Decoy-state measurement-device-independent quantum key distribution (MDI-QKD) is regarded as one of the most promising protocols since it is physically immune to all fatal detection-side attacks. However, the loopholes in the source side still open side channels to eavesdroppers. Previous work has indicated that a system is insecure if its decoy-state modulation is inaccurate, but a practical method for Eve to exploit the inaccurate modulation is still absent. In this work, we propose a practical hacking method and provide a detailed theoretical analysis. Using our method, we experimentally hacked a MDI-QKD system and successfully obtained all final keys. By demonstrating the hacking experiment, we hope to bring attention to source-side security and provide inspiration for the development of protocols with better source-side security.
Decoy-state measurement-device-independent quantum key distribution (MDI-QKD) is regarded as one of the most promising protocols since it is physically immune to all fatal detection-side attacks. However, the loopholes in the source side still open side channels to eavesdroppers. Previous work has indicated that a system is insecure if its decoy-state modulation is inaccurate, but a practical method for Eve to exploit the inaccurate modulation is still absent. In this work, we propose a practical hacking method and provide a detailed theoretical analysis. Using our method, we experimentally hacked a MDI-QKD system and successfully obtained all final keys. By demonstrating the hacking experiment, we hope to bring attention to source-side security and provide inspiration for the development of protocols with better source-side security.
Measurement-device-independent quantum key distribution (MDI-QKD) protocol was proposed to remove all the detector side channel attacks, while its security relies on the trusted encoding systems. Here we propose a one-sided MDI-QKD (1SMDI-QKD) protocol, which enjoys detection loophole-free advantage, and at the same time weakens the state preparation assumption in MDI-QKD. The 1SMDI-QKD can be regarded as a modified MDI-QKD, in which Bob's encoding system is trusted, while Alice's is uncharacterized. For the practical implementation, we also provide a scheme by utilizing coherent light source with an analytical two decoy state estimation method. Simulation with realistic experimental parameters shows that the protocol has a promising performance, and thus can be applied to practical QKD applications.
Cryptography is essential for secure communication in the digital era. Today, public-key cryptography is widely employed, and has provided an efficient method for encrypting content and ensuring both confidentiality and authenticity of electronic communications. However, the security of these systems is based on assumptions of computational hardness within the constraints of current computing capability. Thus, as quantum computing becomes a reality, public-key algorithms will be genuinely vulnerable to attack. By contrast, quantum cryptography, which is based on quantum physics instead of mathematical assumptions, is able to achieve information-theoretic security. \n \nAdvances in practical quantum cryptographic systems have not kept pace with theory, where an eavesdropper can relatively easily exploit loopholes in practical implementations to compromise theory-proved security. Bridging the gap between perfect theory and imperfect practice has become a priority for the growing field of quantum key distribution (QKD), which has strived to strengthen the practical security of QKD systems. Among all the countermeasures against quantum hacking, the measurement-device-independent (MDI) QKD protocol is promising because it is immune to all side-channel attacks on measurement devices. However, the MDI QKD protocol has some limitations that critically restrict its practical usefulness. Technically, the MDI scheme is not compatible with existing QKD systems, and produces a low key rate. In addition, the theory underlying MDI QKD security is based on the use of trusted source stations. Thus, this protocol is not a universal solution. This thesis further investigates the practical security of quantum cryptography in and beyond MDI quantum cryptography. \n \nTo overcome the technical limitations of MDI QKD, we first evaluate two other countermeasures against imperfect detections. The first is an industrial patch based on random detection efficiency, recently implemented by ID Quantique in the commercial Clavis2 QKD system. While powerful, experimental testing shows that this countermeasure is not sufficient to defeat the detector blinding attack. The second countermeasure aims to achieve a higher key rate than MDI QKD while maintaining the same security properties. However, our research shows that detector-device-independent (DDI) QKD security is not equivalent to that of MDI QKD and, further, that DDI QKD is insecure against detector side-channel attacks. \n \nWhile this initial work points to the superior performance of MDI QKD systems, core challenges remain. The fundamental security assumption adopted for MDI QKD systems, regarding the exclusive use of trustable source stations, cannot always be satisfied in practice. Our study revealed several side channels of source devices. The first is disclosed from the implementation of a decoy-state protocol, which is widely used in QKD systems with weak coherent sources. The pump-current-modulated intensities result in a timing mismatch between the signal and decoy states, violating the key assumption in the decoy-state QKD protocol. Moreover, an active Eve can break the basic assumption about photon numbers in the QKD system. In this work, we experimentally demonstrate a laser seeding attack on the laser source, which shows that Eve can increase the emission power of the laser diode. Furthermore, by shining a high-power laser into an optical attenuator, Eve can decrease the attenuation values. The increase in laser emission power and the decrease in attenuation leads to an increase in mean photon numbers. \n \nIn summary, MDI QKD is a milestone in quantum cryptography. However, this thesis indicates the importance of continued investigations into the practical security of MDI QKD. The analysis of practical security should be extended to other countermeasures against side-channel attacks and the source stations in MDI QKD systems. Practical quantum hacking and security analysis promote the development of quantum cryptographic systems, which will eventually achieve the unconditional security claimed in theory.
