The main goal of this research project is to analyse the security of practical implementations of discrete-variable QKD systems. While it is true that in theory QKD can offer unconditional security based on the laws of physics, in practice, however, at the moment it does not, because typical security proofs of QKD include assumptions that are not actually met by current implementations, as they usually ignore many experimental device imperfections. This means that these proofs cannot be applied to practical realisations because real devices behave differently from the theoretical models that are assumed in the proofs. This project aims to fill in this big gap between the theory and the practice of QKD by developing efficient security proof methods for the finite sample-size setting scenario that can include typical devices’ flaws to be applied to QKD experiments, particularly to decoy-state-based QKD platforms.
The main goal of this research project is to analyse the security of practical implementations of discrete-variable QKD systems. While it is true that in theory QKD can offer unconditional security based on the laws of physics, in practice, however, at the moment it does not, because typical security proofs of QKD include assumptions that are not actually met by current implementations, as they usually ignore many experimental device imperfections. This means that these proofs cannot be applied to practical realisations because real devices behave differently from the theoretical models that are assumed in the proofs. This project aims to fill in this big gap between the theory and the practice of QKD by developing efficient security proof methods for the finite sample-size setting scenario that can include typical devices’ flaws to be applied to QKD experiments, particularly to decoy-state-based QKD platforms.
Quantum Key Distribution (QKD) offers information-theoretic security grounded in the laws of quantum mechanics rather than computational assumptions. While its theoretical foundations are robust, practical implementations necessarily deviate from the idealized models assumed in security analyses, opening the door to side-channel attacks and implementation loopholes. In particular, most research to date has focused on mitigating vulnerabilities in the measurement devices, leading to the development of Measurement-Device-Independent QKD (MDI-QKD) and Twin-Field QKD (TF-QKD), which effectively close all receiver-side loopholes. By contrast, the security of the source has remained less explored, despite being critical for the overall integrity of QKD systems. The goal of this thesis is to develop security proofs that explicitly account for realistic imperfections in QKD sources. Special emphasis is placed on three main aspects: correlations between emitted pulses that violate independence assumptions, imperfect phase randomization arising from practical modulation schemes, and leakage of internal settings through passive or active side channels. By formulating rigorous methods to analyze these imperfections, the work aims to provide a framework that enables practitioners to quantify and mitigate implementation risks systematically. Additionally, this thesis seeks to clarify under which conditions the commonly used decoy-state method remains secure, and to what extent source assumptions can be relaxed without compromising performance. This thesis aims to advance the understanding of how real-world deviations impact QKD security and to contribute to the development of protocols and devices. Ultimately, this work is motivated by the ambition to help bring QKD from a theoretically promising idea to a mature technology deployable with confidence in practical scenarios.
In contrast to classical public-key cryptosystems, where the security of encoded messages relies on on computational assumptions, Quantum Key Distribution (QKD) enables two distant parties to establish a shared secret key that, when combined with a one-time pad, provides information-theoretically secure encryption, provided that the QKD protocol is supported by a rigorous security proof. In the last decades, security proofs robust against a wide range of eavesdropping strategies have established the theoretical soundness of several QKD protocols. However, most proofs are based on idealized models of the physical systems involved in such protocols and often include assumptions that are not satisfied in practical implementations. This mismatch creates a gap between theoretical security guarantees and actual experimental realizations, making QKD protocols vulnerable to attacks. To ensure the security of real-world QKD systems, it is therefore essential to account for imperfections in security analyses. In this article, we present an overview of recent analytical and numerical developments in QKD security proofs, which provide a versatile approach for incorporating imperfections and re-establishing the security of quantum communication protocols under realistic conditions.
Quantum cryptography, or quantum key distribution (QKD), provides a means of unconditionally secure communication. The security is in principle based on the fundamental laws of physics. Security proofs show that if quantum cryptography is appropriately implemented, even the most powerful eavesdropper cannot decrypt the message from a cipher.
The implementations of quantum crypto-systems in real life may not fully comply with the assumptions made in the security proofs. Such discrepancy between the experiment and the theory can be fatal to the security of a QKD system. In this thesis we address a number of these discrepancies.
A perfect single-photon source is often assumed in many security proofs. However, a weak coherent source is widely used in a real-life QKD implementation. Decoy state protocols have been proposed as a novel approach to dramatically improve the performance of a weak coherent source based QKD implementation without jeopardizing its security. Here, we present the first experimental demonstrations of decoy state protocols. Our experimental scheme was later adopted by most decoy state QKD implementations.
