Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2605.22580 · Physical Review Applied

Practical Countermeasure Against Attacks Exploiting Detection Efficiency Mismatch in Quantum Key Distribution

Ben J. Taylor, Peter R. Smith, James F. Dynes, Robert I. Woodward, Marco Lucamarini, R. Mark Stevenson, Andrew J. Shields

quant-phSubmitted May 21, 2026• Announced May 22, 2026• 1 citation
arXivHTMLPDF

Abstract

We demonstrate a practical countermeasure against a well-known class of attacks on quantum key distribution (QKD) systems that exploit detection efficiency mismatch, where the receiver's detectors do not exhibit identical responses to incoming photons across all degrees of freedom. This class of quantum hacking strategies is broad and significantly includes the time-shift attack, which targets an arrival-time-dependent side channel at the receiver. The four-state countermeasure, previously only proven to be secure in theory, is implemented here on a GHz-clocked prototype QKD system and evaluated for its security and performance. We show that its presence enables almost complete recovery of the system's ideal secret key rate. Our results provide strong justification for adopting this countermeasure as a standard component in future scalable and practical QKD systems.

Journal reference
Phys. Rev. Applied 25, 054029, (2026)
DOI
10.1103/7zhl-5vv1
Comments
Copyright 2026 American Physical Society. This is the accepted manuscript of the following article: Ben J. Taylor, Peter R. Smith, James F. Dynes, Robert I. Woodward, Marco Lucamarini, R. Mark Stevenson, and Andrew J. Shields, 'Practical Countermeasure Against Attacks Exploiting Detection Efficiency Mismatch in Quantum Key Distribution', Phys. Rev. Applied 25, 054029, (2026)

Related papers

Security proof of practical quantum key distribution with detection-efficiency mismatch

Yanbao Zhang, Patrick J. Coles, Adam Winick +2 more

Quantum key distribution (QKD) protocols with threshold detectors are driving high-performance QKD demonstrations.The corresponding security proofs usually assume that all physical detectors have the same detection efficiency.However, the efficiencies of the detectors used in practice might show a mismatch depending on the manufacturing and setup of these detectors.A mismatch can also be induced as the different spatialtemporal modes of an incoming signal might couple differently to a detector.Here we develop a method that allows to provide security proofs without the usual assumption.Our method can take the detection-efficiency mismatch into account without having to restrict the attack strategy of the adversary.Especially, we do not rely on any photon-number cutoff of incoming signals such that our security proof is directly applicable to practical situations.We illustrate our method for a receiver that is designed for polarization encoding and is sensitive to a number of spatial-temporal modes.In our detector model, the absence of quantum interference between any pair of spatial-temporal modes is assumed.For a QKD protocol with this detector model, we can perform a security proof with characterized efficiency mismatch and without photon-number cutoff assumption.Our method also shows that in the absence of efficiency mismatch in our detector model, the key rate increases if the loss due to detection inefficiency is assumed to be outside of the adversary's control, as compared to the view where for a security proof this loss is attributed to the action of the adversary.

arXiv:2004.04383•Physical Review Research•Jan 25, 2021•50 citations

Detection Efficiency Mismatch and Finite-Key-Size Attacks on Practical Quantum Cryptography Systems

Poompong Chaiwongkhot

Security verification for the physical implementation of a cryptography system is an important step to ensure the security level promised by theory. As has been shown many times, any physical device has characteristics and behavior that deviate from theoretical expectations. Frequently, those lead to new security loopholes. \n \nThis thesis presents three experimental studies of attacks on quantum key distribution (QKD) systems. The first is the detection efficiency mismatch on free-space systems, which takes advantage of alignment imperfections in Bob's detector to control detection efficiencies. The experiment was done on a polarization-encoding free-space receiver to find the detection efficiencies of each detector for different spatial modes of an incoming photon. Those results were put into an optimization program, which modeled an intercept-and-resend attack on a non-decoy Bennett-Brassard 1984 (BB84) protocol. The result shows that an adversary is able to gain information about the key without being detected by Alice and Bob. The second study is an experimental test of reliability of a spatial filter (a pinhole), which is proposed as a countermeasure for the previous attack. The result shows that, by sending a high-power laser beam focused on the pinhole, the pinhole can be widened without affecting other components in the receiver. Thus, the ability to perform a spatial mode detection efficiency-mismatch attack is recovered. The last experiment is a demonstration of Eve's ability to force a commercial system to distill a key from a raw key of a short length, where the asymptotic assumption of security claimed by the manufacturer might not hold. It was shown that this could be done by inducing transmission loss in the channel at an appropriate time.

