Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Entropy

Detecting a Photon-Number Splitting Attack in Decoy-State Measurement-Device-Independent Quantum Key Distribution via Statistical Hypothesis Testing

Xiaoming Chen, Lei Chen, Yalong Yan

Published Sep 2, 2022• 6 citations
Publisher

Abstract

Measurement-device-independent quantum key distribution (MDI-QKD) is innately immune to all detection-side attacks. Due to the limitations of technology, most MDI-QKD protocols use weak coherent photon sources (WCPs), which may suffer from a photon-number splitting (PNS) attack from eavesdroppers. Therefore, the existing MDI-QKD protocols also need the decoy-state method, which can resist PNS attacks very well. However, the existing decoy-state methods do not attend to the existence of PNS attacks, and the secure keys are only generated by single-photon components. In fact, multiphoton pulses can also form secure keys if we can confirm that there is no PNS attack. For simplicity, we only analyze the weaker version of a PNS attack in which a legitimate user's pulse count rate changes significantly after the attack. In this paper, under the null hypothesis of no PNS attack, we first determine whether there is an attack or not by retrieving the missing information of the existing decoy-state MDI-QKD protocols via statistical hypothesis testing, extract a normal distribution statistic, and provide a detection method and the corresponding Type I error probability. If the result is judged to be an attack, we use the existing decoy-state method to estimate the secure key rate. Otherwise, all pulses with the same basis leading to successful Bell state measurement (BSM) events including both single-photon pulses and multiphoton pulses can be used to generate secure keys, and we give the formula of the secure key rate in this case. Finally, based on actual experimental data from other literature, the associated experimental results (e.g., the significance level is 5%) show the correctness of our method.

DOI
10.3390/e24091232

Related papers

Detecting the possibility of a type of photon number splitting attack in decoy-state quantum key distribution

Xiao-Ming Chen, Lei Chen, Yalong Yan

The existing decoy-state quantum key distribution (QKD) beating photon-number-splitting (PNS) attack provides a more accurate method to estimate the secure key rate, while it still considers that only single-photon pulses can generate secure keys in any case. However, multiphoton pulses can also generate secure keys if we can detect the possibility of PNS attack in the channel. The ultimate goal of this line of research is to confirm the absence of all types of PNS attacks. In particular, the PNS attack mentioned and detected in this paper is only the weaker version of PNS attack which significantly changes the observed values of the legitimate users. In this paper, under the null hypothesis of no weaker version of PNS attack, we first determine whether there is an attack or not by retrieving the missing information of the existing decoy-state protocols, extract a Cauchy distribution statistic, and further provide a detection method and the type I error probability. If the result is judged to be an attack, we can use the existing decoy-state method and the GLLP formula to estimate the secure key rate. Otherwise, the pulses with the same basis received including both single-photon pulses and multiphoton pulses, can be used to generate the keys and we give the secure key rate in this case. Finally, the associated experiments we performed (i.e., the significance level is 5%) show the correctness of our method.

Chinese Physics B•Oct 17, 2022•2 citations

Security research on practical measurement-device-independent quantum key distribution

Wei Li, Shengmei Zhao

The ideal measurement-device-independent quantum key distribution (MDI-QKD), which is immune to all detector side-channel attacks, is built on the Bell state measurement of two single-photon states. However, in practical MDI-QKD where phase-randomized weak coherent pulses (PR-WCPs) are used, the mismatch between states preparation and measurement in X basis leads to the bit error rate of more than 25%, which poses a challenge to the security of QKD. In this paper, we provide a security analysis of practical MDI-QKD based on polarization coding. We analyze the Hong-Ou-Mandel interference of PR-WCPs and Poisson-distributed photon number states (PNs), and find that these two sources are equivalent in MDI-QKD. The security analysis based on entanglement distillation is carried out on PNs, and the measurement results in Z basis and X basis are averaged to overcome the noncorrelation of the error rates in these two bases. Compared with GLLP scheme, a tighter key rate is obtained in this work, and the key rate deviates from the linear key rate bound in a short distance due to the finite proportion of multiphoton terms.

Physical Review A•Oct 28, 2022•3 citations

Practical decoy-state measurement-device-independent quantum key distribution

Shi‐Hai Sun, Ming Yuan Gao, Chunyan Li +1 more

Measurement-device-independent quantum key distribution (MDI-QKD) is immune to all the detection attacks; thus when it is combined with the decoy-state method, the final key is unconditionally secure, even if a practical weak coherent source is used by Alice and Bob. However, until now, the analysis of decoy-state MDI-QKD with a weak coherent source is incomplete. In this paper, we derive, with only vacuum+weak decoy state, some tight formulas to estimate the lower bound of yield and the upper bound of error rate for the fraction of signals in which both Alice and Bob send a single-photon pulse to the untrusted third party Charlie. The numerical simulations show that our method with only vacuum+weak decoy state can asymptotically approach the theoretical limit of the infinite number of decoy states. Furthermore, the statistical fluctuation due to the finite length of date is also considered based on the standard statistical analysis.

