Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Optics Express

Light-injection attack against practical continuous-variable measurement-device-independent quantum key distribution systems

Yiliang Wang, Yi Zheng, Chenlei Fang, Haobin Shi, Wei Pan

Published Sep 3, 2024• 8 citations
Publisher

Abstract

Continuous-variable measurement-device-independent quantum key distribution (CV-MDI QKD) can defend all detection-side attacks effectively. Therefore, the source side is the final battlefield for performing quantum hacking attacks. This paper investigates the practical security of a CV-MDI QKD system under a light-injection attack. Here, we first describe two different light-injection attacks, i.e., the induced-photorefractive attack and the strong-power injection attack. Then, we consider three attack cases where Eve only attacks one of the parties or both parties of the CV-MDI QKD system. Based on the analysis of the parameter estimation, we find that the legitimate communication parties will overestimate the secret key rate of the system under the effect of a light-injection attack. This opens a security loophole for Eve to successfully obtain secret key information in a practical CV-MDI QKD system. In particular, compared to the laser-damage attack, the above attacks use a lower power of injected light and have a more serious effect on the security of the system. To eliminate the above effects, we can enhance the practical security of the system by doping the lithium niobate material with various impurities or by using protective devices, such as optical isolators, circulators, optical power limiters, and narrow-band filters. Apart from these, we can also use an intensity monitor or a photodetector to detect the light-injection attack.

DOI
10.1364/oe.537325

Related papers

Security analysis of practical continuous-variable quantum key distribution systems under laser seeding attack

Yi Zheng, Peng Huang, Anqi Huang +2 more

Here, we investigate the security of the practical one-way CVQKD and CV-MDI-QKD systems under laser seeding attack. In particular, Eve can inject a suitable light into the laser diodes of the light source modules in the two kinds of practical CVQKD systems, which results in the increased intensity of the generated optical signal. The parameter estimation under laser seeding attack shows that the secret key rates of these two schemes may be overestimated, which indicates that this attack can open a security loophole for Eve to successfully obtain information about secret key in these practical CVQKD systems. To close this loophole, we propose a real-time monitoring scheme to precisely evaluate the secret key rates of these schemes. The analysis results indicate the implementation of the proposed monitoring scheme can effectively resist this potential attack.

arXiv:1907.01553•Optics Express•Sep 13, 2019•30 citations

Countermeasure for Negative Impact of a Practical Source in Continuous-Variable Measurement-Device-Independent Quantum Key Distribution

Luyu Huang, Xiangyu Wang, Ziyang Chen +3 more

Continuous-variable measurement-device-independent quantum key distribution (CV-MDI QKD) can fundamentally defend all attacks on the measurement devices. Consequently, higher requirements are put forward for the source of a CV-MDI QKD system. However, the imperfections of the actual source brings practical security risks to the CV-MDI QKD system. Therefore, the characteristics of the realistic source must be controlled in real time to guarantee the practical security of the CV-MDI QKD system. Here we propose a countermeasure for negative impact introduced by the actual source in the CV-MDI QKD system based on the one-time-calibration method, not only eliminating the loophole induced from the relative intensity noise (RIN), which is part of the source noise, but also modeling the source noise thus improves the performance. In particular, three cases in terms of whether the preparation noise of the practical sources are defined or not, where only one of the users or both of the two users operate monitoring on their respective source outputs, are investigated. The simulation results show that the estimated secret key rate without our proposed scheme is about 10.7 times higher than the realistic rate at 18 km transmission distance when the variance of RIN is only 0.4. What is worse, the difference becomes greater and greater with the increase of the variance of RIN. Thus, our proposed scheme makes sense in further completing the practical security of the CV-MDI QKD system. In other words, our work enables the CV-MDI QKD system not only to resist all attacks against detectors, but also to close the vulnerability caused by the actual source, thus making the scheme closer to practical security.

arXiv:2306.15146•Physical Review Applied•Jan 6, 2023•6 citations

Quantum Hacking: Induced‐Photorefraction Attack on a Practical Continuous‐Variable Quantum Key Distribution System

Yiliang Wang, Yi Zheng, Chenlei Fang +2 more

Abstract In a practical continuous‐variable quantum key distribution (CVQKD) system, a new security loophole opened by the photorefractive effect of lithium niobate‐based (LN‐based) modulators is explored. Exploiting this loophole, a quantum hacking strategy called the induced‐photorefraction attack is proposed. This strategy utilizes the induced photorefraction on the LN‐based modulators to conceal a classical intercept‐resend attack. Specifically, the induced photorefraction biases the response curve of the LN‐based modulator, which affects the intensity of the modulated signal. Based on the investigation of channel parameter estimation and the analysis of the secret key rate of the practical CVQKD system, the simulation results show that the communication parties overestimate the secret key rate, which reveals that Eve can actively open a security loophole via the induced‐photorefraction attack to obtain secret key information. To defend against this attack, a random monitoring scheme for modulation variance is proposed to detect the attack, along with an improved optical power limiter to mitigate the irradiation beam. Additionally, a Sagnac‐based IM is suggested to stabilize the practical CVQKD system. Furthermore, the impact of this attack is analyzed on continuous‐variable measurement‐device‐independent QKD systems ((CV‐MDI‐QKD) and on local‐local‐oscillator (LLO) systems and propose countermeasures for each. Finally, the passive‐state‐preparation CVQKD protocol is proposed to fundamentally close the security loopholes originating from the modulators.

