Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2201.06114 · PRX Quantum

Protecting Fiber-Optic Quantum Key Distribution Sources against Light-Injection Attacks

Anastasiya Ponosova, D. D. Ruzhitskaya, Poompong Chaiwongkhot, V. I. Egorov, Vadim Makarov, Anqi Huang

Published Oct 14, 2022• 53 citations
arXivHTMLPDF

Abstract

A well-protected and characterized source in a quantum key distribution system is needed for its security.Unfortunately, the source is vulnerable to light-injection attacks, such as Trojan-horse, laser-seeding, and laser-damage attacks, in which an eavesdropper actively injects bright light to hack the source unit.The hacking laser could be a high-power one that can modify properties of components via the laserdamage attack and also further help the Trojan-horse and other light-injection attacks.Here we propose a countermeasure against the light-injection attacks, consisting of an additional sacrificial component placed at the exit of the source.This component should either withstand high-power incoming light while attenuating it to a safe level that cannot modify the rest of the source, or get destroyed into a permanent high-attenuation state that breaks up the line.We demonstrate experimentally that off-the-shelf fiberoptic isolators and circulators have these desired properties, at least under attack by a continuous-wave high-power laser.

DOI
10.1103/prxquantum.3.040307

Related papers

Optical-pumping attack on a quantum key distribution laser source

Maxim Fadeev, Anastasiya Ponosova, Qingquan Peng +3 more

We report a new type of vulnerability based on a physical principle that has not been previously exploited in quantum hacking—optical pumping of a laser in practical implementations of quantum key distribution (QKD) systems. We show that it is possible to increase the pulse energy of a source laser diode not only by injection-locking it with external light near its emission wavelength of 1550 nm, but also by optically pumping it at a much shorter wavelength. We experimentally demonstrate a 10% increase in pulse energy when exposing the laser diode to continuous-wave (cw) laser light at 1310 nm with a power of 1.6 mW via its fiber pigtail. This effect may allow an eavesdropper to steal the secret key. A possible countermeasure is to install broadband optical filters and isolators at the source output and to characterize them during security certification.

arXiv:2503.11239•Optics Express•Oct 3, 2025•4 citations

Security against Trojan-horse attacks on a self-compensating all-fiber polarization modulator

Alberto De Toni, Aynur Cemre Aka, Costantino Agnesi +3 more

Quantum key distribution (QKD) leverages the principles of quantum mechanics to exchange a secret key between two parties. Unlike classical cryptographic systems, the security of QKD is not reliant on computational assumptions but is instead rooted in the fundamental laws of physics. In a QKD protocol, any attempt by an eavesdropper to intercept the key is detectable: this provides an unprecedented level of security, making QKD an attractive solution for secure communication in an era increasingly threatened by the advent of quantum computers and their potential to break classical cryptographic systems. However, QKD also faces several practical challenges such as transmission loss and noise in quantum channels, finite key size effects, and implementation flaws in QKD devices. Addressing these issues is crucial for the large-scale deployment of QKD and the realization of a global quantum Internet. A whole body of research is dedicated to the hacking of the quantum state source, for example using (THAs), where the eavesdropper injects light into the system and analyzes the back-reflected signal. In this paper, we study the vulnerabilities against THAs of the iPOGNAC encoder, first introduced in [M. Avesani , ], to propose adapted countermeasures that can mitigate such attacks.

arXiv:2510.16868•Physical Review A•Apr 22, 2026•0 citations

Loopholes in the 1500–2100-nm Range for Quantum-Key-Distribution Components: Prospects for Trojan-Horse Attacks

Boris Aleksandrovich Nasedkin, Fedor Dmitrievich Kiselev, I. M. Filipov +7 more

Vulnerabilities of components used in quantum-key-distribution systems affect its implementation security and must be taken into consideration during system development and security analysis. In this paper, we investigate transmission of fiber optical elements, which are commonly used in quantum-key-distribution systems for designing countermeasures against Trojan-horse attacks, in the $1500$--$2100$-$\mathrm{nm}$ range. As a result, we find loopholes in their transmission spectra that open possibilities for eavesdropping. We also consider a simple passive countermeasure based on the violation of total internal reflection in a single-mode fiber, that provides additional insertion losses of at least 60 dB for double-pass Trojan-horse probe pulses for wavelengths longer than 1830 nm.

