Continuous variable quantum key distribution is a information system that uses quantum physics to share secret keys among legitimate participants, where a variable optical attenuator (VOA) plays a crucial role in managing the intensity of light transmitted between the participants. However, minor changes in light intensity can have an impact on its security. In this paper, we suggest an attack strategy called the laser damage attack targeting the VOA of the continuous variable (CV) measurement-device-independent (MDI) quantum key distribution (QKD) system. This attack can damage the VOA, leading to incorrect secret key rate calculations by legitimate participants and enabling an eavesdropper to steal partial secret key information. Numerical simulations show its potential impact on the practical security of the CV-MDI-QKD system.
Continuous variable quantum key distribution is a information system that uses quantum physics to share secret keys among legitimate participants, where a variable optical attenuator (VOA) plays a crucial role in managing the intensity of light transmitted between the participants. However, minor changes in light intensity can have an impact on its security. In this paper, we suggest an attack strategy called the laser damage attack targeting the VOA of the continuous variable (CV) measurement-device-independent (MDI) quantum key distribution (QKD) system. This attack can damage the VOA, leading to incorrect secret key rate calculations by legitimate participants and enabling an eavesdropper to steal partial secret key information. Numerical simulations show its potential impact on the practical security of the CV-MDI-QKD system.
Continuous-variable (CV) measurement-device-independent (MDI) quantum key distribution (QKD) can remove the feasible side-channel attacks on detectors based on the accurate Bell-state measurement (BSM), where an optical amplitude modulator (AM) plays a crucial role in managing the intensity of the transmitted light pulse. However, the AM-involved practical security has remained elusive as the operating frequency of the AM usually determines the actual secret key rate of the CV-MDI-QKD system. We find that an imperfect pulse generated from the AM at high speed can lead to a challenge to the practical security as a minor intensity change of the light pulse can bring about a potential information leakage. Taking advantage of this flaw, we suggest an attack strategy targeting the embedded AM in CV-MDI-QKD without sending the local oscillator (LO). This attack can damage the AM and thus decrease the estimated secret key rate of the system even when the orthogonal local LO (LLO) scheme is carried out. To assess the practical security risk resulting from the leaked information from the AM, we conduct numerical simulations to demonstrate the influence of the AM on the CVMDI-QKD system.
Continuous-variable measurement-device-independent quantum key distribution (CV-MDI QKD) can defend all detection-side attacks effectively. Therefore, the source side is the final battlefield for performing quantum hacking attacks. This paper investigates the practical security of a CV-MDI QKD system under a light-injection attack. Here, we first describe two different light-injection attacks, i.e., the induced-photorefractive attack and the strong-power injection attack. Then, we consider three attack cases where Eve only attacks one of the parties or both parties of the CV-MDI QKD system. Based on the analysis of the parameter estimation, we find that the legitimate communication parties will overestimate the secret key rate of the system under the effect of a light-injection attack. This opens a security loophole for Eve to successfully obtain secret key information in a practical CV-MDI QKD system. In particular, compared to the laser-damage attack, the above attacks use a lower power of injected light and have a more serious effect on the security of the system. To eliminate the above effects, we can enhance the practical security of the system by doping the lithium niobate material with various impurities or by using protective devices, such as optical isolators, circulators, optical power limiters, and narrow-band filters. Apart from these, we can also use an intensity monitor or a photodetector to detect the light-injection attack.
In a practical continuous-variable quantum key distribution (CVQKD) system, the optical attenuator can adjust the Gaussian-modulated coherent states and the local oscillator signal to an optimal value for guaranteeing the security of the system and optimizing the performance of the system. However, the performance of the optical attenuator may deteriorate due to the intentional and unintentional damage of the device. In this paper, we investigate the practical security of a CVQKD system with reduced optical attenuation. We find that the secret key rate of the system may be overestimated based on the investigation of parameter estimation under the effects of reduced optical attenuation. This opens a security loophole for Eve to successfully perform an intercept-resend attack in a practical CVQKD system. To close this loophole, we add an optical fuse at Alice's output port and design a scheme to monitor the level of optical attenuation in real time, which can make the secret key rate of the system evaluated precisely. The analysis shows that these countermeasures can effectively resist this potential attack.
