Preparing a commercial quantum key distribution system for certification against implementation loopholes
arXiv:2310.20107 · doi:10.1103/PhysRevApplied.22.044076
Abstract
A commercial quantum key distribution (QKD) system needs to be formally certified to enable its wide deployment. The certification should include the system's robustness against known implementation loopholes and attacks that exploit them. Here we ready a fiber-optic QKD system for this procedure. The system has a prepare-and-measure scheme with decoy-state BB84 protocol, polarisation encoding, qubit source rate of 312.5 MHz, and is manufactured by QRate. We detail its hardware and post-processing. We analyse the hardware for known implementation loopholes, search for possible new loopholes, and discuss countermeasures. We then amend the system design to address the highest-risk loopholes identified. We also work out technical requirements on the certification lab and outline its possible structure.
34 pages, 11 figures, 2 tables. Minor improvements after peer review. Accepted to Phys. Rev. Appl
References in corpus (96)
- Decoy State Quantum Key Distribution
- Measurement-device-independent quantum key distribution
- Quantum Key Distribution with High Loss: Toward Global Secure Communication
- Secure quantum key distribution with realistic devices
- Secure Quantum Key Distribution
- Overcoming the rate-distance barrier of quantum key distribution without using quantum repeaters
- Hacking commercial quantum cryptography systems by tailored bright illumination
- Practical Decoy State for Quantum Key Distribution
- Quantum Hacking: Experimental demonstration of time-shift attack against practical quantum key distribution systems
- Trojan Horse attacks on Quantum Key Distribution systems
- Full-field implementation of a perfect eavesdropper on a quantum cryptography system
- Effects of detector efficiency mismatch on security of quantum cryptosystems
- Sending or not sending: twin-field quantum key distribution with large misalignment error
- Experimental demonstration of phase-remapping attack in a practical quantum key distribution system
- Fast and simple one-way Quantum Key Distribution
- Leftover Hashing Against Quantum Side Information
- Device calibration impacts security of quantum key distribution
- Attacking practical quantum key distribution system with wavelength dependent beam splitter and multi-wavelength sources
- Quantum Hacking on Continuous-Variable Quantum Key Distribution System using a Wavelength Attack
- Quantum Eavesdropping without Interception: An Attack Exploiting the Dead Time of Single Photon Detectors
- Loss-tolerant quantum cryptography with imperfect sources
- Trojan-horse attacks threaten the security of practical quantum cryptography
- Controlling passively-quenched single photon detectors by bright light
- After-gate attack on a quantum cryptosystem
- Improved key rate bounds for practical decoy-state quantum key distribution systems
- Risk analysis of Trojan-horse attacks on practical quantum key distribution systems
- Laser damage helps the eavesdropper in quantum cryptography
- A fast and versatile QKD system with hardware key distillation and wavelength multiplexing
- Thermal blinding of gated detectors in quantum cryptography
- Controlling a superconducting nanowire single-photon detector using tailored bright illumination
- Practical security bounds against the Trojan-horse attack in quantum key distribution
- Laser seeding attack in quantum key distribution
- Resilience of gated avalanche photodiodes against bright illumination attacks in quantum cryptography
- Decoy-state quantum key distribution with a leaky source
- Superlinear threshold detectors in quantum cryptography
- Quantum key distribution with an efficient countermeasure against correlated intensity fluctuations in optical pulses
- Experimental quantum key distribution with source flaws
- Quantum key distribution with correlated sources
- Gigahertz measurement-device-independent quantum key distribution using directly modulated lasers
- Creation of backdoors in quantum communications via laser damage
- Laser damage attack against optical attenuators in quantum key distribution
- Performance and security of 5 GHz repetition rate polarization-based Quantum Key Distribution
- Effect of source tampering in the security of quantum cryptography
- Testing random-detector-efficiency countermeasure in a commercial system reveals a breakable unrealistic assumption
- Symmetric blind information reconciliation for quantum key distribution
- Invisible Trojan-horse attack
- Controlling an actively-quenched single photon detector with bright light
- Backflash light characterization to prevent QKD zero-error hacking
- Hacking energy-time entanglement-based systems with classical light
- Finite-key security analysis of quantum key distribution with imperfect light sources
- Evaluation of the phase randomness of the light source in quantum key distribution systems with an attenuated laser
- Real-time monitoring of single-photon detectors against eavesdropping in quantum key distribution systems
