An approach for security evaluation and certification of a complete quantum communication system
arXiv:1909.07898 · doi:10.1038/s41598-021-84139-3
Abstract
Although quantum communication systems are being deployed on a global scale, their realistic security certification is not yet available. Here we present a security evaluation and improvement protocol for complete quantum communication systems. The protocol subdivides a system by defining seven system implementation sub-layers based on a hierarchical order of information flow; then it categorises the known system implementation imperfections by hardness of protection and practical risk. Next, an initial analysis report lists all potential loopholes in its quantum-optical part. It is followed by interactions with the system manufacturer, testing and patching most loopholes, and re-assessing their status. Our protocol has been applied on multiple commercial quantum key distribution systems to improve their security. A detailed description of our methodology is presented with the example of a subcarrier-wave system. Our protocol is a step towards future security evaluation and security certification standards.
arXiv commentImproved readability and minor updates, Published in Scientific Reports volume 11, Article number: 5110 (2021), 17 pages, 3 figures, 3 tables
References in corpus (53)
- The Security of Practical Quantum Key Distribution
- Decoy State Quantum Key Distribution
- Measurement-device-independent quantum key distribution
- Advances in Quantum Cryptography
- Quantum Key Distribution with High Loss: Toward Global Secure Communication
- Device-independent security of quantum cryptography against collective attacks
- Overcoming the rate-distance barrier of quantum key distribution without using quantum repeaters
- Hacking commercial quantum cryptography systems by tailored bright illumination
- Distillation of secret key and entanglement from quantum states
- Tight Finite-Key Analysis for Quantum Cryptography
- Quantum Hacking: Experimental demonstration of time-shift attack against practical quantum key distribution systems
- Trojan Horse attacks on Quantum Key Distribution systems
- Unambiguous Discrimination Between Linearly-Independent Quantum States
- Quantum cryptography with finite resources: unconditional security bound for discrete-variable protocols with one-way post-processing
- Post-selection technique for quantum channels with applications to quantum cryptography
- ``Plug and play'' systems for quantum cryptography
- Experimental demonstration of phase-remapping attack in a practical quantum key distribution system
- Leftover Hashing Against Quantum Side Information
- A Fully Quantum Asymptotic Equipartition Property
- Quantum key distribution with realistic states: photon-number statistics in the photon-number splitting attack
- Device calibration impacts security of quantum key distribution
- Trojan-horse attacks threaten the security of practical quantum cryptography
- Unambiguous state discrimination in quantum cryptography with weak coherent states
- Finite-key analysis for practical implementations of quantum key distribution
- Risk analysis of Trojan-horse attacks on practical quantum key distribution systems
- Laser damage helps the eavesdropper in quantum cryptography
- Thermal blinding of gated detectors in quantum cryptography
- Controlling a superconducting nanowire single-photon detector using tailored bright illumination
- Practical security bounds against the Trojan-horse attack in quantum key distribution
- Optimal distinction between non-orthogonal quantum states
- Laser seeding attack in quantum key distribution
- Security loophole in free-space quantum key distribution due to spatial-mode detector-efficiency mismatch
- Patterning-effect-free intensity modulator for secure decoy-state quantum key distribution
- Quantum key distribution with an efficient countermeasure against correlated intensity fluctuations in optical pulses
- Decoy state quantum key distribution with imperfect source
- Experimental quantum key distribution with source flaws
- Creation of backdoors in quantum communications via laser damage
- Passive faraday mirror attack in practical two-way quantum key distribution system
- Laser damage attack against optical attenuators in quantum key distribution
- Attacks exploiting deviation of mean photon number in quantum key distribution and coin tossing
- Testing random-detector-efficiency countermeasure in a commercial system reveals a breakable unrealistic assumption
- Invisible Trojan-horse attack
- Backflash light characterization to prevent QKD zero-error hacking
- Insecurity of detector-device-independent quantum key distribution
- Eavesdropping and countermeasures for backflash side channel in quantum cryptography
- Security of subcarrier wave quantum key distribution against the collective beam-splitting attack
- Optimised quantum hacking of superconducting nanowire single-photon detectors
- Controlling single-photon detector ID210 with bright light
- Finite-key-size effect in commercial plug-and-play QKD system
- Hacking single-photon avalanche detector in quantum key distribution via pulse illumination
- Overcoming unambiguous state discrimination attack with the help of Schrödinger Cat decoy states
- A countermeasure against bright-light attack on superconducting nanowire single-photon detector in quantum key distribution
- Comment on "Inherent security of phase coding quantum key distribution systems against detector blinding attacks" [Laser Phys. Lett. 15, 095203 (2018)]
Cited by in corpus (11)
- Continuous-variable quantum key distribution system: past, present, and future
- Preparing a commercial quantum key distribution system for certification against implementation loopholes
- Quantum control attack on quantum key distribution systems
- Photonic interface between subcarrier wave and dual rail encodings
- High-dimensional quantum key distribution with resource-efficient detection
- Wide-spectrum security of quantum key distribution
- A consolidated and accessible security proof for finite-size decoy-state quantum key distribution
- Evaluation of quantum key distribution systems against injection-locking attacks
- Optical-pumping attack on a quantum key distribution laser source
- SQOUT: A Risk-Based Threat Analysis Framework for Quantum Communication Systems
- Pulsed laser attack at 1061 nm potentially compromises quantum key distribution