Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2305.08148

Side-channel-secure quantum key distribution

Cong Jiang, Hu, Xiao-Long, Zong‐Wen Yu, Xiang‐Bin Wang

Published May 14, 2023• 0 citations
arXivHTMLPDF

Abstract

We present a result of side-channel-secure (SCS) quantum key distribution (QKD) under fully realistic conditions. Our result is not only measurement-device independent but also effective with imperfect (and unstable) source devices including imperfect vacuum and imperfect coherent-state source. Applying the virtual mapping idea, we present a general security proof under whatever out-side-lab attack, including whatever side-channel coherent attack. As a byproduct, we also present an improved method for SCS protocols which can raise the key rate by 1-2 orders of magnitude. Using these results, we obtain a non-asymptotic key rate which is instantly useful with full realistic conditions.

DOI
10.48550/arxiv.2305.08148

Related papers

Side-Channel-Secure Quantum Key Distribution with Imperfect Vacuum Sources

Cong Jiang, Zong‐Wen Yu, Xiao-Long Hu +1 more

The side-channel-secure (SCS) quantum key distribution (QKD), SCS QKD has attracted much attention due to its higher security compared to the measurement-device-independent protocols. It is not only measurement-device-independent secure, but also secure against source-state side channels provided that Eve has no access to Alice's or Bob's setups inside their labs. In the original protocol for SCS QKD, the side channels and the intensities of the coherent sources are allowed to be different in different time windows, but the vacuum sources of Alice and Bob have to be perfect, which is impossible in practice due to the finite extinction ratio of the intensity modulators. In this paper, we present a method that does not need the perfect vacuum source requested by the original protocol and assures the result as secure as the original protocol. With the upper bounds of the amplitudes of the nonvacuum part of the sources, the secure key rate of our SCS QKD protocol here with imperfect vacuum and unstable sources can be calculated. The numerical results show that, the secure distance of the SCS QKD protocol exceeds 150 km, provided that the intensity of the imperfect vacuum source is less than ${10}^{\ensuremath{-}8}$, which can be achieved in the experiment by a two-stage intensity modulator, where we also show that the active odd-parity pairing method and standard pairing method using two-way classical communication can be applied to the SCS QKD protocol to improve the key rate. Given the side-channel security based on the existing technological level, this work makes it possible to realize side-channel-secure QKD with real devices.

Physical Review Applied•Jun 1, 2023•11 citations

Experimental side channel secure quantum key distribution under realistic conditions

Hao Dong, Cong Jiang, Di Ma +8 more

Quantum key distribution (QKD) theoretically provides unconditional security between remote parties. However, guaranteeing practical security through device characterization alone is challenging in real-world implementations due to the multidimensional spaces in which the devices may be operated. The side channel secure (SCS) QKD protocol, which only requires bounding the upper limits of the intensities for the two states, theoretically provides a rigorous solution to the challenge and achieves measurement-device-independent security in detection and security for whatever multidimensional side channel attack in the source. Here, we demonstrate a practical implementation of SCS-QKD, achieving a secure key rate of 6.67 kbps through a 50.5 km fiber and a maximum distribution distance of 101.1 km while accounting for finite-size effects. Our experiment also represents an approximately 40 times improvement over the previous experiment.

arXiv:2504.19242•Physical Review Research•Jan 23, 2026•2 citations

Side-channel security of practical quantum key distribution

Cong Jiang, Xiao-Long Hu, Zong‐Wen Yu +1 more

We present general security proof for quantum key distribution (QKD) with imperfect states in whole space including both the operational space and the other space (side-channel space). We show that in a protocol where Alice (Bob) uses two states, the secure key rate for a real protocol using imperfect (mixed) states is the same as that of a perfect protocol if the real protocol can be mapped from the perfect protocol. The calculation of the secure key rate for imperfect sources is reduced to the lower bound of projection probability to vacuum for each state. This paves the operable way to side-channel-secure QKD under more realistic conditions, including imperfections of whole-space states, mixed states, and finite data size. Taking the sending-or-not-sending encoding as an example in calculation, we obtain good key rates and long secure distance for QKD that is both measurement-device-independent and secure with imperfect whole-space source states. Published by the American Physical Society 2024