arXiv:2409.08017•Advanced Quantum Technologies•Jul 1, 2025•9 citations

Continuous-variable measurement-device-independent quantum key distribution with source-intensity errors

Pu Wang, Xuyang Wang, Yongmin Li

Continuous-variable measurement-device-independent quantum key distribution (CV-MDI-QKD) is immune to all detector side channel attacks, however its security requires trusted sources. We investigate the effects of source intensity errors, the most crucial source error, on the security of CV-MDI-QKD protocol with Gaussian-modulated coherent states. We establish a general source intensity errors model and derive the secret key rate based on different assumptions on the abilities of legal parties Alice and Bob. To avoid the adverse effects of the sources' intensity errors on CV-MDI-QKD, we present different data-processing schemes. We also assess the security of the protocol against collective Gaussian attacks in the finite-size scenario with composable security. Taking source intensity errors into consideration, we achieve improved security compared to previous demonstrations. Our results will provide a useful reference for practical implementations of CV-MDI-QKD.

Physical Review A•Aug 10, 2020•11 citations

Practical Security of Continuous Variable Measurement- Device-Independent Quantum Key Distribution with Local Local Oscillator

Yewei Guo, Hang Zhang, Ying Guo

Continuous-variable (CV) measurement-device-independent (MDI) quantum key distribution (QKD) can remove the feasible side-channel attacks on detectors based on the accurate Bell-state measurement (BSM), where an optical amplitude modulator (AM) plays a crucial role in managing the intensity of the transmitted light pulse. However, the AM-involved practical security has remained elusive as the operating frequency of the AM usually determines the actual secret key rate of the CV-MDI-QKD system. We find that an imperfect pulse generated from the AM at high speed can lead to a challenge to the practical security as a minor intensity change of the light pulse can bring about a potential information leakage. Taking advantage of this flaw, we suggest an attack strategy targeting the embedded AM in CV-MDI-QKD without sending the local oscillator (LO). This attack can damage the AM and thus decrease the estimated secret key rate of the system even when the orthogonal local LO (LLO) scheme is carried out. To assess the practical security risk resulting from the leaked information from the AM, we conduct numerical simulations to demonstrate the influence of the AM on the CVMDI-QKD system.

Mathematics•Nov 27, 2024•0 citations

Continuous-variable measurement-device-independent quantum key distribution

Zhengyu Li, Yichen Zhang, Feihu Xu +2 more

We propose a continuous-variable measurement-device-independent quantum key distribution (CV-MDI QKD) protocol, in which detection is conducted by an untrusted third party. Our protocol can defend all detector side channels, which seriously threaten the security of a practical CV QKD system. Its security analysis against arbitrary collective attacks is derived based on the fact that the entanglement-based scheme of CV-MDI QKD is equivalent to the conventional CV QKD with coherent states and heterodyne detection. We find that the maximal total transmission distance is achieved by setting the untrusted third party close to one of the legitimate users. Furthermore, an alternate detection scheme, a special application of CV-MDI QKD, is proposed to enhance the security of the standard CV QKD system.

