Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Heliyon

Counterfactual quantum key distribution with untrusted detectors

Ya-Qian Lin, Meng Wang, Xiuqing Yang, Hongwei Liu

Published Feb 1, 2023• 5 citations
Publisher

Abstract

Compared with the traditional BB84 protocol, the counterfactual quantum key distribution (QKD) does not rely on any signal travelling in the quantum channel, and therefore can present a security advantage where Eve cannot fully access signal. However, the practical system may be damaged in a scenario where the devices are untrusted. In this paper, we analyze the security of counterfactual QKD in untrusted detectors scenario. We show that the requirement to disclose "which detector clicked" has become the main loophole in all counterfactual QKD versions. An eavesdropping scheme which is similar to the memory attack on device-independent QKD could break its security by exploiting detectors' imperfections. We consider two different counterfactual QKD protocols and analyze their security against this major loophole. One is a modified Noh09 protocol, which would be secure in untrusted detectors context. Another is a variant of counterfactual QKD with high efficiency (Phys. Rev. A 104 (2021) 022424) against a series of detectors side-channel attacks as well as against other attacks that exploit detectors imperfections.

DOI
10.1016/j.heliyon.2023.e13719

Related papers

Insecurity of Detector-Device-Independent Quantum Key Distribution

Shihan Sajeed, Anqi Huang, Shi‐Hai Sun +3 more

Detector-device-independent quantum key distribution (DDI-QKD) held the promise of being robust to detector side channels, a major security loophole in quantum key distribution (QKD) implementations. In contrast to what has been claimed, however, we demonstrate that the security of DDI-QKD is not based on postselected entanglement, and we introduce various eavesdropping strategies that show that DDI-QKD is in fact insecure against detector side-channel attacks as well as against other attacks that exploit devices' imperfections of the receiver. Our attacks are valid even when the QKD apparatuses are built by the legitimate users of the system themselves, and thus, free of malicious modifications, which is a key assumption in DDI-QKD.

arXiv:1607.05814•Physical Review Letters•Dec 16, 2016•63 citations

Quantum key distribution with untrusted detectors

P. González, Lorena Rebón, Thiago Ferreira da Silva +6 more

Side-channel attacks currently constitute the main challenge for quantum key distribution (QKD) to bridge theory with practice. So far two main approaches have been introduced to address this problem, (full) device-independent QKD and measurement-device-independent QKD. Here we present a third solution that might exceed the performance and practicality of the previous two in circumventing detector side-channel attacks, which arguably is the most hazardous part of QKD implementations. Our proposal has, however, one main requirement: the legitimate users of the system need to ensure that their labs do not leak any unwanted information to the outside. The security in the low-loss regime is guaranteed, while in the high-loss regime we already prove its robustness against some eavesdropping strategies.

arXiv:1410.1422•Physical Review A•Aug 18, 2015•24 citations

Trustworthiness of detectors in quantum key distribution with untrusted detectors

Bing Qi

Measurement-device-independent quantum key distribution (MDI-QKD) protocol has been demonstrated as a viable solution to detector side-channel attacks. Recently, to bridge the strong security of MDI-QKD with the high efficiency of conventional QKD, the detector-device-independent (DDI) QKD has been proposed. One crucial assumption made in DDI-QKD is that the untrusted Bell state measurement (BSM) located inside the receiver's laboratory cannot send any unwanted information to the outside. Here, we show that if the BSM is completely untrusted, a simple scheme would allow the BSM to send information to the outside. Combined with Trojan horse attacks, this scheme could allow an eavesdropper to gain information of the quantum key without being detected. To prevent the above attack, either countermeasures to Trojan horse attacks or some trustworthiness to the ``untrusted'' BSM device is required.

