Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:1807.04287 · Physical Review A

Hacking Alice's box in continuous-variable quantum key distribution

Jason L. Pereira, Stefano Pirandola

Published Dec 17, 2018• 18 citations
arXivHTMLPDF

Abstract

Security analyses of quantum cryptographic protocols typically rely on certain conditions; one such condition is that the sender (Alice) and receiver (Bob) have isolated devices inaccessible to third parties. If an eavesdropper (Eve) has a side channel in one of the devices, then the key rate may be sensibly reduced. In this paper we consider an attack on a coherent-state protocol, where Eve not only taps the main communication channel but also hacks Alice's device. This is done by introducing a Trojan horse mode with low mean number of photons $\overline{n}$, which is then modulated in a similar way to the signal state. First we show that this strategy can be reduced to an attack without side channels but with higher loss and noise in the main channel. Then we show how the key rate rapidly deteriorates for increasing photons $\overline{n}$, being halved at long distances each time $\overline{n}+1$ doubles. Our work suggests that Alice's device should also be equipped with sensing systems that are able to detect and estimate the total number of incoming and outgoing photons.

DOI
10.1103/physreva.98.062319

Related papers

Quantum hacking of two-way continuous-variable quantum key distribution using Trojan-horse attack

Hongxin Ma, Wan‐Su Bao, Hong-Wei Li +1 more

We present a Trojan-horse attack on the practical two-way continuous-variable quantum key distribution system. Our attack mainly focuses on the imperfection of the practical system that the modulator has a redundancy of modulation pulse-width, which leaves a loophole for the eavesdropper inserting a Trojan-horse pulse. Utilizing the unique characteristics of two-way continuous-variable quantum key distribution that Alice only takes modulation operation on the received mode without any measurement, this attack allows the eavesdropper to render all of the final keys shared between the legitimate parties insecure without being detected. After analyzing the feasibility of the attack, the corresponding countermeasures are put forward.

Chinese Physics B•Jul 26, 2016•22 citations

Extended analysis of the Trojan-horse attack in quantum key distribution

Scott E. Vinay, Pieter Kok

The discrete-variable quantum key distribution protocols based on the 1984 protocol of Bennett and Brassard (BB84) are known to be secure against an eavesdropper, Eve, intercepting the flying qubits and performing any quantum operation on them. However, these protocols may still be vulnerable to side-channel attacks. We investigate the Trojan-horse side-channel attack where Eve sends her own state into Alice's apparatus and measures the reflected state to estimate the key. We prove that the separable coherent state is optimal for Eve among the class of multimode Gaussian attack states, even in the presence of thermal noise. We then provide a bound on the secret key rate in the case where Eve may use any separable state.

arXiv:1801.06496•Physical Review A•Apr 23, 2018•24 citations

Quantum hacking on a practical continuous-variable quantum cryptosystem by inserting an external light

Hao Qin, Rupesh Kumar, Romain Alléaume

We report here a new side channel attack on a practical continuous-variable (CV) quantum key distribution (QKD) system. Inspired by blinding attack in discrete-variable QKD, we formalize an attack strategy by inserting an external light into a CV QKD system implemented Gaussian-modulated coherent state protocol and show that our attack can compromise its practical security. In this attack, we concern imperfections of a balanced homodyne detector used in CV QKD. According to our analysis, if one inserts an external light into Bob’s signal port, due to the imperfect subtraction from the homodyne detector, the leakage of the external light contributes a displacement on the homodyne signal which causes detector electronics saturation. In consequence, Bob’s quadrature measurement is not linear with the quadrature sent by Alice. By considering such vulnerability, a potential Eve can launch a full intercept-resend attack meanwhile she inserts an external light into Bob’s signal port. By selecting proper properties of the external light, Eve actively controls the induced displacement value from the inserted light which results saturation of homodyne detection. In consequence, Eve can bias the excess noise due to the intercept-resend attack and the external light, such that Alice and Bob believe their excess noise estimation is below the null key threshold and they can still share a secret key. Our attack shows that the detector loopholes also exist in CV QKD, and it seems influence all the CV QKD systems using homodyne detection, since all the practical detectors have finite detection range.

Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE•Oct 13, 2015•5 citations

Trojan Horse Attacks, Decoy State Method, and Side Channels of Information Leakage in Quantum Cryptography

S. N. Molotkov

Abstract Early proofs of key secrecy in quantum cryptography systems were based on the assumption that the transmitting and receiving stations are completely isolated from the outside world—the eavesdropper. However, this condition cannot be implemented in practice since quantum cryptography systems are open systems in the sense that the eavesdropper may have indirect access, for example, through a fiber communication channel, to the critical elements of the equipment (phase modulators, intensity modulators, etc.) using active probing of the state of these elements. The state of the elements carries information about the transmitted key. In addition, the eavesdropper can use passive detection of side radiation from the receiving and transmitting equipment. Signals in side channels of information leakage may have extremely low intensity and are actually quantum signals. The eavesdropper may use the joint measurement of quantum information states in the communication channel and of states in various side channels of information leakage. The paper considers both passive attacks with measurement of side radiation and active attacks involving the probing of the states of the phase modulator and the intensity modulator, as well as backscattering radiation of single-photon avalanche detectors, which occurs during detecting information states on the receiver side. Combined attacks are also considered. The decoy state method is generalized with regard to active probing attacks, and boundaries for state parameters in side communication channels are obtained that guarantee secret key distribution for a given length of the communication channel.

Journal of Experimental and Theoretical Physics•Jun 1, 2020•16 citations

Preventing side-channel effects in continuous-variable quantum key distribution

Ivan D. Derkach, Vladyslav C. Usenko, Radim Filip

The role of the side channels in the continuous-variable quantum key distribution is studied. It is shown how the information leakage through a side channel from the trusted sender station increases the vulnerability of the protocols to the eavesdropping in the main quantum communication channel. Moreover, the untrusted noise infusion by an eavesdropper on the trusted receiving side breaks the security even for a purely attenuating main quantum channel. As a method to compensate for the effect of the side-channel leakage on the sender side, we suggest several types of manipulations on the side-channel input. It is shown that by applying the modulated coherent light on the input of the side channel that is optimally correlated to the modulation on the main signal and optionally introducing additional squeezing in the case of the squeezed-state protocol, the negative influence of the lossy side channel on the sender side can be completely removed. For the trusted receiving side, the method of optimal monitoring of the residual noise from the side-channel noise infusion is suggested and shown to be able to completely eliminate the presence of the noisy side channel. We therefore prove that the side-channel effects can be completely removed using feasible operations if the trusted parties access the respective parts of the side channels.

arXiv:1603.03122•Physical Review A•Mar 8, 2016•34 citations

Unambiguous measurements and Trojan-horse attack in quantum cryptography

S. N. Molotkov

Abstract Early security proofs of the keys in quantum cryptography systems were based on the assumption that the transmitting and receiving stations were completely isolated from the outside world—the eavesdropper. However, this condition cannot be implemented in practice, since quantum cryptography systems are open systems, in the sense that an eavesdropper can have indirect access, for example, through a fiber communication channel to critical equipment elements (phase modulators, intensity modulators, etc) using active sensing of the state of these elements—Trojan-horse attacks. A new Trojan-horse attack based on joint unambiguous measurements of reflected probing states from an intensity modulator and information states in a quantum communication channel is proposed. Estimates of attack parameters for a number of quantum key distribution protocols are given, when an attack leads to compromise of keys.