arXiv:1305.7396•Physical Review A•May 29, 2013•65 citations

Measurement-device-independent quantum key distribution with modified coherent state

Mo Li, Chun-Mei Zhang, Zhen−Qiang Yin +4 more

The measurement-device-independent quantum key distribution (MDI-QKD) protocol has been proposed for the purpose of removing the detector side channel attacks. Due to the multiphoton events of coherent states sources, real-life implementations of MDI-QKD protocol must employ decoy states to beat the photon-number-splitting attack. Decoy states for MDI-QKD based on the weak coherent states (WCSs) have been studied recently. In this Letter, we propose to perform MDI-QKD protocol with modified coherent states (MCS) sources. We simulate the performance of MDI-QKD with the decoy states based on MCS sources. And our simulation indicates that both the secure-key rate and transmission distance can be improved evidently with MCS sources. The physics behind this improvement is that the probability of multiphoton events of the MCS is lower than that of WCSs while at the same time the probability of single-photon is higher.

arXiv:1402.2502•Optics Letters•Feb 6, 2014•27 citations

A quantitative detection method of photon-number-splitting attack for decoy-state quantum key distribution via statistical hypothesis testing

Xiaohong Chen, Lei Chen, Yan Yalong +1 more

The decoy-state quantum key distribution (QKD) has been proved to be a very effective way to defeat the photon-number-splitting (PNS) attack. The existing decoy-state QKD protocols mostly assume the length of pulses sent from a source is infinite, whereas in reality the length of pulses must be finite. Thus, these approaches may make mistakes but unfortunately all of them do not consider the error probability, which is crucial in the practical applications. In this paper, we present a quantitative detection method via statistical hypothesis testing for the first time and give the error probability. Meanwhile, the corresponding experiments we performed show the correctness of our scheme. Compared with other protocols, our method is more realizable and practical, since the length of pulses is finite in our scheme and the error probability is provided.

arXiv:2012.11387•Dec 21, 2020•0 citations

Photon-Number Splitting (PNS) Attacks in Weak Coherent Pulse QKD: Simulation and Countermeasures

Sharika Punjabi, Sakshi

For a start, Quantum Key Distribution offers security not depending on any fundamental assumption. However, actual realizations choose to use weak coherent pulses as photon sources, rather than the ideal single-photon state, which bears security weaknesses due to the emission of sporadic multi-photon states. These states can be used in Photon-Number Splitting (PNS) attacks, where the attacker intercepts and buffers photons of multi-photon pulses and forwards the rest, enabling partial recovery of the key without inducing detectable perturbations. This article presents a simulation-based approach to analyze PNS attacks with realistic channel conditions like losses, detector imperfections, and finite key lengths. The research also examines the performance of decoy-state countermeasures, that use variable-intensity pulses to statistically reveal eavesdropping and Simulation results confirm the dominant character of PNS on raw key rates for the no-countermeasure scenario and ensure optimal decoy-state schemes restore security by cutting single-photon contributions. Results establish that although WCP QKD is vulnerable to PNS attacks in theory, strict adoption of decoy-state protocols aided with monitoring and finite-key analysis can provide immunity against an adversary. The paper emphasizes the need for simulation-based, implementation-dependent security analysis in direction towards well-designed practical quantum cryptographic systems. [1] [2] [3] [4] [10] [8]