Measurement-device-independent quantum key distribution (MDI-QKD), which is immune to all detector side-channel attacks, is the most promising solution to the security issues in practical quantum key distribution systems. Although several experimental demonstrations of MDI-QKD have been reported, they all make one crucial but not yet verified assumption, that is, there are no flaws in state preparation. Such an assumption is unrealistic and security loopholes remain in the source. Here we present a MDI-QKD experiment with the modulation error taken into consideration. By applying the loss-tolerant security proof by Tamaki et al. [Phys. Rev. A 90, 052314 (2014)], we distribute secure keys over fiber links up to 40 km with imperfect sources, which would not have been possible under previous security proofs. By simultaneously closing loopholes at the detectors and a critical loophole---modulation error in the source, our work shows the feasibility of secure QKD with practical imperfect devices.
Measurement-device-independent quantum key distribution (MDI-QKD) with the active decoy state method can remove all detector loopholes, and resist the imperfections of sources. But it may lead to side channel attacks and break the security of QKD system. In this paper, we apply the passive decoy state method to the MDI-QKD based on polarization encoding mode. Not only all attacks on detectors can be removed, but also the side channel attacks on sources can be overcome. We get that the MDI-QKD with our passive decoy state method can have a performance comparable to the protocol with the active decoy state method. To fit for the demand of practical application, we discuss intensity fluctuation in the security analysis of MDI-QKD protocol using passive decoy state method, and derive the key generation rate for our protocol with intensity fluctuation. It shows that intensity fluctuation has an adverse effect on the key generation rate which is non-negligible, especially in the case of small data size of total transmitting signals and long distance transmission. We give specific simulations on the relationship between intensity fluctuation and the key generation rate. Furthermore, the statistical fluctuation due to the finite length of data is also taken into account.
To date, only active-decoy-state methods have been adopted in current measurement-device-independent (MDI) quantum key distribution (QKD) protocols, causing security loopholes when modulating multiple light intensities with practical devices. To solve this problem, the passive-decoy-state method will be a good choice. Until today practical passive-decoy-state MDI QKD is still missing. In this paper, based on a recently discussed structure of heralded single-photon sources, we propose a passive-decoy-state MDI QKD protocol. In present work, one does not need to modulate light sources into different intensities, but utilizes the built-in local detection events to passively generate different decoy states. Furthermore, through carrying out an appropriate mathematical method, we are able to give very precise estimations for single-photon-pair contributions. As a result, our protocol can exhibit distinct advantages compared with state-of-the-art MDI QKD schemes even when the finite-key-size effect is taken into account. Therefore, our protocol seems a promising candidate to enhance both the security and performance of MDI QKD in practical implementation.
Measurement-device-independent quantum key dis-tribution (MDI-QKD) can remove all detector side-channel attacks. However, there are still some assumptions on source preparations in MDI-QKD protocols, which are too strict to achieve in real-life implementations. To remove those assump-tions, here we construct a scheme on characterizing the source modulation errors with Hong-Ou-Mandel (HOM) interferences. Furthermore, we combine it with the decoy-state method and present the security analysis. Besides, finite data-size effects are taken into account as well. Simulation results verify the feasibility and practicability of this scheme. It thus seems a very promising candidate for constructing high-security network in the near future.