For effective quantum communication, the security of the photon source is particularly important in the era of measurement-device-independent quantum key distribution (MDI-QKD) and twin-field QKD (TF-QKD). In practice, the security of the source can still be cracked by an adversary. This study experimentally demonstrates that a practical source based on a semiconductor laser diode is vulnerable to a laser-seeding attack, in which light injected from the communication line into the laser yields increased intensities of the prepared states. Theory shows that the unnoticed intensity increase compromises the security of the prepare-and-measure decoy-state BB84 and MDI-QKD protocols.
For effective quantum communication, the security of the photon source is particularly important in the era of measurement-device-independent quantum key distribution (MDI-QKD) and twin-field QKD (TF-QKD). In practice, the security of the source can still be cracked by an adversary. This study experimentally demonstrates that a practical source based on a semiconductor laser diode is vulnerable to a laser-seeding attack, in which light injected from the communication line into the laser yields increased intensities of the prepared states. Theory shows that the unnoticed intensity increase compromises the security of the prepare-and-measure decoy-state BB84 and MDI-QKD protocols.
Twin-field quantum key distribution (TF-QKD) has become a leading protocol to bring quantum communications to the national scale. The protocol requires the establishment of a shared phase and frequency reference between distant parties, which is commonly achieved by using an external reference laser in an optical injection locking (OIL) architecture. In this work, we analyze the side channels in OIL-based TF-QKD that may arise from adversarial manipulation of the various degrees of freedom of this untrusted reference beam. We experimentally demonstrate two realistic attack scenarios: fast intensity modulation of the reference laser, and additional signals embedded in the reference light exploiting wavelengths undetectable by conventional monitoring techniques. These attacks can allow a potential eavesdropper to deterministically increase the mean photon number of the sources, or circumvent the decoy-state technique, respectively. To counter these vulnerabilities, we propose practical and highly effective countermeasures that reinforce the security of TF-QKD systems without significant additional complexity or performance degradation.
To date, only active-decoy-state methods have been adopted in current measurement-device-independent (MDI) quantum key distribution (QKD) protocols, causing security loopholes when modulating multiple light intensities with practical devices. To solve this problem, the passive-decoy-state method will be a good choice. Until today practical passive-decoy-state MDI QKD is still missing. In this paper, based on a recently discussed structure of heralded single-photon sources, we propose a passive-decoy-state MDI QKD protocol. In present work, one does not need to modulate light sources into different intensities, but utilizes the built-in local detection events to passively generate different decoy states. Furthermore, through carrying out an appropriate mathematical method, we are able to give very precise estimations for single-photon-pair contributions. As a result, our protocol can exhibit distinct advantages compared with state-of-the-art MDI QKD schemes even when the finite-key-size effect is taken into account. Therefore, our protocol seems a promising candidate to enhance both the security and performance of MDI QKD in practical implementation.
Continuous-variable measurement-device-independent quantum key distribution (CV-MDI QKD) can defend all detection-side attacks effectively. Therefore, the source side is the final battlefield for performing quantum hacking attacks. This paper investigates the practical security of a CV-MDI QKD system under a light-injection attack. Here, we first describe two different light-injection attacks, i.e., the induced-photorefractive attack and the strong-power injection attack. Then, we consider three attack cases where Eve only attacks one of the parties or both parties of the CV-MDI QKD system. Based on the analysis of the parameter estimation, we find that the legitimate communication parties will overestimate the secret key rate of the system under the effect of a light-injection attack. This opens a security loophole for Eve to successfully obtain secret key information in a practical CV-MDI QKD system. In particular, compared to the laser-damage attack, the above attacks use a lower power of injected light and have a more serious effect on the security of the system. To eliminate the above effects, we can enhance the practical security of the system by doping the lithium niobate material with various impurities or by using protective devices, such as optical isolators, circulators, optical power limiters, and narrow-band filters. Apart from these, we can also use an intensity monitor or a photodetector to detect the light-injection attack.
Quantum key distribution (QKD) theoretically offers information-theoretic security. The prevailing approach is the prepare-and-measure BB84 protocol, which implements QKD using conventional laser rather than single-photon source via the decoy-state method. However, side-channel attacks targeting sources severely threaten system security. Despite extensive efforts, including fully passive scheme, this vulnerability persists even with perfect single-photon source. Here, we propose a source-independent (SI) QKD protocol that resolves all known and unknown source-side attacks without pre-sending entanglement source. Aligning with advances in quantum light sources, our protocol simultaneously doubles the transmission distance while remaining robustness against imperfection of source. Theoretical analysis shows that non-classical light source provides practical security advantages unattainable with conventional laser.
Quantum Key Distribution (QKD) offers information-theoretic security grounded in the laws of quantum mechanics rather than computational assumptions. While its theoretical foundations are robust, practical implementations necessarily deviate from the idealized models assumed in security analyses, opening the door to side-channel attacks and implementation loopholes. In particular, most research to date has focused on mitigating vulnerabilities in the measurement devices, leading to the development of Measurement-Device-Independent QKD (MDI-QKD) and Twin-Field QKD (TF-QKD), which effectively close all receiver-side loopholes. By contrast, the security of the source has remained less explored, despite being critical for the overall integrity of QKD systems. The goal of this thesis is to develop security proofs that explicitly account for realistic imperfections in QKD sources. Special emphasis is placed on three main aspects: correlations between emitted pulses that violate independence assumptions, imperfect phase randomization arising from practical modulation schemes, and leakage of internal settings through passive or active side channels. By formulating rigorous methods to analyze these imperfections, the work aims to provide a framework that enables practitioners to quantify and mitigate implementation risks systematically. Additionally, this thesis seeks to clarify under which conditions the commonly used decoy-state method remains secure, and to what extent source assumptions can be relaxed without compromising performance. This thesis aims to advance the understanding of how real-world deviations impact QKD security and to contribute to the development of protocols and devices. Ultimately, this work is motivated by the ambition to help bring QKD from a theoretically promising idea to a mature technology deployable with confidence in practical scenarios.
A novel protocol, measurement-device-independent quantum key distribution (MDI-QKD), removes all attacks from the detection system, the most vulnerable part in QKD implementations. In this paper, we present an analysis for practical aspects of MDI-QKD. To evaluate its performance, we study various error sources by developing a general system model. We find that MDI-QKD is highly practical and thus can be easily implemented with standard optical devices. Moreover, we present a simple analytical method with only two (general) decoy states for the finite decoy-state analysis. This method can be used directly by experimentalists to demonstrate MDI-QKD. By combining the system model with the finite decoy-state method, we present a general framework for the optimal choice of the intensities of the signal and decoy states. Furthermore, we consider a common situation, namely asymmetric MDI-QKD, in which the two quantum channels have different transmittances. We investigate its properties and discuss how to optimize its performance. Our work is of interest not only to experiments demonstrating MDI-QKD but also to other non-QKD experiments involving quantum interference.