Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Laser Physics Letters

Unambiguous measurements and Trojan-horse attack in quantum cryptography

S. N. Molotkov

Published Dec 20, 2019• 3 citations
Publisher

Abstract

Abstract Early security proofs of the keys in quantum cryptography systems were based on the assumption that the transmitting and receiving stations were completely isolated from the outside world—the eavesdropper. However, this condition cannot be implemented in practice, since quantum cryptography systems are open systems, in the sense that an eavesdropper can have indirect access, for example, through a fiber communication channel to critical equipment elements (phase modulators, intensity modulators, etc) using active sensing of the state of these elements—Trojan-horse attacks. A new Trojan-horse attack based on joint unambiguous measurements of reflected probing states from an intensity modulator and information states in a quantum communication channel is proposed. Estimates of attack parameters for a number of quantum key distribution protocols are given, when an attack leads to compromise of keys.

DOI
10.1088/1612-202x/ab5d25

Related papers

Trojan Horse Attacks, Decoy State Method, and Side Channels of Information Leakage in Quantum Cryptography

S. N. Molotkov

Abstract Early proofs of key secrecy in quantum cryptography systems were based on the assumption that the transmitting and receiving stations are completely isolated from the outside world—the eavesdropper. However, this condition cannot be implemented in practice since quantum cryptography systems are open systems in the sense that the eavesdropper may have indirect access, for example, through a fiber communication channel, to the critical elements of the equipment (phase modulators, intensity modulators, etc.) using active probing of the state of these elements. The state of the elements carries information about the transmitted key. In addition, the eavesdropper can use passive detection of side radiation from the receiving and transmitting equipment. Signals in side channels of information leakage may have extremely low intensity and are actually quantum signals. The eavesdropper may use the joint measurement of quantum information states in the communication channel and of states in various side channels of information leakage. The paper considers both passive attacks with measurement of side radiation and active attacks involving the probing of the states of the phase modulator and the intensity modulator, as well as backscattering radiation of single-photon avalanche detectors, which occurs during detecting information states on the receiver side. Combined attacks are also considered. The decoy state method is generalized with regard to active probing attacks, and boundaries for state parameters in side communication channels are obtained that guarantee secret key distribution for a given length of the communication channel.

Journal of Experimental and Theoretical Physics•Jun 1, 2020•16 citations

Active sensing and side channels of information leakage in quantum cryptography

S. N. Molotkov, Kirill A. Balygin, Andrey N. Klimov +1 more

Abstract Various Trojan-horse attacks on quantum cryptography systems are systematically considered: an attack with passive detection of side radiation, an attack with active sensing, as well as joint attacks on states in the quantum channel, side and reflected radiation. It is shown that the most effective attack is an attack with the measurement of the number of photons in the reflected states and further joint measurement of information and reflected quantum states. Explicit estimates are obtained for the intensity of the reflected quantum states at which secret keys can be transmitted to a given length.

Laser Physics•Oct 23, 2019•4 citations

On a New Attack on Quantum Key Distribution: Joint Unambiguous Measurements of Probe States and the PNS Attack on Information States

S. N. Molotkov

A new attack on the quantum key distribution is proposed involving joint collective unambiguous measurements of reflected probe states from an intensity modulator and photon number splitting (PNS) measurements, i.e., nondestructive measurements of the number of information photons in the quantum communication channel. This attack does not change the relative statistics of photocounts of states with different numbers of photons, does not lead to errors on the receiver side, and, thereby, is not detected by any of known methods, including the modified decoy state method. The attack results only in additional losses in the communication channel, which are not “controlled” by the decoy state method. The dependence of introduced losses on the intensity of reflected probe states is estimated. The critical level of losses depends on a particular physical implementation of the quantum cryptography system, which determines the upper bound of the intensity of reflected probe states. The knowledge of this bound is fundamentally necessary to ensure the security of keys. The fact that the attack does not lead to errors on the receiver side and does not change the relative statistics of photocounts but only results in additional losses, which depend on the intensity according to the distinguishability of reflected probe states, does not mean that this attack transforms quantum cryptography systems from the type of cryptographic systems where the security of keys is guaranteed by fundamental quantum mechanical laws to the type of systems where this security is guaranteed by technical restrictions. Even in the presence of side channels of information leakage, the security of keys is still guaranteed by fundamental quantum mechanical restrictions on the distinguishability of states. A low level of distinguishability (“intensity”) of quantum states in side channels is naturally reached by technical tools.