Physical Review Research•Mar 11, 2024•10 citations

Side-channel-free quantum key distribution with practical devices

Cong Jiang, Zong‐Wen Yu, Hu, Xiao-Long +1 more

Based on the idea that there is no side channel in the vacuum state, the side-channel-free quantum key distribution (SCFQKD) protocol was proposed, which is immune to all attacks in the source side-channel space and all attacks in the detectors. In the original SCFQKD protocol, an important assumption is that Alice and Bob can produce the perfect vacuum pulses. But due to the finite extinction ratio of the intensity modulators, the perfect vacuum pulse is impossible in practice. In this paper, we solve this problem and make the quantum key distribution side-channel secure with real source device which does not emit perfect vacuum pulses. Our conclusion only depends on the upper bounds of the intensities of the sources. No other assumptions such as stable sources and stable side channels are needed. The numerical results show that, comparing with the results of SCFQKD protocol with perfect vacuum sources, the key rates and secure distance are only slightly decreased if the upper bound of the intensity of the imperfect vacuum source is less than $10^{-8}$ which can be achieved in experiment by two-stage intensity modulator. We also show that the two-way classical communication can be used to the data post-processing of SCFQKD protocol to improve the key rate. Specially, the active odd-parity pairing method can improve the key rates in all distances by about two times and the secure distance by about 40 km. Give that the side channel security based on imperfect vacuum, this work makes it possible to realize side channel secure QKD with real devices.

arXiv:2205.08421•May 17, 2022•0 citations

The practical issues of side-channel-secure quantum key distribution

Cong Jiang, Hu, Xiao-Long, Zong‐Wen Yu +2 more

Quantum Key Distribution (QKD) leverages the principles of quantum mechanics to provide theoretically unconditional security for cryptographic key sharing. However, practical implementations remain vulnerable due to non-ideal devices and potential security loopholes at both the source and detection sides of QKD systems. The side-channel-secure (SCS) protocol addresses these challenges by encoding bits in vacuum and non-vacuum states and introducing a third-party measurement node, thereby repelling attacks targeting the detection side as well as external lab attacks on the source side. In this work, we consider the state-dependent correlated errors and Trojan-horse attack while preserving the SCS protocol's key advantage-specifically, requiring only upper bounds on intensities characterization without needing a full description of quantum states in infinite dimensions. Numerical results demonstrate that when the reflected light intensity from Trojan-horse attacks falls below $10^{-6}$, Eve can scarcely extract additional key information from the reflections. This work makes the SCS protocol more practical.

arXiv:2508.15197•Aug 21, 2025•0 citations

The finite key effect of side-channel-secure quantum key distribution beyond post-selection technique

Cong Jiang, Zong-Wen Yu, Xiang-Bin Wang

By applying the framework of entropic uncertainty relation (EUR) and the Quantum Leftover Hash Lemma (QLHL), we introduce a security-proof method for variable-length side-channel-secure (SCS) quantum key distribution (QKD) against coherent attacks. This method reframes composable security as a statistical fluctuation problem of phase errors, enabling direct proofs against coherent attacks through observables and virtual observables. It yields tight key rates for the SCS protocol and reduces pulse requirements by over two orders of magnitude compared to prior works that employ the post-selection technique. {Utilizing the characteristic of the SCS protocol that it has no untagged-bit bit-flip errors, we prove that the secure key length for the SCS protocol can be determined after Cascade error correction, using its actual parity disclosures. We also explain how the same argument extends to protocols with compatible bit-error-pattern and phase-error measurements.} We further identify sufficient conditions under which the final key length may be determined after error correction in a broader class of QKD protocols. Under the framework of EUR and QLHL, we clarify the applicability of several commonly used concentration bounds to variable-length QKD and the appropriate manner of their implementation. This work enhances the practical value of the SCS protocol and clarifies the security justification of key-rate formulas used in practical variable-length QKD implementations.

