Secure quantum key distribution (QKD) promises a revolutionizing in optical applications such as encryption, and imaging. However, their implementation in real-world scenarios continues to be challenged. The goal of this work is to verify the presence of photon number splitting (PNS) attack in quantum cryptography system based on BB84 protocol and to obtain a maximum secure key length as possible. This was realized through randomly interleaving decoy states with mean photon numbers of 5.38, 1.588, and 0.48 between the signal states with mean photon numbers of 2.69, 0.794, and 0.24. Experiment results show that a maximum secure key length obtained from our system, which ignores eavesdropping cases, is 125 with 20% decoy states and 82 with 50% decoy states for mean photon number of 0.794 for signal states and 1.588 for decoy states.
Secure quantum key distribution (QKD) promises a revolutionizing in optical applications such as encryption, and imaging. However, their implementation in real-world scenarios continues to be challenged. The goal of this work is to verify the presence of photon number splitting (PNS) attack in quantum cryptography system based on BB84 protocol and to obtain a maximum secure key length as possible. This was realized through randomly interleaving decoy states with mean photon numbers of 5.38, 1.588, and 0.48 between the signal states with mean photon numbers of 2.69, 0.794, and 0.24. Experiment results show that a maximum secure key length obtained from our system, which ignores eavesdropping cases, is 125 with 20% decoy states and 82 with 50% decoy states for mean photon number of 0.794 for signal states and 1.588 for decoy states.
Quantum Key Distribution (QKD) is an innovative quantum communications protocol which exploits the laws of quantum mechanics to generate unconditionally secure cryptographic keying material between two geographically separated parties. The unique nature of QKD shows promise for high-security applications such as those found in banking, government, and military environments. However, QKD systems contain implementation non-idealities which can negatively impact their performance and security.In particular, QKD systems often employ the decoy state protocol to improve system throughput and mitigate the threat of Photon Number Splitting (PNS) attacks. In this work, a detailed analysis of the decoy state protocol is conducted which optimizes both performance in terms of quantum throughput and security with respect to detecting PNS attacks. The results of this study uniquely demonstrate that the decoy state protocol can ensure PNS attacks are detected with high confidence, while maximizing the secure key generation rate at no additional cost. Additionally, implementation security guidance is provided for QKD system developers and users.
With the potential of quantum computers to compromise current public-key cryptosystems, Quantum Key Distribution (QKD), which is based on the physical laws of quantum mechanics, has garnered significant attention. However, while QKD security proofs typically assume ideal single-photon sources, realistic implementations rely on Weak Coherent Pulses (WCP) due to the difficulties associated with commercializing true single-photon sources. Unfortunately, the multi-photon components inherent in WCPs are vulnerable to Photon Number Splitting (PNS) attacks, which limits the secure transmission distance to a few tens of kilometers. This article introduces the Decoy State method, which effectively resolves this issue. Proposed by W.-Y. Hwang in 2003 and further advanced by H.-K. Lo and X.-B. Wang, this technique utilizes the random interleaving of pulses with different mean photon numbers during transmission. By doing so, it enables the accurate estimation of single-photon yield and error rates, thereby effectively detecting PNS attacks. Because it can be implemented using standard commercial lasers and intensity modulators, the Decoy State method has become the standard technology in most modern QKD systems. It serves as a core component for long-distance quantum communication, enabling major milestones reported recently. This article reviews the principles, mathematical analysis, and latest applications of the Decoy State method.
Quantum key distribution (QKD) is an unconditionally secure way of sharing secret cryptographic keys on a public channel. Recently, high dimension QKD protocols have gained focus to achieve better security against various attack models. Here, we focus on the robustness of high dimensional QKD protocol against two realistic attack models, i.e. photon number splitting (PNS) attack and beam splitter (BS) attack. We present the high dimensional quantum key distribution system that incorporates a decoy-state scheme with complex structured light (OAM modes) using the KMB09 protocol. The complete QKD system design with experimental setup details and evaluation results are presented. The experimental results show that our proposed decoy-state scheme is robust against both PNS and BS attacks.
Needs for providing security to end users have brought installation of quantum key distribution (QKD) in one-to-many access networks such as passive optical networks. In the networks, a presence of optical power splitters makes issues for secure key rate more important. However, researches for QKD in access networks have mainly focused on implementation issues rather than protocol development for key rate enhancement. Since secure key rate is theoretically limited by a protocol, researches without protocol development cannot overcome the limit of secure key rate given by a protocol. This brings need of researches for protocol development. In this paper, we provide a new approach which provides secure key rate enhancement over the conventional protocol. Specifically, we propose the secure key rate formula in a passive optical network by extending the secure key rate formula based on the decoy-state BB84 protocol. For a passive optical network, we provide a way that incorporates cooperation across end users. Then, we show that the way can mitigate a photon number splitting (PNS) attack which is crucial in an well known decoy BB84 protocol. Especially, the proposed scheme enables multi-photon states to serve as secure keys unlike the conventional decoy BB84 protocol. Numerical simulations demonstrate that our proposed scheme outperforms the decoy BB84 protocol in secure key rate.
In the last ten years, quantum computing has made substantial progress, presenting a strong challenge to traditional encryption methods that depend on solving discrete algorithmic problems. With the advent of the quantum era, conventional encryption methods are becoming more susceptible to attacks. This paper investigates possible attacks that exploit vulnerabilities in quantum cryptography, specifically investigating weaknesses in quantum key distribution (QKD) systems. The text thoroughly explores advanced attack strategies of photon number splitting highlight the existing vulnerabilities. The goal is to highlight the need for strong safeguards to protect against these threats, which requires continuous research and development to improve the robustness of quantum cryptography algorithms. The experimental investigation includes analyzing crucial parameters, including quantum channel length, loss, QKD protocol, quantum bit error rate (QBER), signal-to-noise ratio (SNR), as well as attack parameters such as probability of photon number splitting (PNS), eavesdropper distance, and detection efficiency. The evaluation includes performance indicators such as secure key rate, quantum bit error rate (QBER) vs distance, vulnerability to photon number splitting (PNS) attacks, and the influence on the pace of key generation.
The existing decoy-state quantum key distribution (QKD) beating photon-number-splitting (PNS) attack provides a more accurate method to estimate the secure key rate, while it still considers that only single-photon pulses can generate secure keys in any case. However, multiphoton pulses can also generate secure keys if we can detect the possibility of PNS attack in the channel. The ultimate goal of this line of research is to confirm the absence of all types of PNS attacks. In particular, the PNS attack mentioned and detected in this paper is only the weaker version of PNS attack which significantly changes the observed values of the legitimate users. In this paper, under the null hypothesis of no weaker version of PNS attack, we first determine whether there is an attack or not by retrieving the missing information of the existing decoy-state protocols, extract a Cauchy distribution statistic, and further provide a detection method and the type I error probability. If the result is judged to be an attack, we can use the existing decoy-state method and the GLLP formula to estimate the secure key rate. Otherwise, the pulses with the same basis received including both single-photon pulses and multiphoton pulses, can be used to generate the keys and we give the secure key rate in this case. Finally, the associated experiments we performed (i.e., the significance level is 5%) show the correctness of our method.