Wiechers, Carlos, Lydersen, Lars Vincent Van de Wiel, Wittmann, Christoffer, Dominique Elser, Johannes Skaar, Christoph Marquardt, Makarov, Vadim, Gerd Leuchs
We present a method to control the detection events in quantum key\ndistribution systems that use gated single-photon detectors. We employ bright\npulses as faked states, timed to arrive at the avalanche photodiodes outside the\nactivation time. The attack can remain unnoticed, since the faked states do not\nincrease the error rate per se. This allows for an intercept–resend attack, where\nan eavesdropper transfers her detection events to the legitimate receiver without\ncausing any errors. As a side effect, afterpulses, originating from accumulated\ncharge carriers in the detectors, increase the error rate. We have experimentally\ntested detectors of the system id3110 (Clavis2) from ID Quantique. We identify\nthe parameter regime in which the attack is feasible despite the side effect.\nFurthermore, we outline how simple modifications in the implementation can\nmake the device immune to this attack.
We present a method to control the detection events in quantum key\ndistribution systems that use gated single-photon detectors. We employ bright\npulses as faked states, timed to arrive at the avalanche photodiodes outside the\nactivation time. The attack can remain unnoticed, since the faked states do not\nincrease the error rate per se. This allows for an intercept–resend attack, where\nan eavesdropper transfers her detection events to the legitimate receiver without\ncausing any errors. As a side effect, afterpulses, originating from accumulated\ncharge carriers in the detectors, increase the error rate. We have experimentally\ntested detectors of the system id3110 (Clavis2) from ID Quantique. We identify\nthe parameter regime in which the attack is feasible despite the side effect.\nFurthermore, we outline how simple modifications in the implementation can\nmake the device immune to this attack.
We present a method to control the detection events in quantum key distribution systems that use gated single-photon detectors. We employ bright pulses as faked states, timed to arrive at the avalanche photodiodes outside the activation time. The attack can remain unnoticed, since the faked states do not increase the error rate per se . This allows for an intercept–resend attack, where an eavesdropper transfers her detection events to the legitimate receiver without causing any errors. As a side effect, afterpulses, originating from accumulated charge carriers in the detectors, increase the error rate. We have experimentally tested detectors of the system id3110 (Clavis2) from ID Quantique. We identify the parameter regime in which the attack is feasible despite the side effect. Furthermore, we outline how simple modifications in the implementation can make the device immune to this attack.
By employing real-time monitoring of single-photon avalanche photodiodes we demonstrate how two types of practical eavesdropping strategies, the after-gate and time-shift attacks, may be detected. Both attacks are identified with the detectors operating without any special modifications, making this proposal well suited for real-world applications. The monitoring system is based on accumulating statistics of the times between consecutive detection events, and extracting the afterpulse and overall efficiency of the detectors in real-time using mathematical models fit to the measured data. We are able to directly observe changes in the afterpulse probabilities generated from the after-gate and faint after-gate attacks, as well as different timing signatures in the time-shift attack. We also discuss the applicability of our scheme to other general blinding attacks.
Single photon detectors (SPDs) based on passively quenched avalanche photodiodes can be temporarily blinded by relatively bright light, of intensity less than 1 nW. A bright-light regime suitable for attacking a quantum key distribution system containing such detectors is described in this paper. In this regime, all SPDs in the receiver Bob are uniformly blinded by continuous illumination coming from the eavesdropper Eve. When Eve needs a certain detector in Bob to produce a click, she modifies the polarization (or other parameters used to encode quantum states) of the light she sends to Bob such that the target detector stops receiving light, while the other detector(s) continue to be illuminated. The target detector regains single photon sensitivity and, when Eve modifies the polarization again, produces a single click. Thus, Eve has full control of Bob and can perform a successful intercept–resend attack. To check the feasibility of the attack, three different models of passively quenched detectors have been tested. In the experiment, I have simulated the intensity diagrams the detectors would receive in a real QKD system under attack. Control parameters and side effects are considered. It appears that the attack could be practically possible.
Practical implementations of quantum key distribution (QKD) have been shown to be subject to various detector side-channel attacks that compromise the promised unconditional security. Most notable is a general class of attacks adopting the use of faked-state photons as in the detector-control and, more broadly, the intercept-resend attacks. In this paper, we present a simple scheme to overcome such class of attacks: A legitimate user, Bob, uses a polarization randomizer at his gateway to distort an ancillary polarization of a phase-encoded photon in a bidirectional QKD configuration. Passing through the randomizer once on the way to his partner, Alice, and again in the opposite direction, the polarization qubit of the genuine photon is immune to randomization. However, the polarization state of a photon from an intruder, Eve, to Bob is randomized and hence directed to a detector in a different path, whereupon it triggers an alert. We demonstrate theoretically and experimentally that, using commercial off-the-shelf detectors, it can be made impossible for Eve to avoid triggering the alert, no matter what faked-state of light she uses.
As necessary steps toward practical and secure quantum key distribution (QKD), identifying and patching possible attacks are important and valuable. This study discusses an avalanche-transition-region (ATR) attack on a gated-mode avalanche photodiode (APD) detector, widely used in QKD systems. Unlike other attacks, this one leaves almost no trace; the eavesdropper introduces less than 0.5% quantum bit-error rate, and the photocurrent and afterpulse probability before and after hacking are nearly identical. These findings highlight the importance of detection signals in real-life QKD systems, and are crucial to enhancing the security of practical QKD.
InGaAs single-photon avalanche photodiodes (APDs) are key enablers for high-bit rate quantum key distribution. However, the deviation of such detectors from ideal models can open side-channels for an eavesdropper, Eve, to exploit. The phenomenon of backflashes, whereby APDs reemit photons after detecting a photon, gives Eve the opportunity to passively learn the information carried by the detected photon without the need to actively interact with the legitimate receiver, Bob. While this has been observed in slow-gated detectors, it has not been investigated in fast-gated APDs where it has been posited that this effect would be lessened. Here, we perform the first experiment to characterize the security threat that backflashes provide in a GHz-gated self-differencing APD using the metric of information leakage. We find that, indeed, the information leakage is lower than that reported for slower-gated detectors, and we show that its effect on the secure key rate is negligible. We also relate the rate of backflash events to the APD dark current, thereby suggesting that their origin is the InP multiplication region in the APD.