Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

IEEE Access

Practical Side-Channel Attack on Free-Space QKD Systems With Misaligned Sources and Countermeasures

Pablo Arteaga-Díaz, Daniel Cano, Verónica Fernández

Published Jan 1, 2022• 22 citations
Publisher

Abstract

Practical implementations of quantum key distribution (QKD) protocols can introduce additional degrees of freedom in the quantum states that may render them distinguishable to an eavesdropper. This is the case of QKD systems using a different laser source to generate each quantum states, which can lead to temporal, spectral and/or spatial differences among them that can be exploited by a malicious party to extract information of the key. In this work we characterize, and experimentally verify, a side-channel attack on spatially distinguishable states against free-space QKD systems with misaligned laser sources. Specifically, for those emitting Gaussian beams, which is the most common case in free-space QKD. The attack makes theoretically unsafe any QKD system with any angular misalignment between the laser sources. Finally, we propose two countermeasures to eliminate the spatial distinguishability and secure the key exchange.

DOI
10.1109/access.2022.3196677

Related papers

Spatial Mode Side Channels in Free-Space QKD Implementations

Markus Rau, Tobias Vogl, Giacomo Corrielli +4 more

The quantum key distribution protocol uses one degree of freedom of a single quantum system to encode information. If this information has correlations with the system's other degrees of freedom, or if the measurement efficiencies on the receiver side depend on them, a security loophole called side channel is created. An eavesdropper can exploit it to gain information without disturbing the system, and thus, without revealing the attack. Here, we analyze side channels in a free-space QKD sender and receiver implementation and focus especially on the dependencies and side channels for the spatial degree of freedom.

IEEE Journal of Selected Topics in Quantum Electronics•Nov 20, 2014•34 citations

Side-Channel Attacks to QKD Systems and Mitigation Techniques

Christiano M. S. Nascimento, Guilherme P. Temporão

Quantum Key Distribution (QKD) promises information-theoretic security based on the fundamental laws of quantum mechanics. However, practical implementations deviate from idealized models and are therefore susceptible to side-channel attacks that exploit physical imperfections rather than theoretical vulnerabilities. Over the past two decades, a wide range of attacks have been demonstrated against QKD systems, including those targeting detectors, sources, timing information, power consumption, and electromagnetic emissions. This paper addresses a selection of a few side-channel attacks reported in the literature, classifying them according to their underlying physical mechanisms and attack strategies. We analyze their impact on the security of different QKD protocols and platforms, and highlight how experimental demonstrations have shaped the community's understanding of implementation security. In addition, we present and evaluate mitigation techniques proposed to date, such as device-independent and measurement-device-independent QKD, hardware countermeasures, monitoring strategies, and so on. We also identify open challenges and promising directions for enhancing the robustness of future quantum communication systems.

SBMO/IEEE MTT-S International Microwave and Optoelectronics Conference (IMOC)•Nov 9, 2025•0 citations

The practical issues of side-channel-secure quantum key distribution

Cong Jiang, Hu, Xiao-Long, Zong‐Wen Yu +2 more

Quantum Key Distribution (QKD) leverages the principles of quantum mechanics to provide theoretically unconditional security for cryptographic key sharing. However, practical implementations remain vulnerable due to non-ideal devices and potential security loopholes at both the source and detection sides of QKD systems. The side-channel-secure (SCS) protocol addresses these challenges by encoding bits in vacuum and non-vacuum states and introducing a third-party measurement node, thereby repelling attacks targeting the detection side as well as external lab attacks on the source side. In this work, we consider the state-dependent correlated errors and Trojan-horse attack while preserving the SCS protocol's key advantage-specifically, requiring only upper bounds on intensities characterization without needing a full description of quantum states in infinite dimensions. Numerical results demonstrate that when the reflected light intensity from Trojan-horse attacks falls below $10^{-6}$, Eve can scarcely extract additional key information from the reflections. This work makes the SCS protocol more practical.

arXiv:2508.15197•Aug 21, 2025•0 citations

Bounding passive light-source side channels in quantum key distribution via Hong-Ou-Mandel interference