Journal of Experimental and Theoretical Physics Letters•Sep 1, 2020•2 citations

Improved finite-key security analysis of quantum key distribution against Trojan-horse attacks

Álvaro Navarrete, Marcos Curty

Abstract Most security proofs of quantum key distribution (QKD) disregard the effect of information leakage from the users’ devices, and, thus, do not protect against Trojan-horse attacks (THAs). In a THA, the eavesdropper injects strong light into the QKD apparatuses, and then analyzes the back-reflected light to learn information about their internal setting choices. Only a few recent works consider this security threat, but predict a rather poor performance of QKD unless the devices are strongly isolated from the channel. Here, we derive finite-key security bounds for decoy-state-based QKD schemes in the presence of THAs, which significantly outperform previous analyses. Our results constitute an important step forward to closing the existing gap between theory and practice in QKD.

arXiv:2202.06630•Quantum Science and Technology•May 31, 2022•33 citations

Improved Finite-Key Security Analysis of Measurement-Device-Independent Quantum Key Distribution Against a Trojan-Horse Attack

Hua-Jian Ding, Jing-Yang Liu, Xingyu Zhou +3 more

Measurement-device-independent quantum key distribution (MDI QKD) is a promising method for remote key sharing that can eliminate all detector side-channel attacks. However, current security proofs often overlook the potential information leakages from the legitimate users' devices. In a quantum version of Trojan-horse attack (THA), a malicious eavesdropper can inject bright light into the sources of a MDI QKD system and then analyze the back-reflected light to obtain their setting choices, thereby compromising the final security. Here, we derive the finite-key security bounds of decoy-state MDI QKD in the presence of THA, which significantly outperform previous analyses in terms of the secret-key rate and transmission distance. Specifically, we analyze a symmetric three-intensity decoy-state MDI QKD protocol and an efficient four-intensity decoy-state MDI QKD protocol. Our results represent a fundamental step in guaranteeing the implementation security of quantum communication systems.

Physical Review Applied•Apr 7, 2023•13 citations

Side-channel-secure quantum key distribution with state-dependent correlated errors and Trojan-horse attack

Cong Jiang, Xiao-Long Hu, Zong‐Wen Yu +2 more

Quantum key distribution (QKD) leverages the principles of quantum mechanics to provide theoretically unconditional security for cryptographic key sharing. However, practical implementations remain vulnerable due to potential security loopholes at both the source and detection sides of QKD systems. The side-channel-secure (SCS) protocol addresses these challenges by encoding bits in vacuum and non-vacuum states and introducing a third-party measurement node, thereby repelling attacks targeting the detection side as well as external lab attacks on the source side. In this work, we consider the state-dependent correlated errors and Trojan-horse attack while preserving the SCS protocol’s key advantage—-specifically, requiring only upper bounds on intensity characterization without needing a full description of quantum states in infinite dimensions. Numerical results demonstrate that when the reflected light intensity from Trojan-horse attacks falls below 10 −6 , Eve can scarcely extract additional key information from the reflections. This work makes the SCS protocol more practical.

