This paper presents a theoretical and experimental demonstration of a security analysis of a Trojan-horse attack (THA) on a real-world quantum key distribution (QKD) system. We show that the upper bound on the information leakage depends solely on the fidelity between the states of the adversary. We find the lower bound for fidelity between THA states in both the polarization- and phase-coding BB84 protocols, considering both pure and mixed states. Our bounds depend only on the mean photon number per pulse available to an adversary. We also present an experimental analysis of a QKD system, including optical time-domain reflectometry measurements with centimeter resolution and spectral transmittance measurements for optical defense elements ranging from 1100 to 1800 nm with a noise floor lower than − 100 dB. Finally, by considering the optimal attack, we obtain the value of the mean photon number per pulse available to an adversary and calculate the key leakage that needs to be eliminated during the privacy amplification procedure. Published by the American Physical Society 2024
This paper presents a theoretical and experimental demonstration of a security analysis of a Trojan-horse attack (THA) on a real-world quantum key distribution (QKD) system. We show that the upper bound on the information leakage depends solely on the fidelity between the states of the adversary. We find the lower bound for fidelity between THA states in both the polarization- and phase-coding BB84 protocols, considering both pure and mixed states. Our bounds depend only on the mean photon number per pulse available to an adversary. We also present an experimental analysis of a QKD system, including optical time-domain reflectometry measurements with centimeter resolution and spectral transmittance measurements for optical defense elements ranging from 1100 to 1800 nm with a noise floor lower than − 100 dB. Finally, by considering the optimal attack, we obtain the value of the mean photon number per pulse available to an adversary and calculate the key leakage that needs to be eliminated during the privacy amplification procedure. Published by the American Physical Society 2024
Quantum key distribution (QKD), which theoretically provides unconditional secure communication, has developed rapidly in the past decades. However, the practical QKD systems still have vulnerabilities due to device imperfections. Polarization-encoding systems are one of the most important branches in the field of QKD. To date, a variety of polarization-encoding schemes have been proposed to meet the requirements of high speed and robust modulation, but the security analysis of these schemes is often ignored. In this paper, we experimentally and theoretically evaluated the security of three typical polarization encoders against the Trojan horse attack (THA), which is recognized as one of the critical quantum attacks. We built a system to implement the THA and collected the reflection from QKD configuration with different encoders. According to the experimental results, we further analyzed the secure key rate and the resistance against THAs of the system while BB84 or measurement-device-independent QKD was applied. Our paper plays an important guiding role in the design of polarization encoders and the construction of secure QKD systems with realistic devices.
Abstract Most security proofs of quantum key distribution (QKD) disregard the effect of information leakage from the users’ devices, and, thus, do not protect against Trojan-horse attacks (THAs). In a THA, the eavesdropper injects strong light into the QKD apparatuses, and then analyzes the back-reflected light to learn information about their internal setting choices. Only a few recent works consider this security threat, but predict a rather poor performance of QKD unless the devices are strongly isolated from the channel. Here, we derive finite-key security bounds for decoy-state-based QKD schemes in the presence of THAs, which significantly outperform previous analyses. Our results constitute an important step forward to closing the existing gap between theory and practice in QKD.
In the quantum version of a Trojan-horse attack, photons are injected into the optical modules of a quantum key distribution system in an attempt to read information direct from the encoding devices.To stop the Trojan photons, the use of passive optical components has been suggested.However, to date, there is no quantitative bound that specifies such components in relation to the security of the system.Here, we turn the Trojan-horse attack into an information leakage problem.This allows us to quantify the system security and relate it to the specification of the optical elements.The analysis is supported by the experimental characterization, within the operation regime, of reflectivity and transmission of the optical components most relevant to security.
The Trojan-horse attacks on quantum key distribution (QKD) systems are known to be a threat to secure key sharing between two parties (Alice and Bob). To protect a QKD system against such attacks a variety of passive optical and active optical devices embedded in Alice’s and Bob’s setup are widely used. However, a security analysis against the Trojan-horse attack is required to ensure the unconditional security of a QKD system. We present a security analysis against the Trojan-horse attacks on a practical fiber-based QKD phase-coding system in 400–1700 nm spectral range. The obtained results made it possible to calculate the higher limit of average photon number returned to Eve and the probabilities of Eve’s success of the attack on a particular QKD system.
Silicon photonics offers a stable, miniaturized platform for quantum key distribution (QKD). As such, the chip-based system is vital for a wider adoption of QKD in the near future. However, the practical security issues presented in this alternative platform have not been fully studied. Here, we theoretically and experimentally evaluate the security of a chip-based QKD system under a powerful source attack, namely, Trojan-horse attack. We analyze the finite-key security of two prominent QKD protocols---BB84 and measurement-device-independent QKD---with the information leakage from both the polarization modulator and the intensity modulator integrated on a silicon photonic chip. Furthermore, we prove that our chip-based measurement-device-independent QKD system is feasibly resistant to the Trojan-horse attack by adding 232-dB isolation to the chip. In this sense, our work provides a guideline for the secure implementation of a leaky transmitter chip in the QKD system.
Quantum secure direct communication (QSDC) enables the direct transmission of confidential information without pre-shared keys. However, device imperfections in practical systems can lead to information leakage. The Trojan-horse attack (THA), a stealthy side-channel threat, steals information by injecting photons into encoding devices and analyzing the reflected light. This paper focuses on the single-photon-based (DL04) protocol, establishing for the first time a comprehensive THA model against it. By combining weak coherent pulse (WCP) sources with the decoy-state method, we systematically analyze the security under THA during both the first and second rounds of transmission, derive analytical expressions for the secrecy message capacity, and quantitatively evaluate the impact of attack strength on system performance through numerical simulations. Our results demonstrate that the system’s security is highly sensitive to the average number of reflected Trojan photons, μout. For a first-round attack, the secrecy message capacity remains nearly identical to the attack-free case when μout≤10−8, but drops to zero when μout increases to 10−3. In contrast, the second round of attacks had a weaker impact. Even at the strongest attack intensity (μout=10−2), the system could still maintain a certain level of secrecy message capacity. When THA simultaneously targets both the first and second rounds, the overall security of the system is predominantly governed by the more sensitive first-round attack, whose security boundary remains largely comparable to that observed in a single first-round attack scenario. Furthermore, We perform parameter optimization to achieve the optimal secrecy message capacity for each channel attenuation. Our study provides the first quantitative security bound for THA on DL04 protocol, offering practical guidance for encoder isolation requirements in future implementations.