We discuss a method for revealing a photon-number-splitting (PNS) attack in a quantum key distribution (QKD) system, which is based on analyzing the statistical distribution of photon numbers detected in each time interval. A relation for estimating the difference between the expected photon-number distribution and the one appearing in the course of a PNS attack is derived. An equation defining the minimum number of counts necessary for revealing the attack with desired probability is given. Formulas for calculating the amount of raw keys known to an illegitimate user due to a PNS attack are obtained depending on the system’s total loss. The main advantage of the method is the possibility of using it in QKD systems without significant modifications in the protocol or experimental setup.
We discuss a method for revealing a photon-number-splitting (PNS) attack in a quantum key distribution (QKD) system, which is based on analyzing the statistical distribution of photon numbers detected in each time interval. A relation for estimating the difference between the expected photon-number distribution and the one appearing in the course of a PNS attack is derived. An equation defining the minimum number of counts necessary for revealing the attack with desired probability is given. Formulas for calculating the amount of raw keys known to an illegitimate user due to a PNS attack are obtained depending on the system’s total loss. The main advantage of the method is the possibility of using it in QKD systems without significant modifications in the protocol or experimental setup.
Quantum cryptography allows distributing secure keys between two users so that any performed eavesdropping attempt would be immediately discovered. However, in practice an eavesdropper can obtain key information from multi-photon states when attenuated laser radiation is used as a source of quantum states. In order to prevent actions of an eavesdropper, it is generally suggested to implement special cryptographic protocols, like decoy states or SARG04. In this paper, we describe an alternative method based on monitoring photon number statistics after detection. We provide a useful rule of thumb to estimate approximate order of difference of expected distribution and distribution in case of attack. Formula for calculating a minimum value of total pulses or time-gaps to resolve attack is shown. Also formulas for actual fraction of raw key known to Eve were derived. This method can therefore be used with any system and even combining with mentioned special protocols.
The existing decoy-state quantum key distribution (QKD) beating photon-number-splitting (PNS) attack provides a more accurate method to estimate the secure key rate, while it still considers that only single-photon pulses can generate secure keys in any case. However, multiphoton pulses can also generate secure keys if we can detect the possibility of PNS attack in the channel. The ultimate goal of this line of research is to confirm the absence of all types of PNS attacks. In particular, the PNS attack mentioned and detected in this paper is only the weaker version of PNS attack which significantly changes the observed values of the legitimate users. In this paper, under the null hypothesis of no weaker version of PNS attack, we first determine whether there is an attack or not by retrieving the missing information of the existing decoy-state protocols, extract a Cauchy distribution statistic, and further provide a detection method and the type I error probability. If the result is judged to be an attack, we can use the existing decoy-state method and the GLLP formula to estimate the secure key rate. Otherwise, the pulses with the same basis received including both single-photon pulses and multiphoton pulses, can be used to generate the keys and we give the secure key rate in this case. Finally, the associated experiments we performed (i.e., the significance level is 5%) show the correctness of our method.
In the last ten years, quantum computing has made substantial progress, presenting a strong challenge to traditional encryption methods that depend on solving discrete algorithmic problems. With the advent of the quantum era, conventional encryption methods are becoming more susceptible to attacks. This paper investigates possible attacks that exploit vulnerabilities in quantum cryptography, specifically investigating weaknesses in quantum key distribution (QKD) systems. The text thoroughly explores advanced attack strategies of photon number splitting highlight the existing vulnerabilities. The goal is to highlight the need for strong safeguards to protect against these threats, which requires continuous research and development to improve the robustness of quantum cryptography algorithms. The experimental investigation includes analyzing crucial parameters, including quantum channel length, loss, QKD protocol, quantum bit error rate (QBER), signal-to-noise ratio (SNR), as well as attack parameters such as probability of photon number splitting (PNS), eavesdropper distance, and detection efficiency. The evaluation includes performance indicators such as secure key rate, quantum bit error rate (QBER) vs distance, vulnerability to photon number splitting (PNS) attacks, and the influence on the pace of key generation.
Measurement-device-independent quantum key distribution (MDI-QKD) is innately immune to all detection-side attacks. Due to the limitations of technology, most MDI-QKD protocols use weak coherent photon sources (WCPs), which may suffer from a photon-number splitting (PNS) attack from eavesdroppers. Therefore, the existing MDI-QKD protocols also need the decoy-state method, which can resist PNS attacks very well. However, the existing decoy-state methods do not attend to the existence of PNS attacks, and the secure keys are only generated by single-photon components. In fact, multiphoton pulses can also form secure keys if we can confirm that there is no PNS attack. For simplicity, we only analyze the weaker version of a PNS attack in which a legitimate user's pulse count rate changes significantly after the attack. In this paper, under the null hypothesis of no PNS attack, we first determine whether there is an attack or not by retrieving the missing information of the existing decoy-state MDI-QKD protocols via statistical hypothesis testing, extract a normal distribution statistic, and provide a detection method and the corresponding Type I error probability. If the result is judged to be an attack, we use the existing decoy-state method to estimate the secure key rate. Otherwise, all pulses with the same basis leading to successful Bell state measurement (BSM) events including both single-photon pulses and multiphoton pulses can be used to generate secure keys, and we give the formula of the secure key rate in this case. Finally, based on actual experimental data from other literature, the associated experimental results (e.g., the significance level is 5%) show the correctness of our method.
Abstract The analysis of the security of quantum key distribution systems with respect to an attack with nondemolishing measurement of the number of photons (photon number splitting—PNS attack) is carried out under the assumption that in the communication channel in each parcel there is a pure Fock state with a different number of photons, and the distribution of states by number of photons has Poisson statistics. In reality, in the communication channel in each parcel there are not individual Fock states, but a pure coherent state with a random phase—a superposition of Fock states with different numbers of photons. The paper analyzes the necessary experimental resources necessary to prepare individual Fock states with a certain number of photons from the superposition of Fock states for a PNS attack. Optical schemes for implementing such an attack are given, and estimates of experimental parameters at which a PNS attack is possible are made.
For a start, Quantum Key Distribution offers security not depending on any fundamental assumption. However, actual realizations choose to use weak coherent pulses as photon sources, rather than the ideal single-photon state, which bears security weaknesses due to the emission of sporadic multi-photon states. These states can be used in Photon-Number Splitting (PNS) attacks, where the attacker intercepts and buffers photons of multi-photon pulses and forwards the rest, enabling partial recovery of the key without inducing detectable perturbations. This article presents a simulation-based approach to analyze PNS attacks with realistic channel conditions like losses, detector imperfections, and finite key lengths. The research also examines the performance of decoy-state countermeasures, that use variable-intensity pulses to statistically reveal eavesdropping and Simulation results confirm the dominant character of PNS on raw key rates for the no-countermeasure scenario and ensure optimal decoy-state schemes restore security by cutting single-photon contributions. Results establish that although WCP QKD is vulnerable to PNS attacks in theory, strict adoption of decoy-state protocols aided with monitoring and finite-key analysis can provide immunity against an adversary. The paper emphasizes the need for simulation-based, implementation-dependent security analysis in direction towards well-designed practical quantum cryptographic systems. [1] [2] [3] [4] [10] [8]