Any imperfections in a practical quantum key distribution (QKD) system may be exploited by an eavesdropper (Eve) to collect information about the key without being discovered. For example, without the decoy-state method, Eve can perform the photon-number-splitting (PNS) attack and get full information without introducing any perturbation, since weak laser pulses are widely used in practical systems instead of single-photon sources. However, the decoy-state method against PNS attack itself may introduce another loophole while closing the loophole of multiphoton pulses. In this paper, a fatal loophole of practical decoy-state plug-and-play QKD systems has been exploited and a wavelength-selected photon-number-splitting (WSPNS) attack scheme against plug-and-play QKD systems with the decoy-state method is proposed. Theoretical analysis shows that the eavesdropper can get full information about the key generated between the legitimate parties just like the PNS attack was performed in plug-and-play QKD systems without the decoy-state method.
Any imperfections in a practical quantum key distribution (QKD) system may be exploited by an eavesdropper (Eve) to collect information about the key without being discovered. For example, without the decoy-state method, Eve can perform the photon-number-splitting (PNS) attack and get full information without introducing any perturbation, since weak laser pulses are widely used in practical systems instead of single-photon sources. However, the decoy-state method against PNS attack itself may introduce another loophole while closing the loophole of multiphoton pulses. In this paper, a fatal loophole of practical decoy-state plug-and-play QKD systems has been exploited and a wavelength-selected photon-number-splitting (WSPNS) attack scheme against plug-and-play QKD systems with the decoy-state method is proposed. Theoretical analysis shows that the eavesdropper can get full information about the key generated between the legitimate parties just like the PNS attack was performed in plug-and-play QKD systems without the decoy-state method.
Any imperfections in a practical quantum key distribution (QKD) system may be exploited by an eavesdropper to collect information about the key without being discovered. We propose a modified photon-number-splitting attack scheme against QKD systems based on weak laser pulses taking advantage of possible multiphoton pulses. Proof-of-principle experiments are demonstrated. The results show that the eavesdropper can get information about the key generated between the legitimate parties without being detected. Since the equivalent attenuation introduced by the eavesdropper for pulses of different average photon numbers are different, the decoy-state method is effective in fighting against this kind of attack. This has also been proven in our experiments.
For a start, Quantum Key Distribution offers security not depending on any fundamental assumption. However, actual realizations choose to use weak coherent pulses as photon sources, rather than the ideal single-photon state, which bears security weaknesses due to the emission of sporadic multi-photon states. These states can be used in Photon-Number Splitting (PNS) attacks, where the attacker intercepts and buffers photons of multi-photon pulses and forwards the rest, enabling partial recovery of the key without inducing detectable perturbations. This article presents a simulation-based approach to analyze PNS attacks with realistic channel conditions like losses, detector imperfections, and finite key lengths. The research also examines the performance of decoy-state countermeasures, that use variable-intensity pulses to statistically reveal eavesdropping and Simulation results confirm the dominant character of PNS on raw key rates for the no-countermeasure scenario and ensure optimal decoy-state schemes restore security by cutting single-photon contributions. Results establish that although WCP QKD is vulnerable to PNS attacks in theory, strict adoption of decoy-state protocols aided with monitoring and finite-key analysis can provide immunity against an adversary. The paper emphasizes the need for simulation-based, implementation-dependent security analysis in direction towards well-designed practical quantum cryptographic systems. [1] [2] [3] [4] [10] [8]
For a start, Quantum Key Distribution offers security not depending on any fundamental assumption. However, actual realizations choose to use weak coherent pulses as photon sources, rather than the ideal single-photon state, which bears security weaknesses due to the emission of sporadic multi-photon states. These states can be used in Photon-Number Splitting (PNS) attacks, where the attacker intercepts and buffers photons of multi-photon pulses and forwards the rest, enabling partial recovery of the key without inducing detectable perturbations. This article presents a simulation-based approach to analyze PNS attacks with realistic channel conditions like losses, detector imperfections, and finite key lengths. The research also examines the performance of decoy-state countermeasures, that use variable-intensity pulses to statistically reveal eavesdropping and Simulation results confirm the dominant character of PNS on raw key rates for the no-countermeasure scenario and ensure optimal decoy-state schemes restore security by cutting single-photon contributions. Results establish that although WCP QKD is vulnerable to PNS attacks in theory, strict adoption of decoy-state protocols aided with monitoring and finite-key analysis can provide immunity against an adversary. The paper emphasizes the need for simulation-based, implementation-dependent security analysis in direction towards well-designed practical quantum cryptographic systems. [1] [2] [3] [4] [10] [8]