arXiv:1410.3685•Physical Review A•Feb 25, 2015•20 citations

Side-Channel Attacks to QKD Systems and Mitigation Techniques

Christiano M. S. Nascimento, Guilherme P. Temporão

Quantum Key Distribution (QKD) promises information-theoretic security based on the fundamental laws of quantum mechanics. However, practical implementations deviate from idealized models and are therefore susceptible to side-channel attacks that exploit physical imperfections rather than theoretical vulnerabilities. Over the past two decades, a wide range of attacks have been demonstrated against QKD systems, including those targeting detectors, sources, timing information, power consumption, and electromagnetic emissions. This paper addresses a selection of a few side-channel attacks reported in the literature, classifying them according to their underlying physical mechanisms and attack strategies. We analyze their impact on the security of different QKD protocols and platforms, and highlight how experimental demonstrations have shaped the community's understanding of implementation security. In addition, we present and evaluate mitigation techniques proposed to date, such as device-independent and measurement-device-independent QKD, hardware countermeasures, monitoring strategies, and so on. We also identify open challenges and promising directions for enhancing the robustness of future quantum communication systems.

SBMO/IEEE MTT-S International Microwave and Optoelectronics Conference (IMOC)•Nov 9, 2025•0 citations

Security proof of Counterfactual Quantum Cryptography against General Intercept-resend Attacks and Its Vulnerability

Sheng Zhang, Jian Wang, Chaojing Tang +1 more

Counterfactual quantum cryptography, recently proposed by Noh, is featured with no transmission of signal particles. This exhibits evident security advantages, such as its immunity to the well-known photon-number-splitting attack. In this paper, the theoretical security of counterfactual quantum cryptography protocol against the general intercept-resend attacks is proved by bounding the information of an eavesdropper Eve more tightly than in Yin's proposal [Phys. Rev. A 82 042335 (2010)]. It is also shown that practical counterfactual quantum cryptography implementations may be vulnerable when equipped with imperfect apparatuses, by proving that a negative key rate can be achieved when Eve launches a time-shift attack based on imperfect detector efficiency.

•Aug 18, 2016•10 citations

Security proof of counterfactual quantum cryptography against general intercept-resend attacks and its vulnerability

Sheng Zhang, Jian Wang, Chao-Jing Tang

Counterfactual quantum cryptography, recently proposed by Noh, is featured with no transmission of signal particles. This exhibits evident security advantages, such as its immunity to the well-known photon-number-splitting attack. In this paper, the theoretical security of counterfactual quantum cryptography protocol against the general intercept-resend attacks is proved by bounding the information of an eavesdropper Eve more tightly than in Yin's proposal [ Phys. Rev. A 82 042335 (2010) ]. It is also shown that practical counterfactual quantum cryptography implementations may be vulnerable when equipped with imperfect apparatuses, by proving that a negative key rate can be achieved when Eve launches a time-shift attack based on imperfect detector efficiency.

