We study the validity of partially trusting the phase noise associated with estimation uncertainty in a continuous variable quantum key distribution system with a local local oscillator (LLO-CVQKD) and investigate optimal system parameters. We find that the trusted phase noise model enhances the key rate and transmission distance performance but opens a security loophole by manipulating the reference pulse amplitude. Therefore, we propose a “reference pulse attack” on the trusted phase noise LLO-CVQKD system where Eve achieves 100% information hacking without being detected at 23.8km and 32.0km while using lossless and 0.14dB/km loss channels, respectively. Nevertheless, by re-analyzing the attack, countermeasures are also proposed to keep the performance advantages of the trusted phase noise model. As a result, the trusted phase noise LLO-CVQKD can still provide a superior secure key rate (e.g., 9 times higher key rate at 20km) and an increased transmission distance by 45%, compared to that of the untrusted phase noise system.
We study the validity of partially trusting the phase noise associated with estimation uncertainty in a continuous variable quantum key distribution system with a local local oscillator (LLO-CVQKD) and investigate optimal system parameters. We find that the trusted phase noise model enhances the key rate and transmission distance performance but opens a security loophole by manipulating the reference pulse amplitude. Therefore, we propose a “reference pulse attack” on the trusted phase noise LLO-CVQKD system where Eve achieves 100% information hacking without being detected at 23.8km and 32.0km while using lossless and 0.14dB/km loss channels, respectively. Nevertheless, by re-analyzing the attack, countermeasures are also proposed to keep the performance advantages of the trusted phase noise model. As a result, the trusted phase noise LLO-CVQKD can still provide a superior secure key rate (e.g., 9 times higher key rate at 20km) and an increased transmission distance by 45%, compared to that of the untrusted phase noise system.
We show that partially trusting the phase noise associated with estimation uncertainty in a local local oscillator continuous-variable quantum key distribution (LLO-CVQKD) system allows one to exchange higher secure key rates than in the case of untrusted phase noise. However, this opens a security loophole through the manipulation of the reference pulse amplitude. We label this as a “reference pulse attack,” which is applicable to all LLO-CVQKD systems if the phase noise is trusted. We show that, at the optimal reference pulse intensity level, Eve achieves unity attack efficiency at 23.8 km and 32.0 km while using lossless and 0.14 dB/km loss channels, respectively, for her attack. However, to maintain the performance enhancement from partially trusting the phase noise, countermeasures have been proposed. As a result, the LLO-CVQKD system with partially trusted phase noise owns a superior key rate at 20 km by an order 9.5, and an extended transmission distance by 45%, compared to the phase noise untrusted system.
In practical continuous-variable quantum key distribution system using local local oscillator (LLO CV-QKD), the phase noise related to coherent detection and phase-reference pulse intensity can be locally calibrated at the receiver side. Therefore, it can be regarded as trusted noise in order to obtain a higher secret key rate and transmission distance. However, security loopholes will be opened for the eavesdropper to launch attacks without appropriate countermeasures. To this end, we propose two practical phase-reference pulse intensity attack strategies, where Eve can reduce the trusted phase noise by manipulating the intensity of the phase-reference pulse, thereby hiding her attack on the signal pulse. The performance of the LLO CV-QKD system under these attacks has been analyzed. We show that precisely monitoring the intensity of the phase-reference pulse in real time is an essential countermeasure to prevent the proposed attacks. Moreover, an intensity-monitoring scheme for the phase-reference pulse is proposed to strengthen the security of the practical LLO CV-QKD system and make the trusted phase noise model more robust.
In practical continuous-variable quantum key distribution system using local local oscillator (LLO CV-QKD), the phase noise related to coherent detection and phase-reference pulse intensity that can be locally calibrated at the receiver side is considered to be trusted noise to improve the performance. However, if the intensity of the phase-reference pulse is not monitored precisely in real-time, a security loophole will be opened for the eavesdropper to launch attacks. To this end, we propose two practical phase-reference pulse intensity attack strategies, where Eve can reduce the trusted phase noise by manipulating the intensity of the phase-reference pulse, thereby hiding her attack on the signal pulse if the total excess noise remains unchanged. The performance of the LLO CV-QKD system under these attacks has been analyzed. We show that precisely monitoring the intensity of the phase-reference pulse in real-time is an essential countermeasure to prevent the proposed attacks. Moreover, an intensity-monitoring scheme for the phase-reference pulse is proposed to strengthen the security of the practical LLO CV-QKD system and make the trusted phase noise model more robust.
The trusted phase noise model for continuous-variable quantum key distribution protocol with a real local oscillator (LLO CVQKD) has been established recently, which can lead to a better quantum key distribution (QKD) performance by moving part of the phase noise from the untrusted channel-added noise to the trusted detector-added noise. However, the calibration of the trusted phase noise is related to the intensity of the phase-reference pulse, which can be used by the eavesdropper to hack the QKD system. Here, we present a polarization attack scheme against the phase-reference pulse. In practical LLO CVQKD systems, only a part of the phase-reference pulses are used to measure and compensate for the polarization drift of the signal pulses due to the limitation of polarization measurement. We show that Eve can manipulate the polarization of the unmeasured part of the phase-reference pulses to control the trusted phase noise. Simulations show that improving the polarization measurement ratio to 100% or monitoring the phase-reference pulse intensity in real time is necessary to guarantee the security of the practical LLO CVQKD system.
