Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2310.20107 · Physical Review Applied

Preparing a commercial quantum key distribution system for certification against implementation loopholes

Vadim Makarov, Alexey Abrikosov, Poompong Chaiwongkhot, Aleksey K. Fedorov, Anqi Huang, Evgeniy O. Kiktenko, Mikhail Petrov, Anastasiya Ponosova, D. D. Ruzhitskaya, A. Tayduganov, Daniil Trefilov, Konstantin Zaitsev

Published Oct 28, 2024• 31 citations
arXivHTMLPDF

Abstract

A commercial quantum key distribution (QKD) system needs to be formally certified to enable its wide deployment. The certification should include the system's robustness against known implementation loopholes and attacks that exploit them. Here we ready a fiber-optic QKD system for this procedure. The system has a prepare-and-measure scheme with decoy-state BB84 protocol, polarization encoding, a qubit source rate of 312.5 MHz, and is manufactured by QRate. We detail its hardware and postprocessing. We analyze the hardware for known implementation loopholes, search for possible new loopholes, and discuss countermeasures. We then amend the system design to address the highest-risk loopholes identified. We also work out technical requirements on the certification lab and outline its possible structure.

DOI
10.1103/physrevapplied.22.044076

Related papers

Quantum key distribution: a survey on current vulnerability trends and potential implementation risks

Aitor Brazaola-Vicario, Alejandra Ruíz, Óscar Lage +2 more

Quantum key distribution (QKD) is a cryptographic technique that enables secure private key exchange between geographically distant parties over an insecure channel, protecting confidentiality against potential eavesdroppers. QKD has evolved significantly since its inception with the BB84 protocol proposed by Bennett and Brassard in 1984. Its theoretical foundation relies on quantum physics, particularly the uncertainty principle, the no-cloning theorem, and particle entanglement, which ensures its information-theoretic security when combined with the one-time-pad cryptographic algorithm. However, certain security loopholes persist in terms of practical implementation in commercial devices. Some vulnerabilities are associated with side-channel vectors linked to commonly used optical subcomponents, while others are more related to how existing protocols handle encoding and communication pipelines. In this work, we aim to comprehensively study the current state of security loopholes affecting QKD technology in commercial devices. We also provide a concise overview of the existing types of QKD implementations. Additionally, we offer insights into current trends and vulnerability countermeasures, paving the way for future research and novel mechanisms to enhance the implementation security of commercial QKD devices.

Optics Continuum•Jul 22, 2024•29 citations

A rigorous and complete security proof of decoy-state BB84 quantum key distribution

Devashish Tupkary, Shlok Nahar, Amir Arqand +2 more

We present a rigorous and complete security proof of the decoy-state BB84 quantum key distribution (QKD) protocol. Our analysis aims to achieve a high standard of mathematical rigour and completeness, thereby providing the necessary foundation for certification and standardization efforts. Beyond establishing the security of a specific protocol, this work develops a general and modular framework that can be readily adapted to a broad class of QKD protocols, including both prepare-and-measure and entanglement-based variants. Our framework unifies all major ingredients required for the analysis of realistic QKD protocols, including the analysis of classical authentication and classical processing, source-replacement schemes, finite-size analysis, source maps, squashing maps, and decoy-state techniques. In doing so, this work consolidates a diverse range of techniques scattered across the QKD literature into a unified formalism, representing a general and rigorous treatment of QKD security. Finally, it outlines a clear path towards incorporating practical imperfections within the same framework, thereby laying the groundwork for addressing implementation security in future analysis.

quant-pharXiv:2601.18035•Jan 27, 2026•0 citations

Experimental demonstration of polarization-based decoy-state BB84 quantum key distribution utilizing a single laser and a single detector

Alfonso Tello Castillo, Cameron Simmons, Ross J. Donaldson

As quantum key distribution progresses into commercial products and services, there is growing interest in technological solutions that improve performance and/or reduce costs. We present an experimental demonstration of the polarization-based three-level decoy-state BB84 quantum key distribution (QKD) protocol, at a clock frequency of 50 MHz, that relies on fewer resources at the receiver and increases robustness to side-channel attacks for both the transmitter and receiver. A single-laser source and cascade of electro-optic modulators provide the four polarization states, while a photonic recombiner with time-multiplexed inputs enables detection with a single detector.

