Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Physical Review A

Counterfactual Trojan horse attack

Zheng-Hong Li, Luojia Wang, Jingping Xu, Yaping Yang, M. Al-Amri, Muhammad Suhail Zubairy

Published Feb 27, 2020• 24 citations
Publisher

Abstract

Trojan horse attack is a common eavesdropping strategy which can attack various quantum secure communication systems. Its basic idea is to send auxiliary photons into a legitimate communicator's apparatuses and steal information by analyzing the reflected photons. In this paper, we consider a different kind of Trojan horse attack, the so-called counterfactual Trojan horse attack, which has not been studied in detail so far. In such an attack, the eavesdropper may steal the secret information by ``ghost'' photons, which can spontaneously avoid being detected, even if the detector is an ideal one. We present the details and requirements of such an attack. We also illustrate our results by considering two protocols, the ping-pong protocol and the counterfactual quantum cryptography. Furthermore, we discuss the nature of the counterfactual Trojan horse attack and the strategy to successfully deal with it. Our results indicate that additional resources may be required for the protection against such an attack.

DOI
10.1103/physreva.101.022336

Related papers

Robustness of two-way quantum communication protocols against Trojan horse attack

Fu‐Guo Deng, Ping Zhou, Xihan Li +2 more

We discuss the robustness of two-way quantum communication protocols against Trojan horse attack and introduce a novel attack, delay-photon Trojan horse attack. Moreover, we present a practical way for two-way quantum communication protocols to prevent the eavesdropper from stealing the information transmitted with Trojan horse attacks. It means that two-way quantum communication protocols is also secure in a practical application.

arXiv:quant-ph/0508168•Aug 23, 2005•77 citations

Counterfactual attack on counterfactual quantum key distribution

Sheng Zhang, Jian Wnang, Chao Jing Tang

\n It is interesting that counterfactual quantum cryptography protocols allow two remotely separated parties to share a secret key without transmitting any signal particles. Generally, these protocols, expected to provide security advantages, base their security on a translated no-cloning theorem. Therefore, they potentially exhibit unconditional security in theory. In this letter, we propose a new Trojan horse attack, by which an eavesdropper Eve can gain full information about the key without being noticed, to real implementations of a counterfactual quantum cryptography system. Most importantly, the presented attack is available even if the system has negligible imperfections. Therefore, it shows that the present realization of counterfactual quantum key distribution is vulnerable.\n

Europhysics Letters (EPL)•May 1, 2012•15 citations

Security analysis of Trojan horse attacks on single-photon based quantum secure direct communication systems

Jinyu Wang, Jia‐Wei Ying, Qi Zhang +4 more

Quantum secure direct communication (QSDC) enables the direct transmission of confidential information without pre-shared keys. However, device imperfections in practical systems can lead to information leakage. The Trojan-horse attack (THA), a stealthy side-channel threat, steals information by injecting photons into encoding devices and analyzing the reflected light. This paper focuses on the single-photon-based (DL04) protocol, establishing for the first time a comprehensive THA model against it. By combining weak coherent pulse (WCP) sources with the decoy-state method, we systematically analyze the security under THA during both the first and second rounds of transmission, derive analytical expressions for the secrecy message capacity, and quantitatively evaluate the impact of attack strength on system performance through numerical simulations. Our results demonstrate that the system’s security is highly sensitive to the average number of reflected Trojan photons, μout. For a first-round attack, the secrecy message capacity remains nearly identical to the attack-free case when μout≤10−8, but drops to zero when μout increases to 10−3. In contrast, the second round of attacks had a weaker impact. Even at the strongest attack intensity (μout=10−2), the system could still maintain a certain level of secrecy message capacity. When THA simultaneously targets both the first and second rounds, the overall security of the system is predominantly governed by the more sensitive first-round attack, whose security boundary remains largely comparable to that observed in a single first-round attack scenario. Furthermore, We perform parameter optimization to achieve the optimal secrecy message capacity for each channel attenuation. Our study provides the first quantitative security bound for THA on DL04 protocol, offering practical guidance for encoder isolation requirements in future implementations.