Abstract Continuous-variable quantum key distribution with local local oscillator (LLO-CVQKD) eliminates the security loophole caused by transmitting high power local oscillator (LO). However, in order to establish a common phase frame between the sender and receiver, a low power phase reference needs to be transmitted with quantum signals, which may bring in new security problems for eavesdroppers to obtain information illegally. Especially in trusted phase noise model, phase noise associated with detectors is regarded as trusted noise in order to obtain a higher secret key rate and transmission distance, which further provides opportunities for eavesdroppers. To this end, we propose an optical attenuator-oriented attack strategy against the LLO-CVQKD system under the trusted phase noise model, where Eve can inject suitable light into the optical attenuator in reference light path to reduce the attenuation level of it, thereby controlling the intensity of the reference pulses and resulting in an underestimated excess noise. Simulation results show that the proposed attack strategy can render the estimated secret key rate much higher than the actual values. When the transmission distance exceeds 25 km, the eavesdropper can obtain approximately 90% of the key information by adjusting the intensity of the reference pulses to twice the original value.
Quantum key distribution (QKD) has been proven to promise unconditionally secure data communication between remote legitimate users，based on the fundamental laws of quantum mechanics. QKD has great potential to be commercialized in the market and implemented in securing critical institutions, such as financial infrastructures, smart Grid, and national defence. Most theoretical security analyses of QKD protocols are based on several idealistic assumptions. However, the practical limitations, such as device imperfections, may bring security loopholes and leave QKD systems vulnerable to malicious eavesdropping attacks. Since QKD systems will be used as the practical applications in the real-world, it is of great importance to study the practical security and practical implementations of QKD protocols. Compared with dedicated single-photon based discrete variable (DV) QKD protocols, continuous variable (CV) QKD systems have attracted more attentions in recent years, as they benefit from their compatibility with commercial off-the-shelf (COTS) telecommunication components and high key rate over metropolitan networks. However, the requirement of a co-transmitted local oscillator (LO) brings a number of issues that compromises secure key generation and becomes a major obstacle to the practical implementation of CVQKD. To overcome these problems, a new CVQKD protocol with a locally generated LO (LLO) at Bob has been proposed. Based on previous studies, this thesis presents a novel quantum attack based on a discovered security loophole of the LLO CVQKD protocol, and demonstrates two high performance and low complexity practical LLO CVQKD systems. 1. After exploring the phase recovery scheme and the phase noise model, the first quantum attack on LLO CVQKD system is proposed, that exploits the phase estimation error associated with the amplitude of the phase reference pulses, in a ‘reference pulse attack’. Under this attack, a new system noise model and a refined linear quantum states transmission model have been developed when the phase noise is partially trusted. The attack performance is evaluated in terms of excess noise manipulation and mutual information extraction over both trusted – referred to as realistic, and untrusted – referred to as paranoid, security models of phase noise. Effective countermeasures are also given to improve the practical security and performance of the LLO CVQKD system under the trusted phase noise model. 2. Aside from the practical security analysis, two practical LLO CVQKD implementations developed in the laboratory are demonstrated here. The first practical LLO CVQKD system is featured as high speed (500 MHz) and low complexity, realizing the world’s fastest predicted key rate of 26.9 Mbps over a 15 km optical fibre link. To increase the signal repetition rate, and hence the potential secure key rate, our system is equipped with high-performance, wideband devices and components designed to support high repetition rate operations. To reduce the system complexity and correct for any phase shift during transmission, reference pulses are interleaved with quantum signals at Alice. Customized monitoring software has been developed allowing all parameters to be controlled in real-time without any modification to the physical setup. The system-level noise model analysis is introduced at high bandwidth and a new ‘combined optimisation’ technique is proposed to simultaneously optimize system parameters to high precision. It also has the potential for an even faster implementation. 3. The second demonstrated system presents the feasibility of the first practical LLO CVQKD system. The system comprises integrated real-time data-processing units (DPUs) and commercial off-the-shelf (COTS) telecommunication components. Instead of using conventional expensive, high-specification, standalone laboratory equipment (e.g. oscilloscope and arbitrary waveform generator (AWG) used in most CVQKD systems), each DPU consists of a high-speed, multi-channel data acquisition module, and is embedded in a computer at both Alice and Bob to achieve real-time quantum data generation, acquisition and analysis. In addition, a hardware-based filter unit has been implemented to amplify and stabilise modulation signals, together with a system-level noise model analysis and a combined parameter optimisation method to enhance the system key rate. In laboratory conditions, the system has been shown to run continuously, and the asymptotic secure key rates are estimated as 1.37 Mbps and 509 kbps over 15 km and 25 km optical fibre links, respectively, through stable excess noise measurements for over 10 hours at a 20 MHz repetition rate. The measurement results open up the possibility of building up a commercialized LLO CVQKD system.