Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Optics Express

Side-channel-secure quantum key distribution with state-dependent correlated errors and Trojan-horse attack

Cong Jiang, Xiao-Long Hu, Zong‐Wen Yu, Xu Hai, Xiang‐Bin Wang

Published Nov 19, 2025• 4 citations
Publisher

Abstract

Quantum key distribution (QKD) leverages the principles of quantum mechanics to provide theoretically unconditional security for cryptographic key sharing. However, practical implementations remain vulnerable due to potential security loopholes at both the source and detection sides of QKD systems. The side-channel-secure (SCS) protocol addresses these challenges by encoding bits in vacuum and non-vacuum states and introducing a third-party measurement node, thereby repelling attacks targeting the detection side as well as external lab attacks on the source side. In this work, we consider the state-dependent correlated errors and Trojan-horse attack while preserving the SCS protocol’s key advantage—-specifically, requiring only upper bounds on intensity characterization without needing a full description of quantum states in infinite dimensions. Numerical results demonstrate that when the reflected light intensity from Trojan-horse attacks falls below 10 −6 , Eve can scarcely extract additional key information from the reflections. This work makes the SCS protocol more practical.

DOI
10.1364/oe.576910

Related papers

The practical issues of side-channel-secure quantum key distribution

Cong Jiang, Hu, Xiao-Long, Zong‐Wen Yu +2 more

Quantum Key Distribution (QKD) leverages the principles of quantum mechanics to provide theoretically unconditional security for cryptographic key sharing. However, practical implementations remain vulnerable due to non-ideal devices and potential security loopholes at both the source and detection sides of QKD systems. The side-channel-secure (SCS) protocol addresses these challenges by encoding bits in vacuum and non-vacuum states and introducing a third-party measurement node, thereby repelling attacks targeting the detection side as well as external lab attacks on the source side. In this work, we consider the state-dependent correlated errors and Trojan-horse attack while preserving the SCS protocol's key advantage-specifically, requiring only upper bounds on intensities characterization without needing a full description of quantum states in infinite dimensions. Numerical results demonstrate that when the reflected light intensity from Trojan-horse attacks falls below $10^{-6}$, Eve can scarcely extract additional key information from the reflections. This work makes the SCS protocol more practical.

arXiv:2508.15197•Aug 21, 2025•0 citations

Experimental side channel secure quantum key distribution under realistic conditions

Hao Dong, Cong Jiang, Di Ma +8 more

Quantum key distribution (QKD) theoretically provides unconditional security between remote parties. However, guaranteeing practical security through device characterization alone is challenging in real-world implementations due to the multidimensional spaces in which the devices may be operated. The side channel secure (SCS) QKD protocol, which only requires bounding the upper limits of the intensities for the two states, theoretically provides a rigorous solution to the challenge and achieves measurement-device-independent security in detection and security for whatever multidimensional side channel attack in the source. Here, we demonstrate a practical implementation of SCS-QKD, achieving a secure key rate of 6.67 kbps through a 50.5 km fiber and a maximum distribution distance of 101.1 km while accounting for finite-size effects. Our experiment also represents an approximately 40 times improvement over the previous experiment.

arXiv:2504.19242•Physical Review Research•Jan 23, 2026•2 citations

Improved Finite-Key Security Analysis of Measurement-Device-Independent Quantum Key Distribution Against a Trojan-Horse Attack

Hua-Jian Ding, Jing-Yang Liu, Xingyu Zhou +3 more

Measurement-device-independent quantum key distribution (MDI QKD) is a promising method for remote key sharing that can eliminate all detector side-channel attacks. However, current security proofs often overlook the potential information leakages from the legitimate users' devices. In a quantum version of Trojan-horse attack (THA), a malicious eavesdropper can inject bright light into the sources of a MDI QKD system and then analyze the back-reflected light to obtain their setting choices, thereby compromising the final security. Here, we derive the finite-key security bounds of decoy-state MDI QKD in the presence of THA, which significantly outperform previous analyses in terms of the secret-key rate and transmission distance. Specifically, we analyze a symmetric three-intensity decoy-state MDI QKD protocol and an efficient four-intensity decoy-state MDI QKD protocol. Our results represent a fundamental step in guaranteeing the implementation security of quantum communication systems.