Frontiers of Physics•Jan 1, 2026•0 citations

Security of counterfactual quantum cryptography

Zhen−Qiang Yin, Hong-Wei Li, Wei Chen +2 more

Recently, a ``counterfactual'' quantum-key-distribution scheme was proposed by T.-G. Noh [Phys. Rev. Lett. 103, 230501 (2009)]. In this scheme, two legitimate distant peers may share secret keys even when the information carriers are not traveled in the quantum channel. We find that this protocol is equivalent to an entanglement distillation protocol. According to this equivalence, a strict security proof and the asymptotic key bit rate are both obtained when a perfect single-photon source is applied and a Trojan horse attack can be detected. We also find that the security of this scheme is strongly related to not only the bit error rate but also the yields of photons. And our security proof may shed light on the security of other two-way protocols.

arXiv:1007.3066•Physical Review A•Oct 27, 2010•80 citations

Trojan-horse attacks threaten the security of practical quantum cryptography

Nitin Jain, Elena Anisimova, Imran Khan +3 more

A quantum key distribution (QKD) system may be probed by an eavesdropper Eve by sending in bright light from the quantum channel and analyzing the back-reflections. We propose and experimentally demonstrate a setup for mounting such a Trojan-horse attack. We show it in operation against the quantum cryptosystem Clavis2 from ID Quantique, as a proof-of-principle. With just a few back-reflected photons, Eve discerns Bobʼs (secret) basis choice, and thus the raw key bit in the Scarani–Acín–Ribordy–Gisin 2004 protocol, with higher than 90% probability. This would clearly breach the security of the cryptosystem. Unfortunately, Eveʼs bright pulses have a side effect of causing a high level of afterpulsing in Bobʼs single-photon detectors, resulting in a large quantum bit error rate that effectively protects this system from our attack. However, in a Clavis2-like system equipped with detectors with less-noisy but realistic characteristics, an attack strategy with positive leakage of the key would exist. We confirm this by a numerical simulation. Both the eavesdropping setup and strategy can be generalized to attack most of the current QKD systems, especially if they lack proper safeguards. We also propose countermeasures to prevent such attacks.

arXiv:1406.5813•New Journal of Physics•Dec 10, 2014•200 citations

Quantum Key Distribution against Trojan Horse Attacks

Qing-yu Cai, Lv Hua

Realistic experimental apparatus of quantum cryptography are imperfect, which may be utilized by a potential eavesdropper to eavesdrop on the communication. We show that quantum communication may be improved with quantum teleportation and entanglement swapping, which is robustly secure against the most general Trojan horse attacks. Our scheme is not an improvement of the communication apparatus, but the improvement of quantum communication protocol itself. We show that our modified schemes may be implemented with current technology.