arXiv:1312.4655•Physical Review A•May 7, 2014•224 citations
Continuous-variable measurement-device-independent quantum key distribution (CV-MDI QKD) can defend all detection-side attacks effectively. Therefore, the source side is the final battlefield for performing quantum hacking attacks. This paper investigates the practical security of a CV-MDI QKD system under a light-injection attack. Here, we first describe two different light-injection attacks, i.e., the induced-photorefractive attack and the strong-power injection attack. Then, we consider three attack cases where Eve only attacks one of the parties or both parties of the CV-MDI QKD system. Based on the analysis of the parameter estimation, we find that the legitimate communication parties will overestimate the secret key rate of the system under the effect of a light-injection attack. This opens a security loophole for Eve to successfully obtain secret key information in a practical CV-MDI QKD system. In particular, compared to the laser-damage attack, the above attacks use a lower power of injected light and have a more serious effect on the security of the system. To eliminate the above effects, we can enhance the practical security of the system by doping the lithium niobate material with various impurities or by using protective devices, such as optical isolators, circulators, optical power limiters, and narrow-band filters. Apart from these, we can also use an intensity monitor or a photodetector to detect the light-injection attack.
Here, we investigate the security of the practical one-way CVQKD and CV-MDI-QKD systems under laser seeding attack. In particular, Eve can inject a suitable light into the laser diodes of the light source modules in the two kinds of practical CVQKD systems, which results in the increased intensity of the generated optical signal. The parameter estimation under laser seeding attack shows that the secret key rates of these two schemes may be overestimated, which indicates that this attack can open a security loophole for Eve to successfully obtain information about secret key in these practical CVQKD systems. To close this loophole, we propose a real-time monitoring scheme to precisely evaluate the secret key rates of these schemes. The analysis results indicate the implementation of the proposed monitoring scheme can effectively resist this potential attack.
Continuous-variable measurement-device-independent quantum key distribution (CV-MDI QKD) can fundamentally defend all attacks on the measurement devices. Consequently, higher requirements are put forward for the source of a CV-MDI QKD system. However, the imperfections of the actual source brings practical security risks to the CV-MDI QKD system. Therefore, the characteristics of the realistic source must be controlled in real time to guarantee the practical security of the CV-MDI QKD system. Here we propose a countermeasure for negative impact introduced by the actual source in the CV-MDI QKD system based on the one-time-calibration method, not only eliminating the loophole induced from the relative intensity noise (RIN), which is part of the source noise, but also modeling the source noise thus improves the performance. In particular, three cases in terms of whether the preparation noise of the practical sources are defined or not, where only one of the users or both of the two users operate monitoring on their respective source outputs, are investigated. The simulation results show that the estimated secret key rate without our proposed scheme is about 10.7 times higher than the realistic rate at 18 km transmission distance when the variance of RIN is only 0.4. What is worse, the difference becomes greater and greater with the increase of the variance of RIN. Thus, our proposed scheme makes sense in further completing the practical security of the CV-MDI QKD system. In other words, our work enables the CV-MDI QKD system not only to resist all attacks against detectors, but also to close the vulnerability caused by the actual source, thus making the scheme closer to practical security.
Abstract In a practical continuous‐variable quantum key distribution (CVQKD) system, a new security loophole opened by the photorefractive effect of lithium niobate‐based (LN‐based) modulators is explored. Exploiting this loophole, a quantum hacking strategy called the induced‐photorefraction attack is proposed. This strategy utilizes the induced photorefraction on the LN‐based modulators to conceal a classical intercept‐resend attack. Specifically, the induced photorefraction biases the response curve of the LN‐based modulator, which affects the intensity of the modulated signal. Based on the investigation of channel parameter estimation and the analysis of the secret key rate of the practical CVQKD system, the simulation results show that the communication parties overestimate the secret key rate, which reveals that Eve can actively open a security loophole via the induced‐photorefraction attack to obtain secret key information. To defend against this attack, a random monitoring scheme for modulation variance is proposed to detect the attack, along with an improved optical power limiter to mitigate the irradiation beam. Additionally, a Sagnac‐based IM is suggested to stabilize the practical CVQKD system. Furthermore, the impact of this attack is analyzed on continuous‐variable measurement‐device‐independent QKD systems ((CV‐MDI‐QKD) and on local‐local‐oscillator (LLO) systems and propose countermeasures for each. Finally, the passive‐state‐preparation CVQKD protocol is proposed to fundamentally close the security loopholes originating from the modulators.
Continuous-variable measurement-device-independent quantum key distribution (CV-MDI-QKD) is immune to all detector side channel attacks, however its security requires trusted sources. We investigate the effects of source intensity errors, the most crucial source error, on the security of CV-MDI-QKD protocol with Gaussian-modulated coherent states. We establish a general source intensity errors model and derive the secret key rate based on different assumptions on the abilities of legal parties Alice and Bob. To avoid the adverse effects of the sources' intensity errors on CV-MDI-QKD, we present different data-processing schemes. We also assess the security of the protocol against collective Gaussian attacks in the finite-size scenario with composable security. Taking source intensity errors into consideration, we achieve improved security compared to previous demonstrations. Our results will provide a useful reference for practical implementations of CV-MDI-QKD.
Continuous-variable (CV) measurement-device-independent (MDI) quantum key distribution (QKD) can remove the feasible side-channel attacks on detectors based on the accurate Bell-state measurement (BSM), where an optical amplitude modulator (AM) plays a crucial role in managing the intensity of the transmitted light pulse. However, the AM-involved practical security has remained elusive as the operating frequency of the AM usually determines the actual secret key rate of the CV-MDI-QKD system. We find that an imperfect pulse generated from the AM at high speed can lead to a challenge to the practical security as a minor intensity change of the light pulse can bring about a potential information leakage. Taking advantage of this flaw, we suggest an attack strategy targeting the embedded AM in CV-MDI-QKD without sending the local oscillator (LO). This attack can damage the AM and thus decrease the estimated secret key rate of the system even when the orthogonal local LO (LLO) scheme is carried out. To assess the practical security risk resulting from the leaked information from the AM, we conduct numerical simulations to demonstrate the influence of the AM on the CVMDI-QKD system.
We propose a continuous-variable measurement-device-independent quantum key distribution (CV-MDI QKD) protocol, in which detection is conducted by an untrusted third party. Our protocol can defend all detector side channels, which seriously threaten the security of a practical CV QKD system. Its security analysis against arbitrary collective attacks is derived based on the fact that the entanglement-based scheme of CV-MDI QKD is equivalent to the conventional CV QKD with coherent states and heterodyne detection. We find that the maximal total transmission distance is achieved by setting the untrusted third party close to one of the legitimate users. Furthermore, an alternate detection scheme, a special application of CV-MDI QKD, is proposed to enhance the security of the standard CV QKD system.