Quantum Key Distribution (QKD) promises information-theoretic security based on the fundamental laws of quantum mechanics. However, practical implementations deviate from idealized models and are therefore susceptible to side-channel attacks that exploit physical imperfections rather than theoretical vulnerabilities. Over the past two decades, a wide range of attacks have been demonstrated against QKD systems, including those targeting detectors, sources, timing information, power consumption, and electromagnetic emissions. This paper addresses a selection of a few side-channel attacks reported in the literature, classifying them according to their underlying physical mechanisms and attack strategies. We analyze their impact on the security of different QKD protocols and platforms, and highlight how experimental demonstrations have shaped the community's understanding of implementation security. In addition, we present and evaluate mitigation techniques proposed to date, such as device-independent and measurement-device-independent QKD, hardware countermeasures, monitoring strategies, and so on. We also identify open challenges and promising directions for enhancing the robustness of future quantum communication systems.
Quantum Key Distribution (QKD) promises information-theoretic security based on the fundamental laws of quantum mechanics. However, practical implementations deviate from idealized models and are therefore susceptible to side-channel attacks that exploit physical imperfections rather than theoretical vulnerabilities. Over the past two decades, a wide range of attacks have been demonstrated against QKD systems, including those targeting detectors, sources, timing information, power consumption, and electromagnetic emissions. This paper addresses a selection of a few side-channel attacks reported in the literature, classifying them according to their underlying physical mechanisms and attack strategies. We analyze their impact on the security of different QKD protocols and platforms, and highlight how experimental demonstrations have shaped the community's understanding of implementation security. In addition, we present and evaluate mitigation techniques proposed to date, such as device-independent and measurement-device-independent QKD, hardware countermeasures, monitoring strategies, and so on. We also identify open challenges and promising directions for enhancing the robustness of future quantum communication systems.
Quantum key distribution (QKD) is widely regarded as a highly secure quantum encryption approach since it applies theoretical principles of quantum mechanics as a medium of security, unlike classical encryption processes that rely on complex mathematics. However, practical QKD systems are vulnerable due to imperfect photon source hardware, communication channel, and detector implementation. These hardware imperfections open side channels that an adversary can exploit without violating principles of quantum mechanics. This review provides a comprehensive overview of the current QKD protocols, quantum hacking strategies and their operating principles, vulnerable hardware components and their mitigation techniques. This paper further investigates how state-of-the-art paradigms based on artificial intelligence (AI) and machine learning (ML), along with key subfields—such as deep learning (DL), deep reinforcement learning (DRL), and quantum machine learning (QML)—are reshaping the domain. In particular, this paper analyzes their dual roles as enablers of sophisticated attacks and as instruments for attack detection and mitigation. By jointly addressing the challenges in quantum communication and adaptive learning, as well as attack and detection architectures, this survey elucidates both the capabilities and the limitations of contemporary attack-detection mechanisms in the field. This survey seeks to establish a unified framework that conceptually integrates physical-layer quantum hacking with AI-/ML-based security, emphasizing their dual function as both an intelligent defensive layer and a potential tool for advanced threats.
Quantum Key Distribution (QKD) is revolutionizing cryptography by promising information-theoretic security through the immutable laws of quantum mechanics. Yet, the challenge of transforming these idealized security models into practical, resilient systems remains a pressing issue, especially as quantum computing evolves. In this review, we critically dissect and synthesize the latest advancements in QKD protocols and their security vulnerabilities, with a strong emphasis on rigorous security proofs. We actively categorize contemporary QKD schemes into three key classes: uncertainty principle-based protocols (e.g., BB84), hybrid architectures that enable secure direct communication (eg, three-stage protocol), and continuous-variable frameworks. We further include two modern classes of QKD protocols, namely Twin-field QKD and Device-Independent QKD, both of which were developed to have practical implementations over the last decade. Moreover, we highlight important experimental breakthroughs and innovative mitigation strategies, including the deployment of advanced Quantum Error Correction Codes (QECCs), that significantly enhance channel fidelity and system robustness. By mapping the current landscape, from sophisticated quantum attacks to state-of-the-art error correction methods, this review fills an important gap in the literature. To bring everything together, the relevance of this review concerning quantum augmented networks (QuANets) is also presented. This allows the readers to gain a comprehensive understanding of the security promises of quantum key distribution from theoretical proofs to experimental validations.
Quantum Key Distribution (QKD) offers information-theoretic security grounded in the laws of quantum mechanics rather than computational assumptions. While its theoretical foundations are robust, practical implementations necessarily deviate from the idealized models assumed in security analyses, opening the door to side-channel attacks and implementation loopholes. In particular, most research to date has focused on mitigating vulnerabilities in the measurement devices, leading to the development of Measurement-Device-Independent QKD (MDI-QKD) and Twin-Field QKD (TF-QKD), which effectively close all receiver-side loopholes. By contrast, the security of the source has remained less explored, despite being critical for the overall integrity of QKD systems. The goal of this thesis is to develop security proofs that explicitly account for realistic imperfections in QKD sources. Special emphasis is placed on three main aspects: correlations between emitted pulses that violate independence assumptions, imperfect phase randomization arising from practical modulation schemes, and leakage of internal settings through passive or active side channels. By formulating rigorous methods to analyze these imperfections, the work aims to provide a framework that enables practitioners to quantify and mitigate implementation risks systematically. Additionally, this thesis seeks to clarify under which conditions the commonly used decoy-state method remains secure, and to what extent source assumptions can be relaxed without compromising performance. This thesis aims to advance the understanding of how real-world deviations impact QKD security and to contribute to the development of protocols and devices. Ultimately, this work is motivated by the ambition to help bring QKD from a theoretically promising idea to a mature technology deployable with confidence in practical scenarios.