Optics Letters•Jan 6, 2025•5 citations

Deployment-Ready Quantum Key Distribution Over a Classical Network Infrastructure in Padua

Marco Avesani, Giulio Foletto, Matteo Padovan +13 more

Current technological progress is driving Quantum Key Distribution towards a commercial and worldwide scale expansion. Its capability to deliver secure communication regardless of the computational power of the attackers will be a fundamental feature in the next generations of telecommunication networks. Nevertheless, demonstrations of QKD implementation in a real operating scenario and their coexistence with the classical telecom infrastructure are of fundamental importance for reliable exploitation. Here we present a Quantum Key Distribution application implemented over a classical fiber-based infrastructure. We exploit a 50 MHz source at 1550 nm, a single 13 km-long fiber cable for both the quantum and the classical channel, and a simplified receiver scheme with just one single-photon detector. In this way, we achieve an error rate of approximately 2% and a secret key rate of about 1.7 kbps, thus demonstrating the feasibility of low-cost and ready-to-use Quantum Key Distribution systems compatible with standard classical infrastructure.

arXiv:2109.13558•Journal of Lightwave Technology•Nov 24, 2021•1 citation

Deployment-ready quantum key distribution over a classical network infrastructure in Padua

Marco Avesani, Giulio Foletto, Matteo Padovan +13 more

Current technological progress is driving Quantum Key Distribution towards a commercial and worldwide scale expansion. Its capability to deliver secure communication regardless of the computational power of the attackers will be a fundamental feature in the next generations of telecommunication networks. Nevertheless, demonstrations of QKD implementation in a real operating scenario and their coexistence with the classical telecom infrastructure are of fundamental importance for reliable exploitation. Here we present a Quantum Key Distribution application implemented over a classical fiber-based infrastructure. We exploit a 50 MHz source at 1550 nm, a single 13 km-long fiber cable for both the quantum and the classical channel, and a simplified receiver scheme with just one single-photon detector. In this way, we achieve an error rate of approximately 2% and a secret key rate of about 1.7 kbps, thus demonstrating the feasibility of low-cost and ready-to-use Quantum Key Distribution systems compatible with standard classical infrastructure.

•Jan 1, 2022•34 citations

Implementation Security Certification of Decoy‐BB84 Quantum Key Distribution Systems

Akihisa Tomita

Abstract One of the most important obstacles for the social deployment of Quantum Key Distribution (QKD) systems is the lack of standards for security certification. Proper selection of application will circumvent other obstacles, such as cost, key generation distance, and rate. Nevertheless, security certification of real systems, or “implementation security certification” is indispensable. Such certification should be clear and tractable for non‐experts and should be performed with standardized characterization methods. Otherwise, the potential users cannot adopt the QKD system with confidence, because the highest level of security is what QKD appeals. This report discusses the process of the implementation security certification and the requirements for device characterization. It also presents several case studies on the requirements and experimental characterization of QKD devices for the security certification.

