Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2205.15964 · Physical Review A

Explicit attacks on the Bennett-Brassard 1984 protocol with partially distinguishable photons

Бабухин Данила Валерьевич, Dmitry Anatolevich Kronberg, Сыч Денис Васильевич

Published Oct 3, 2022• 8 citations
arXivHTMLPDF

Abstract

The distinguishability of photons in nonoperational degrees of freedom compromises the unconditional security of quantum key distribution since an eavesdropper can improve attack strategies by exploiting this distinguishability. However, the optimal eavesdropping strategies in the presence of light-source side channels are not known. Here we provide several explicit attack strategies on the Bennett-Brassard 1984 (BB84) protocol with partially distinguishable photons. In particular, we consider the phase-covariant cloning attack, which is optimal in the absence of side channels, and show that there are even better strategies in the presence of side channels. The improved strategies exploit a measurement of the side-channel state followed by an attack on the signal photon. Our results explicitly demonstrate a reduction of the critical error rate and set an upper bound on the practical secret key rate.

DOI
10.1103/physreva.106.042403

Related papers

Explicit attacks on passive side channels of the light source in the BB84 decoy state protocol

Бабухин Данила Валерьевич, Сыч Денис Васильевич

Abstract Various imperfections of the hardware in quantum key distribution (QKD) lead to discrepancies between the theory and real-world devices. An eavesdropper can use these discrepancies to compromise the QKD security, thus legitimate sides need to estimate the influence of imperfections to prevent the loss of security. Here we investigate explicit eavesdropping attacks on passive side channels of the light source for a BB84 decoy states QKD protocol. We consider an optimal phase-covariant cloning attack, followed by unambiguous state discrimination and a joint measurement. Our calculations provide a hint that for state-of-the-art light sources the inherent presence of passive side channels still allows the protocol to be secure, albeit with the reduced secret key rates.

Journal of Physics Conference Series•Jul 1, 2021•4 citations

Joint Eavesdropping on the BB84 Decoy State Protocol with an Arbitrary Passive Light-source Side Channel

Бабухин Данила Валерьевич, Сыч Денис Васильевич

Abstract Passive light-source side channel in quantum key distribution (QKD) provides additional information to an eavesdropper via various non-operational degrees of freedom of the optical signal. The currently known explicit eavesdropping strategies aimed at additional information gain from the passive light-source side channel were limited to the attack on the side channel and the operational degree of freedom separately. As a result, their efficiency is far from being optimal. Here we provide the joint eavesdropping strategy on both operational degree of freedom and the passive light-source side channel of the generic form, and develop a method to calculate the corresponding secret key rate. In particular, we use the optimal phase-covariant cloning of the signal photon state followed by a joint collective measurement of the side channel and the operational degree of freedom. To estimate security under the explicit attack strategy, we develop an ‘‘effective error’’ method and demonstrate it on the BB84 protocol with decoy states. Our work extends the practical analysis of QKD protocols with the light-source side channels and can be used as a tool for the analysis of realistic eavesdropping methods.

arXiv:2211.13669•Lobachevskii Journal of Mathematics•Jun 1, 2024•2 citations

Unambiguous state discrimination and joint measurement attacks on passive side channel of the light source in BB84 decoy-state protocol

Бабухин Данила Валерьевич, Сыч Денис Васильевич

Abstract Quantum key distribution (QKD) has a promise of unconditionally secure communication between the remote sides. The real-world QKD implementations, however, have numerous loopholes, both of engeneering and physical origin, and compromise the security promise. In this work, we investigate two attack strategies on the passive side channel of the light source along with the optimal cloning attack on the BB84 protocol with decoy-states. We calculate an upper bound of a secret key rate for these situations and show that the joint measurement attack on the signal and side channel degree of freedom is more effective to the adversary.