Physical Review Applied•Apr 7, 2023•13 citations

Phase-error estimation for quantum key distribution with leaky receivers

Álvaro Navarrete, Margarida Pereira, Guillermo Currás-Lorenzo +3 more

Practical quantum key distribution (QKD) receivers may leak information about their measurement outcomes and settings to the channel (e.g., through detector backflashes or back-reflected Trojan-horse light) that could compromise the protocol's security. Here we present a simple finite-key security proof based on phase-error estimation for prepare-and-measure QKD in the presence of either a priori information leakage about the basis choices and/or a posteriori information leakage about the measurement outcomes. The proof requires only a bound on the distinguishability of the side-channel states. Furthermore, the analysis is modular and compatible with existing security proofs that address detector and source imperfections, making it applicable to a wide range of practical QKD implementations.

quant-pharXiv:2608.09674•Aug 11, 2026•0 citations

Practical semi-quantum key distribution with one-way key and one basis

Ke Wang, Xiuqing Yang, Tingyu Li +3 more

Semi-quantum key distribution (SQKD) protocols are used to distribute secret keys between a quantum party and a classical party. However, existing SQKD protocols rely on two-way communication, and may still be vulnerable to Trojan horse side-channel attacks where Eve sends her own photon into a receiver's apparatus and measures the reflected photon to estimate the key. In this paper, we propose a practical SQKD with one-way key. This requires that the single photons travelling through the one-way channel are used to encode bit information, and the returned photons are used to quantify Eve's information, thus reducing the security analysis of the Trojan horse attack in SQKD. Meanwhile, our protocol with one basis enjoys security advantage in practical SQKD systems when source flaws are taken into account. In particular, the present protocol is secure under practical conditions when weak coherent pulses (WCP) are used. Our simulation results show that the protocol using WCP can distribute secret keys over a distance of 110 km without decoy states.

Optics Express•Nov 7, 2023•5 citations

Deterministic QKD source robust against side-channel attacks

Kiyoshi Tamaki, Marcos Curty, Akihiro Mizutani +1 more

Quantum key distribution (QKD) is secure in principle, but practical security can be undermined by discrepancies between real devices and the idealized models assumed in security proofs. Source side channels, including those exploited by Trojan-horse attacks, are particularly detrimental: neglecting them compromises implementation security, whereas accounting for them reduces performance. Here we propose a QKD source that is intrinsically robust against side-channel attacks. Unlike existing passive and modulator-free schemes, it requires neither post-selection of the emitted pulses nor devices with a perfect extinction ratio to suppress side channels, and it does not introduce correlations between the intensity and the encoded bit or basis. Consequently, under idealized source assumptions commonly adopted in proposals for existing schemes, conventional decoy-state security analyses apply directly, yielding substantially higher key rates. Our proposal appears to be within reach of current technology and therefore provides a clear and practical path toward implementation-secure QKD.

