Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Physics and High Technology

Decoy State Method: Key to Practical Quantum Cryptography

Yong-Su KIM, Yoon-Ho KIM

Published Mar 31, 2026• 0 citations
Publisher

Abstract

With the potential of quantum computers to compromise current public-key cryptosystems, Quantum Key Distribution (QKD), which is based on the physical laws of quantum mechanics, has garnered significant attention. However, while QKD security proofs typically assume ideal single-photon sources, realistic implementations rely on Weak Coherent Pulses (WCP) due to the difficulties associated with commercializing true single-photon sources. Unfortunately, the multi-photon components inherent in WCPs are vulnerable to Photon Number Splitting (PNS) attacks, which limits the secure transmission distance to a few tens of kilometers. This article introduces the Decoy State method, which effectively resolves this issue. Proposed by W.-Y. Hwang in 2003 and further advanced by H.-K. Lo and X.-B. Wang, this technique utilizes the random interleaving of pulses with different mean photon numbers during transmission. By doing so, it enables the accurate estimation of single-photon yield and error rates, thereby effectively detecting PNS attacks. Because it can be implemented using standard commercial lasers and intensity modulators, the Decoy State method has become the standard technology in most modern QKD systems. It serves as a core component for long-distance quantum communication, enabling major milestones reported recently. This article reviews the principles, mathematical analysis, and latest applications of the Decoy State method.

DOI
10.3938/phit.35.007

Related papers

Photon-Number Splitting (PNS) Attacks in Weak Coherent Pulse QKD: Simulation and Countermeasures

Sharika Punjabi, Sakshi

For a start, Quantum Key Distribution offers security not depending on any fundamental assumption. However, actual realizations choose to use weak coherent pulses as photon sources, rather than the ideal single-photon state, which bears security weaknesses due to the emission of sporadic multi-photon states. These states can be used in Photon-Number Splitting (PNS) attacks, where the attacker intercepts and buffers photons of multi-photon pulses and forwards the rest, enabling partial recovery of the key without inducing detectable perturbations. This article presents a simulation-based approach to analyze PNS attacks with realistic channel conditions like losses, detector imperfections, and finite key lengths. The research also examines the performance of decoy-state countermeasures, that use variable-intensity pulses to statistically reveal eavesdropping and Simulation results confirm the dominant character of PNS on raw key rates for the no-countermeasure scenario and ensure optimal decoy-state schemes restore security by cutting single-photon contributions. Results establish that although WCP QKD is vulnerable to PNS attacks in theory, strict adoption of decoy-state protocols aided with monitoring and finite-key analysis can provide immunity against an adversary. The paper emphasizes the need for simulation-based, implementation-dependent security analysis in direction towards well-designed practical quantum cryptographic systems. [1] [2] [3] [4] [10] [8]

EPJ Web of Conferences•Jan 1, 2026•0 citations

A portable and compact decoy-state QKD sender

Michael Auer, Peter Freiwang, Adomas Baliuka +3 more

Quantum Key Distribution (QKD) enables secure key exchange, based on fundamental laws of quantum mechanics [1] . There exist various protocols which are mathematically proven to be secure, however, for an actual implementation vulnerabilities, due to non-ideal components, must be considered. For example, the usage of faint lasers instead of single-photon sources undermines the security, as even for mean photon numbers per pulse µ ≪ 1 there is a non-vanishing probability of emitting multiple photons. The decoy protocol [2] , [3] offers a countermeasure. When randomly switching between two or more different pulse intensity levels, by exploiting their non-orthogonality, the so-called photon number splitting (PNS) attack can be revealed.