•Jan 14, 2016•0 citations

Security of quantum key distribution with detection-efficiency mismatch in the multiphoton case

Anton Sergeevich Trushechkin

Detection-efficiency mismatch is a common problem in practical quantum key distribution (QKD) systems. Current security proofs of QKD with detection-efficiency mismatch rely either on the assumption of the single-photon light source on the sender side or on the assumption of the single-photon input of the receiver side. These assumptions impose restrictions on the class of possible eavesdropping strategies. Here we present a rigorous security proof without these assumptions and, thus, solve this important problem and prove the security of QKD with detection-efficiency mismatch against general attacks (in the asymptotic regime). In particular, we adapt the decoy state method to the case of detection-efficiency mismatch.

arXiv:2004.07809•Quantum•Jul 22, 2022•22 citations

Safeguarding Quantum Key Distribution Through Detection Randomization

Thiago Ferreira da Silva, Gustavo Castro do Amaral, GUILHERME BARRETO XAVIER +2 more

We propose and experimentally demonstrate a scheme to render the detection apparatus of a quantum key distribution system immune to the main classes of hacking attacks in which the eavesdropper explores the back-door opened by the single-photon detectors. The countermeasure is based on the creation of modes that are not deterministically accessible to the eavesdropper. We experimentally show that the use of beamsplitters and extra single-photon detectors at the receiver station passively creates randomized spatial modes that erase any knowledge the eavesdropper might have gained when using bright-light faked states. Additionally, we experimentally show a detector-scrambling approach where the random selection of the detector used for each measurement-equivalent to an active spatial mode randomization-hashes out the side-channel open by the detection efficiency mismatch-based attacks. The proposed combined countermeasure represents a practical and readily implementable solution against the main classes of quantum hacking attacks aimed on the single-photon detector so far, without intervening on the inner working of the devices.

arXiv:1410.0701•IEEE Journal of Selected Topics in Quantum Electronics•Oct 22, 2014•18 citations

Security loophole in free-space quantum key distribution due to spatial-mode detector-efficiency mismatch

Shihan Sajeed, Poompong Chaiwongkhot, Jean-Philippe Bourgoin +3 more

In free-space quantum key distribution (QKD), the sensitivity of the receiver's detector channels may depend differently on the spatial mode of incoming photons. Consequently, an attacker can control the spatial mode to break security. We experimentally investigate a standard polarization QKD receiver and identify sources of efficiency mismatch in its optical scheme. We model a practical intercept-and-resend attack and show that it would break security in most situations. We show experimentally that adding an appropriately chosen spatial filter at the receiver's entrance may be an effective countermeasure.

arXiv:1502.02785•Physical Review A•Jun 2, 2015•101 citations

Side-Channel Attacks to QKD Systems and Mitigation Techniques

Christiano M. S. Nascimento, Guilherme P. Temporão

Quantum Key Distribution (QKD) promises information-theoretic security based on the fundamental laws of quantum mechanics. However, practical implementations deviate from idealized models and are therefore susceptible to side-channel attacks that exploit physical imperfections rather than theoretical vulnerabilities. Over the past two decades, a wide range of attacks have been demonstrated against QKD systems, including those targeting detectors, sources, timing information, power consumption, and electromagnetic emissions. This paper addresses a selection of a few side-channel attacks reported in the literature, classifying them according to their underlying physical mechanisms and attack strategies. We analyze their impact on the security of different QKD protocols and platforms, and highlight how experimental demonstrations have shaped the community's understanding of implementation security. In addition, we present and evaluate mitigation techniques proposed to date, such as device-independent and measurement-device-independent QKD, hardware countermeasures, monitoring strategies, and so on. We also identify open challenges and promising directions for enhancing the robustness of future quantum communication systems.

