Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Conference on Lasers and Electro-Optics Europe & European Quantum Electronics Conference (CLEO/Europe-EQEC)

Calibration Attack and Defense in Continuous Variable Quantum Key Distribution

Agnes Ferenczi, Philippe Grangier, Frédéric Grosshans

Published Jun 1, 2007• 15 citations
Publisher

Abstract

Quantum continuous variables (CV) have been explored as an alternative to qubits for quantum key distribution (QKD). More specifically, protocols using coherent states and homodyne or heterodyne measurements have been proposed and experimentally demonstrated (Grosshans et al., 2003). Relying on technologies allowing much higher rates than allowed by the single photon detectors used in qubit based QKD, those protocols are the only ones which could allow key rates in the GHz range in the foreseeable future. Furthermore, their security proofs have recently been extendend to generic attacks in the case of gaussian modulation. However, to our knowledge, all security analyses up to know have implicitely assumed Bob's measurement setup to use a homo- or heterodyne detection with an external classical phase reference, while the experimental realizations use a lightbeam for this role. This beam doesn't carry any information useful to the spy, and any attack on its phase could equally be carried on the signal beam. However, the intensity of this beam is used in experimental implementations to calibrate the quantum noise level. This calibration is then used to determine the channel gain, which is an important parameter of Eve's attack. We show that this allows Eve to implement an intercepte resend attack forbiding QKD as soon as the losses are above 3dB. We also give simple countermeasures to this new class of attacks.

DOI
10.1109/cleoe-iqec.2007.4386772

Related papers

General treatment of Gaussian trusted noise in continuous variable quantum key distribution

Shinichiro Yamano, Takaya Matsuura, Yui Kuramochi +2 more

Continuous Variable (CV) quantum key distribution (QKD) is a promising candidate for practical implementations due to its compatibility with the existing communication technology. A trusted device scenario assuming that an adversary has no access to imperfections such as electronic noises in the detector is expected to provide significant improvement in the key rate, but such an endeavor so far was made separately for specific protocols and for specific proof techniques. Here, we develop a simple and general treatment that can incorporate the effects of Gaussian trusted noises for any protocol that uses homodyne/heterodyne measurements. In our method, a rescaling of the outcome of a noisy homodyne/heterodyne detector renders it equivalent to the outcome of a noiseless detector with a tiny additional loss, thanks to a noise-loss equivalence well-known in quantum optics. Since this method is independent of protocols and security proofs, it is applicable to Gaussian-modulation and discrete-modulation protocols, to the finite-size regime, and to any proof techniques developed so far and yet to be discovered as well.

arXiv:2305.17684•May 28, 2023•1 citation

Quantum hacking on a practical continuous-variable quantum cryptosystem by inserting an external light

Hao Qin, Rupesh Kumar, Romain Alléaume

We report here a new side channel attack on a practical continuous-variable (CV) quantum key distribution (QKD) system. Inspired by blinding attack in discrete-variable QKD, we formalize an attack strategy by inserting an external light into a CV QKD system implemented Gaussian-modulated coherent state protocol and show that our attack can compromise its practical security. In this attack, we concern imperfections of a balanced homodyne detector used in CV QKD. According to our analysis, if one inserts an external light into Bob’s signal port, due to the imperfect subtraction from the homodyne detector, the leakage of the external light contributes a displacement on the homodyne signal which causes detector electronics saturation. In consequence, Bob’s quadrature measurement is not linear with the quadrature sent by Alice. By considering such vulnerability, a potential Eve can launch a full intercept-resend attack meanwhile she inserts an external light into Bob’s signal port. By selecting proper properties of the external light, Eve actively controls the induced displacement value from the inserted light which results saturation of homodyne detection. In consequence, Eve can bias the excess noise due to the intercept-resend attack and the external light, such that Alice and Bob believe their excess noise estimation is below the null key threshold and they can still share a secret key. Our attack shows that the detector loopholes also exist in CV QKD, and it seems influence all the CV QKD systems using homodyne detection, since all the practical detectors have finite detection range.

Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE•Oct 13, 2015•5 citations

Quantum hacking: Saturation attack on practical continuous-variable quantum key distribution

Hao Qin, Rupesh Kumar, Romain Alléaume

We identify and study a security loophole in continuous-variable quantum key distribution (CVQKD) implementations, related to the imperfect linearity of the homodyne detector. By exploiting this loophole, we propose an active side-channel attack on the Gaussian-modulated coherent-state CVQKD protocol combining an intercept-resend attack with an induced saturation of the homodyne detection on the receiver side (Bob). We show that an attacker can bias the excess noise estimation by displacing the quadratures of the coherent states received by Bob. We propose a saturation model that matches experimental measurements on the homodyne detection and use this model to study the impact of the saturation attack on parameter estimation in CVQKD. We demonstrate that this attack can bias the excess noise estimation beyond the null key threshold for any system parameter, thus leading to a full security break. If we consider an additional criterion imposing that the channel transmission estimation should not be affected by the attack, then the saturation attack can only be launched if the attenuation on the quantum channel is sufficient, corresponding to attenuations larger than approximately 6 dB. We moreover discuss the possible countermeasures against the saturation attack and propose a countermeasure based on Gaussian postselection that can be implemented by classical postprocessing and may allow one to distill the secret key when the raw measurement data are partly saturated.