quant-pharXiv:2607.28063•Jul 31, 2026•0 citations
Quantum key distribution (QKD) leverages the principles of quantum mechanics to provide theoretically unconditional security for cryptographic key sharing. However, practical implementations remain vulnerable due to potential security loopholes at both the source and detection sides of QKD systems. The side-channel-secure (SCS) protocol addresses these challenges by encoding bits in vacuum and non-vacuum states and introducing a third-party measurement node, thereby repelling attacks targeting the detection side as well as external lab attacks on the source side. In this work, we consider the state-dependent correlated errors and Trojan-horse attack while preserving the SCS protocol’s key advantage—-specifically, requiring only upper bounds on intensity characterization without needing a full description of quantum states in infinite dimensions. Numerical results demonstrate that when the reflected light intensity from Trojan-horse attacks falls below 10 −6 , Eve can scarcely extract additional key information from the reflections. This work makes the SCS protocol more practical.
Quantum Key Distribution (QKD) leverages the principles of quantum mechanics to provide theoretically unconditional security for cryptographic key sharing. However, practical implementations remain vulnerable due to non-ideal devices and potential security loopholes at both the source and detection sides of QKD systems. The side-channel-secure (SCS) protocol addresses these challenges by encoding bits in vacuum and non-vacuum states and introducing a third-party measurement node, thereby repelling attacks targeting the detection side as well as external lab attacks on the source side. In this work, we consider the state-dependent correlated errors and Trojan-horse attack while preserving the SCS protocol's key advantage-specifically, requiring only upper bounds on intensities characterization without needing a full description of quantum states in infinite dimensions. Numerical results demonstrate that when the reflected light intensity from Trojan-horse attacks falls below 10−610^{-6}10−6, Eve can scarcely extract additional key information from the reflections. This work makes the SCS protocol more practical.
Quantum key distribution (QKD) theoretically provides unconditional security between remote parties. However, guaranteeing practical security through device characterization alone is challenging in real-world implementations due to the multidimensional spaces in which the devices may be operated. The side channel secure (SCS) QKD protocol, which only requires bounding the upper limits of the intensities for the two states, theoretically provides a rigorous solution to the challenge and achieves measurement-device-independent security in detection and security for whatever multidimensional side channel attack in the source. Here, we demonstrate a practical implementation of SCS-QKD, achieving a secure key rate of 6.67 kbps through a 50.5 km fiber and a maximum distribution distance of 101.1 km while accounting for finite-size effects. Our experiment also represents an approximately 40 times improvement over the previous experiment.
Measurement-device-independent quantum key distribution (MDI QKD) is a promising method for remote key sharing that can eliminate all detector side-channel attacks. However, current security proofs often overlook the potential information leakages from the legitimate users' devices. In a quantum version of Trojan-horse attack (THA), a malicious eavesdropper can inject bright light into the sources of a MDI QKD system and then analyze the back-reflected light to obtain their setting choices, thereby compromising the final security. Here, we derive the finite-key security bounds of decoy-state MDI QKD in the presence of THA, which significantly outperform previous analyses in terms of the secret-key rate and transmission distance. Specifically, we analyze a symmetric three-intensity decoy-state MDI QKD protocol and an efficient four-intensity decoy-state MDI QKD protocol. Our results represent a fundamental step in guaranteeing the implementation security of quantum communication systems.
Practical quantum key distribution (QKD) receivers may leak information about their measurement outcomes and settings to the channel (e.g., through detector backflashes or back-reflected Trojan-horse light) that could compromise the protocol's security. Here we present a simple finite-key security proof based on phase-error estimation for prepare-and-measure QKD in the presence of either a priori information leakage about the basis choices and/or a posteriori information leakage about the measurement outcomes. The proof requires only a bound on the distinguishability of the side-channel states. Furthermore, the analysis is modular and compatible with existing security proofs that address detector and source imperfections, making it applicable to a wide range of practical QKD implementations.
Semi-quantum key distribution (SQKD) protocols are used to distribute secret keys between a quantum party and a classical party. However, existing SQKD protocols rely on two-way communication, and may still be vulnerable to Trojan horse side-channel attacks where Eve sends her own photon into a receiver's apparatus and measures the reflected photon to estimate the key. In this paper, we propose a practical SQKD with one-way key. This requires that the single photons travelling through the one-way channel are used to encode bit information, and the returned photons are used to quantify Eve's information, thus reducing the security analysis of the Trojan horse attack in SQKD. Meanwhile, our protocol with one basis enjoys security advantage in practical SQKD systems when source flaws are taken into account. In particular, the present protocol is secure under practical conditions when weak coherent pulses (WCP) are used. Our simulation results show that the protocol using WCP can distribute secret keys over a distance of 110 km without decoy states.
Quantum key distribution (QKD) is secure in principle, but practical security can be undermined by discrepancies between real devices and the idealized models assumed in security proofs. Source side channels, including those exploited by Trojan-horse attacks, are particularly detrimental: neglecting them compromises implementation security, whereas accounting for them reduces performance. Here we propose a QKD source that is intrinsically robust against side-channel attacks. Unlike existing passive and modulator-free schemes, it requires neither post-selection of the emitted pulses nor devices with a perfect extinction ratio to suppress side channels, and it does not introduce correlations between the intensity and the encoded bit or basis. Consequently, under idealized source assumptions commonly adopted in proposals for existing schemes, conventional decoy-state security analyses apply directly, yielding substantially higher key rates. Our proposal appears to be within reach of current technology and therefore provides a clear and practical path toward implementation-secure QKD.