Laser Physics Letters•Dec 20, 2019•3 citations
Security analyses of quantum cryptographic protocols typically rely on certain conditions; one such condition is that the sender (Alice) and receiver (Bob) have isolated devices inaccessible to third parties. If an eavesdropper (Eve) has a side channel in one of the devices, then the key rate may be sensibly reduced. In this paper we consider an attack on a coherent-state protocol, where Eve not only taps the main communication channel but also hacks Alice's device. This is done by introducing a Trojan horse mode with low mean number of photons n‾\overline{n}n, which is then modulated in a similar way to the signal state. First we show that this strategy can be reduced to an attack without side channels but with higher loss and noise in the main channel. Then we show how the key rate rapidly deteriorates for increasing photons n‾\overline{n}n, being halved at long distances each time n‾+1\overline{n}+1n+1 doubles. Our work suggests that Alice's device should also be equipped with sensing systems that are able to detect and estimate the total number of incoming and outgoing photons.
We present a Trojan-horse attack on the practical two-way continuous-variable quantum key distribution system. Our attack mainly focuses on the imperfection of the practical system that the modulator has a redundancy of modulation pulse-width, which leaves a loophole for the eavesdropper inserting a Trojan-horse pulse. Utilizing the unique characteristics of two-way continuous-variable quantum key distribution that Alice only takes modulation operation on the received mode without any measurement, this attack allows the eavesdropper to render all of the final keys shared between the legitimate parties insecure without being detected. After analyzing the feasibility of the attack, the corresponding countermeasures are put forward.
The discrete-variable quantum key distribution protocols based on the 1984 protocol of Bennett and Brassard (BB84) are known to be secure against an eavesdropper, Eve, intercepting the flying qubits and performing any quantum operation on them. However, these protocols may still be vulnerable to side-channel attacks. We investigate the Trojan-horse side-channel attack where Eve sends her own state into Alice's apparatus and measures the reflected state to estimate the key. We prove that the separable coherent state is optimal for Eve among the class of multimode Gaussian attack states, even in the presence of thermal noise. We then provide a bound on the secret key rate in the case where Eve may use any separable state.
We report here a new side channel attack on a practical continuous-variable (CV) quantum key distribution (QKD) system. Inspired by blinding attack in discrete-variable QKD, we formalize an attack strategy by inserting an external light into a CV QKD system implemented Gaussian-modulated coherent state protocol and show that our attack can compromise its practical security. In this attack, we concern imperfections of a balanced homodyne detector used in CV QKD. According to our analysis, if one inserts an external light into Bob’s signal port, due to the imperfect subtraction from the homodyne detector, the leakage of the external light contributes a displacement on the homodyne signal which causes detector electronics saturation. In consequence, Bob’s quadrature measurement is not linear with the quadrature sent by Alice. By considering such vulnerability, a potential Eve can launch a full intercept-resend attack meanwhile she inserts an external light into Bob’s signal port. By selecting proper properties of the external light, Eve actively controls the induced displacement value from the inserted light which results saturation of homodyne detection. In consequence, Eve can bias the excess noise due to the intercept-resend attack and the external light, such that Alice and Bob believe their excess noise estimation is below the null key threshold and they can still share a secret key. Our attack shows that the detector loopholes also exist in CV QKD, and it seems influence all the CV QKD systems using homodyne detection, since all the practical detectors have finite detection range.
Abstract Early proofs of key secrecy in quantum cryptography systems were based on the assumption that the transmitting and receiving stations are completely isolated from the outside world—the eavesdropper. However, this condition cannot be implemented in practice since quantum cryptography systems are open systems in the sense that the eavesdropper may have indirect access, for example, through a fiber communication channel, to the critical elements of the equipment (phase modulators, intensity modulators, etc.) using active probing of the state of these elements. The state of the elements carries information about the transmitted key. In addition, the eavesdropper can use passive detection of side radiation from the receiving and transmitting equipment. Signals in side channels of information leakage may have extremely low intensity and are actually quantum signals. The eavesdropper may use the joint measurement of quantum information states in the communication channel and of states in various side channels of information leakage. The paper considers both passive attacks with measurement of side radiation and active attacks involving the probing of the states of the phase modulator and the intensity modulator, as well as backscattering radiation of single-photon avalanche detectors, which occurs during detecting information states on the receiver side. Combined attacks are also considered. The decoy state method is generalized with regard to active probing attacks, and boundaries for state parameters in side communication channels are obtained that guarantee secret key distribution for a given length of the communication channel.
The role of the side channels in the continuous-variable quantum key distribution is studied. It is shown how the information leakage through a side channel from the trusted sender station increases the vulnerability of the protocols to the eavesdropping in the main quantum communication channel. Moreover, the untrusted noise infusion by an eavesdropper on the trusted receiving side breaks the security even for a purely attenuating main quantum channel. As a method to compensate for the effect of the side-channel leakage on the sender side, we suggest several types of manipulations on the side-channel input. It is shown that by applying the modulated coherent light on the input of the side channel that is optimally correlated to the modulation on the main signal and optionally introducing additional squeezing in the case of the squeezed-state protocol, the negative influence of the lossy side channel on the sender side can be completely removed. For the trusted receiving side, the method of optimal monitoring of the residual noise from the side-channel noise infusion is suggested and shown to be able to completely eliminate the presence of the noisy side channel. We therefore prove that the side-channel effects can be completely removed using feasible operations if the trusted parties access the respective parts of the side channels.
Abstract Early security proofs of the keys in quantum cryptography systems were based on the assumption that the transmitting and receiving stations were completely isolated from the outside world—the eavesdropper. However, this condition cannot be implemented in practice, since quantum cryptography systems are open systems, in the sense that an eavesdropper can have indirect access, for example, through a fiber communication channel to critical equipment elements (phase modulators, intensity modulators, etc) using active sensing of the state of these elements—Trojan-horse attacks. A new Trojan-horse attack based on joint unambiguous measurements of reflected probing states from an intensity modulator and information states in a quantum communication channel is proposed. Estimates of attack parameters for a number of quantum key distribution protocols are given, when an attack leads to compromise of keys.