Conference on Lasers and Electro-Optics Europe & European Quantum Electronics Conference (CLEO/Europe-EQEC)•Jun 21, 2021•3 citations

Photon-Number Splitting (PNS) Attacks in Weak Coherent Pulse QKD: Simulation and Countermeasures

Sharika Punjabi, Sakshi

For a start, Quantum Key Distribution offers security not depending on any fundamental assumption. However, actual realizations choose to use weak coherent pulses as photon sources, rather than the ideal single-photon state, which bears security weaknesses due to the emission of sporadic multi-photon states. These states can be used in Photon-Number Splitting (PNS) attacks, where the attacker intercepts and buffers photons of multi-photon pulses and forwards the rest, enabling partial recovery of the key without inducing detectable perturbations. This article presents a simulation-based approach to analyze PNS attacks with realistic channel conditions like losses, detector imperfections, and finite key lengths. The research also examines the performance of decoy-state countermeasures, that use variable-intensity pulses to statistically reveal eavesdropping and Simulation results confirm the dominant character of PNS on raw key rates for the no-countermeasure scenario and ensure optimal decoy-state schemes restore security by cutting single-photon contributions. Results establish that although WCP QKD is vulnerable to PNS attacks in theory, strict adoption of decoy-state protocols aided with monitoring and finite-key analysis can provide immunity against an adversary. The paper emphasizes the need for simulation-based, implementation-dependent security analysis in direction towards well-designed practical quantum cryptographic systems. [1] [2] [3] [4] [10] [8]

•Mar 23, 2026•0 citations

Quantum Cryptography: From Theory to Practice

Xiongfeng Ma

Quantum cryptography or quantum key distribution (QKD) applies fundamental laws of quantum physics to guarantee secure communication. The security of quantum cryptography was proven in the last decade. Many security analyses are based on the assumption that QKD system components are idealized. In practice, inevitable device imperfections may compromise security unless these imperfections are well investigated.\n\nA highly attenuated laser pulse which gives a weak coherent state is widely used in QKD experiments. A weak coherent state has multi-photon components, which opens up a security loophole to the sophisticated eavesdropper. With a small adjustment of the hardware, we will prove that the decoy state method can close this loophole and substantially improve the QKD performance. We also propose a few practical decoy state protocols, study statistical fluctuations and perform experimental demonstrations. Moreover, we will apply the methods from entanglement distillation protocols based on two-way classical communication to improve the decoy state QKD performance. Furthermore, we study the decoy state methods for other single photon sources, such as triggering parametric down-conversion (PDC) source. Note that our work, decoy state protocol, has attracted a lot of scientific and media interest. The decoy state QKD becomes a standard technique for prepare-and-measure QKD schemes.\n\nAside from single-photon-based QKD schemes, there is another type of scheme based on entangled photon sources. A PDC source is commonly used as an entangled photon source. We propose a model and post-processing scheme for the entanglement-based QKD with a PDC source. Although the model is proposed to study the entanglement-based QKD, we emphasize that our generic model may also be useful for other non-QKD experiments involving a PDC source. By simulating a real PDC experiment, we show that the entanglement-based QKD can achieve longer maximal secure distance than the single-photon-based QKD schemes.\n\nWe propose a time-shift attack that exploits the efficiency mismatch of two single photon detectors in a QKD system. This eavesdropping strategy can be realized by current technology. We will also discuss counter measures against the attack and study the security of a QKD system with efficiency mismatch detectors.

•Feb 26, 2009•21 citations

An Intensity-Stable Pulse Source Based on Optical Injection for High-Speed Quantum Key Distribution

Wenxu Zhao, Tao Wang, Xun Zhou +2 more

Quantum Key Distribution (QKD) provides Alice and Bob with a secure key to prevent third-party eavesdropping. Due to the lack of an ideal single-photon source, weak coherent light sources are widely used. The decoy state method can make up for the security loophole brought by weak coherent light sources - photon number splitting attack (PNS). The specific method of decoy state quantum key distribution is to send light pulses of different intensity levels. Taking the three-intensity decoy state method as an example, one is a signal state with an average photon number of u; one is a decoy state with an average photon number of d; and one is a vacuum state with an average photon number of v. Even if the eavesdropper is more powerful, he cannot distinguish which state the pulse comes from. Therefore, the accuracy of the light pulse intensity is crucial to the security of decoy state quantum key distribution [1] .

