Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2607.01989

Hacking measurement-device-independent quantum key distribution

Konstantin Zaitsev, Polina Acheva

quant-phSubmitted Jul 2, 2026• Announced Jul 3, 2026• 0 citations
v1 · Jul 2, 2026v2 · Jul 4, 2026
arXivHTMLPDF

Abstract

The security of practical quantum key distribution (QKD) systems is fundamentally constrained by vulnerabilities of single-photon detectors. Measurement-device-independent quantum key distribution (MDI-QKD) was proposed to remove this limitation by allowing all measurements to be performed by a completely untrusted party, under the assumption that the measurement node can be treated as adversarial but does not compromise the security guarantees of the protocol. Here we show that this assumption is insufficient under realistic adversarial control of the measurement device. We present an attack in which an adversary exploits active control of the measurement node (Charlie) to obtain significant information about the secret key. The attack enables recovery of up to 70\% of the sifted key while introducing only 5.6\% quantum bit error rate. Unlike previously reported attacks targeting specific implementations of MDI-QKD, our results demonstrate a limitation of the standard security model underlying the protocol. These findings indicate that additional constraints on the measurement-device independence assumption, or refined security analyses incorporating stronger adversarial capabilities, are required to ensure the security of MDI-QKD in realistic scenarios.

Related papers

Quantum Hacking in the Age of Measurement-Device-Independent Quantum Cryptography

Anqi Huang

Cryptography is essential for secure communication in the digital era. Today, public-key cryptography is widely employed, and has provided an efficient method for encrypting content and ensuring both confidentiality and authenticity of electronic communications. However, the security of these systems is based on assumptions of computational hardness within the constraints of current computing capability. Thus, as quantum computing becomes a reality, public-key algorithms will be genuinely vulnerable to attack. By contrast, quantum cryptography, which is based on quantum physics instead of mathematical assumptions, is able to achieve information-theoretic security. \n \nAdvances in practical quantum cryptographic systems have not kept pace with theory, where an eavesdropper can relatively easily exploit loopholes in practical implementations to compromise theory-proved security. Bridging the gap between perfect theory and imperfect practice has become a priority for the growing field of quantum key distribution (QKD), which has strived to strengthen the practical security of QKD systems. Among all the countermeasures against quantum hacking, the measurement-device-independent (MDI) QKD protocol is promising because it is immune to all side-channel attacks on measurement devices. However, the MDI QKD protocol has some limitations that critically restrict its practical usefulness. Technically, the MDI scheme is not compatible with existing QKD systems, and produces a low key rate. In addition, the theory underlying MDI QKD security is based on the use of trusted source stations. Thus, this protocol is not a universal solution. This thesis further investigates the practical security of quantum cryptography in and beyond MDI quantum cryptography. \n \nTo overcome the technical limitations of MDI QKD, we first evaluate two other countermeasures against imperfect detections. The first is an industrial patch based on random detection efficiency, recently implemented by ID Quantique in the commercial Clavis2 QKD system. While powerful, experimental testing shows that this countermeasure is not sufficient to defeat the detector blinding attack. The second countermeasure aims to achieve a higher key rate than MDI QKD while maintaining the same security properties. However, our research shows that detector-device-independent (DDI) QKD security is not equivalent to that of MDI QKD and, further, that DDI QKD is insecure against detector side-channel attacks. \n \nWhile this initial work points to the superior performance of MDI QKD systems, core challenges remain. The fundamental security assumption adopted for MDI QKD systems, regarding the exclusive use of trustable source stations, cannot always be satisfied in practice. Our study revealed several side channels of source devices. The first is disclosed from the implementation of a decoy-state protocol, which is widely used in QKD systems with weak coherent sources. The pump-current-modulated intensities result in a timing mismatch between the signal and decoy states, violating the key assumption in the decoy-state QKD protocol. Moreover, an active Eve can break the basic assumption about photon numbers in the QKD system. In this work, we experimentally demonstrate a laser seeding attack on the laser source, which shows that Eve can increase the emission power of the laser diode. Furthermore, by shining a high-power laser into an optical attenuator, Eve can decrease the attenuation values. The increase in laser emission power and the decrease in attenuation leads to an increase in mean photon numbers. \n \nIn summary, MDI QKD is a milestone in quantum cryptography. However, this thesis indicates the importance of continued investigations into the practical security of MDI QKD. The analysis of practical security should be extended to other countermeasures against side-channel attacks and the source stations in MDI QKD systems. Practical quantum hacking and security analysis promote the development of quantum cryptographic systems, which will eventually achieve the unconditional security claimed in theory.

