. Furthermore, we accurately model after-pulsing using a Hidden Markov Model (HMM) and reveal inaccuracies in decoy-state calculations that may produce erroneous key-rate estimates. While this methodology does not address all possible attacks, it provides a new approach to security proofs in QKD by shifting from worst-case assumption analysis to observation-dependent inference, advancing the reach and efficiency of discrete-variable QKD protocols.
Quantum key distribution (QKD) has the potential for widespread real-world applications. To date no secure long-distance experiment has demonstrated the truly practical operation needed to move QKD from the laboratory to the real world due largely to limitations in synchronization and poor detector performance. Here we report results obtained using a fully automated, robust QKD system based on the Bennett Brassard 1984 protocol (BB84) with low-noise superconducting nanowire single-photon detectors (SNSPDs) and decoy levels. Secret key is produced with unconditional security over a record 144.3 km of optical fibre, an increase of more than a factor of five compared to the previous record for unconditionally secure key generation in a practical QKD system.
This report reviews two quantum key distribution (QKD) protocols: the BB84 protocol and the measurement device independent (MDI) QKD protocol. The goal of this report is to recreate the security proof of the BB84 protocol, to generate the secret key rate for a practical application of the BB84 protocol, both with and without decoy states, and to review the MDI-QKD protocol and look at the advantages it has for practical QKD. The proof security of the BB84 protocol is done by designing an equivalent theoretical protocol and proving its security by bounding the information of the eavesdropper to an exponentially small number. The best distance over which secret key rate can be generated with the practical model of the BB84 protocol that is presented in this report, is 165 km. This is achieved by employing decoy states and is more than three times as far as the model can achieve without decoy states, which gave a distance of 52 km at best. The zero distance key rate of the model with decoy states is R = 1.21 · 10-2 bits per pulse (bpp), at best. This is an order of magnitude larger than R =1.02 · 10-3 bpp, which is what the model without decoy states could produce. The decoy state method is therefore an improvement for practical QKD. By reviewing the MDI-QKD protocol it can be concluded that because it eliminates the measurement device side channels, it is very useful for practical QKD, since it makes security analysis simpler and more precise. It also necessarily employs decoy states, which improves the secret key rate. MDI-QKD therefore is a promising protocol to use for future quantum communications.