International Conference on Optical Communications and Networks (ICOCN)•Jul 28, 2025•0 citations

A review on the decoy-state method for practical quantum key distribution

Xiang‐Bin Wang

We present a review on the historic development of the decoy state method, including the background, principles, methods, results and development. We also clarify some delicate concepts. Given an imperfect source and a very lossy channel, the photon-number-splitting (PNS) attack can make the quantum key distribution (QKD) in practice totally insecure. Given the result of ILM-GLLP, one knows how to distill the secure final key if he knows the fraction of tagged bits. The purpose of decoy state method is to do a tight verification of the the fraction of tagged bits. The main idea of decoy-state method is changing the intensities of source light and one can verify the fraction of tagged bits of certain intensity by watching the the counting rates of pulses of different intensities. Since the counting rates are small quantities, the effect of statistical fluctuation is very important. It has been shown that 3-state decoy-state method in practice can work even with the fluctuations and other errors.

arXiv:quant-ph/0509084•Sep 13, 2005•2 citations
With the potential of quantum computers to compromise current public-key cryptosystems, Quantum Key Distribution (QKD), which is based on the physical laws of quantum mechanics, has garnered significant attention. However, while QKD security proofs typically assume ideal single-photon sources, realistic implementations rely on Weak Coherent Pulses (WCP) due to the difficulties associated with commercializing true single-photon sources. Unfortunately, the multi-photon components inherent in WCPs are vulnerable to Photon Number Splitting (PNS) attacks, which limits the secure transmission distance to a few tens of kilometers. This article introduces the Decoy State method, which effectively resolves this issue. Proposed by W.-Y. Hwang in 2003 and further advanced by H.-K. Lo and X.-B. Wang, this technique utilizes the random interleaving of pulses with different mean photon numbers during transmission. By doing so, it enables the accurate estimation of single-photon yield and error rates, thereby effectively detecting PNS attacks. Because it can be implemented using standard commercial lasers and intensity modulators, the Decoy State method has become the standard technology in most modern QKD systems. It serves as a core component for long-distance quantum communication, enabling major milestones reported recently. This article reviews the principles, mathematical analysis, and latest applications of the Decoy State method.
For a start, Quantum Key Distribution offers security not depending on any fundamental assumption. However, actual realizations choose to use weak coherent pulses as photon sources, rather than the ideal single-photon state, which bears security weaknesses due to the emission of sporadic multi-photon states. These states can be used in Photon-Number Splitting (PNS) attacks, where the attacker intercepts and buffers photons of multi-photon pulses and forwards the rest, enabling partial recovery of the key without inducing detectable perturbations. This article presents a simulation-based approach to analyze PNS attacks with realistic channel conditions like losses, detector imperfections, and finite key lengths. The research also examines the performance of decoy-state countermeasures, that use variable-intensity pulses to statistically reveal eavesdropping and Simulation results confirm the dominant character of PNS on raw key rates for the no-countermeasure scenario and ensure optimal decoy-state schemes restore security by cutting single-photon contributions. Results establish that although WCP QKD is vulnerable to PNS attacks in theory, strict adoption of decoy-state protocols aided with monitoring and finite-key analysis can provide immunity against an adversary. The paper emphasizes the need for simulation-based, implementation-dependent security analysis in direction towards well-designed practical quantum cryptographic systems. [1] [2] [3] [4] [10] [8]
Quantum Key Distribution (QKD) enables secure key exchange, based on fundamental laws of quantum mechanics [1] . There exist various protocols which are mathematically proven to be secure, however, for an actual implementation vulnerabilities, due to non-ideal components, must be considered. For example, the usage of faint lasers instead of single-photon sources undermines the security, as even for mean photon numbers per pulse µ ≪ 1 there is a non-vanishing probability of emitting multiple photons. The decoy protocol [2] , [3] offers a countermeasure. When randomly switching between two or more different pulse intensity levels, by exploiting their non-orthogonality, the so-called photon number splitting (PNS) attack can be revealed.