•Apr 13, 2018•3 citations

Quantification of the Impact of Photon Distinguishability on Measurement-Device- Independent Quantum Key Distribution

Garrett Simon, Blake Huff, William Meier +2 more

Measurement-Device-Independent Quantum Key Distribution (MDI-QKD) is a two-photon protocol devised to eliminate eavesdropping attacks that interrogate or control the detector in realized quantum key distribution systems. In MDI-QKD, the measurements are carried out by an untrusted third party, and the measurement results are announced openly. Knowledge or control of the measurement results gives the third party no information about the secret key. Error-free implementation of the MDI-QKD protocol requires the crypto-communicating parties, Alice and Bob, to independently prepare and transmit single photons that are physically indistinguishable, with the possible exception of their polarization states. In this paper, we apply the formalism of quantum optics and Monte Carlo simulations to quantify the impact of small errors in wavelength, bandwidth, polarization and timing between Alice's photons and Bob's photons on the MDI-QKD quantum bit error rate (QBER). Using published single-photon source characteristics from two-photon interference experiments as a test case, our simulations predict that the finite tolerances of these sources contribute (4.04+/-20/Nsifted) to the QBER in an MDI-QKD implementation generating an Nsifted-bit sifted key.

Electronics•Apr 5, 2018•4 citations

One-sided device-independent quantum key distribution for two independent parties

Jun Xin, Xiao-Ming Lu, Xingmin Li +1 more

Remote distribution of secret keys is a challenging task in quantum cryptography. A significant step in this direction is the measurement-device independence quantum key distribution (MDI-QKD). For two remote (or independent) parties Alice and Bob who initially no share secret information, the MDI-QKD enables them to share a secret key by the measurement of an untrusted relay. Unfortunately, the MDI-QKD yields the assumption that the devices of both Alice and Bob have to be trusted. Here, we show that QKD between two independent parties can also be realized even if the device of either Alice or Bob is untrusted. We tackle the problem by resorting to the recently developed one-sided device-independent QKD protocol. We derive conditions on the extracted secret key to be unconditionally secure against arbitary attacks in the limit of asymptotic keys. In the presence of Gaussian states and measurements, we theoretically demonstrate our scheme is feasible, which could be an attractive candidate for long distance secret communication.

Optics Express•Mar 27, 2020•14 citations

DGL22: A practical Quantum key distribution

Mohammed Aldarwbi, Ali Akbar Ghorbani, Arash Habibi Lashkari

Abstract Quantum key distribution (QKD) protocols are unconditionally secure, providing that quantum devices are truthful. Device-independent quantum key distribution (DI-QKD) protocols offer the prospect of distributing secret keys with minimal assumptions. The DI-QKD protocols are hard to implement using the current technologies as they require all the quantum devices to be uncharacterized. Measurement device independent quantum key distribution (MDI-QKD) protocols assume that the measurement devices are not truthful; the adversary might make them. MDI-QKD is secure but more challenging to implement. Receiver-device-independent quantum key distribution (RDI-QKD) protocols assume that the receiver's measurement devices can be viewed as a black box while the sender's device can be trusted. RDI-QKD relies on reasonable assumptions that make it easy to implement using the current state-of-the-art technology. We propose an RDI-QKD protocol, called DGL22. DGL22 is secure against all known attacks that are allowed by quantum mechanics. DGL22 provides several benefits over previous protocols, including the capability to attain high communication and sifting efficiency.

•Oct 25, 2022•0 citations

Measurement-device-independent quantum key distribution with insecure sources

Hua-Jian Ding, Xingyu Zhou, Chunhui Zhang +2 more

Measurement-device-independent quantum key distribution (MDI-QKD) can remove all detection side channels but still makes additional assumptions on sources that can be compromised through uncharacterized side channels in practice. Here, we combine a recently proposed reference technique to prove the security of MDI-QKD against possible source imperfections and/or side channels. This requires some reference states and an upper bound on the parameter that describes the quality of the sources. With this formalism we investigate the asymptotic performance of single-photon sources, and the results show that the side channels have a great impact on the key rates.

arXiv:2107.07803•Optics Letters•Dec 15, 2021•12 citations

Continuous-variable measurement-device-independent quantum key distribution with source-intensity errors