arXiv:2211.16815•Physical Review Applied•Jul 18, 2023•9 citations

Laser-Damage Attack Against Optical Attenuators in Quantum Key Distribution

Anqi Huang, Ruoping Li, Vladimir Egorov +3 more

Many quantum key distribution systems employ a laser followed by an optical attenuator to prepare weak coherent states in the source. Their mean photon number must be precalibrated to guarantee the security of key distribution. Here we experimentally show that this calibration can be broken with a high-power laser attack. We test four fiber-optic attenuator types used in quantum key distribution systems, and find that two of them exhibit a permanent decrease in attenuation after laser damage. This results in higher mean photon numbers in the prepared states and may allow an eavesdropper to compromise the key.

arXiv:1905.10795•Physical Review Applied•Mar 5, 2020•94 citations

Pulsed laser attack at 1061 nm potentially compromises quantum key distribution

Anastasiya Ponosova, Irina V. Zhluktova, D. D. Ruzhitskaya +6 more

Quantum key distribution systems offer cryptographic security, provided that all their components are thoroughly characterized. However, certain components might be vulnerable to laser-damage attacks, particularly when subjected to untested laser parameters. Here, we show that exposing 1550-nm fiber-optic isolators to 1061-nm sub-nanosecond pulsed illumination with 1.16 W average power permanently degrades their isolation performance at 1550 nm, while their forward transparency is less affected. One experimental sample was exposed to 17 mW average power picosecond attacking pulses that temporarily reduced its isolation below the specified guaranteed minimum value. This indicates a potential security threat under these attacking laser regimes that need to be addressed by improving security analysis for various light-injection attacks.

arXiv:2506.19091•Applied Physics Letters•Nov 10, 2025•3 citations

Light-injection attack against practical continuous-variable measurement-device-independent quantum key distribution systems

Yiliang Wang, Yi Zheng, Chenlei Fang +2 more

Continuous-variable measurement-device-independent quantum key distribution (CV-MDI QKD) can defend all detection-side attacks effectively. Therefore, the source side is the final battlefield for performing quantum hacking attacks. This paper investigates the practical security of a CV-MDI QKD system under a light-injection attack. Here, we first describe two different light-injection attacks, i.e., the induced-photorefractive attack and the strong-power injection attack. Then, we consider three attack cases where Eve only attacks one of the parties or both parties of the CV-MDI QKD system. Based on the analysis of the parameter estimation, we find that the legitimate communication parties will overestimate the secret key rate of the system under the effect of a light-injection attack. This opens a security loophole for Eve to successfully obtain secret key information in a practical CV-MDI QKD system. In particular, compared to the laser-damage attack, the above attacks use a lower power of injected light and have a more serious effect on the security of the system. To eliminate the above effects, we can enhance the practical security of the system by doping the lithium niobate material with various impurities or by using protective devices, such as optical isolators, circulators, optical power limiters, and narrow-band filters. Apart from these, we can also use an intensity monitor or a photodetector to detect the light-injection attack.