For a start, Quantum Key Distribution offers security not depending on any fundamental assumption. However, actual realizations choose to use weak coherent pulses as photon sources, rather than the ideal single-photon state, which bears security weaknesses due to the emission of sporadic multi-photon states. These states can be used in Photon-Number Splitting (PNS) attacks, where the attacker intercepts and buffers photons of multi-photon pulses and forwards the rest, enabling partial recovery of the key without inducing detectable perturbations. This article presents a simulation-based approach to analyze PNS attacks with realistic channel conditions like losses, detector imperfections, and finite key lengths. The research also examines the performance of decoy-state countermeasures, that use variable-intensity pulses to statistically reveal eavesdropping and Simulation results confirm the dominant character of PNS on raw key rates for the no-countermeasure scenario and ensure optimal decoy-state schemes restore security by cutting single-photon contributions. Results establish that although WCP QKD is vulnerable to PNS attacks in theory, strict adoption of decoy-state protocols aided with monitoring and finite-key analysis can provide immunity against an adversary. The paper emphasizes the need for simulation-based, implementation-dependent security analysis in direction towards well-designed practical quantum cryptographic systems. [1] [2] [3] [4] [10] [8]
Quantum cryptography or quantum key distribution (QKD) applies fundamental laws of quantum physics to guarantee secure communication. The security of quantum cryptography was proven in the last decade. Many security analyses are based on the assumption that QKD system components are idealized. In practice, inevitable device imperfections may compromise security unless these imperfections are well investigated.\n\nA highly attenuated laser pulse which gives a weak coherent state is widely used in QKD experiments. A weak coherent state has multi-photon components, which opens up a security loophole to the sophisticated eavesdropper. With a small adjustment of the hardware, we will prove that the decoy state method can close this loophole and substantially improve the QKD performance. We also propose a few practical decoy state protocols, study statistical fluctuations and perform experimental demonstrations. Moreover, we will apply the methods from entanglement distillation protocols based on two-way classical communication to improve the decoy state QKD performance. Furthermore, we study the decoy state methods for other single photon sources, such as triggering parametric down-conversion (PDC) source. Note that our work, decoy state protocol, has attracted a lot of scientific and media interest. The decoy state QKD becomes a standard technique for prepare-and-measure QKD schemes.\n\nAside from single-photon-based QKD schemes, there is another type of scheme based on entangled photon sources. A PDC source is commonly used as an entangled photon source. We propose a model and post-processing scheme for the entanglement-based QKD with a PDC source. Although the model is proposed to study the entanglement-based QKD, we emphasize that our generic model may also be useful for other non-QKD experiments involving a PDC source. By simulating a real PDC experiment, we show that the entanglement-based QKD can achieve longer maximal secure distance than the single-photon-based QKD schemes.\n\nWe propose a time-shift attack that exploits the efficiency mismatch of two single photon detectors in a QKD system. This eavesdropping strategy can be realized by current technology. We will also discuss counter measures against the attack and study the security of a QKD system with efficiency mismatch detectors.
Quantum Key Distribution (QKD) provides Alice and Bob with a secure key to prevent third-party eavesdropping. Due to the lack of an ideal single-photon source, weak coherent light sources are widely used. The decoy state method can make up for the security loophole brought by weak coherent light sources - photon number splitting attack (PNS). The specific method of decoy state quantum key distribution is to send light pulses of different intensity levels. Taking the three-intensity decoy state method as an example, one is a signal state with an average photon number of u; one is a decoy state with an average photon number of d; and one is a vacuum state with an average photon number of v. Even if the eavesdropper is more powerful, he cannot distinguish which state the pulse comes from. Therefore, the accuracy of the light pulse intensity is crucial to the security of decoy state quantum key distribution [1] .
We present a review on the historic development of the decoy state method, including the background, principles, methods, results and development. We also clarify some delicate concepts. Given an imperfect source and a very lossy channel, the photon-number-splitting (PNS) attack can make the quantum key distribution (QKD) in practice totally insecure. Given the result of ILM-GLLP, one knows how to distill the secure final key if he knows the fraction of tagged bits. The purpose of decoy state method is to do a tight verification of the the fraction of tagged bits. The main idea of decoy-state method is changing the intensities of source light and one can verify the fraction of tagged bits of certain intensity by watching the the counting rates of pulses of different intensities. Since the counting rates are small quantities, the effect of statistical fluctuation is very important. It has been shown that 3-state decoy-state method in practice can work even with the fluctuations and other errors.