Pu Wang, Xuyang Wang, Yongmin Li

Continuous-variable measurement-device-independent quantum key distribution (CV-MDI-QKD) is immune to all detector side channel attacks, however its security requires trusted sources. We investigate the effects of source intensity errors, the most crucial source error, on the security of CV-MDI-QKD protocol with Gaussian-modulated coherent states. We establish a general source intensity errors model and derive the secret key rate based on different assumptions on the abilities of legal parties Alice and Bob. To avoid the adverse effects of the sources' intensity errors on CV-MDI-QKD, we present different data-processing schemes. We also assess the security of the protocol against collective Gaussian attacks in the finite-size scenario with composable security. Taking source intensity errors into consideration, we achieve improved security compared to previous demonstrations. Our results will provide a useful reference for practical implementations of CV-MDI-QKD.

Physical Review A•Aug 10, 2020•11 citations
The security of practical quantum key distribution (QKD) systems is fundamentally constrained by vulnerabilities of single-photon detectors. Measurement-device-independent quantum key distribution (MDI-QKD) was proposed to remove this limitation by allowing all measurements to be performed by a completely untrusted party, under the assumption that the measurement node can be treated as adversarial but does not compromise the security guarantees of the protocol.
Here we show that this assumption is insufficient under realistic adversarial control of the measurement device. We present an attack in which an adversary exploits active control of the measurement node (Charlie) to obtain significant information about the secret key. The attack enables recovery of up to 70% of the sifted key while introducing only 5.6% quantum bit error rate. Unlike previously reported attacks targeting specific implementations of MDI-QKD, our results demonstrate a limitation of the standard security model underlying the protocol.
These findings indicate that additional constraints on the measurement-device independence assumption, or refined security analyses incorporating stronger adversarial capabilities, are required to ensure the security of MDI-QKD in realistic scenarios.
Cryptography is essential for secure communication in the digital era. Today, public-key cryptography is widely employed, and has provided an efficient method for encrypting content and ensuring both confidentiality and authenticity of electronic communications. However, the security of these systems is based on assumptions of computational hardness within the constraints of current computing capability. Thus, as quantum computing becomes a reality, public-key algorithms will be genuinely vulnerable to attack. By contrast, quantum cryptography, which is based on quantum physics instead of mathematical assumptions, is able to achieve information-theoretic security. \n \nAdvances in practical quantum cryptographic systems have not kept pace with theory, where an eavesdropper can relatively easily exploit loopholes in practical implementations to compromise theory-proved security. Bridging the gap between perfect theory and imperfect practice has become a priority for the growing field of quantum key distribution (QKD), which has strived to strengthen the practical security of QKD systems. Among all the countermeasures against quantum hacking, the measurement-device-independent (MDI) QKD protocol is promising because it is immune to all side-channel attacks on measurement devices. However, the MDI QKD protocol has some limitations that critically restrict its practical usefulness. Technically, the MDI scheme is not compatible with existing QKD systems, and produces a low key rate. In addition, the theory underlying MDI QKD security is based on the use of trusted source stations. Thus, this protocol is not a universal solution. This thesis further investigates the practical security of quantum cryptography in and beyond MDI quantum cryptography. \n \nTo overcome the technical limitations of MDI QKD, we first evaluate two other countermeasures against imperfect detections. The first is an industrial patch based on random detection efficiency, recently implemented by ID Quantique in the commercial Clavis2 QKD system. While powerful, experimental testing shows that this countermeasure is not sufficient to defeat the detector blinding attack. The second countermeasure aims to achieve a higher key rate than MDI QKD while maintaining the same security properties. However, our research shows that detector-device-independent (DDI) QKD security is not equivalent to that of MDI QKD and, further, that DDI QKD is insecure against detector side-channel attacks. \n \nWhile this initial work points to the superior performance of MDI QKD systems, core challenges remain. The fundamental security assumption adopted for MDI QKD systems, regarding the exclusive use of trustable source stations, cannot always be satisfied in practice. Our study revealed several side channels of source devices. The first is disclosed from the implementation of a decoy-state protocol, which is widely used in QKD systems with weak coherent sources. The pump-current-modulated intensities result in a timing mismatch between the signal and decoy states, violating the key assumption in the decoy-state QKD protocol. Moreover, an active Eve can break the basic assumption about photon numbers in the QKD system. In this work, we experimentally demonstrate a laser seeding attack on the laser source, which shows that Eve can increase the emission power of the laser diode. Furthermore, by shining a high-power laser into an optical attenuator, Eve can decrease the attenuation values. The increase in laser emission power and the decrease in attenuation leads to an increase in mean photon numbers. \n \nIn summary, MDI QKD is a milestone in quantum cryptography. However, this thesis indicates the importance of continued investigations into the practical security of MDI QKD. The analysis of practical security should be extended to other countermeasures against side-channel attacks and the source stations in MDI QKD systems. Practical quantum hacking and security analysis promote the development of quantum cryptographic systems, which will eventually achieve the unconditional security claimed in theory.