Alexander Duplinskiy, Сыч Денис Васильевич

Passive side-channel attacks in quantum key distribution (QKD) aim at obtaining information about the quantum signals without disturbing them and hence compromise real-world QKD security. Currently, there are no reliable tools for the assessment of QKD signal generation imperfections. In this work we propose a generic experimental method which allows to upper-bound QKD light-source imperfections and directly integrate them into the modern security proofs. The method relies on Hong-Ou-Mandel interference between different emitted signals: the maximum interference visibility reveals overall signal distinguishability that could lead to passive side-channel information leakage. We apply it for the standard decoy-state BB84 protocol and calculate a lower bound on the secret key rate for realistic values of interference visibility. The method can be readily implemented in practical QKD setups and is especially relevant for multiple-laser QKD systems such as the one installed on the Micius satellite.

Physical Review A•Jul 6, 2021•17 citations

Effect of frequency side channels on the security of practical quantum key distribution

Xiao‐Lei Jiang, Yuyao Guo, Yan-Yang Zhou +8 more

Quantum key distribution (QKD) provides an information-theoretic secure method for communication. Measurement-device-independent QKD (MDI-QKD) demonstrates immunity to all detection-side vulnerabilities while offering exceptional security and practicality. Nevertheless, imperfections in source-side devices may still introduce security risks that necessitate precise characterization and evaluation in practical security analyses. In this study, we demonstrate that the inherent frequency-shifting properties of the Mach-Zehnder intensity modulator can induce distinguishable features between signal and decoy states in the frequency domain, fundamentally undermining the core premise of the decoy-state protocol. Experimental characterization reveals that such spectral distinguishability exhibits strong dependence on three key parameters: modulation voltage, pulse width, and modulation scheme. Leveraging this vulnerability, we develop a frequency side channel attack framework applicable to both MDI-QKD and its variant mode-pairing QKD (MP-QKD), evaluate its impact on protocol security, and ultimately devise corresponding countermeasures.

Optics Express•Nov 11, 2025•1 citation

Bounding light source side channels in QKD via Hong-Ou-Mandel interference

Alexander Duplinskiy, Сыч Денис Васильевич

Side-channel attacks on practical quantum key distribution systems compromise its security. Although some of these attacks can be taken into account, the general recipe of how to eliminate all side-channel flaws is still missing. In this work, we propose a method for estimation of the total passive side-channel information leakage from the Alice's light source. The method relies on Hong-Ou-Mandel interference between different signals emitted by Alice, which reveals their overall mode mismatch without the necessity to measure all individual degrees of freedom independently. We include experimental values of interference visibility in the security proof for the decoy-state BB84 protocol, and lower-bound the secure key rate for realistic light sources. The obtained results provide a tool that can be used for certification of the current QKD systems and pave the way towards the loophole-free design of the future ones.

