Quantum key distribution with hacking countermeasures and long term field trial
A. R. Dixon, J. F. Dynes, Marco Lucamarini, Bernd Fröhlich, A. W. Sharpe, Andrew Plews, Wai Pan Tam, Zhiliang L. Yuan, Yoshimichi Tanizawa, Hideaki Sato, Shinichi Kawamura, Mikio Fujiwara, Masahide Sasaki, Andrew J. Shields
Quantum key distribution's (QKD's) central and unique claim is information theoretic security. However there is an increasing understanding that the security of a QKD system relies not only on theoretical security proofs, but also on how closely the physical system matches the theoretical models and prevents attacks due to discrepancies. These side channel or hacking attacks exploit physical devices which do not necessarily behave precisely as the theory expects. As such there is a need for QKD systems to be demonstrated to provide security both in the theoretical and physical implementation. We report here a QKD system designed with this goal in mind, providing a more resilient target against possible hacking attacks including Trojan horse, detector blinding, phase randomisation and photon number splitting attacks. The QKD system was installed into a 45 km link of a metropolitan telecom network for a 2.5 month period, during which time the system operated continuously and distributed 1.33 Tbits of secure key data with a stable secure key rate over 200 kbit/s. In addition security is demonstrated against coherent attacks that are more general than the collective class of attacks usually considered.
Quantum key distribution's (QKD's) central and unique claim is information theoretic security. However there is an increasing understanding that the security of a QKD system relies not only on theoretical security proofs, but also on how closely the physical system matches the theoretical models and prevents attacks due to discrepancies. These side channel or hacking attacks exploit physical devices which do not necessarily behave precisely as the theory expects. As such there is a need for QKD systems to be demonstrated to provide security both in the theoretical and physical implementation. We report here a QKD system designed with this goal in mind, providing a more resilient target against possible hacking attacks including Trojan horse, detector blinding, phase randomisation and photon number splitting attacks. The QKD system was installed into a 45 km link of a metropolitan telecom network for a 2.5 month period, during which time the system operated continuously and distributed 1.33 Tbits of secure key data with a stable secure key rate over 200 kbit/s. In addition security is demonstrated against coherent attacks that are more general than the collective class of attacks usually considered.
Securing information in communication networks is an important challenge in today's world. Quantum Key Distribution (QKD) can provide unique capabilities towards achieving this security, allowing intrusions to be detected and information leakage avoided. We report here a record high bit rate prototype QKD system providing a total of 878 Gbit of secure key data over a 34 day period corresponding to a sustained key rate of around 300 kbit/s. The system was deployed over a standard 45 km link of an installed metropolitan telecommunication fibre network in central Tokyo. The prototype QKD system is compact, robust and automatically stabilised, enabling key distribution during diverse weather conditions. The security analysis includes an efficient protocol, finite key size effects and decoy states, with a quantified key failure probability of ε = 10⁻¹⁰.
With the emergence of an information society, the idea of protecting sensitive data is steadily gaining importance. Conventional encryption methods may not be sufficient to guarantee data protection in the future. Quantum key distribution (QKD) is an emerging technology that exploits fundamental physical properties to guarantee perfect security in theory. However, it is not easy to ensure in practice that the implementations of QKD systems are exactly in line with the theoretical specifications. Such theory-practice deviations can open loopholes and compromise security. Several such loopholes have been discovered and investigated in the last decade. These activities have motivated the proposal and implementation of appropriate countermeasures, thereby preventing future attacks and enhancing the practical security of QKD. This article introduces the so-called field of quantum hacking by summarising a variety of attacks and their prevention mechanisms.
With the emergence of an information society, the idea of protecting sensitive data is steadily gaining importance. Conventional encryption methods may not be sufficient to guarantee data protection in the future. Quantum key distribution (QKD) is an emerging technology that exploits fundamental physical properties to guarantee perfect security in theory. However, it is not easy to ensure in practice that the implementations of QKD systems are exactly in line with the theoretical specifications. Such theory–practice deviations can open loopholes and compromise security. Several such loopholes have been discovered and investigated in the last decade. These activities have motivated the proposal and implementation of appropriate countermeasures, thereby preventing future attacks and enhancing the practical security of QKD. This article introduces the so-called field of quantum hacking by summarising a variety of attacks and their prevention mechanisms.