Quantum Key Distribution (QKD) leverages the principles of quantum mechanics to provide theoretically unconditional security for cryptographic key sharing. However, practical implementations remain vulnerable due to non-ideal devices and potential security loopholes at both the source and detection sides of QKD systems. The side-channel-secure (SCS) protocol addresses these challenges by encoding bits in vacuum and non-vacuum states and introducing a third-party measurement node, thereby repelling attacks targeting the detection side as well as external lab attacks on the source side. In this work, we consider the state-dependent correlated errors and Trojan-horse attack while preserving the SCS protocol's key advantage-specifically, requiring only upper bounds on intensities characterization without needing a full description of quantum states in infinite dimensions. Numerical results demonstrate that when the reflected light intensity from Trojan-horse attacks falls below 10−6, Eve can scarcely extract additional key information from the reflections. This work makes the SCS protocol more practical.
In contrast to classical public-key cryptosystems, where the security of encoded messages relies on on computational assumptions, Quantum Key Distribution (QKD) enables two distant parties to establish a shared secret key that, when combined with a one-time pad, provides information-theoretically secure encryption, provided that the QKD protocol is supported by a rigorous security proof. In the last decades, security proofs robust against a wide range of eavesdropping strategies have established the theoretical soundness of several QKD protocols. However, most proofs are based on idealized models of the physical systems involved in such protocols and often include assumptions that are not satisfied in practical implementations. This mismatch creates a gap between theoretical security guarantees and actual experimental realizations, making QKD protocols vulnerable to attacks. To ensure the security of real-world QKD systems, it is therefore essential to account for imperfections in security analyses. In this article, we present an overview of recent analytical and numerical developments in QKD security proofs, which provide a versatile approach for incorporating imperfections and re-establishing the security of quantum communication protocols under realistic conditions.
The importance of secure and high-rate information transmission cannot be understated in today's society. Unfortunately, a security crisis is impending due to the development of quantum computing technologies which can break current encryption schemes. A promising solution is quantum key distribution (QKD), which offers information-theoretic security. However, practical implementations of QKD do not conform to the idealized security assumptions that are made in QKD security proofs and therefore form security loopholes. The discovery of the measurement-device-independent QKD (MDI QKD) protocol presented a rapid leap in QKD research, as it effectively closes all side channels at the detection end of QKD setups, while maintaining experimental feasibility. Naturally, a major remaining obstacle in QKD research is the vulnerability of practical sources. As the clock rate of QKD systems advances into the GHz range, specific imperfections at the source arise. The goal of this PhD thesis is to conduct characterizations of source imperfections (especially those arising from GHz modulation), quantify their impact on security, and find methods to mitigate them. Specifically, this thesis presents the following studies. A) Identification and analysis of a novel side channel in sources using a Faraday mirror for temperature-stabilized polarization modulation, leading to time-dependent passive leakage of quantum states. We demonstrate that precise side-channel characterization (rather than the pessimistic approximations commonly used in the literature) can improve the estimated secret key rate by multiple orders of magnitude. B) Identification and analysis of a new class of source side channels (hidden multidimensional modulation side channels), using high-speed time-varying encoding as an illustrative case example (which we characterize using experimental and simulation-based methods). We demonstrate that hidden degrees of freedom, such as time, may be coupled to the encoding process, enabling unambiguous state discrimination attacks. In our illustrative case example, this causes the maximum secure transmission distance to be reduced by over 50%. C) Experimental and simulation-based characterization of phase correlations at GHz repetition rates when using electro-optic phase modulation for phase/polarization encoding. Our findings indicate that pattern-dependent phase deviations are on the order of 0.01pi. D) Design and experimental demonstration of a path-selection modulation source -- a source using no active phase modulation components (to mitigate the side channels arising from such components). Phase randomization is achieved through gain-switching and polarization encoding is achieved by randomly selecting between multiple paths, each path corresponding to one of the desired encoded states. Overall, by identifying and characterizing multiple source side channels, this thesis underscores the importance of avoiding unwarranted assumptions regarding the security of QKD sources. Hidden imperfections can introduce significant security vulnerabilities, and these must be continually identified and analyzed. Furthermore, this thesis highlights the value of advancing key rate analysis techniques that can accommodate a broad range of implementation flaws while producing tight security bounds, thereby enabling precise characterization of the information leakage arising from such imperfections. Finally, this thesis emphasizes that active modulators, in general, constitute a major source of potential side channels, highlighting the importance of exploring modulator-free sources. The path-selection modulation scheme presented here provides a practically feasible example of such a source.