The existing decoy-state quantum key distribution (QKD) beating photon-number-splitting (PNS) attack provides a more accurate method to estimate the secure key rate, while it still considers that only single-photon pulses can generate secure keys in any case. However, multiphoton pulses can also generate secure keys if we can detect the possibility of PNS attack in the channel. The ultimate goal of this line of research is to confirm the absence of all types of PNS attacks. In particular, the PNS attack mentioned and detected in this paper is only the weaker version of PNS attack which significantly changes the observed values of the legitimate users. In this paper, under the null hypothesis of no weaker version of PNS attack, we first determine whether there is an attack or not by retrieving the missing information of the existing decoy-state protocols, extract a Cauchy distribution statistic, and further provide a detection method and the type I error probability. If the result is judged to be an attack, we can use the existing decoy-state method and the GLLP formula to estimate the secure key rate. Otherwise, the pulses with the same basis received including both single-photon pulses and multiphoton pulses, can be used to generate the keys and we give the secure key rate in this case. Finally, the associated experiments we performed (i.e., the significance level is 5%) show the correctness of our method.
Many security loopholes exist in quantum key distribution (QKD) due to the imperfections of realistic devices. On the source side, the decoy-state method can defend against the most severe photon-number-splitting (PNS) attack and improve the performance of QKD. Measurement-device-independent QKD and twin-field QKD have further closed all loopholes on the detection side. In this paper, we propose a valuable optical injection-locking loophole for the case when the internal isolator inside the laser is removed. We first introduce the effects of the injection locking with different injection intensities on the source frequency. Through the successive responses of adjacent pulses from frequency ports of the dense wavelength division multiplexer, the decoy state and the signal state can be partially distinguished. The specific injection-locking-loophole analysis of the isolatorless decoy phase-encoding Bennet-Brassard 1984 QKD and decoy phase-matching QKD protocols with external optical injection has been deeply studied. Simulation results show that, if we maintain the same observed gain statistics as normal after an external optical injection locking, the loophole cannot be exploited for a PNS attack when the QKD distance is short. As the QKD distance increases, a PNS attack at a medium distance using the optical injection-locking loophole does not threaten the security; the security is still valid. With the further increase of the QKD distance, the lower-bound secure key rate is higher than the upper-bound secure key rate given by a PNS attack at a long distance, some of the keys must be insecure, and information will be leaked.
Quantum key distribution (QKD) is an innovative technology, which exploits the laws of quantum mechanics to generate and distribute unconditionally secure shared cryptographic keying material between two geographically separated parties. The unique nature of QKD that ensures eavesdropping on the key distribution channel necessarily introduces detectable errors and shows promise for high-security environments, such as banking, government, and military. However, QKD systems are vulnerable to advanced theoretical and experimental attacks. In this paper, the photon number splitting (PNS) attack is studied in a specialized QKD modeling and simulation framework. First, a detailed treatment of the PNS attack is provided with emphasis on practical considerations, such as performance limitations and realistic sources of error. Second, ideal and non-ideal variations of the PNS attack are studied to measure the eavesdropper's information gain on the QKD-generated secret key bits and examine the detectability of PNS attacks with respect to both quantum bit error rate and the decoy state protocol. Finally, this paper provides a repeatable methodology for efficiently studying advanced attacks, both realized and notional, against QKD systems and more generally quantum communication protocols.