Abstract Continuous-variable quantum key distribution with local local oscillator (LLO-CVQKD) eliminates the security loophole caused by transmitting high power local oscillator (LO). However, in order to establish a common phase frame between the sender and receiver, a low power phase reference needs to be transmitted with quantum signals, which may bring in new security problems for eavesdroppers to obtain information illegally. Especially in trusted phase noise model, phase noise associated with detectors is regarded as trusted noise in order to obtain a higher secret key rate and transmission distance, which further provides opportunities for eavesdroppers. To this end, we propose an optical attenuator-oriented attack strategy against the LLO-CVQKD system under the trusted phase noise model, where Eve can inject suitable light into the optical attenuator in reference light path to reduce the attenuation level of it, thereby controlling the intensity of the reference pulses and resulting in an underestimated excess noise. Simulation results show that the proposed attack strategy can render the estimated secret key rate much higher than the actual values. When the transmission distance exceeds 25 km, the eavesdropper can obtain approximately 90% of the key information by adjusting the intensity of the reference pulses to twice the original value.
Continuous-variable measure-device-independent quantum key distribution (CV-MDI QKD) is proposed to remove all imperfections originating from detection. However, there are still some inevitable imperfections in a practical CV-MDI QKD system. For example, there is a fluctuating channel transmittance in the complex communication environments. Here we investigate the security of the system under the effects of the fluctuating channel transmittance, where the transmittance is regarded as a fixed value related to communication distance in theory. We first discuss the parameter estimation in fluctuating channel transmittance based on these establishing of channel models, which has an obvious deviation compared with the estimated parameters in the ideal case. Then, we show the evaluated results when the channel transmittance respectively obeys the two-point distribution and the uniform distribution. In particular, the two distributions can be easily realized under the manipulation of eavesdroppers. Finally, we analyze the secret key rate of the system when the channel transmittance obeys the above distributions. The simulation analysis indicates that a slight fluctuation of the channel transmittance may seriously reduce the performance of the system, especially in the extreme asymmetric case. Furthermore, the communication between Alice, Bob and Charlie may be immediately interrupted. Therefore, eavesdroppers can manipulate the channel transmittance to complete a denial-of-service attack in a practical CV-MDI QKD system. To resist this attack, the Gaussian post-selection method can be exploited to calibrate the parameter estimation to reduce the deterioration of performance of the system.
Continuous-variable measurement-device-independent quantum key distribution (CV-MDI QKD) can fundamentally defend all attacks on the measurement devices. Consequently, higher requirements are put forward for the source of a CV-MDI QKD system. However, the imperfections of the actual source brings practical security risks to the CV-MDI QKD system. Therefore, the characteristics of the realistic source must be controlled in real time to guarantee the practical security of the CV-MDI QKD system. Here we propose a countermeasure for negative impact introduced by the actual source in the CV-MDI QKD system based on the one-time-calibration method, not only eliminating the loophole induced from the relative intensity noise (RIN), which is part of the source noise, but also modeling the source noise thus improves the performance. In particular, three cases in terms of whether the preparation noise of the practical sources are defined or not, where only one of the users or both of the two users operate monitoring on their respective source outputs, are investigated. The simulation results show that the estimated secret key rate without our proposed scheme is about 10.7 times higher than the realistic rate at 18 km transmission distance when the variance of RIN is only 0.4. What is worse, the difference becomes greater and greater with the increase of the variance of RIN. Thus, our proposed scheme makes sense in further completing the practical security of the CV-MDI QKD system. In other words, our work enables the CV-MDI QKD system not only to resist all attacks against detectors, but also to close the vulnerability caused by the actual source, thus making the scheme closer to practical security.