Quantum key distribution (QKD) theoretically provides unconditional security between remote parties. However, guaranteeing practical security through device characterization alone is challenging in real-world implementations due to the multidimensional spaces in which the devices may be operated. The side channel secure (SCS) QKD protocol, which only requires bounding the upper limits of the intensities for the two states, theoretically provides a rigorous solution to the challenge and achieves measurement-device-independent security in detection and security for whatever multidimensional side channel attack in the source. Here, we demonstrate a practical implementation of SCS-QKD, achieving a secure key rate of 6.67 kbps through a 50.5 km fiber and a maximum distribution distance of 101.1 km while accounting for finite-size effects. Our experiment also represents an approximately 40 times improvement over the previous experiment.
Quantum key distribution (QKD) theoretically provides unconditional security between remote parties. However, guaranteeing practical security through device characterization alone is challenging in real-world implementations due to the multidimensional spaces in which the devices may be operated. The side channel secure (SCS) QKD protocol, which only requires bounding the upper limits of the intensities for the two states, theoretically provides a rigorous solution to the challenge and achieves measurement-device-independent security in detection and security for whatever multidimensional side channel attack in the source. Here, we demonstrate a practical implementation of SCS-QKD, achieving a secure key rate of 6.67 kbps through a 50.5 km fiber and a maximum distribution distance of 101.1 km while accounting for finite-size effects. Our experiment also represents an approximately 40 times improvement over the previous experiment.
Quantum key distribution (QKD) enables two remote parties to share encryption keys with information-theoretic security guaranteed by physical laws. Side-channel-secure QKD (SCS-QKD) has attracted considerable attention because it simultaneously removes source and detector side-channel vulnerabilities. Although a recent experiment demonstrated SCS-QKD over 50 km, practical implementation remains challenging due to imperfect vacuum preparation and finite-key constraints under coherent attacks. Here, following the theoretical framework of Jiang et al. [Phys. Rev. Res. 6, 013266 (2024)], we experimentally implement a practical SCS-QKD protocol using an imperfect whole-space source and rigorous finite-key analysis. Benefiting from a stable GHz-level system operating at 1.25 GHz, we extend the transmission distance to 200 km and achieve high secure key rates of 18.31 kbps, 2.55 kbps, and 196.03 bps at 100 km, 150 km, and 200 km, respectively. Our results establish a new distance record for SCS-QKD and demonstrate the feasibility of high-speed, long-distance, and practically secure quantum key distribution.
Quantum key distribution (QKD) enables two remote parties to share encryption keys with information-theoretic security guaranteed by physical laws. Side-channel-secure QKD (SCS-QKD) has attracted considerable attention because it simultaneously removes source and detector side-channel vulnerabilities. Although a recent experiment demonstrated SCS-QKD over 50 km, practical implementation remains challenging due to imperfect vacuum preparation and finite-key constraints under coherent attacks. Here, following the theoretical framework of Jiang et al. [Phys. Rev. Res. 6, 013266 (2024)], we experimentally implement a practical SCS-QKD protocol using an imperfect whole-space source and rigorous finite-key analysis. Benefiting from a stable GHz-level system operating at 1.25 GHz, we extend the transmission distance to 200 km and achieve high secure key rates of 18.31 kbps, 2.55 kbps, and 196.03 bps at 100 km, 150 km, and 200 km, respectively. Our results establish a new distance record for SCS-QKD and demonstrate the feasibility of high-speed, long-distance, and practically secure quantum key distribution.
We present a result of side-channel-secure (SCS) quantum key distribution (QKD) under fully realistic conditions. Our result is not only measurement-device independent but also effective with imperfect (and unstable) source devices including imperfect vacuum and imperfect coherent-state source. Applying the virtual mapping idea, we present a general security proof under whatever out-side-lab attack, including whatever side-channel coherent attack. As a byproduct, we also present an improved method for SCS protocols which can raise the key rate by 1-2 orders of magnitude. Using these results, we obtain a non-asymptotic key rate which is instantly useful with full realistic conditions.
The side-channel-secure (SCS) quantum key distribution (QKD), SCS QKD has attracted much attention due to its higher security compared to the measurement-device-independent protocols. It is not only measurement-device-independent secure, but also secure against source-state side channels provided that Eve has no access to Alice's or Bob's setups inside their labs. In the original protocol for SCS QKD, the side channels and the intensities of the coherent sources are allowed to be different in different time windows, but the vacuum sources of Alice and Bob have to be perfect, which is impossible in practice due to the finite extinction ratio of the intensity modulators. In this paper, we present a method that does not need the perfect vacuum source requested by the original protocol and assures the result as secure as the original protocol. With the upper bounds of the amplitudes of the nonvacuum part of the sources, the secure key rate of our SCS QKD protocol here with imperfect vacuum and unstable sources can be calculated. The numerical results show that, the secure distance of the SCS QKD protocol exceeds 150 km, provided that the intensity of the imperfect vacuum source is less than ${10}^{\ensuremath{-}8}$, which can be achieved in the experiment by a two-stage intensity modulator, where we also show that the active odd-parity pairing method and standard pairing method using two-way classical communication can be applied to the SCS QKD protocol to improve the key rate. Given the side-channel security based on the existing technological level, this work makes it possible to realize side-channel-secure QKD with real devices.
Quantum Key Distribution (QKD) leverages the principles of quantum mechanics to provide theoretically unconditional security for cryptographic key sharing. However, practical implementations remain vulnerable due to non-ideal devices and potential security loopholes at both the source and detection sides of QKD systems. The side-channel-secure (SCS) protocol addresses these challenges by encoding bits in vacuum and non-vacuum states and introducing a third-party measurement node, thereby repelling attacks targeting the detection side as well as external lab attacks on the source side. In this work, we consider the state-dependent correlated errors and Trojan-horse attack while preserving the SCS protocol's key advantage-specifically, requiring only upper bounds on intensities characterization without needing a full description of quantum states in infinite dimensions. Numerical results demonstrate that when the reflected light intensity from Trojan-horse attacks falls below 10−6, Eve can scarcely extract additional key information from the reflections. This work makes the SCS protocol more practical.
Based on the idea that there is no side channel in the vacuum state, the side-channel-free quantum key distribution (SCFQKD) protocol was proposed, which is immune to all attacks in the source side-channel space and all attacks in the detectors. In the original SCFQKD protocol, an important assumption is that Alice and Bob can produce the perfect vacuum pulses. But due to the finite extinction ratio of the intensity modulators, the perfect vacuum pulse is impossible in practice. In this paper, we solve this problem and make the quantum key distribution side-channel secure with real source device which does not emit perfect vacuum pulses. Our conclusion only depends on the upper bounds of the intensities of the sources. No other assumptions such as stable sources and stable side channels are needed. The numerical results show that, comparing with the results of SCFQKD protocol with perfect vacuum sources, the key rates and secure distance are only slightly decreased if the upper bound of the intensity of the imperfect vacuum source is less than 10−8 which can be achieved in experiment by two-stage intensity modulator. We also show that the two-way classical communication can be used to the data post-processing of SCFQKD protocol to improve the key rate. Specially, the active odd-parity pairing method can improve the key rates in all distances by about two times and the secure distance by about 40 km. Give that the side channel security based on imperfect vacuum, this work makes it possible to realize side channel secure QKD with real devices.