arXiv:quant-ph/0507063 · Physical Review A

Trojan-horse attacks on quantum-key-distribution systems

Nicolas Gisin, Sylvain Fasel, Barbara Kraus, Hugo Zbinden, G. Ribordy

Published Feb 13, 2006• 595 citations

Abstract

General Trojan-horse attacks on quantum-key-distribution systems, i.e., attacks on Alice or Bob's system via the quantum channel, are analyzed. We illustrate the power of such attacks with today's technology and conclude that all systems must implement active counter measures. In particular, all systems must include an auxiliary detector that monitors any incoming light. We show that such counter measures can be efficient, provided that enough additional privacy amplification is applied to the data. We present a practical way to reduce the maximal information gain that an adversary can gain using Trojan-horse attacks. This does reduce the security analysis of the two-way plug-and-play implementation to those of the standard one-way systems.

DOI: 10.1103/physreva.73.022320

Related papers

Risk Analysis of Trojan-Horse Attacks on Practical Quantum Key Distribution Systems

Nitin Jain, Birgit Stiller, Imran Khan +3 more

An eavesdropper Eve may probe a quantum key distribution (QKD) system by sending a bright pulse from the quantum channel into the system and analyzing the back-reflected pulses. Such Trojan-horse attacks can breach the security of the QKD system, if appropriate safeguards are not installed or if they can be fooled by the Eve. We present a risk analysis of such attacks based on extensive spectral measurements, such as transmittance, reflectivity, and detection sensitivity of some critical components used in a typical QKD systems. Our results indicate the existence of wavelength regimes, where the attacker gains considerable advantage as compared to launching an attack at 1550 nm. We also propose countermeasures to reduce the risk of such attacks.

arXiv:1408.0492IEEE Journal of Selected Topics in Quantum ElectronicsNov 5, 2014142 citations

Trojan-horse attack on a real-world quantum key distribution system: Theoretical and experimental security analysis

Ivan S. Sushchev, Daniil S. Bulavkin, Kirill E. Bugai +2 more

This paper presents a theoretical and experimental demonstration of a security analysis of a Trojan-horse attack (THA) on a real-world quantum key distribution (QKD) system. We show that the upper bound on the information leakage depends solely on the fidelity between the states of the adversary. We find the lower bound for fidelity between THA states in both the polarization- and phase-coding BB84 protocols, considering both pure and mixed states. Our bounds depend only on the mean photon number per pulse available to an adversary. We also present an experimental analysis of a QKD system, including optical time-domain reflectometry measurements with centimeter resolution and spectral transmittance measurements for optical defense elements ranging from 1100 to 1800 nm with a noise floor lower than − 100 dB. Finally, by considering the optimal attack, we obtain the value of the mean photon number per pulse available to an adversary and calculate the key leakage that needs to be eliminated during the privacy amplification procedure. Published by the American Physical Society 2024

Physical Review AppliedSep 12, 202420 citations

Practical security analysis against the Trojan-horse attacks on fiber-based phase-coding QKD system in the wide spectral range

Ivan S. Sushchev, Diana M. Guzairova, Andrey N. Klimov +4 more

The Trojan-horse attacks on quantum key distribution (QKD) systems are known to be a threat to secure key sharing between two parties (Alice and Bob). To protect a QKD system against such attacks a variety of passive optical and active optical devices embedded in Alice’s and Bob’s setup are widely used. However, a security analysis against the Trojan-horse attack is required to ensure the unconditional security of a QKD system. We present a security analysis against the Trojan-horse attacks on a practical fiber-based QKD phase-coding system in 400–1700 nm spectral range. The obtained results made it possible to calculate the higher limit of average photon number returned to Eve and the probabilities of Eve’s success of the attack on a particular QKD system.

Emerging Imaging and Sensing Technologies for Security and DefenceSep 8, 20215 citations

Improved finite-key security analysis of quantum key distribution against Trojan-horse attacks

Álvaro Navarrete, Marcos Curty

Abstract Most security proofs of quantum key distribution (QKD) disregard the effect of information leakage from the users’ devices, and, thus, do not protect against Trojan-horse attacks (THAs). In a THA, the eavesdropper injects strong light into the QKD apparatuses, and then analyzes the back-reflected light to learn information about their internal setting choices. Only a few recent works consider this security threat, but predict a rather poor performance of QKD unless the devices are strongly isolated from the channel. Here, we derive finite-key security bounds for decoy-state-based QKD schemes in the presence of THAs, which significantly outperform previous analyses. Our results constitute an important step forward to closing the existing gap between theory and practice in QKD.

arXiv:2202.06630Quantum Science and TechnologyMay 31, 202233 citations

Unambiguous measurements and Trojan-horse attack in quantum cryptography

S. N. Molotkov

Abstract Early security proofs of the keys in quantum cryptography systems were based on the assumption that the transmitting and receiving stations were completely isolated from the outside world—the eavesdropper. However, this condition cannot be implemented in practice, since quantum cryptography systems are open systems, in the sense that an eavesdropper can have indirect access, for example, through a fiber communication channel to critical equipment elements (phase modulators, intensity modulators, etc) using active sensing of the state of these elements—Trojan-horse attacks. A new Trojan-horse attack based on joint unambiguous measurements of reflected probing states from an intensity modulator and information states in a quantum communication channel is proposed. Estimates of attack parameters for a number of quantum key distribution protocols are given, when an attack leads to compromise of keys.

Laser Physics LettersDec 20, 20193 citations

Security and performance analyses of quantum-key-distribution systems

Chi‐Hang Fred Fung

Quantum cryptography, or, more precisely, quantum key distribution (QKD) allows two distant parties, Alice and Bob, to expand a previously shared secret key by sending quantum states through a quantum channel. The goal here is for Alice and Bob to communicate securely in the presence of an eavesdropper, Eve. The most well-known QKD protocol is the Bennett-Brassard 1984 (BB84) protocol, which has been proved unconditionally secure against any attacks allowed by quantum mechanics. The main advantage of QKD over conventional cryptography is its absolute security. Thus, it is imperative to evaluate the security and performance of QKD protocols and realistic QKD systems. In this thesis, we study the security and performance aspects of QKD in four parts. In the first part, we study the Scarani-Acin-Ribordy-Gisin 2004 (SARG04) protocol. This protocol differs from the BB84 protocol only in the classical post-processing step and uses the same four quantum states as the BB84 protocol. We compared these two protocols and showed that in typical situations, the classical post-processing software for BB84 should be used in order to have a higher performance. In the second part, we prove the security of a three-state protocol. This protocol is similar to the BB84 protocol in that they share the same three qubit states. In the third part, we consider a practical Trojan horse attack on practical QKD systems implementing the BB84 protocol. The attack works by taking advantage of the finite response time of practical phase modulators to remap the states sent out by the legitimate user, Alice. We showed that if Alice and Bob are unaware of our attack, the final key shared between them can be compromised in some situations. In the fourth part, we consider another type of Trojan horse attack, which is based on mismatch between detection efficiencies of detectors. Practical detectors in QKD systems usually do not have identical efficiencies and an eavesdropper Eve may be able to exploit this efficiency mismatch to steal information about the final secret key. We analyze the security of the attack and show that it is possible for Eve to acquire some information on the final secret key if Alice and Bob are unaware of this attack.

Jan 1, 20080 citations