arXiv:2004.14445

An attack to quantum systems through RF radiation tracking

Kadir Durak, Naser Chamani Jam

Published Apr 29, 2020• 2 citations

Abstract

A newfound security breach in the physical nature of single photon detectors that are generally used in quantum key distribution is explained, we found that the bit contents of a quantum key transmission system can be intercepted from far away by exploiting the ultrawideband electromagnetic signals radiated from hi-voltage avalanche effect of single photon detectors. It means that in fact any Geiger mode avalanche photodiode that is used inside single photon detectors systematically acts like a downconverter that converts the optical-wavelength photons to radio-wavelength photons that can be intercepted by an antenna as side channel attack. Our experiment showed that the radiated waveforms captured by the antenna can be used as a fingerprint. These finger prints were fed to a deep learning neural network as training data, and after training the neural network was able to clone the bit content of quantum transmission.

DOI: 10.48550/arxiv.2004.14445

Related papers

Attack to Quantum Cryptosystems Through RF Fingerprints From Photon Detectors

Kadir Durak, Naser Chamani Jam, Saeid Karamzadeh

The well-known RF penetration method is implemented on the quantum cryptosystems. In this study, RF radiations from the single photon detectors in a quantum key distribution system are intercepted. It was found that the data contents of a quantum transmission system can be detected from the vicinity of the receiving parties by exploiting the radiations of avalanche effect of single photon detectors. We showed that any Geiger-mode avalanche photodetector acts like a downconverter that converts the optical-wavelength photons to radio-wavelength photons. In our experiment, the fingerprints of the avalanche radiations from commercial single photon detectors were fed to a trained deep learning neural network, and the bit content of quantum transmission was cloned with >99% accuracy up to a distance of 2 meters from the detectors. We also speculate on the enhancement of the key cloning accuracy and range of the eavesdropping.

IEEE Journal of Selected Topics in Quantum ElectronicsJun 15, 20218 citations

Side-channel attack to quantum communications by exploiting electromagnetic radiations of the single photon detectors

Naser Chamani Jam

In this thesis an unprecedented cyber-physical attack which can be a game changer in the quantum cryptosystems' security is explained. This attack is the first non-optical patented intercept in quantum field that is based on a security issue in the physical layer of the quantum communication and key distribution systems. We experimentally and theoretically showed that the bit contents of a quantum key transmission system can be intercepted from far away by exploiting the ultrawideband electromagnetic signals radiated from the hi-voltage avalanche effect of the single photon detectors. This concept was a significant hidden secret based on the physical nature of the single photon detectors that are generally used in quantum key distribution. It has been proved theoretically and experimentally that any Geiger-mode avalanche photodiode that is used inside single photon detectors, systematically acts like a downconverter that converts the optical-wavelength photons to radio-wavelength photons. Our experiments also showed that the radiated waveforms captured by an ultrawideband antenna can be used as a unique fingerprint to find which photodiode in the cryptosystem has absorbed a photon. These fingerprints were fed to a deep learning neural network as training data, and after training, the neural network was able to clone the bit content of quantum transmission with high accuracy.

Aug 30, 20200 citations

Deep Learning Based TEMPEST Attacks on a Quantum Key Distribution Sender

Adomas Baliuka, Markus Stöcker, Michael Auer +3 more

While quantum key distribution (QKD) protocols are proven secure based on fundamental physical laws, side channels may allow an eavesdropper to obtain information unnoticeably. We present a profiled [1] side-channel attack using a deep convolutional neural network to analyze the classical, radio-frequency electromagnetic emissions from the electronics of a QKD sender. At a few centimeters from the device, we are able to recover virtually all information about the secret key. Furthermore, we can still observe traces of electromagnetic radiation from the device at distances of a few meters using a wideband antenna. Our methods are designed to be easily adaptable and may serve as a starting point for assessing the presence of this side channel for other devices.

Conference on Lasers and Electro-Optics Europe & European Quantum Electronics Conference (CLEO/Europe-EQEC)Jun 26, 20231 citation

Hacking the Quantum Key Distribution System by Exploiting the Avalanche-Transition Region of Single-Photon Detectors

Yong-Jun Qian, De-Yong He, Shuang Wang +4 more

As necessary steps toward practical and secure quantum key distribution (QKD), identifying and patching possible attacks are important and valuable. This study discusses an avalanche-transition-region (ATR) attack on a gated-mode avalanche photodiode (APD) detector, widely used in QKD systems. Unlike other attacks, this one leaves almost no trace; the eavesdropper introduces less than 0.5% quantum bit-error rate, and the photocurrent and afterpulse probability before and after hacking are nearly identical. These findings highlight the importance of detection signals in real-life QKD systems, and are crucial to enhancing the security of practical QKD.

arXiv:1909.10001Physical Review AppliedDec 28, 201846 citations

Quantifying backflash radiation to prevent zero-error attacks in quantum key distribution

Alice Meda, Ivo Pietro Degiovanni, Alberto Tosi +3 more

Secondary photons released from photon detector when quantum cryptographic keys are shared between parties represent a significant eavesdropping threat. Attempts to listen in on quantum key distributions are, in theory, detected as automatic changes to quantum states. But Alice Meda from the INRIM in Italy and colleagues have now demonstrated that the detectors used to spot single photons in many commercial quantum key distribution boxes can leak information through ‘backflash’–bursts of light triggered when a photon hits an avalanche photodiode. The team constructed a sensitive new machine for detecting backflashes and determined data leakage rates nearing 10%. As well, each photodetector emitted specific signatures that might give attackers another entry point. Wide-bandwidth filters or special circulators incorporated into the quantum boxes can help secure this breach, the researchers propose.

Light Science & ApplicationsDec 5, 201660 citations

The Security of Self-Differencing Avalanche Photodiodes for Quantum Key Distribution

A. Koehler-Sidki

Quantum key distribution (QKD) allows two users to communicate with information theoretic security by encoding information on single photons. This security is based on the laws of physics and as such can never be broken in theory. However, in practice, components do not always behave according to their theoretical models and these deviations can be exploited by an eavesdropper. In recent years, exposing loopholes in QKD systems, known as quantum hacking, has attracted significant attention. The components most susceptible to being hacked are the single-photon detectors, often avalanche photodiodes (APDs), as they are directly exposed to the optical channel. Whilst measurement-device-independent QKD removes detector vulnerability from the system, secure key rates with this technique can be much lower than point-to-point links. As such, mitigating attacks on QKD systems is a pressing challenge in QKD. In this thesis, the focus is on a special class of detectors, self-differencing APDs (SD-APDs), which have facilitated state-of-the art demonstrations of QKD. The susceptibility of SD-APDs to blinding attacks, the most explored and successful attack to date, was investigated and it was shown that by following best practice for their operation, such an attack would be unsuccessful. We have also proposed and developed a countermeasure such that the onus for appropriate operation could be removed from the user. We have also explored an arguably more dangerous attack, in the form of the after-gate attack. We have shown that delayed detection events, ordinarily considered detrimental in QKD, can provide inherent protection against this attack. Finally, backflashes in GHz-gated APDs were investigated for the first time and it was shown that threat they pose to QKD security is negligible. These results highlight the inherent protection to a number of attacks that self-differencing APDs possess. We stress that the findings presented in this thesis are also applicable to other types of fast-gated InGaAs APDs that don't possess self-differencing circuitry.

Oct 17, 20191 citation