Chinese Physics Letters•May 1, 2007•7 citations
Trojan horse attack is a common eavesdropping strategy which can attack various quantum secure communication systems. Its basic idea is to send auxiliary photons into a legitimate communicator's apparatuses and steal information by analyzing the reflected photons. In this paper, we consider a different kind of Trojan horse attack, the so-called counterfactual Trojan horse attack, which has not been studied in detail so far. In such an attack, the eavesdropper may steal the secret information by ``ghost'' photons, which can spontaneously avoid being detected, even if the detector is an ideal one. We present the details and requirements of such an attack. We also illustrate our results by considering two protocols, the ping-pong protocol and the counterfactual quantum cryptography. Furthermore, we discuss the nature of the counterfactual Trojan horse attack and the strategy to successfully deal with it. Our results indicate that additional resources may be required for the protection against such an attack.
\n It is interesting that counterfactual quantum cryptography protocols allow two remotely separated parties to share a secret key without transmitting any signal particles. Generally, these protocols, expected to provide security advantages, base their security on a translated no-cloning theorem. Therefore, they potentially exhibit unconditional security in theory. In this letter, we propose a new Trojan horse attack, by which an eavesdropper Eve can gain full information about the key without being noticed, to real implementations of a counterfactual quantum cryptography system. Most importantly, the presented attack is available even if the system has negligible imperfections. Therefore, it shows that the present realization of counterfactual quantum key distribution is vulnerable.\n
Quantum secure direct communication (QSDC) enables the direct transmission of confidential information without pre-shared keys. However, device imperfections in practical systems can lead to information leakage. The Trojan-horse attack (THA), a stealthy side-channel threat, steals information by injecting photons into encoding devices and analyzing the reflected light. This paper focuses on the single-photon-based (DL04) protocol, establishing for the first time a comprehensive THA model against it. By combining weak coherent pulse (WCP) sources with the decoy-state method, we systematically analyze the security under THA during both the first and second rounds of transmission, derive analytical expressions for the secrecy message capacity, and quantitatively evaluate the impact of attack strength on system performance through numerical simulations. Our results demonstrate that the system’s security is highly sensitive to the average number of reflected Trojan photons, μout. For a first-round attack, the secrecy message capacity remains nearly identical to the attack-free case when μout≤10−8, but drops to zero when μout increases to 10−3. In contrast, the second round of attacks had a weaker impact. Even at the strongest attack intensity (μout=10−2), the system could still maintain a certain level of secrecy message capacity. When THA simultaneously targets both the first and second rounds, the overall security of the system is predominantly governed by the more sensitive first-round attack, whose security boundary remains largely comparable to that observed in a single first-round attack scenario. Furthermore, We perform parameter optimization to achieve the optimal secrecy message capacity for each channel attenuation. Our study provides the first quantitative security bound for THA on DL04 protocol, offering practical guidance for encoder isolation requirements in future implementations.
Recently, a ``counterfactual'' quantum-key-distribution scheme was proposed by T.-G. Noh [Phys. Rev. Lett. 103, 230501 (2009)]. In this scheme, two legitimate distant peers may share secret keys even when the information carriers are not traveled in the quantum channel. We find that this protocol is equivalent to an entanglement distillation protocol. According to this equivalence, a strict security proof and the asymptotic key bit rate are both obtained when a perfect single-photon source is applied and a Trojan horse attack can be detected. We also find that the security of this scheme is strongly related to not only the bit error rate but also the yields of photons. And our security proof may shed light on the security of other two-way protocols.
A quantum key distribution (QKD) system may be probed by an eavesdropper Eve by sending in bright light from the quantum channel and analyzing the back-reflections. We propose and experimentally demonstrate a setup for mounting such a Trojan-horse attack. We show it in operation against the quantum cryptosystem Clavis2 from ID Quantique, as a proof-of-principle. With just a few back-reflected photons, Eve discerns Bobʼs (secret) basis choice, and thus the raw key bit in the Scarani–Acín–Ribordy–Gisin 2004 protocol, with higher than 90% probability. This would clearly breach the security of the cryptosystem. Unfortunately, Eveʼs bright pulses have a side effect of causing a high level of afterpulsing in Bobʼs single-photon detectors, resulting in a large quantum bit error rate that effectively protects this system from our attack. However, in a Clavis2-like system equipped with detectors with less-noisy but realistic characteristics, an attack strategy with positive leakage of the key would exist. We confirm this by a numerical simulation. Both the eavesdropping setup and strategy can be generalized to attack most of the current QKD systems, especially if they lack proper safeguards. We also propose countermeasures to prevent such attacks.
Realistic experimental apparatus of quantum cryptography are imperfect, which may be utilized by a potential eavesdropper to eavesdrop on the communication. We show that quantum communication may be improved with quantum teleportation and entanglement swapping, which is robustly secure against the most general Trojan horse attacks. Our scheme is not an improvement of the communication apparatus, but the improvement of quantum communication protocol itself. We show that our modified schemes may be implemented with current technology.