Journal of Physics Conference Series•Dec 1, 2021•2 citations

Intercept-resend attack on passive side channel of the light source in BB84 decoy-state protocol

Бабухин Данила Валерьевич, Сыч Денис Васильевич

Abstract Quantum key distribution (QKD) promises unconditionally secure communication based on fundamental laws of physics, though practical realizations of QKD may have loopholes and side channels, thus their security can be compromised. We analyze the intercept-resend attack on the BB84 decoy-state protocol under the presence of a passive side channel of the light source. We derive an upper bound for the secret key rate and show that it does not significantly deviate from the ideal side-channel-free case.

Journal of Physics Conference Series•Dec 1, 2020•3 citations

Photon-number-splitting versus cloning attacks in practical implementations of the Bennett-Brassard 1984 protocol for quantum cryptography

Armand Niederberger, Valerio Scarani, Nicolas Gisin

In practical quantum cryptography, the source sometimes produces multiphoton pulses, thus enabling the eavesdropper Eve to perform the powerful photon-number-splitting (PNS) attack. Recently, it was shown by Curty and L\"utkenhaus [Phys. Rev. A 69, 042321 (2004)] that the PNS attack is not always the optimal attack when two photons are present: if errors are present in the correlations Alice-Bob and if Eve cannot modify Bob's detection efficiency, Eve gains a larger amount of information using another attack based on a $2\ensuremath{\rightarrow}3$ cloning machine. In this work, we extend this analysis to all distances Alice-Bob. We identify a new incoherent $2\ensuremath{\rightarrow}3$ cloning attack which performs better than those described before. Using it, we confirm that, in the presence of errors, Eve's better strategy uses $2\ensuremath{\rightarrow}3$ cloning attacks instead of the PNS. However, this improvement is very small for the implementations of the Bennett-Brassard 1984 (BB84) protocol. Thus, the existence of these new attacks is conceptually interesting but basically does not change the value of the security parameters of BB84. The main results are valid both for Poissonian and sub-Poissonian sources.

arXiv:quant-ph/0408122•Physical Review A•Apr 11, 2005•48 citations

Security of quantum key distribution using weak coherent states with nonrandom phases

Hoi‐Kwong Lo, John P. Preskill

We prove the security of the Bennett-Brassard (BB84) quantum key distribution protocol in the case where the key information is encoded in the relative phase of a coherent-state reference pulse and a weak coherent-state signal pulse, as in some practical implementations of the protocol. In contrast to previous work, our proof applies even if the eavesdropper knows the phase of the reference pulse, provided that this phase is not modulated by the source, and even if the reference pulse is bright. The proof also applies to the case where the key is encoded in the photon polarization of a weak coherent-state pulse with a known phase, but only if the phases of the four BB84 signal states are judiciously chosen. The achievable key generation rate scales quadratically with the transmission in the channel, just as for BB84 with phase-randomized weak coherent-state signals (when decoy states are not used). For the case where the phase of the reference pulse is strongly modulated by the source, we exhibit an explicit attack that allows the eavesdropper to learn every key bit in a parameter regime where a protocol using phase-randomized signals is provably secure.