Quantum Key Distribution (QKD) promises information-theoretic security based on the fundamental laws of quantum mechanics. However, practical implementations deviate from idealized models and are therefore susceptible to side-channel attacks that exploit physical imperfections rather than theoretical vulnerabilities. Over the past two decades, a wide range of attacks have been demonstrated against QKD systems, including those targeting detectors, sources, timing information, power consumption, and electromagnetic emissions. This paper addresses a selection of a few side-channel attacks reported in the literature, classifying them according to their underlying physical mechanisms and attack strategies. We analyze their impact on the security of different QKD protocols and platforms, and highlight how experimental demonstrations have shaped the community's understanding of implementation security. In addition, we present and evaluate mitigation techniques proposed to date, such as device-independent and measurement-device-independent QKD, hardware countermeasures, monitoring strategies, and so on. We also identify open challenges and promising directions for enhancing the robustness of future quantum communication systems.
Quantum key distribution (QKD) permits information-theoretically secure transmission of digital encryption keys, assuming that the behaviour of the devices employed for the key exchange can be reliably modelled and predicted. Remarkably, no assumptions have to be made on the capabilities of an eavesdropper other than that she is bounded by the laws of Nature, thus making the security of QKD "unconditional". However, unconditional security is hard to achieve in practice. For example, any experimental realisation can only collect finite data samples, leading to vulnerabilities against coherent attacks, the most general class of attacks, and for some protocols the theoretical proof of robustness against these attacks is still missing. For these reasons, in the past many QKD experiments have fallen short of implementing an unconditionally secure protocol and have instead considered limited attacking capabilities by the eavesdropper. Here, we explore the security of QKD against coherent attacks in the most challenging environment: the long-distance transmission of keys. We demonstrate that the BB84 protocol can provide positive key rates for distances up to 240 km without multiplexing of conventional signals, and up to 200 km with multiplexing. Useful key rates can be achieved even for the longest distances, using practical thermo-electrically cooled single-photon detectors.
Cryptography plays a key role in today's digital society. The most widely used encryption method is the public-key algorithm, but its security relies on unproven computational assumptions. In contrast, quantum key distribution (QKD) is an unbreakable encryption algorithm. QKD has been proven to provide information-theoretic security rigorously based on the laws of physics. Despite the beauty of QKD theory, in practice, QKD still suffers from practical side-channel attacks, due to the imperfections of real-life implementations. Such discrepancy between the theory and the practice is fatal to the security of a QKD system. This thesis addresses a number of the discrepancies in a standard QKD implementation, and it offers efficient countermeasures to resolve these discrepancies. A novel protocol -- measurement-device-independent (MDI) QKD - was proposed to remove all detector side-channel attacks. To apply MDI-QKD in real life, I have proposed practical protocols, conducted the first rigorous finite-key security proof, designed methodologies to optimize parameters, and demonstrated MDI-QKD experimentally. These results allow MDI-QKD mature enough to be implemented in real-life. Based on the framework of MDI-QKD, the only security issue left is the source. To solve the loophole due to the imperfect encoder, I have experimentally implemented a recent protocol, which enables QKD loss-tolerant to source flaws. This experiment for the first time shows secure QKD with imperfect state preparations at long distances. Another vulnerable part in the source is the ability to generate true randomness. I have developed a compact and cost-effective quantum random number generator (QRNG) prototype, which has a real-time generation rate of 1 Gbit/s with excellent stability. The simplicity and speed of my prototype prove the feasibility of a robust, low-cost, and fast QRNG. In summary, MDI-QKD enables new scientific developments in the field of quantum cryptography. This thesis solves the major practical issues in the implementation of MDI-QKD. The combination of MDI-QKD, imperfect sources, and QRNG consists of the foundation of a future practical side-channel-free QKD protocol. The success of this protocol can substitute current classical cryptosystems by offering people an unconditionally secure infrastructure, which will be the ultimate dream for researchers in secure communication.