- Eavesdropping and countermeasures for backflash side channel in quantum cryptography
- Random Variation of Detector Efficiency: A Countermeasure against Detector Blinding Attacks for Quantum Key Distribution
- Protecting fiber-optic quantum key distribution sources against light-injection attacks
- Quantum man-in-the-middle attack on the calibration process of quantum key distribution
- Finite-key security analysis for quantum key distribution with leaky sources
- Hacking Quantum Key Distribution via Injection Locking
- Security of quantum key distribution with intensity correlations
- Optimised quantum hacking of superconducting nanowire single-photon detectors
- Induced-photorefractive attack against Quantum Key Distribution
- Securing practical quantum communication systems with optical power limiters
- Post-processing procedure for industrial quantum key distribution systems
- Hacking the quantum key distribution system by exploiting the avalanche transition region of single photon detectors
- Security of the decoy state method for quantum key distribution
- Secure gated detection scheme for quantum cryptography
- Controlling single-photon detector ID210 with bright light
- Low loss QKD optical scheme for fast polarization encoding
- Robust countermeasure against detector control attack in practical quantum key distribution system
- Quantum key distribution with setting-choice-independently correlated light sources
- An approach for security evaluation and certification of a complete quantum communication system
- Security of decoy-state quantum key distribution with correlated intensity fluctuations
- Security of quantum key distribution with imperfect phase randomisation
- Hacking single-photon avalanche detector in quantum key distribution via pulse illumination
- Security of quantum key distribution with detection-efficiency mismatch in the single-photon case: Tight bounds
- Zero-error attack against coherent-one-way quantum key distribution
- Optical control of single-photon negative-feedback avalanche diode detector
- Security of quantum key distribution with detection-efficiency mismatch in the multiphoton case
- Characterisation of state-preparation uncertainty in quantum key distribution
- Best-practice criteria for practical security of self-differencing avalanche photodiode detectors in quantum key distribution
- Practical issues in decoy-state quantum key distribution based on the central limit theorem
- Quantum-secured data transmission in urban fibre-optic communication lines
- Secure detection in quantum key distribution by real-time calibration of receiver
- Asymmetric adaptive LDPC-based information reconciliation for industrial quantum key distribution
- Quantified Effects of the Laser Seeding Attack in Quantum Key Distribution
- Breakdown flash at telecom wavelengths in InGaAs avalanche photodiodes
- Safeguarding Quantum Key Distribution through Detection Randomization
- Effect of light injection on the security of practical quantum key distribution
- Countermeasure against blinding attacks on low-noise detectors with background noise cancellation scheme
- Reply to "Comment on `Resilience of gated avalanche photodiodes against bright illumination attacks in quantum cryptography'"
- Symmetric blind information reconciliation and hash-function-based verification for quantum key distribution
- Comment on "Inherent security of phase coding quantum key distribution systems against detector blinding attacks" [Laser Phys. Lett. 15, 095203 (2018)]
- Automated verification of countermeasure against detector-control attack in quantum key distribution
- Finite-key analysis of loss-tolerant quantum key distribution based on random sampling theory
- Backflashes in fast-gated avalanche photodiodes in quantum key distribution
- Intrinsic mitigation of the after-gate attack in quantum key distribution through fast-gated delayed detection
Cited by in corpus (15)
- Towards Global Quantum Key Distribution
- The future of secure communications: device independence in quantum key distribution
- Quantum key distribution with imperfectly isolated devices
- Intensity correlations in decoy-state BB84 quantum key distribution systems
- Wide-spectrum security of quantum key distribution
- A consolidated and accessible security proof for finite-size decoy-state quantum key distribution
- Realistic vulnerabilities of decoy-state quantum key distribution
- Evaluation of quantum key distribution systems against injection-locking attacks
- Reference-Beam Attacks against Twin-Field Quantum Key Distribution using Optical Injection Locking
- Optical-pumping attack on a quantum key distribution laser source
- Energy-time attack on detectors in quantum key distribution
- Practical Countermeasure Against Attacks Exploiting Detection Efficiency Mismatch in Quantum Key Distribution
- Broadband optical time-domain reflectometry for security analysis of quantum key distribution
- Phase-correlation-free quantum key distribution source operating at gigahertz rates
- Pulsed laser attack at 1061 nm potentially compromises quantum key distribution