We propose and experimentally demonstrate a compatible physical-layer secure optical communication (PLSOC) system that integrates self-adaptive physical-layer key distribution (PLKD) and encryption (PLE) in optical coherent communication. Based on bit error rate difference of QAM signals mapped by asymmetric basis state Y-00 protocol, the secret key can be secretly exchanged over public fiber links without the pre-shared keys. Moreover, we perform a parameter self-adaptive strategy for practical and dynamic PLKD. The security of the key is evaluated in the case of a fiber-tapping attack. A secure hash algorithm, SHA3-512, is used to perform privacy amplification to obtain the virtually secure key. An error-free PLKD rate reaches 39.3 Kbits/s over 300 km ultra-low loss fiber. We experimentally enable the integration of the proposed PLKD scheme and quantum noise stream cipher (QNSC) with a single wavelength, same system. Q factor penalty of the integration system compared to the QNSC system is 3.7 dB (optical back-to-back) and 4.8 dB (300 km) respectively. By exploiting a common hardware platform, with the same wavelength, the proposed PLSOC system addresses the problem that PLKD and PLE are separately performed through independent optical fiber links or wavelengths. Since only digital signal processing is used, the scheme does not require extra hardware.
We propose and experimentally demonstrate a compatible physical-layer secure optical communication (PLSOC) system that integrates self-adaptive physical-layer key distribution (PLKD) and encryption (PLE) in optical coherent communication. Based on bit error rate difference of QAM signals mapped by asymmetric basis state Y-00 protocol, the secret key can be secretly exchanged over public fiber links without the pre-shared keys. Moreover, we perform a parameter self-adaptive strategy for practical and dynamic PLKD. The security of the key is evaluated in the case of a fiber-tapping attack. A secure hash algorithm, SHA3-512, is used to perform privacy amplification to obtain the virtually secure key. An error-free PLKD rate reaches 39.3 Kbits/s over 300 km ultra-low loss fiber. We experimentally enable the integration of the proposed PLKD scheme and quantum noise stream cipher (QNSC) with a single wavelength, same system. Q factor penalty of the integration system compared to the QNSC system is 3.7 dB (optical back-to-back) and 4.8 dB (300 km) respectively. By exploiting a common hardware platform, with the same wavelength, the proposed PLSOC system addresses the problem that PLKD and PLE are separately performed through independent optical fiber links or wavelengths. Since only digital signal processing is used, the scheme does not require extra hardware.
Quantum Noise Stream Cipher (QNSC) has emerged as a physical-layer encryption technique that exploits quantum noise and non-orthogonal coherent-state modulation to secure optical communication. However, the security of QNSC relies exceedingly on the secrecy and freshness of its seed key. Quantum Key Distribution (QKD), on the other hand, provides information-theoretically secure key exchange rooted in the laws of quantum mechanics. The convergence of these two paradigms, i.e., integrated QKD-QNSC architectures, offers a compelling solution to each of their limitations. In such integrated systems, QKD continuously supplies and refreshes the secret seed key that governs QNSC modulation. Thus, governing a unified security framework that couples provably secure key establishment with high-speed quantum-enhanced physical-layer encryption. This work presents a comprehensive review of QNSC systems, examining their operating principles, security models under various attacks, and their integration with QKD systems. We analyze the security interplay between the key generation and encryption layers and survey experimental demonstrations and architectural progress toward practical deployment. Furthermore, we identify the open challenges and future research directions that must be addressed to realize fully integrated, quantum-secured optical communication networks at a practical scale.
In the quantum noise stream cipher (QNSC) system, the low-order plaintext is encrypted by pre-shared keys into high-order ciphertext. However, high-speed optical communication systems have a huge demand for pre-shared keys. On the other hand, the separation of the secure communications sub-system from the secure key distribution (SKD) sub-system increases potential security risks and introduces additional resources overhead. In this letter, we propose an artificial amplitude noise-based SKD scheme (AAN-SKD) in QAM/QNSC to generate secret key for legal parties accordingly. The two orthogonal PAM symbols are superimposed to generate QAM symbols. Thus, the AAN-SKD can also be implemented in PAM modulation. In addition, the data transmission and AAN-SKD are completed in the same channel. Experimental results indicate that the key generation rate and key consistency ratio of the proposed scheme can reach188.22Mbit/sand 91%, respectively. Compared with quantum key distribution, the AAN-SKD has the advantage of lower cost, better compatibility, and a higher key rate.