arXiv:1908.04703•Aug 13, 2019•0 citations
Practical implementations of quantum key distribution (QKD) protocols can introduce additional degrees of freedom in the quantum states that may render them distinguishable to an eavesdropper. This is the case of QKD systems using a different laser source to generate each quantum states, which can lead to temporal, spectral and/or spatial differences among them that can be exploited by a malicious party to extract information of the key. In this work we characterize, and experimentally verify, a side-channel attack on spatially distinguishable states against free-space QKD systems with misaligned laser sources. Specifically, for those emitting Gaussian beams, which is the most common case in free-space QKD. The attack makes theoretically unsafe any QKD system with any angular misalignment between the laser sources. Finally, we propose two countermeasures to eliminate the spatial distinguishability and secure the key exchange.
The quantum key distribution protocol uses one degree of freedom of a single quantum system to encode information. If this information has correlations with the system's other degrees of freedom, or if the measurement efficiencies on the receiver side depend on them, a security loophole called side channel is created. An eavesdropper can exploit it to gain information without disturbing the system, and thus, without revealing the attack. Here, we analyze side channels in a free-space QKD sender and receiver implementation and focus especially on the dependencies and side channels for the spatial degree of freedom.
Quantum Key Distribution (QKD) promises information-theoretic security based on the fundamental laws of quantum mechanics. However, practical implementations deviate from idealized models and are therefore susceptible to side-channel attacks that exploit physical imperfections rather than theoretical vulnerabilities. Over the past two decades, a wide range of attacks have been demonstrated against QKD systems, including those targeting detectors, sources, timing information, power consumption, and electromagnetic emissions. This paper addresses a selection of a few side-channel attacks reported in the literature, classifying them according to their underlying physical mechanisms and attack strategies. We analyze their impact on the security of different QKD protocols and platforms, and highlight how experimental demonstrations have shaped the community's understanding of implementation security. In addition, we present and evaluate mitigation techniques proposed to date, such as device-independent and measurement-device-independent QKD, hardware countermeasures, monitoring strategies, and so on. We also identify open challenges and promising directions for enhancing the robustness of future quantum communication systems.
Quantum Key Distribution (QKD) leverages the principles of quantum mechanics to provide theoretically unconditional security for cryptographic key sharing. However, practical implementations remain vulnerable due to non-ideal devices and potential security loopholes at both the source and detection sides of QKD systems. The side-channel-secure (SCS) protocol addresses these challenges by encoding bits in vacuum and non-vacuum states and introducing a third-party measurement node, thereby repelling attacks targeting the detection side as well as external lab attacks on the source side. In this work, we consider the state-dependent correlated errors and Trojan-horse attack while preserving the SCS protocol's key advantage-specifically, requiring only upper bounds on intensities characterization without needing a full description of quantum states in infinite dimensions. Numerical results demonstrate that when the reflected light intensity from Trojan-horse attacks falls below 10−610^{-6}10−6, Eve can scarcely extract additional key information from the reflections. This work makes the SCS protocol more practical.
Passive side-channel attacks in quantum key distribution (QKD) aim at obtaining information about the quantum signals without disturbing them and hence compromise real-world QKD security. Currently, there are no reliable tools for the assessment of QKD signal generation imperfections. In this work we propose a generic experimental method which allows to upper-bound QKD light-source imperfections and directly integrate them into the modern security proofs. The method relies on Hong-Ou-Mandel interference between different emitted signals: the maximum interference visibility reveals overall signal distinguishability that could lead to passive side-channel information leakage. We apply it for the standard decoy-state BB84 protocol and calculate a lower bound on the secret key rate for realistic values of interference visibility. The method can be readily implemented in practical QKD setups and is especially relevant for multiple-laser QKD systems such as the one installed on the Micius satellite.
Quantum key distribution (QKD) provides an information-theoretic secure method for communication. Measurement-device-independent QKD (MDI-QKD) demonstrates immunity to all detection-side vulnerabilities while offering exceptional security and practicality. Nevertheless, imperfections in source-side devices may still introduce security risks that necessitate precise characterization and evaluation in practical security analyses. In this study, we demonstrate that the inherent frequency-shifting properties of the Mach-Zehnder intensity modulator can induce distinguishable features between signal and decoy states in the frequency domain, fundamentally undermining the core premise of the decoy-state protocol. Experimental characterization reveals that such spectral distinguishability exhibits strong dependence on three key parameters: modulation voltage, pulse width, and modulation scheme. Leveraging this vulnerability, we develop a frequency side channel attack framework applicable to both MDI-QKD and its variant mode-pairing QKD (MP-QKD), evaluate its impact on protocol security, and ultimately devise corresponding countermeasures.
Side-channel attacks on practical quantum key distribution systems compromise its security. Although some of these attacks can be taken into account, the general recipe of how to eliminate all side-channel flaws is still missing. In this work, we propose a method for estimation of the total passive side-channel information leakage from the Alice's light source. The method relies on Hong-Ou-Mandel interference between different signals emitted by Alice, which reveals their overall mode mismatch without the necessity to measure all individual degrees of freedom independently. We include experimental values of interference visibility in the security proof for the decoy-state BB84 protocol, and lower-bound the secure key rate for realistic light sources. The obtained results provide a tool that can be used for certification of the current QKD systems and pave the way towards the loophole-free design of the future ones.