This paper investigates loopholes in subcarrier wave quantum key distribution systems associated with the superlinear operating regime of avalanche photodiode single-photon detectors. The results demonstrate that an eavesdropper can control the receiver’s detection outcomes. The presented analysis may facilitate the identification of similar attacks and the development of countermeasures for quantum key distribution systems.
This paper investigates loopholes in subcarrier wave quantum key distribution systems associated with the superlinear operating regime of avalanche photodiode single-photon detectors. The results demonstrate that an eavesdropper can control the receiver’s detection outcomes. The presented analysis may facilitate the identification of similar attacks and the development of countermeasures for quantum key distribution systems.
As necessary steps toward practical and secure quantum key distribution (QKD), identifying and patching possible attacks are important and valuable. This study discusses an avalanche-transition-region (ATR) attack on a gated-mode avalanche photodiode (APD) detector, widely used in QKD systems. Unlike other attacks, this one leaves almost no trace; the eavesdropper introduces less than 0.5% quantum bit-error rate, and the photocurrent and afterpulse probability before and after hacking are nearly identical. These findings highlight the importance of detection signals in real-life QKD systems, and are crucial to enhancing the security of practical QKD.
We introduce the concept of a superlinear threshold detector, a detector that has a higher probability to detect multiple photons if it receives them simultaneously rather than at separate times. Highly superlinear threshold detectors in quantum key distribution systems allow eavesdropping the full secret key without being revealed. Here, we generalize the detector control attack, and analyze how it performs against quantum key distribution systems with moderately superlinear detectors. We quantify the superlinearity in superconducting single-photon detectors based on earlier published data, and gated avalanche photodiode detectors based on our own measurements. The analysis shows that quantum key distribution systems using detector(s) of either type can be vulnerable to eavesdropping. The avalanche photodiode detector becomes superlinear toward the end of the gate. For systems expecting substantial loss, or for systems not monitoring loss, this would allow eavesdropping using trigger pulses containing less than 120 photons per pulse. Such an attack would be virtually impossible to catch with an optical power meter at the receiver entrance.
Quantum key distribution (QKD) promises information theoretic secure key as long as the device performs as assumed in the theoretical model. One of the assumptions is an absence of information leakage about individual photon detection outcomes of the receiver unit. Here we investigate the information leakage from a QKD receiver due to photon emission caused by detection events in single-photon detectors (backflash). We test commercial silicon avalanche photodiodes and a photomultiplier tube, and find that the former emit backflashes. We study the spectral, timing and polarization characteristics of these backflash photons. We experimentally demonstrate on a free-space QKD receiver that an eavesdropper can distinguish which detector has clicked inside it, and thus acquire secret information. A set of countermeasures both in theory and on the physical devices are discussed.
Quantum key distribution (QKD) allows two users to communicate with information theoretic security by encoding information on single photons. This security is based on the laws of physics and as such can never be broken in theory. However, in practice, components do not always behave according to their theoretical models and these deviations can be exploited by an eavesdropper. In recent years, exposing loopholes in QKD systems, known as quantum hacking, has attracted significant attention. The components most susceptible to being hacked are the single-photon detectors, often avalanche photodiodes (APDs), as they are directly exposed to the optical channel. Whilst measurement-device-independent QKD removes detector vulnerability from the system, secure key rates with this technique can be much lower than point-to-point links. As such, mitigating attacks on QKD systems is a pressing challenge in QKD. In this thesis, the focus is on a special class of detectors, self-differencing APDs (SD-APDs), which have facilitated state-of-the art demonstrations of QKD. The susceptibility of SD-APDs to blinding attacks, the most explored and successful attack to date, was investigated and it was shown that by following best practice for their operation, such an attack would be unsuccessful. We have also proposed and developed a countermeasure such that the onus for appropriate operation could be removed from the user. We have also explored an arguably more dangerous attack, in the form of the after-gate attack. We have shown that delayed detection events, ordinarily considered detrimental in QKD, can provide inherent protection against this attack. Finally, backflashes in GHz-gated APDs were investigated for the first time and it was shown that threat they pose to QKD security is negligible. These results highlight the inherent protection to a number of attacks that self-differencing APDs possess. We stress that the findings presented in this thesis are also applicable to other types of fast-gated InGaAs APDs that don't possess self-differencing circuitry.
Implementation of high-speed quantum key distribution (QKD) has become one of the major focuses in the field, which produces a high key-generation rate for applications. To achieve high-speed QKD, tailored techniques are developed and employed to quickly generate and detect quantum states. However, these techniques may introduce unique loopholes to compromise the security of QKD systems. In this paper, we investigate the loopholes of the self-differencing (SD) avalanche photodiode (APD) detector, typically used for high-speed detection in a QKD system, and demonstrate experimental testing of the SD APD detector under strong-pulse-illumination attack. This attack presents blinding stability and helps an eavesdropper to learn the secret key without introducing extra quantum bit rate error. Based on this testing, we propose a set of criteria for protecting SD APD detectors from the strong-pulse-illumination attack.
Semiconductor avalanche photodiodes (APDs) are commonly used for single photon detection in quantum key distribution. Recently, many attacks using bright illumination have been proposed to manipulate gated InGaAs APDs. In order to devise effective countermeasures, careful analysis of these attacks must be carried out to distinguish between incorrect operation and genuine loopholes. Here, we show that correctly operated, gated APDs are immune to continuous-wave illumination attacks, while monitoring the photocurrent for anomalously high values is a straightforward countermeasure against attacks using temporally tailored light.