SBMO/IEEE MTT-S International Microwave and Optoelectronics Conference (IMOC)•Nov 9, 2025•0 citations
We demonstrate a practical countermeasure against a well-known class of attacks on quantum key distribution (QKD) systems that exploit detection efficiency mismatch, where the receiver's detectors do not exhibit identical responses to incoming photons across all degrees of freedom. This class of quantum hacking strategies is broad and significantly includes the time-shift attack, which targets an arrival-time-dependent side channel at the receiver. The four-state countermeasure, previously only proven to be secure in theory, is implemented here on a GHz-clocked prototype QKD system and evaluated for its security and performance. We show that its presence enables almost complete recovery of the system's ideal secret key rate. Our results provide strong justification for adopting this countermeasure as a standard component in future scalable and practical QKD systems.
Quantum key distribution (QKD) protocols with threshold detectors are driving high-performance QKD demonstrations.The corresponding security proofs usually assume that all physical detectors have the same detection efficiency.However, the efficiencies of the detectors used in practice might show a mismatch depending on the manufacturing and setup of these detectors.A mismatch can also be induced as the different spatialtemporal modes of an incoming signal might couple differently to a detector.Here we develop a method that allows to provide security proofs without the usual assumption.Our method can take the detection-efficiency mismatch into account without having to restrict the attack strategy of the adversary.Especially, we do not rely on any photon-number cutoff of incoming signals such that our security proof is directly applicable to practical situations.We illustrate our method for a receiver that is designed for polarization encoding and is sensitive to a number of spatial-temporal modes.In our detector model, the absence of quantum interference between any pair of spatial-temporal modes is assumed.For a QKD protocol with this detector model, we can perform a security proof with characterized efficiency mismatch and without photon-number cutoff assumption.Our method also shows that in the absence of efficiency mismatch in our detector model, the key rate increases if the loss due to detection inefficiency is assumed to be outside of the adversary's control, as compared to the view where for a security proof this loss is attributed to the action of the adversary.
Security verification for the physical implementation of a cryptography system is an important step to ensure the security level promised by theory. As has been shown many times, any physical device has characteristics and behavior that deviate from theoretical expectations. Frequently, those lead to new security loopholes. \n \nThis thesis presents three experimental studies of attacks on quantum key distribution (QKD) systems. The first is the detection efficiency mismatch on free-space systems, which takes advantage of alignment imperfections in Bob's detector to control detection efficiencies. The experiment was done on a polarization-encoding free-space receiver to find the detection efficiencies of each detector for different spatial modes of an incoming photon. Those results were put into an optimization program, which modeled an intercept-and-resend attack on a non-decoy Bennett-Brassard 1984 (BB84) protocol. The result shows that an adversary is able to gain information about the key without being detected by Alice and Bob. The second study is an experimental test of reliability of a spatial filter (a pinhole), which is proposed as a countermeasure for the previous attack. The result shows that, by sending a high-power laser beam focused on the pinhole, the pinhole can be widened without affecting other components in the receiver. Thus, the ability to perform a spatial mode detection efficiency-mismatch attack is recovered. The last experiment is a demonstration of Eve's ability to force a commercial system to distill a key from a raw key of a short length, where the asymptotic assumption of security claimed by the manufacturer might not hold. It was shown that this could be done by inducing transmission loss in the channel at an appropriate time.
Detection-efficiency mismatch is a common problem in practical quantum key distribution (QKD) systems. Current security proofs of QKD with detection-efficiency mismatch rely either on the assumption of the single-photon light source on the sender side or on the assumption of the single-photon input of the receiver side. These assumptions impose restrictions on the class of possible eavesdropping strategies. Here we present a rigorous security proof without these assumptions and, thus, solve this important problem and prove the security of QKD with detection-efficiency mismatch against general attacks (in the asymptotic regime). In particular, we adapt the decoy state method to the case of detection-efficiency mismatch.
We propose and experimentally demonstrate a scheme to render the detection apparatus of a quantum key distribution system immune to the main classes of hacking attacks in which the eavesdropper explores the back-door opened by the single-photon detectors. The countermeasure is based on the creation of modes that are not deterministically accessible to the eavesdropper. We experimentally show that the use of beamsplitters and extra single-photon detectors at the receiver station passively creates randomized spatial modes that erase any knowledge the eavesdropper might have gained when using bright-light faked states. Additionally, we experimentally show a detector-scrambling approach where the random selection of the detector used for each measurement-equivalent to an active spatial mode randomization-hashes out the side-channel open by the detection efficiency mismatch-based attacks. The proposed combined countermeasure represents a practical and readily implementable solution against the main classes of quantum hacking attacks aimed on the single-photon detector so far, without intervening on the inner working of the devices.
In free-space quantum key distribution (QKD), the sensitivity of the receiver's detector channels may depend differently on the spatial mode of incoming photons. Consequently, an attacker can control the spatial mode to break security. We experimentally investigate a standard polarization QKD receiver and identify sources of efficiency mismatch in its optical scheme. We model a practical intercept-and-resend attack and show that it would break security in most situations. We show experimentally that adding an appropriately chosen spatial filter at the receiver's entrance may be an effective countermeasure.
Quantum Key Distribution (QKD) promises information-theoretic security based on the fundamental laws of quantum mechanics. However, practical implementations deviate from idealized models and are therefore susceptible to side-channel attacks that exploit physical imperfections rather than theoretical vulnerabilities. Over the past two decades, a wide range of attacks have been demonstrated against QKD systems, including those targeting detectors, sources, timing information, power consumption, and electromagnetic emissions. This paper addresses a selection of a few side-channel attacks reported in the literature, classifying them according to their underlying physical mechanisms and attack strategies. We analyze their impact on the security of different QKD protocols and platforms, and highlight how experimental demonstrations have shaped the community's understanding of implementation security. In addition, we present and evaluate mitigation techniques proposed to date, such as device-independent and measurement-device-independent QKD, hardware countermeasures, monitoring strategies, and so on. We also identify open challenges and promising directions for enhancing the robustness of future quantum communication systems.