The fundamental quantum mechanics prohibitions on the measurability of quantum states allow secure key distribution between spatially remote users to be performed. Experimental and commercial implementations of quantum cryptography systems, however, use components that exist at the current technology level, in particular, one-photon avalanche photodetectors. These detectors are subject to the blinding effect. It was shown that all the known basic quantum key distribution protocols and systems based on them are vulnerable to attacks with blinding of photodetectors. In such attacks, an eavesdropper knows all the key transferred, does not produce errors at the reception side, and remains undetected. Three protocols of quantum key distribution stable toward such attacks are suggested. The security of keys and detection of eavesdropping attempts are guaranteed by the internal structure of protocols themselves rather than additional technical improvements.
The fundamental quantum mechanics prohibitions on the measurability of quantum states allow secure key distribution between spatially remote users to be performed. Experimental and commercial implementations of quantum cryptography systems, however, use components that exist at the current technology level, in particular, one-photon avalanche photodetectors. These detectors are subject to the blinding effect. It was shown that all the known basic quantum key distribution protocols and systems based on them are vulnerable to attacks with blinding of photodetectors. In such attacks, an eavesdropper knows all the key transferred, does not produce errors at the reception side, and remains undetected. Three protocols of quantum key distribution stable toward such attacks are suggested. The security of keys and detection of eavesdropping attempts are guaranteed by the internal structure of protocols themselves rather than additional technical improvements.
Abstract An avalanche single-photon detector blinding attack is one of the methods for quantum hacking of quantum key distribution (QKD) systems. The attack was experimentally demonstrated for both phase- and polarization-encoded QKD systems. During this attack, an eavesdropper knows the entire key, does not produce errors and саnnot be detected. However, the phase encoding has neglected some significant features of the photocount statistics in the receiving party. It is shown in the paper at the level of fundamental principles that this attack changes the photocount statistics and leads to the detection of an eavesdropper. Expressions for the secret key length are obtained for this attack. This does not require any changes in the design and control electronics of the phase-encoded QKD system, and only changes in processing the results of registration of quantum states are sufficient. At the same time, the secret key vulnerability and compromise in polarization-encoded QKD systems is an existing fact rather than a potential menace.
Abstract Quantum key distribution (QKD) systems are open systems. Thus, an eavesdropper can actively influence the elements of the system through the communication line, altering their regular operation. One known attack is an attack with detector blinding. With such an attack, the eavesdropper can obtain the entire key and remain undetectable. The paper proposes a fundamentally new method of detecting and protecting quantum cryptography systems with phase coding against the attack with avalanche detector blinding. The proposed method is based on diverting a part of the input signal in the receiving terminal to bypass the interferometer and deliver it to the same avalanche detectors. Measuring the detector response in different time windows, both for the bypassed signal and the normal operation range, one can effectively identify the ongoing detector blinding attack. The method does not require radical changes in existing quantum cryptography systems and is quite universal, since it can be used for any phase-coded quantum key distribution protocol. The method provides a fundamental strategy of detecting and protecting against the attack at the level of the quantum key distribution protocol, and not at the level of technical ‘patches’.
Abstract Quantum key distribution (QKD), rooted in quantum mechanics, offers information-theoretic security. However, practical systems open security threats due to imperfections, notably bright-light blinding attacks targeting single-photon detectors. Here, we propose a concise, robust defense strategy for protecting single-photon detectors in QKD systems against blinding attacks. Our strategy uses a dual approach: detecting the bias current of the avalanche photodiode (APD) to defend against continuous-wave blinding attacks, and monitoring the avalanche amplitude to protect against pulsed blinding attacks. By integrating these two branches, the proposed solution effectively identifies and mitigates a wide range of bright light injection attempts, significantly enhancing the resilience of QKD systems against various bright-light blinding attacks. This method fortifies the safeguards of quantum communications and offers a crucial contribution to the field of quantum information security.
Abstract An attack exploiting single-photon avalanche diode (SPAD) blinding is one of the effective methods of ‘quantum hacking’ (Lydersen et al 2010 Nat. Photon . 4 686) or cracking quantum key distribution (QKD) systems. This attack was experimentally demonstrated for various QKD systems based on both phase and polarization coding. After such an attack, the eavesdropper knows the whole key, has not produced errors, and is not detected. So far this attack is the only one that was demonstrated in the explicit form on many real QKD systems. It is important that these demonstrations were actually performed in reality, i.e. not in speculations as some other attacks. Therefore, the presence of vulnerability in QKD systems based on polarization coding is an existing fact, rather than just a potential threat. It is often assumed that all systems regardless of the encoding method are vulnerable to such an attack. However, in the case of phase coding, some essential features of photocount statistics on the receiving side make a difference. In this Letter we prove that detector blinding attack, when acts on QKD systems with phase coding, leads to a distortion of the photocounts statistics so the eavesdropper may always be detected. Moreover, one does not need to change the design of the QKD system and/or its control electronics, as it is sufficient to amend only the processing of the quantum states registration results to make the system secure. At the same time, polarization coding-based systems remain vulnerable to such an attack and do not guarantee key security.
The peculiar properties of quantum mechanics enable possibilities not allowed by classical physics. In particular, two parties can generate a random, secret key at a distance, even though an eavesdropper can do anything permitted by the laws of physics. Measuring the quantum properties of the signals generating the key, would ultimately change them, and thus reveal the eavesdropper’s presence. This exchange of a random, secret key is known as quantum cryptography.\n\nQuantum cryptography can be, and has been proven unconditionally secure using perfect devices. However, when quantum cryptography is implemented, one must use components available with current technology. These are usually imperfect. Although the security of quantum cryptography has been proven for components with certain imperfections, the question remains: can quantum cryptography be implemented in a provable, unconditionally secure way, using components available with current technology? This thesis contains both a theoretical, and an experimental contribution to the answer of this question. On the experimental side, components used in, and complete quantum cryptography systems have been carefully examined for security loopholes. In particular, it turned out that two commercial quantum cryptography systems contained loopholes, which would allow an eavesdropper to capture the full secret key, without exposing her presence. Furthermore, this detector control attack could be implemented with current technology. The attack is applicable against a variety of quantum cryptography implementations and protocols.\n\nThe theoretical contribution consists of security proofs for quantum cryptography in a very general setting. Precisely, the security is proven with arbitrary individual imperfections in the source and detectors. These proofs should make it possible to use a wide array of imperfect devices in implementations of quantum cryptography.\n\nFinally, a secure detection scheme is proposed, immune to the detector control attack and compatible with those security proofs. Therefore, if this scheme is implemented correctly, it offers provable security.
In real fiber-optic quantum cryptography systems, the avalanche photodiodes are not perfect, the source of quantum states is not a single-photon one, and the communication channel is lossy. For these reasons, key distribution is impossible under certain conditions for the system parameters. A simple analysis is performed to find relations between the parameters of real cryptography systems and the length of the quantum channel that guarantee secure quantum key distribution when the eavesdropper’s capabilities are limited only by fundamental laws of quantum mechanics while the devices employed by the legitimate users are based on current technologies. Critical values are determined for the rate of secure real-time key generation that can be reached under the current technology level. Calculations show that the upper bound on channel length can be as high as 300 km for imperfect photodetectors (avalanche photodiodes) with present-day quantum efficiency (η ≈ 20%) and dark count probability (p dark ∼ 10−7).