arXiv:1511.01007•Physical Review A•Jul 15, 2016•150 citations

Continuous-Variable Quantum Key Distribution

Frédéric Grosshans, A. Acín, Nicolas J. Cerf

Quantum key distribution is a technique in which secret key bits are encoded into quantum states which are transmitted over a quantum channel, e.g. an optical link, so that the security is guaranteed by the laws of quantum physics. Most experimental realizations to date have relied on discrete protocols, involving ideally single-photons states (or, in practice, strongly attenuated light pulses) as well as single-photon detectors. In this chapter, we present an overview of the recent continuous-variable quantum cryptosystems, which instead rely on continuously-modulated Gaussian states (e.g. coherent states) and homodyne detection. The series of security proofs of these protocols against increasingly powerful attacks will be reviewed. A particular emphasis will be put on the op-timality of Gaussian attacks in this context, which holds provided that the second-order moments of the relevant variables are monitored.

IMPERIAL COLLEGE PRESS eBooks•Feb 1, 2007•7 citations

Saturation attack on continuous-variable quantum key distribution system

Hao Qin, Rupesh Kumar, Romain Alléaume

Continuous-variable quantum key distribution is proven in theory secure against general attacks, but side channel is still a crucial problem for practical setup, since security proofs do not take into account all possible experimental imperfections. In this paper, we consider a loophole that links to electronics limitation of homodyne detection. By using this loophole, we propose a saturation attack combined with intercept-resend attack on the practical continuous-variable quantum key distribution using Gaussian-modulated coherent state protocol. Under this attack, Eve can launch a full intercept-resend attack and further influence the excess noise estimated by Alice and Bob. We analyse this saturation attack with operating protocol and show that our attack could render secret key without being discovered. We also propose a countermeasure against such saturation attack.

Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE•Oct 29, 2013•39 citations

Finite-size security of continuous-variable quantum key distribution with digital signal processing

Takaya Matsuura, Kento Maeda, Toshihiko Sasaki +1 more

Abstract In comparison to conventional discrete-variable (DV) quantum key distribution (QKD), continuous-variable (CV) QKD with homodyne/heterodyne measurements has distinct advantages of lower-cost implementation and affinity to wavelength division multiplexing. On the other hand, its continuous nature makes it harder to accommodate to practical signal processing, which is always discretized, leading to lack of complete security proofs so far. Here we propose a tight and robust method of estimating fidelity of an optical pulse to a coherent state via heterodyne measurements. We then construct a binary phase modulated CV-QKD protocol and prove its security in the finite-key-size regime against general coherent attacks, based on proof techniques of DV QKD. Such a complete security proof is indispensable for exploiting the benefits of CV QKD.