arXiv:quant-ph/0610203•Quantum Information and Computation•Jul 1, 2007•122 citations
The distinguishability of photons in nonoperational degrees of freedom compromises the unconditional security of quantum key distribution since an eavesdropper can improve attack strategies by exploiting this distinguishability. However, the optimal eavesdropping strategies in the presence of light-source side channels are not known. Here we provide several explicit attack strategies on the Bennett-Brassard 1984 (BB84) protocol with partially distinguishable photons. In particular, we consider the phase-covariant cloning attack, which is optimal in the absence of side channels, and show that there are even better strategies in the presence of side channels. The improved strategies exploit a measurement of the side-channel state followed by an attack on the signal photon. Our results explicitly demonstrate a reduction of the critical error rate and set an upper bound on the practical secret key rate.
Abstract Various imperfections of the hardware in quantum key distribution (QKD) lead to discrepancies between the theory and real-world devices. An eavesdropper can use these discrepancies to compromise the QKD security, thus legitimate sides need to estimate the influence of imperfections to prevent the loss of security. Here we investigate explicit eavesdropping attacks on passive side channels of the light source for a BB84 decoy states QKD protocol. We consider an optimal phase-covariant cloning attack, followed by unambiguous state discrimination and a joint measurement. Our calculations provide a hint that for state-of-the-art light sources the inherent presence of passive side channels still allows the protocol to be secure, albeit with the reduced secret key rates.
Abstract Passive light-source side channel in quantum key distribution (QKD) provides additional information to an eavesdropper via various non-operational degrees of freedom of the optical signal. The currently known explicit eavesdropping strategies aimed at additional information gain from the passive light-source side channel were limited to the attack on the side channel and the operational degree of freedom separately. As a result, their efficiency is far from being optimal. Here we provide the joint eavesdropping strategy on both operational degree of freedom and the passive light-source side channel of the generic form, and develop a method to calculate the corresponding secret key rate. In particular, we use the optimal phase-covariant cloning of the signal photon state followed by a joint collective measurement of the side channel and the operational degree of freedom. To estimate security under the explicit attack strategy, we develop an ‘‘effective error’’ method and demonstrate it on the BB84 protocol with decoy states. Our work extends the practical analysis of QKD protocols with the light-source side channels and can be used as a tool for the analysis of realistic eavesdropping methods.
Abstract Quantum key distribution (QKD) has a promise of unconditionally secure communication between the remote sides. The real-world QKD implementations, however, have numerous loopholes, both of engeneering and physical origin, and compromise the security promise. In this work, we investigate two attack strategies on the passive side channel of the light source along with the optimal cloning attack on the BB84 protocol with decoy-states. We calculate an upper bound of a secret key rate for these situations and show that the joint measurement attack on the signal and side channel degree of freedom is more effective to the adversary.
Abstract Quantum key distribution (QKD) promises unconditionally secure communication based on fundamental laws of physics, though practical realizations of QKD may have loopholes and side channels, thus their security can be compromised. We analyze the intercept-resend attack on the BB84 decoy-state protocol under the presence of a passive side channel of the light source. We derive an upper bound for the secret key rate and show that it does not significantly deviate from the ideal side-channel-free case.
In practical quantum cryptography, the source sometimes produces multiphoton pulses, thus enabling the eavesdropper Eve to perform the powerful photon-number-splitting (PNS) attack. Recently, it was shown by Curty and L\"utkenhaus [Phys. Rev. A 69, 042321 (2004)] that the PNS attack is not always the optimal attack when two photons are present: if errors are present in the correlations Alice-Bob and if Eve cannot modify Bob's detection efficiency, Eve gains a larger amount of information using another attack based on a $2\ensuremath{\rightarrow}3$ cloning machine. In this work, we extend this analysis to all distances Alice-Bob. We identify a new incoherent $2\ensuremath{\rightarrow}3$ cloning attack which performs better than those described before. Using it, we confirm that, in the presence of errors, Eve's better strategy uses $2\ensuremath{\rightarrow}3$ cloning attacks instead of the PNS. However, this improvement is very small for the implementations of the Bennett-Brassard 1984 (BB84) protocol. Thus, the existence of these new attacks is conceptually interesting but basically does not change the value of the security parameters of BB84. The main results are valid both for Poissonian and sub-Poissonian sources.
We prove the security of the Bennett-Brassard (BB84) quantum key distribution protocol in the case where the key information is encoded in the relative phase of a coherent-state reference pulse and a weak coherent-state signal pulse, as in some practical implementations of the protocol. In contrast to previous work, our proof applies even if the eavesdropper knows the phase of the reference pulse, provided that this phase is not modulated by the source, and even if the reference pulse is bright. The proof also applies to the case where the key is encoded in the photon polarization of a weak coherent-state pulse with a known phase, but only if the phases of the four BB84 signal states are judiciously chosen. The achievable key generation rate scales quadratically with the transmission in the channel, just as for BB84 with phase-randomized weak coherent-state signals (when decoy states are not used). For the case where the phase of the reference pulse is strongly modulated by the source, we exhibit an explicit attack that allows the eavesdropper to learn every key bit in a parameter regime where a protocol using phase-randomized signals is provably secure.