quant-pharXiv:2607.17465•Jul 21, 2026•0 citations
We present a result of side-channel-secure (SCS) quantum key distribution (QKD) under fully realistic conditions. Our result is not only measurement-device independent but also effective with imperfect (and unstable) source devices including imperfect vacuum and imperfect coherent-state source. Applying the virtual mapping idea, we present a general security proof under whatever out-side-lab attack, including whatever side-channel coherent attack. As a byproduct, we also present an improved method for SCS protocols which can raise the key rate by 1-2 orders of magnitude. Using these results, we obtain a non-asymptotic key rate which is instantly useful with full realistic conditions.
The side-channel-secure (SCS) quantum key distribution (QKD), SCS QKD has attracted much attention due to its higher security compared to the measurement-device-independent protocols. It is not only measurement-device-independent secure, but also secure against source-state side channels provided that Eve has no access to Alice's or Bob's setups inside their labs. In the original protocol for SCS QKD, the side channels and the intensities of the coherent sources are allowed to be different in different time windows, but the vacuum sources of Alice and Bob have to be perfect, which is impossible in practice due to the finite extinction ratio of the intensity modulators. In this paper, we present a method that does not need the perfect vacuum source requested by the original protocol and assures the result as secure as the original protocol. With the upper bounds of the amplitudes of the nonvacuum part of the sources, the secure key rate of our SCS QKD protocol here with imperfect vacuum and unstable sources can be calculated. The numerical results show that, the secure distance of the SCS QKD protocol exceeds 150 km, provided that the intensity of the imperfect vacuum source is less than ${10}^{\ensuremath{-}8}$, which can be achieved in the experiment by a two-stage intensity modulator, where we also show that the active odd-parity pairing method and standard pairing method using two-way classical communication can be applied to the SCS QKD protocol to improve the key rate. Given the side-channel security based on the existing technological level, this work makes it possible to realize side-channel-secure QKD with real devices.
Quantum key distribution (QKD) theoretically provides unconditional security between remote parties. However, guaranteeing practical security through device characterization alone is challenging in real-world implementations due to the multidimensional spaces in which the devices may be operated. The side channel secure (SCS) QKD protocol, which only requires bounding the upper limits of the intensities for the two states, theoretically provides a rigorous solution to the challenge and achieves measurement-device-independent security in detection and security for whatever multidimensional side channel attack in the source. Here, we demonstrate a practical implementation of SCS-QKD, achieving a secure key rate of 6.67 kbps through a 50.5 km fiber and a maximum distribution distance of 101.1 km while accounting for finite-size effects. Our experiment also represents an approximately 40 times improvement over the previous experiment.
We present general security proof for quantum key distribution (QKD) with imperfect states in whole space including both the operational space and the other space (side-channel space). We show that in a protocol where Alice (Bob) uses two states, the secure key rate for a real protocol using imperfect (mixed) states is the same as that of a perfect protocol if the real protocol can be mapped from the perfect protocol. The calculation of the secure key rate for imperfect sources is reduced to the lower bound of projection probability to vacuum for each state. This paves the operable way to side-channel-secure QKD under more realistic conditions, including imperfections of whole-space states, mixed states, and finite data size. Taking the sending-or-not-sending encoding as an example in calculation, we obtain good key rates and long secure distance for QKD that is both measurement-device-independent and secure with imperfect whole-space source states. Published by the American Physical Society 2024
Based on the idea that there is no side channel in the vacuum state, the side-channel-free quantum key distribution (SCFQKD) protocol was proposed, which is immune to all attacks in the source side-channel space and all attacks in the detectors. In the original SCFQKD protocol, an important assumption is that Alice and Bob can produce the perfect vacuum pulses. But due to the finite extinction ratio of the intensity modulators, the perfect vacuum pulse is impossible in practice. In this paper, we solve this problem and make the quantum key distribution side-channel secure with real source device which does not emit perfect vacuum pulses. Our conclusion only depends on the upper bounds of the intensities of the sources. No other assumptions such as stable sources and stable side channels are needed. The numerical results show that, comparing with the results of SCFQKD protocol with perfect vacuum sources, the key rates and secure distance are only slightly decreased if the upper bound of the intensity of the imperfect vacuum source is less than 10−810^{-8}10−8 which can be achieved in experiment by two-stage intensity modulator. We also show that the two-way classical communication can be used to the data post-processing of SCFQKD protocol to improve the key rate. Specially, the active odd-parity pairing method can improve the key rates in all distances by about two times and the secure distance by about 40 km. Give that the side channel security based on imperfect vacuum, this work makes it possible to realize side channel secure QKD with real devices.
Quantum Key Distribution (QKD) leverages the principles of quantum mechanics to provide theoretically unconditional security for cryptographic key sharing. However, practical implementations remain vulnerable due to non-ideal devices and potential security loopholes at both the source and detection sides of QKD systems. The side-channel-secure (SCS) protocol addresses these challenges by encoding bits in vacuum and non-vacuum states and introducing a third-party measurement node, thereby repelling attacks targeting the detection side as well as external lab attacks on the source side. In this work, we consider the state-dependent correlated errors and Trojan-horse attack while preserving the SCS protocol's key advantage-specifically, requiring only upper bounds on intensities characterization without needing a full description of quantum states in infinite dimensions. Numerical results demonstrate that when the reflected light intensity from Trojan-horse attacks falls below 10−610^{-6}10−6, Eve can scarcely extract additional key information from the reflections. This work makes the SCS protocol more practical.
By applying the framework of entropic uncertainty relation (EUR) and the Quantum Leftover Hash Lemma (QLHL), we introduce a security-proof method for variable-length side-channel-secure (SCS) quantum key distribution (QKD) against coherent attacks. This method reframes composable security as a statistical fluctuation problem of phase errors, enabling direct proofs against coherent attacks through observables and virtual observables. It yields tight key rates for the SCS protocol and reduces pulse requirements by over two orders of magnitude compared to prior works that employ the post-selection technique. {Utilizing the characteristic of the SCS protocol that it has no untagged-bit bit-flip errors, we prove that the secure key length for the SCS protocol can be determined after Cascade error correction, using its actual parity disclosures. We also explain how the same argument extends to protocols with compatible bit-error-pattern and phase-error measurements.} We further identify sufficient conditions under which the final key length may be determined after error correction in a broader class of QKD protocols. Under the framework of EUR and QLHL, we clarify the applicability of several commonly used concentration bounds to variable-length QKD and the appropriate manner of their implementation. This work enhances the practical value of the SCS protocol and clarifies the security justification of key-rate formulas used in practical variable-length QKD implementations.