Measurement-Device-Independent Quantum Key Distribution (MDI-QKD) is a two-photon protocol devised to eliminate eavesdropping attacks that interrogate or control the detector in realized quantum key distribution systems. In MDI-QKD, the measurements are carried out by an untrusted third party, and the measurement results are announced openly. Knowledge or control of the measurement results gives the third party no information about the secret key. Error-free implementation of the MDI-QKD protocol requires the crypto-communicating parties, Alice and Bob, to independently prepare and transmit single photons that are physically indistinguishable, with the possible exception of their polarization states. In this paper, we apply the formalism of quantum optics and Monte Carlo simulations to quantify the impact of small errors in wavelength, bandwidth, polarization and timing between Alice's photons and Bob's photons on the MDI-QKD quantum bit error rate (QBER). Using published single-photon source characteristics from two-photon interference experiments as a test case, our simulations predict that the finite tolerances of these sources contribute (4.04+/-20/Nsifted) to the QBER in an MDI-QKD implementation generating an Nsifted-bit sifted key.
Remote distribution of secret keys is a challenging task in quantum cryptography. A significant step in this direction is the measurement-device independence quantum key distribution (MDI-QKD). For two remote (or independent) parties Alice and Bob who initially no share secret information, the MDI-QKD enables them to share a secret key by the measurement of an untrusted relay. Unfortunately, the MDI-QKD yields the assumption that the devices of both Alice and Bob have to be trusted. Here, we show that QKD between two independent parties can also be realized even if the device of either Alice or Bob is untrusted. We tackle the problem by resorting to the recently developed one-sided device-independent QKD protocol. We derive conditions on the extracted secret key to be unconditionally secure against arbitary attacks in the limit of asymptotic keys. In the presence of Gaussian states and measurements, we theoretically demonstrate our scheme is feasible, which could be an attractive candidate for long distance secret communication.
Abstract Quantum key distribution (QKD) protocols are unconditionally secure, providing that quantum devices are truthful. Device-independent quantum key distribution (DI-QKD) protocols offer the prospect of distributing secret keys with minimal assumptions. The DI-QKD protocols are hard to implement using the current technologies as they require all the quantum devices to be uncharacterized. Measurement device independent quantum key distribution (MDI-QKD) protocols assume that the measurement devices are not truthful; the adversary might make them. MDI-QKD is secure but more challenging to implement. Receiver-device-independent quantum key distribution (RDI-QKD) protocols assume that the receiver's measurement devices can be viewed as a black box while the sender's device can be trusted. RDI-QKD relies on reasonable assumptions that make it easy to implement using the current state-of-the-art technology. We propose an RDI-QKD protocol, called DGL22. DGL22 is secure against all known attacks that are allowed by quantum mechanics. DGL22 provides several benefits over previous protocols, including the capability to attain high communication and sifting efficiency.
Measurement-device-independent quantum key distribution (MDI-QKD) can remove all detection side channels but still makes additional assumptions on sources that can be compromised through uncharacterized side channels in practice. Here, we combine a recently proposed reference technique to prove the security of MDI-QKD against possible source imperfections and/or side channels. This requires some reference states and an upper bound on the parameter that describes the quality of the sources. With this formalism we investigate the asymptotic performance of single-photon sources, and the results show that the side channels have a great impact on the key rates.
Continuous-variable measurement-device-independent quantum key distribution (CV-MDI-QKD) is immune to all detector side channel attacks, however its security requires trusted sources. We investigate the effects of source intensity errors, the most crucial source error, on the security of CV-MDI-QKD protocol with Gaussian-modulated coherent states. We establish a general source intensity errors model and derive the secret key rate based on different assumptions on the abilities of legal parties Alice and Bob. To avoid the adverse effects of the sources' intensity errors on CV-MDI-QKD, we present different data-processing schemes. We also assess the security of the protocol against collective Gaussian attacks in the finite-size scenario with composable security. Taking source intensity errors into consideration, we achieve improved security compared to previous demonstrations. Our results will provide a useful reference for practical implementations of CV-MDI-QKD.