Advanced Quantum Technologies•May 14, 2019•11 citations
A commercial quantum key distribution (QKD) system needs to be formally certified to enable its wide deployment. The certification should include the system's robustness against known implementation loopholes and attacks that exploit them. Here we ready a fiber-optic QKD system for this procedure. The system has a prepare-and-measure scheme with decoy-state BB84 protocol, polarization encoding, a qubit source rate of 312.5 MHz, and is manufactured by QRate. We detail its hardware and postprocessing. We analyze the hardware for known implementation loopholes, search for possible new loopholes, and discuss countermeasures. We then amend the system design to address the highest-risk loopholes identified. We also work out technical requirements on the certification lab and outline its possible structure.
Quantum key distribution (QKD) is a cryptographic technique that enables secure private key exchange between geographically distant parties over an insecure channel, protecting confidentiality against potential eavesdroppers. QKD has evolved significantly since its inception with the BB84 protocol proposed by Bennett and Brassard in 1984. Its theoretical foundation relies on quantum physics, particularly the uncertainty principle, the no-cloning theorem, and particle entanglement, which ensures its information-theoretic security when combined with the one-time-pad cryptographic algorithm. However, certain security loopholes persist in terms of practical implementation in commercial devices. Some vulnerabilities are associated with side-channel vectors linked to commonly used optical subcomponents, while others are more related to how existing protocols handle encoding and communication pipelines. In this work, we aim to comprehensively study the current state of security loopholes affecting QKD technology in commercial devices. We also provide a concise overview of the existing types of QKD implementations. Additionally, we offer insights into current trends and vulnerability countermeasures, paving the way for future research and novel mechanisms to enhance the implementation security of commercial QKD devices.
We present a rigorous and complete security proof of the decoy-state BB84 quantum key distribution (QKD) protocol. Our analysis aims to achieve a high standard of mathematical rigour and completeness, thereby providing the necessary foundation for certification and standardization efforts. Beyond establishing the security of a specific protocol, this work develops a general and modular framework that can be readily adapted to a broad class of QKD protocols, including both prepare-and-measure and entanglement-based variants. Our framework unifies all major ingredients required for the analysis of realistic QKD protocols, including the analysis of classical authentication and classical processing, source-replacement schemes, finite-size analysis, source maps, squashing maps, and decoy-state techniques. In doing so, this work consolidates a diverse range of techniques scattered across the QKD literature into a unified formalism, representing a general and rigorous treatment of QKD security. Finally, it outlines a clear path towards incorporating practical imperfections within the same framework, thereby laying the groundwork for addressing implementation security in future analysis.
As quantum key distribution progresses into commercial products and services, there is growing interest in technological solutions that improve performance and/or reduce costs. We present an experimental demonstration of the polarization-based three-level decoy-state BB84 quantum key distribution (QKD) protocol, at a clock frequency of 50 MHz, that relies on fewer resources at the receiver and increases robustness to side-channel attacks for both the transmitter and receiver. A single-laser source and cascade of electro-optic modulators provide the four polarization states, while a photonic recombiner with time-multiplexed inputs enables detection with a single detector.
Current technological progress is driving Quantum Key Distribution towards a commercial and worldwide scale expansion. Its capability to deliver secure communication regardless of the computational power of the attackers will be a fundamental feature in the next generations of telecommunication networks. Nevertheless, demonstrations of QKD implementation in a real operating scenario and their coexistence with the classical telecom infrastructure are of fundamental importance for reliable exploitation. Here we present a Quantum Key Distribution application implemented over a classical fiber-based infrastructure. We exploit a 50 MHz source at 1550 nm, a single 13 km-long fiber cable for both the quantum and the classical channel, and a simplified receiver scheme with just one single-photon detector. In this way, we achieve an error rate of approximately 2% and a secret key rate of about 1.7 kbps, thus demonstrating the feasibility of low-cost and ready-to-use Quantum Key Distribution systems compatible with standard classical infrastructure.
Current technological progress is driving Quantum Key Distribution towards a commercial and worldwide scale expansion. Its capability to deliver secure communication regardless of the computational power of the attackers will be a fundamental feature in the next generations of telecommunication networks. Nevertheless, demonstrations of QKD implementation in a real operating scenario and their coexistence with the classical telecom infrastructure are of fundamental importance for reliable exploitation. Here we present a Quantum Key Distribution application implemented over a classical fiber-based infrastructure. We exploit a 50 MHz source at 1550 nm, a single 13 km-long fiber cable for both the quantum and the classical channel, and a simplified receiver scheme with just one single-photon detector. In this way, we achieve an error rate of approximately 2% and a secret key rate of about 1.7 kbps, thus demonstrating the feasibility of low-cost and ready-to-use Quantum Key Distribution systems compatible with standard classical infrastructure.
Abstract One of the most important obstacles for the social deployment of Quantum Key Distribution (QKD) systems is the lack of standards for security certification. Proper selection of application will circumvent other obstacles, such as cost, key generation distance, and rate. Nevertheless, security certification of real systems, or “implementation security certification” is indispensable. Such certification should be clear and tractable for non‐experts and should be performed with standardized characterization methods. Otherwise, the potential users cannot adopt the QKD system with confidence, because the highest level of security is what QKD appeals. This report discusses the process of the implementation security certification and the requirements for device characterization. It also presents several case studies on the requirements and experimental characterization of QKD devices for the security certification.