•Jan 1, 2021•57 citations
Quantum continuous variables (CV) have been explored as an alternative to qubits for quantum key distribution (QKD). More specifically, protocols using coherent states and homodyne or heterodyne measurements have been proposed and experimentally demonstrated (Grosshans et al., 2003). Relying on technologies allowing much higher rates than allowed by the single photon detectors used in qubit based QKD, those protocols are the only ones which could allow key rates in the GHz range in the foreseeable future. Furthermore, their security proofs have recently been extendend to generic attacks in the case of gaussian modulation. However, to our knowledge, all security analyses up to know have implicitely assumed Bob's measurement setup to use a homo- or heterodyne detection with an external classical phase reference, while the experimental realizations use a lightbeam for this role. This beam doesn't carry any information useful to the spy, and any attack on its phase could equally be carried on the signal beam. However, the intensity of this beam is used in experimental implementations to calibrate the quantum noise level. This calibration is then used to determine the channel gain, which is an important parameter of Eve's attack. We show that this allows Eve to implement an intercepte resend attack forbiding QKD as soon as the losses are above 3dB. We also give simple countermeasures to this new class of attacks.
Continuous Variable (CV) quantum key distribution (QKD) is a promising candidate for practical implementations due to its compatibility with the existing communication technology. A trusted device scenario assuming that an adversary has no access to imperfections such as electronic noises in the detector is expected to provide significant improvement in the key rate, but such an endeavor so far was made separately for specific protocols and for specific proof techniques. Here, we develop a simple and general treatment that can incorporate the effects of Gaussian trusted noises for any protocol that uses homodyne/heterodyne measurements. In our method, a rescaling of the outcome of a noisy homodyne/heterodyne detector renders it equivalent to the outcome of a noiseless detector with a tiny additional loss, thanks to a noise-loss equivalence well-known in quantum optics. Since this method is independent of protocols and security proofs, it is applicable to Gaussian-modulation and discrete-modulation protocols, to the finite-size regime, and to any proof techniques developed so far and yet to be discovered as well.
We report here a new side channel attack on a practical continuous-variable (CV) quantum key distribution (QKD) system. Inspired by blinding attack in discrete-variable QKD, we formalize an attack strategy by inserting an external light into a CV QKD system implemented Gaussian-modulated coherent state protocol and show that our attack can compromise its practical security. In this attack, we concern imperfections of a balanced homodyne detector used in CV QKD. According to our analysis, if one inserts an external light into Bob’s signal port, due to the imperfect subtraction from the homodyne detector, the leakage of the external light contributes a displacement on the homodyne signal which causes detector electronics saturation. In consequence, Bob’s quadrature measurement is not linear with the quadrature sent by Alice. By considering such vulnerability, a potential Eve can launch a full intercept-resend attack meanwhile she inserts an external light into Bob’s signal port. By selecting proper properties of the external light, Eve actively controls the induced displacement value from the inserted light which results saturation of homodyne detection. In consequence, Eve can bias the excess noise due to the intercept-resend attack and the external light, such that Alice and Bob believe their excess noise estimation is below the null key threshold and they can still share a secret key. Our attack shows that the detector loopholes also exist in CV QKD, and it seems influence all the CV QKD systems using homodyne detection, since all the practical detectors have finite detection range.
We identify and study a security loophole in continuous-variable quantum key distribution (CVQKD) implementations, related to the imperfect linearity of the homodyne detector. By exploiting this loophole, we propose an active side-channel attack on the Gaussian-modulated coherent-state CVQKD protocol combining an intercept-resend attack with an induced saturation of the homodyne detection on the receiver side (Bob). We show that an attacker can bias the excess noise estimation by displacing the quadratures of the coherent states received by Bob. We propose a saturation model that matches experimental measurements on the homodyne detection and use this model to study the impact of the saturation attack on parameter estimation in CVQKD. We demonstrate that this attack can bias the excess noise estimation beyond the null key threshold for any system parameter, thus leading to a full security break. If we consider an additional criterion imposing that the channel transmission estimation should not be affected by the attack, then the saturation attack can only be launched if the attenuation on the quantum channel is sufficient, corresponding to attenuations larger than approximately 6 dB. We moreover discuss the possible countermeasures against the saturation attack and propose a countermeasure based on Gaussian postselection that can be implemented by classical postprocessing and may allow one to distill the secret key when the raw measurement data are partly saturated.
Quantum key distribution is a technique in which secret key bits are encoded into quantum states which are transmitted over a quantum channel, e.g. an optical link, so that the security is guaranteed by the laws of quantum physics. Most experimental realizations to date have relied on discrete protocols, involving ideally single-photons states (or, in practice, strongly attenuated light pulses) as well as single-photon detectors. In this chapter, we present an overview of the recent continuous-variable quantum cryptosystems, which instead rely on continuously-modulated Gaussian states (e.g. coherent states) and homodyne detection. The series of security proofs of these protocols against increasingly powerful attacks will be reviewed. A particular emphasis will be put on the op-timality of Gaussian attacks in this context, which holds provided that the second-order moments of the relevant variables are monitored.
Continuous-variable quantum key distribution is proven in theory secure against general attacks, but side channel is still a crucial problem for practical setup, since security proofs do not take into account all possible experimental imperfections. In this paper, we consider a loophole that links to electronics limitation of homodyne detection. By using this loophole, we propose a saturation attack combined with intercept-resend attack on the practical continuous-variable quantum key distribution using Gaussian-modulated coherent state protocol. Under this attack, Eve can launch a full intercept-resend attack and further influence the excess noise estimated by Alice and Bob. We analyse this saturation attack with operating protocol and show that our attack could render secret key without being discovered. We also propose a countermeasure against such saturation attack.
Abstract In comparison to conventional discrete-variable (DV) quantum key distribution (QKD), continuous-variable (CV) QKD with homodyne/heterodyne measurements has distinct advantages of lower-cost implementation and affinity to wavelength division multiplexing. On the other hand, its continuous nature makes it harder to accommodate to practical signal processing, which is always discretized, leading to lack of complete security proofs so far. Here we propose a tight and robust method of estimating fidelity of an optical pulse to a coherent state via heterodyne measurements. We then construct a binary phase modulated CV-QKD protocol and prove its security in the finite-key-size regime against general coherent attacks, based on proof techniques of DV QKD. Such a complete security proof is indispensable for exploiting the benefits of CV QKD.