•Mar 23, 2026•0 citations
Measurement-device-independent quantum key distribution (MDI-QKD) is innately immune to all detection-side attacks. Due to the limitations of technology, most MDI-QKD protocols use weak coherent photon sources (WCPs), which may suffer from a photon-number splitting (PNS) attack from eavesdroppers. Therefore, the existing MDI-QKD protocols also need the decoy-state method, which can resist PNS attacks very well. However, the existing decoy-state methods do not attend to the existence of PNS attacks, and the secure keys are only generated by single-photon components. In fact, multiphoton pulses can also form secure keys if we can confirm that there is no PNS attack. For simplicity, we only analyze the weaker version of a PNS attack in which a legitimate user's pulse count rate changes significantly after the attack. In this paper, under the null hypothesis of no PNS attack, we first determine whether there is an attack or not by retrieving the missing information of the existing decoy-state MDI-QKD protocols via statistical hypothesis testing, extract a normal distribution statistic, and provide a detection method and the corresponding Type I error probability. If the result is judged to be an attack, we use the existing decoy-state method to estimate the secure key rate. Otherwise, all pulses with the same basis leading to successful Bell state measurement (BSM) events including both single-photon pulses and multiphoton pulses can be used to generate secure keys, and we give the formula of the secure key rate in this case. Finally, based on actual experimental data from other literature, the associated experimental results (e.g., the significance level is 5%) show the correctness of our method.
The existing decoy-state quantum key distribution (QKD) beating photon-number-splitting (PNS) attack provides a more accurate method to estimate the secure key rate, while it still considers that only single-photon pulses can generate secure keys in any case. However, multiphoton pulses can also generate secure keys if we can detect the possibility of PNS attack in the channel. The ultimate goal of this line of research is to confirm the absence of all types of PNS attacks. In particular, the PNS attack mentioned and detected in this paper is only the weaker version of PNS attack which significantly changes the observed values of the legitimate users. In this paper, under the null hypothesis of no weaker version of PNS attack, we first determine whether there is an attack or not by retrieving the missing information of the existing decoy-state protocols, extract a Cauchy distribution statistic, and further provide a detection method and the type I error probability. If the result is judged to be an attack, we can use the existing decoy-state method and the GLLP formula to estimate the secure key rate. Otherwise, the pulses with the same basis received including both single-photon pulses and multiphoton pulses, can be used to generate the keys and we give the secure key rate in this case. Finally, the associated experiments we performed (i.e., the significance level is 5%) show the correctness of our method.
The ideal measurement-device-independent quantum key distribution (MDI-QKD), which is immune to all detector side-channel attacks, is built on the Bell state measurement of two single-photon states. However, in practical MDI-QKD where phase-randomized weak coherent pulses (PR-WCPs) are used, the mismatch between states preparation and measurement in X basis leads to the bit error rate of more than 25%, which poses a challenge to the security of QKD. In this paper, we provide a security analysis of practical MDI-QKD based on polarization coding. We analyze the Hong-Ou-Mandel interference of PR-WCPs and Poisson-distributed photon number states (PNs), and find that these two sources are equivalent in MDI-QKD. The security analysis based on entanglement distillation is carried out on PNs, and the measurement results in Z basis and X basis are averaged to overcome the noncorrelation of the error rates in these two bases. Compared with GLLP scheme, a tighter key rate is obtained in this work, and the key rate deviates from the linear key rate bound in a short distance due to the finite proportion of multiphoton terms.
Measurement-device-independent quantum key distribution (MDI-QKD) is immune to all the detection attacks; thus when it is combined with the decoy-state method, the final key is unconditionally secure, even if a practical weak coherent source is used by Alice and Bob. However, until now, the analysis of decoy-state MDI-QKD with a weak coherent source is incomplete. In this paper, we derive, with only vacuum+weak decoy state, some tight formulas to estimate the lower bound of yield and the upper bound of error rate for the fraction of signals in which both Alice and Bob send a single-photon pulse to the untrusted third party Charlie. The numerical simulations show that our method with only vacuum+weak decoy state can asymptotically approach the theoretical limit of the infinite number of decoy states. Furthermore, the statistical fluctuation due to the finite length of date is also considered based on the standard statistical analysis.
The measurement-device-independent quantum key distribution (MDI-QKD) protocol has been proposed for the purpose of removing the detector side channel attacks. Due to the multiphoton events of coherent states sources, real-life implementations of MDI-QKD protocol must employ decoy states to beat the photon-number-splitting attack. Decoy states for MDI-QKD based on the weak coherent states (WCSs) have been studied recently. In this Letter, we propose to perform MDI-QKD protocol with modified coherent states (MCS) sources. We simulate the performance of MDI-QKD with the decoy states based on MCS sources. And our simulation indicates that both the secure-key rate and transmission distance can be improved evidently with MCS sources. The physics behind this improvement is that the probability of multiphoton events of the MCS is lower than that of WCSs while at the same time the probability of single-photon is higher.
The decoy-state quantum key distribution (QKD) has been proved to be a very effective way to defeat the photon-number-splitting (PNS) attack. The existing decoy-state QKD protocols mostly assume the length of pulses sent from a source is infinite, whereas in reality the length of pulses must be finite. Thus, these approaches may make mistakes but unfortunately all of them do not consider the error probability, which is crucial in the practical applications. In this paper, we present a quantitative detection method via statistical hypothesis testing for the first time and give the error probability. Meanwhile, the corresponding experiments we performed show the correctness of our scheme. Compared with other protocols, our method is more realizable and practical, since the length of pulses is finite in our scheme and the error probability is provided.
For a start, Quantum Key Distribution offers security not depending on any fundamental assumption. However, actual realizations choose to use weak coherent pulses as photon sources, rather than the ideal single-photon state, which bears security weaknesses due to the emission of sporadic multi-photon states. These states can be used in Photon-Number Splitting (PNS) attacks, where the attacker intercepts and buffers photons of multi-photon pulses and forwards the rest, enabling partial recovery of the key without inducing detectable perturbations. This article presents a simulation-based approach to analyze PNS attacks with realistic channel conditions like losses, detector imperfections, and finite key lengths. The research also examines the performance of decoy-state countermeasures, that use variable-intensity pulses to statistically reveal eavesdropping and Simulation results confirm the dominant character of PNS on raw key rates for the no-countermeasure scenario and ensure optimal decoy-state schemes restore security by cutting single-photon contributions. Results establish that although WCP QKD is vulnerable to PNS attacks in theory, strict adoption of decoy-state protocols aided with monitoring and finite-key analysis can provide immunity against an adversary. The paper emphasizes the need for simulation-based, implementation-dependent security analysis in direction towards well-designed practical quantum cryptographic systems. [1] [2] [3] [4] [10] [8]