Optics Express•Nov 19, 2025•4 citations
Abstract Early security proofs of the keys in quantum cryptography systems were based on the assumption that the transmitting and receiving stations were completely isolated from the outside world—the eavesdropper. However, this condition cannot be implemented in practice, since quantum cryptography systems are open systems, in the sense that an eavesdropper can have indirect access, for example, through a fiber communication channel to critical equipment elements (phase modulators, intensity modulators, etc) using active sensing of the state of these elements—Trojan-horse attacks. A new Trojan-horse attack based on joint unambiguous measurements of reflected probing states from an intensity modulator and information states in a quantum communication channel is proposed. Estimates of attack parameters for a number of quantum key distribution protocols are given, when an attack leads to compromise of keys.
Abstract Early proofs of key secrecy in quantum cryptography systems were based on the assumption that the transmitting and receiving stations are completely isolated from the outside world—the eavesdropper. However, this condition cannot be implemented in practice since quantum cryptography systems are open systems in the sense that the eavesdropper may have indirect access, for example, through a fiber communication channel, to the critical elements of the equipment (phase modulators, intensity modulators, etc.) using active probing of the state of these elements. The state of the elements carries information about the transmitted key. In addition, the eavesdropper can use passive detection of side radiation from the receiving and transmitting equipment. Signals in side channels of information leakage may have extremely low intensity and are actually quantum signals. The eavesdropper may use the joint measurement of quantum information states in the communication channel and of states in various side channels of information leakage. The paper considers both passive attacks with measurement of side radiation and active attacks involving the probing of the states of the phase modulator and the intensity modulator, as well as backscattering radiation of single-photon avalanche detectors, which occurs during detecting information states on the receiver side. Combined attacks are also considered. The decoy state method is generalized with regard to active probing attacks, and boundaries for state parameters in side communication channels are obtained that guarantee secret key distribution for a given length of the communication channel.
Abstract Various Trojan-horse attacks on quantum cryptography systems are systematically considered: an attack with passive detection of side radiation, an attack with active sensing, as well as joint attacks on states in the quantum channel, side and reflected radiation. It is shown that the most effective attack is an attack with the measurement of the number of photons in the reflected states and further joint measurement of information and reflected quantum states. Explicit estimates are obtained for the intensity of the reflected quantum states at which secret keys can be transmitted to a given length.
A new attack on the quantum key distribution is proposed involving joint collective unambiguous measurements of reflected probe states from an intensity modulator and photon number splitting (PNS) measurements, i.e., nondestructive measurements of the number of information photons in the quantum communication channel. This attack does not change the relative statistics of photocounts of states with different numbers of photons, does not lead to errors on the receiver side, and, thereby, is not detected by any of known methods, including the modified decoy state method. The attack results only in additional losses in the communication channel, which are not “controlled” by the decoy state method. The dependence of introduced losses on the intensity of reflected probe states is estimated. The critical level of losses depends on a particular physical implementation of the quantum cryptography system, which determines the upper bound of the intensity of reflected probe states. The knowledge of this bound is fundamentally necessary to ensure the security of keys. The fact that the attack does not lead to errors on the receiver side and does not change the relative statistics of photocounts but only results in additional losses, which depend on the intensity according to the distinguishability of reflected probe states, does not mean that this attack transforms quantum cryptography systems from the type of cryptographic systems where the security of keys is guaranteed by fundamental quantum mechanical laws to the type of systems where this security is guaranteed by technical restrictions. Even in the presence of side channels of information leakage, the security of keys is still guaranteed by fundamental quantum mechanical restrictions on the distinguishability of states. A low level of distinguishability (“intensity”) of quantum states in side channels is naturally reached by technical tools.
Abstract Most security proofs of quantum key distribution (QKD) disregard the effect of information leakage from the users’ devices, and, thus, do not protect against Trojan-horse attacks (THAs). In a THA, the eavesdropper injects strong light into the QKD apparatuses, and then analyzes the back-reflected light to learn information about their internal setting choices. Only a few recent works consider this security threat, but predict a rather poor performance of QKD unless the devices are strongly isolated from the channel. Here, we derive finite-key security bounds for decoy-state-based QKD schemes in the presence of THAs, which significantly outperform previous analyses. Our results constitute an important step forward to closing the existing gap between theory and practice in QKD.
Measurement-device-independent quantum key distribution (MDI QKD) is a promising method for remote key sharing that can eliminate all detector side-channel attacks. However, current security proofs often overlook the potential information leakages from the legitimate users' devices. In a quantum version of Trojan-horse attack (THA), a malicious eavesdropper can inject bright light into the sources of a MDI QKD system and then analyze the back-reflected light to obtain their setting choices, thereby compromising the final security. Here, we derive the finite-key security bounds of decoy-state MDI QKD in the presence of THA, which significantly outperform previous analyses in terms of the secret-key rate and transmission distance. Specifically, we analyze a symmetric three-intensity decoy-state MDI QKD protocol and an efficient four-intensity decoy-state MDI QKD protocol. Our results represent a fundamental step in guaranteeing the implementation security of quantum communication systems.
Quantum key distribution (QKD) leverages the principles of quantum mechanics to provide theoretically unconditional security for cryptographic key sharing. However, practical implementations remain vulnerable due to potential security loopholes at both the source and detection sides of QKD systems. The side-channel-secure (SCS) protocol addresses these challenges by encoding bits in vacuum and non-vacuum states and introducing a third-party measurement node, thereby repelling attacks targeting the detection side as well as external lab attacks on the source side. In this work, we consider the state-dependent correlated errors and Trojan-horse attack while preserving the SCS protocol’s key advantage—-specifically, requiring only upper bounds on intensity characterization without needing a full description of quantum states in infinite dimensions. Numerical results demonstrate that when the reflected light intensity from Trojan-horse attacks falls below 10 −6 , Eve can scarcely extract additional key information from the reflections. This work makes the SCS protocol more practical.