arXiv:1103.0601•Chinese Physics B•Jun 1, 2012•12 citations
Compared with the traditional BB84 protocol, the counterfactual quantum key distribution (QKD) does not rely on any signal travelling in the quantum channel, and therefore can present a security advantage where Eve cannot fully access signal. However, the practical system may be damaged in a scenario where the devices are untrusted. In this paper, we analyze the security of counterfactual QKD in untrusted detectors scenario. We show that the requirement to disclose "which detector clicked" has become the main loophole in all counterfactual QKD versions. An eavesdropping scheme which is similar to the memory attack on device-independent QKD could break its security by exploiting detectors' imperfections. We consider two different counterfactual QKD protocols and analyze their security against this major loophole. One is a modified Noh09 protocol, which would be secure in untrusted detectors context. Another is a variant of counterfactual QKD with high efficiency (Phys. Rev. A 104 (2021) 022424) against a series of detectors side-channel attacks as well as against other attacks that exploit detectors imperfections.
Detector-device-independent quantum key distribution (DDI-QKD) held the promise of being robust to detector side channels, a major security loophole in quantum key distribution (QKD) implementations. In contrast to what has been claimed, however, we demonstrate that the security of DDI-QKD is not based on postselected entanglement, and we introduce various eavesdropping strategies that show that DDI-QKD is in fact insecure against detector side-channel attacks as well as against other attacks that exploit devices' imperfections of the receiver. Our attacks are valid even when the QKD apparatuses are built by the legitimate users of the system themselves, and thus, free of malicious modifications, which is a key assumption in DDI-QKD.
Side-channel attacks currently constitute the main challenge for quantum key distribution (QKD) to bridge theory with practice. So far two main approaches have been introduced to address this problem, (full) device-independent QKD and measurement-device-independent QKD. Here we present a third solution that might exceed the performance and practicality of the previous two in circumventing detector side-channel attacks, which arguably is the most hazardous part of QKD implementations. Our proposal has, however, one main requirement: the legitimate users of the system need to ensure that their labs do not leak any unwanted information to the outside. The security in the low-loss regime is guaranteed, while in the high-loss regime we already prove its robustness against some eavesdropping strategies.
Measurement-device-independent quantum key distribution (MDI-QKD) protocol has been demonstrated as a viable solution to detector side-channel attacks. Recently, to bridge the strong security of MDI-QKD with the high efficiency of conventional QKD, the detector-device-independent (DDI) QKD has been proposed. One crucial assumption made in DDI-QKD is that the untrusted Bell state measurement (BSM) located inside the receiver's laboratory cannot send any unwanted information to the outside. Here, we show that if the BSM is completely untrusted, a simple scheme would allow the BSM to send information to the outside. Combined with Trojan horse attacks, this scheme could allow an eavesdropper to gain information of the quantum key without being detected. To prevent the above attack, either countermeasures to Trojan horse attacks or some trustworthiness to the ``untrusted'' BSM device is required.
Quantum Key Distribution (QKD) promises information-theoretic security based on the fundamental laws of quantum mechanics. However, practical implementations deviate from idealized models and are therefore susceptible to side-channel attacks that exploit physical imperfections rather than theoretical vulnerabilities. Over the past two decades, a wide range of attacks have been demonstrated against QKD systems, including those targeting detectors, sources, timing information, power consumption, and electromagnetic emissions. This paper addresses a selection of a few side-channel attacks reported in the literature, classifying them according to their underlying physical mechanisms and attack strategies. We analyze their impact on the security of different QKD protocols and platforms, and highlight how experimental demonstrations have shaped the community's understanding of implementation security. In addition, we present and evaluate mitigation techniques proposed to date, such as device-independent and measurement-device-independent QKD, hardware countermeasures, monitoring strategies, and so on. We also identify open challenges and promising directions for enhancing the robustness of future quantum communication systems.
Counterfactual quantum cryptography, recently proposed by Noh, is featured with no transmission of signal particles. This exhibits evident security advantages, such as its immunity to the well-known photon-number-splitting attack. In this paper, the theoretical security of counterfactual quantum cryptography protocol against the general intercept-resend attacks is proved by bounding the information of an eavesdropper Eve more tightly than in Yin's proposal [Phys. Rev. A 82 042335 (2010)]. It is also shown that practical counterfactual quantum cryptography implementations may be vulnerable when equipped with imperfect apparatuses, by proving that a negative key rate can be achieved when Eve launches a time-shift attack based on imperfect detector efficiency.
Counterfactual quantum cryptography, recently proposed by Noh, is featured with no transmission of signal particles. This exhibits evident security advantages, such as its immunity to the well-known photon-number-splitting attack. In this paper, the theoretical security of counterfactual quantum cryptography protocol against the general intercept-resend attacks is proved by bounding the information of an eavesdropper Eve more tightly than in Yin's proposal [ Phys. Rev. A 82 042335 (2010) ]. It is also shown that practical counterfactual quantum cryptography implementations may be vulnerable when equipped with imperfect apparatuses, by proving that a negative key rate can be achieved when Eve launches a time-shift attack based on imperfect detector efficiency.