A quantum noise stream cipher (QNSC) is a physical layer encryption technology based on quantum noise. Bit error rate loopback measurement (BER-LM) is a method to measure the BER of a loopback channel and extract channel characteristics. Then, channel characteristics can be extracted, and consensus keys can be obtained through negotiation. In previous studies, encryption and key distribution were implemented in independent channels. In this paper, we propose a scheme that combines these two technologies in a single fiber channel to achieve encrypted transmission and key distribution. We verified a 20 Gbps QPSK coherent optical transmission system with a PSK/QNSC scheme. The results show that by reasonably setting the negotiation bit position, the consensus key could be obtained through negotiation, and the requirements of transmission performance could be met. When the negotiation bit position was set to seven, the Q-factor of the system was nine, which met the error-free condition of the 7% forward error correction (FEC) limit.
This study investigates a multi-stage digital phase-encryption scheme designed for secure coherent optical communication. While the proposed method is implemented in DSP and can be modeled as a software-level stream cipher, it is explicitly co-designed with and tightly coupled to the physical-layer modulation structure. Unlike conventional XOR-based bitwise schemes, the encryption is applied to the symbol phase domain. It is integrated into the transmitter's modulation process, enabling symbol-level security evaluated in conjunction with transmission physics. By applying K-level phase-shift secret keys toM-ary quadrature amplitude modulation (QAM) signals, this method increases the number of secret-key bits per symbol without altering the signal constellation in its baseline configuration. This approach enhances encryption strength while maintaining signal integrity and reducing quantization overhead in phase-only operation. Experimental evaluations on nonlinear optical transmission channels confirm that baseline digital phase encryption preserves Q-factor stability under self-phase modulation, cross-phase modulation, and four-wave mixing. The proposed scheme ensures error-free transmission at forward error correction thresholds, effectively preventing eavesdroppers from reconstructing symbols under worst-case observation conditions. Additionally, simulations analyzing generalized mutual information and quantization errors demonstrate that the encryption scheme can minimize signal-to-noise ratio penalties, even when employing high-order QAM formats with limited digital-to-analog and analog-to-digital conversion resolutions. As an optional extension, we also analyze pseudo-quantum-noise-based IQ spreading and explicitly quantify the associated trade-off between additional noise masking and increased sensitivity to quantization. These findings position multi-stage digital phase encryption as a practical and power-efficient modulation-layer encryption technique whose behavior is systematically characterized under realistic nonlinear channel and hardware constraints, rather than as an entirely new cryptographic primitive.
The optical network supporting emerging bandwidth-intensive services has become the cornerstone of the 5G era. However, the development of optical fiber eavesdropping and quantum computing has brought huge security challenges to traditional cryptography. As an effective approach to improving optical layer transmission security, all-optical logic gate encryption has important research significance. This paper proposes a high-speed coherent optical encryption and decryption system based on phase encoding with all-optical logic gates. The system ingeniously designs the phase encoding and decoding scheme between two quadrature phase-shift keying (QPSK) signals, which doubles the encryption and decryption efficiency. In addition, the integration of physical-layer key distribution (PLKD) and physical-layer encryption (PLE) contributes to a reduction in overall system complexity. By adopting real-time signal processing in an all-optical domain, the single-wavelength rate of system security communication can reach 100 Gbps. The system is also applicable to other phase-modulated signals and provides a feasible scheme to enhance transmission security in wavelength division multiplexing (WDM) optical networks featuring high speed, low latency, and high flexibility.
To counter heterodyne measurements, correlation attacks, and known plaintext attacks, seed key refresh is critical to the security of a quantum noise stream cipher system. Integrated key distribution is an important means to reduce the deployment cost, as key exchange and public transmission are performed over the same channel. In this paper, we propose a novel method for integrated key distribution by optical steganography based on dither-remodulation in a bias controller of the Mach-Zehnder modulator. No extra wavelength or bandwidth is used for the stealth channel, which is transmitted together within the public channel. The concealing depth of the stealth signal reaches −36.2 dB, and its steganographic effect provides additional security, which further improves the overall security of the optical physical layer. The bidirectional stealth transmission can support light-weight temporary key exchange mechanism, combined with asymmetric encryption algorithm, to achieve high security and forward/backward security of seed keys. We experimentally demonstrate a real-time integrated key distribution via optical steganography in a QNSC system. The experimental results show that a real-time bidirectional stealth link is established at a rate of 1 kbps in a fiber transmission distance of 97 km for a public QNSC transmission at a rate of 32 Gbps, providing a seed key refresh frequency of over 1 Hz.