Optics Express•Sep 3, 2024•8 citations
A well-protected and characterized source in a quantum key distribution system is needed for its security.Unfortunately, the source is vulnerable to light-injection attacks, such as Trojan-horse, laser-seeding, and laser-damage attacks, in which an eavesdropper actively injects bright light to hack the source unit.The hacking laser could be a high-power one that can modify properties of components via the laserdamage attack and also further help the Trojan-horse and other light-injection attacks.Here we propose a countermeasure against the light-injection attacks, consisting of an additional sacrificial component placed at the exit of the source.This component should either withstand high-power incoming light while attenuating it to a safe level that cannot modify the rest of the source, or get destroyed into a permanent high-attenuation state that breaks up the line.We demonstrate experimentally that off-the-shelf fiberoptic isolators and circulators have these desired properties, at least under attack by a continuous-wave high-power laser.
We report a new type of vulnerability based on a physical principle that has not been previously exploited in quantum hacking—optical pumping of a laser in practical implementations of quantum key distribution (QKD) systems. We show that it is possible to increase the pulse energy of a source laser diode not only by injection-locking it with external light near its emission wavelength of 1550 nm, but also by optically pumping it at a much shorter wavelength. We experimentally demonstrate a 10% increase in pulse energy when exposing the laser diode to continuous-wave (cw) laser light at 1310 nm with a power of 1.6 mW via its fiber pigtail. This effect may allow an eavesdropper to steal the secret key. A possible countermeasure is to install broadband optical filters and isolators at the source output and to characterize them during security certification.
Quantum key distribution (QKD) leverages the principles of quantum mechanics to exchange a secret key between two parties. Unlike classical cryptographic systems, the security of QKD is not reliant on computational assumptions but is instead rooted in the fundamental laws of physics. In a QKD protocol, any attempt by an eavesdropper to intercept the key is detectable: this provides an unprecedented level of security, making QKD an attractive solution for secure communication in an era increasingly threatened by the advent of quantum computers and their potential to break classical cryptographic systems. However, QKD also faces several practical challenges such as transmission loss and noise in quantum channels, finite key size effects, and implementation flaws in QKD devices. Addressing these issues is crucial for the large-scale deployment of QKD and the realization of a global quantum Internet. A whole body of research is dedicated to the hacking of the quantum state source, for example using (THAs), where the eavesdropper injects light into the system and analyzes the back-reflected signal. In this paper, we study the vulnerabilities against THAs of the iPOGNAC encoder, first introduced in [M. Avesani , ], to propose adapted countermeasures that can mitigate such attacks.
Vulnerabilities of components used in quantum-key-distribution systems affect its implementation security and must be taken into consideration during system development and security analysis. In this paper, we investigate transmission of fiber optical elements, which are commonly used in quantum-key-distribution systems for designing countermeasures against Trojan-horse attacks, in the 150015001500--210021002100-nm\mathrm{nm}nm range. As a result, we find loopholes in their transmission spectra that open possibilities for eavesdropping. We also consider a simple passive countermeasure based on the violation of total internal reflection in a single-mode fiber, that provides additional insertion losses of at least 60 dB for double-pass Trojan-horse probe pulses for wavelengths longer than 1830 nm.
Many quantum key distribution systems employ a laser followed by an optical attenuator to prepare weak coherent states in the source. Their mean photon number must be precalibrated to guarantee the security of key distribution. Here we experimentally show that this calibration can be broken with a high-power laser attack. We test four fiber-optic attenuator types used in quantum key distribution systems, and find that two of them exhibit a permanent decrease in attenuation after laser damage. This results in higher mean photon numbers in the prepared states and may allow an eavesdropper to compromise the key.
Quantum key distribution systems offer cryptographic security, provided that all their components are thoroughly characterized. However, certain components might be vulnerable to laser-damage attacks, particularly when subjected to untested laser parameters. Here, we show that exposing 1550-nm fiber-optic isolators to 1061-nm sub-nanosecond pulsed illumination with 1.16 W average power permanently degrades their isolation performance at 1550 nm, while their forward transparency is less affected. One experimental sample was exposed to 17 mW average power picosecond attacking pulses that temporarily reduced its isolation below the specified guaranteed minimum value. This indicates a potential security threat under these attacking laser regimes that need to be addressed by improving security analysis for various light-injection attacks.
Continuous-variable measurement-device-independent quantum key distribution (CV-MDI QKD) can defend all detection-side attacks effectively. Therefore, the source side is the final battlefield for performing quantum hacking attacks. This paper investigates the practical security of a CV-MDI QKD system under a light-injection attack. Here, we first describe two different light-injection attacks, i.e., the induced-photorefractive attack and the strong-power injection attack. Then, we consider three attack cases where Eve only attacks one of the parties or both parties of the CV-MDI QKD system. Based on the analysis of the parameter estimation, we find that the legitimate communication parties will overestimate the secret key rate of the system under the effect of a light-injection attack. This opens a security loophole for Eve to successfully obtain secret key information in a practical CV-MDI QKD system. In particular, compared to the laser-damage attack, the above attacks use a lower power of injected light and have a more serious effect on the security of the system. To eliminate the above effects, we can enhance the practical security of the system by doping the lithium niobate material with various impurities or by using protective devices, such as optical isolators, circulators, optical power limiters, and narrow-band filters. Apart from these, we can also use an intensity monitor or a photodetector to detect the light-injection attack.