In the security proof of decoy state protocols as well as many other QKD protocols, it is widely assumed that a sender generates a phase-randomized coherent state. This assumption has been enforced in few implementations. We close this gap in two steps: First, we implement and verify the phase randomization experimentally; second, we prove the security of a QKD implementation without the coherent state assumption.
In many security proofs of QKD, it is assumed that all the detectors on the receiver's side have identical detection efficiencies. We show experimentally that this assumption may be violated in a commercial QKD implementation due to an eavesdropper's malicious manipulation. Moreover, we show that the eavesdropper can learn part of the final key shared by the legitimate users as a consequence of this violation of the assumptions.
Decoy-state quantum key distribution (QKD) is the most widely adopted approach for overcoming the limitations of imperfect single-photon sources. However, existing security proofs typically either neglect important device imperfections or rely on assumptions that are difficult to justify in realistic high-speed implementations, such as the independent and identically distributed nature of the emitted signals. In this work, we combine and extend several recent theoretical advances to provide a comprehensive analytical finite-key security proof for decoy-state QKD that simultaneously incorporates multiple practically relevant transmitter and receiver imperfections, including state-preparation flaws, bit and basis side-channel leakage and correlations, setting-independent intensity fluctuations, and detection-efficiency mismatches.
Cryptography plays a key role in today's digital society. The most widely used encryption method is the public-key algorithm, but its security relies on unproven computational assumptions. In contrast, quantum key distribution (QKD) is an unbreakable encryption algorithm. QKD has been proven to provide information-theoretic security rigorously based on the laws of physics. Despite the beauty of QKD theory, in practice, QKD still suffers from practical side-channel attacks, due to the imperfections of real-life implementations. Such discrepancy between the theory and the practice is fatal to the security of a QKD system. This thesis addresses a number of the discrepancies in a standard QKD implementation, and it offers efficient countermeasures to resolve these discrepancies. A novel protocol -- measurement-device-independent (MDI) QKD - was proposed to remove all detector side-channel attacks. To apply MDI-QKD in real life, I have proposed practical protocols, conducted the first rigorous finite-key security proof, designed methodologies to optimize parameters, and demonstrated MDI-QKD experimentally. These results allow MDI-QKD mature enough to be implemented in real-life. Based on the framework of MDI-QKD, the only security issue left is the source. To solve the loophole due to the imperfect encoder, I have experimentally implemented a recent protocol, which enables QKD loss-tolerant to source flaws. This experiment for the first time shows secure QKD with imperfect state preparations at long distances. Another vulnerable part in the source is the ability to generate true randomness. I have developed a compact and cost-effective quantum random number generator (QRNG) prototype, which has a real-time generation rate of 1 Gbit/s with excellent stability. The simplicity and speed of my prototype prove the feasibility of a robust, low-cost, and fast QRNG. In summary, MDI-QKD enables new scientific developments in the field of quantum cryptography. This thesis solves the major practical issues in the implementation of MDI-QKD. The combination of MDI-QKD, imperfect sources, and QRNG consists of the foundation of a future practical side-channel-free QKD protocol. The success of this protocol can substitute current classical cryptosystems by offering people an unconditionally secure infrastructure, which will be the ultimate dream for researchers in secure communication.
Quantum Key Distribution (QKD) is revolutionizing cryptography by promising information-theoretic security through the immutable laws of quantum mechanics. Yet, the challenge of transforming these idealized security models into practical, resilient systems remains a pressing issue, especially as quantum computing evolves. In this review, we critically dissect and synthesize the latest advancements in QKD protocols and their security vulnerabilities, with a strong emphasis on rigorous security proofs. We actively categorize contemporary QKD schemes into three key classes: uncertainty principle-based protocols (e.g., BB84), hybrid architectures that enable secure direct communication (eg, three-stage protocol), and continuous-variable frameworks. We further include two modern classes of QKD protocols, namely Twin-field QKD and Device-Independent QKD, both of which were developed to have practical implementations over the last decade. Moreover, we highlight important experimental breakthroughs and innovative mitigation strategies, including the deployment of advanced Quantum Error Correction Codes (QECCs), that significantly enhance channel fidelity and system robustness. By mapping the current landscape, from sophisticated quantum attacks to state-of-the-art error correction methods, this review fills an important gap in the literature. To bring everything together, the relevance of this review concerning quantum augmented networks (QuANets) is also presented. This allows the readers to gain a comprehensive understanding of the security promises of quantum key distribution from theoretical proofs to experimental validations.