Photon-Number-Splitting versus Cloning Attacks in Practical Implementations of the Bennett-Brassard 1984 protocol for Quantum Cryptography
arXiv:quant-ph/0408122 · doi:10.1103/PhysRevA.71.042316
Abstract
In practical quantum cryptography, the source sometimes produces multi-photon pulses, thus enabling the eavesdropper Eve to perform the powerful photon-number-splitting (PNS) attack. Recently, it was shown by Curty and Lutkenhaus [Phys. Rev. A 69, 042321 (2004)] that the PNS attack is not always the optimal attack when two photons are present: if errors are present in the correlations Alice-Bob and if Eve cannot modify Bob's detection efficiency, Eve gains a larger amount of information using another attack based on a 2->3 cloning machine. In this work, we extend this analysis to all distances Alice-Bob. We identify a new incoherent 2->3 cloning attack which performs better than those described before. Using it, we confirm that, in the presence of errors, Eve's better strategy uses 2->3 cloning attacks instead of the PNS. However, this improvement is very small for the implementations of the Bennett-Brassard 1984 (BB84) protocol. Thus, the existence of these new attacks is conceptually interesting but basically does not change the value of the security parameters of BB84. The main results are valid both for Poissonian and sub-Poissonian sources.
11 pages, 5 figures; "intuitive" formula (31) added
References in corpus (21)
- Quantum Cryptography
- Quantum Key Distribution with High Loss: Toward Global Secure Communication
- Security Aspects of Practical Quantum Cryptography
- Quantum Copying: Beyond the No-Cloning Theorem
- Optimal eavesdropping in quantum cryptography with six states
- Quantum cryptography protocols robust against photon number splitting attacks for weak laser pulses implementations
- Security against individual attacks for realistic quantum key distribution
- Single photon quantum cryptography
- Incoherent and Coherent Eavesdropping in the 6-state Protocol of Quantum Cryptography
- Phase covariant quantum cloning
- Robust polarization-based quantum key distribution over collective-noise channel
- Virtual Entanglement and Reconciliation Protocols for Quantum Cryptography with Continuous Variables
- High quality asynchronous heralded single photon source at telecom wavelength
- Decoherence-Free Subspaces in Quantum Key Distribution
- Coherent pulse implementations of quantum cryptography protocols resistant to photon number splitting attacks
- Experimental open air quantum key distribution with a single photon source
- Optimal phase covariant cloning for qubits and qutrits
- Faint laser quantum key distribution: Eavesdropping exploiting multiphoton pulses
- Optimal Eavesdropping in Quantum Cryptography. II. Quantum Circuit
- Practical quantum key distribution: On the security evaluation with inefficient single-photon detectors
- Eavesdropping on practical quantum cryptography
Cited by in corpus (17)
- The Security of Practical Quantum Key Distribution
- Quantum cloning
- Quantum key distribution and 1 Gbit/s data encryption over a single fibre
- Security of two quantum cryptography protocols using the same four qubit states
- GHz QKD at telecom wavelengths using up-conversion detectors
- Quantum Cloning Machines and the Applications
- Attacks on practical quantum key distribution systems (and how to prevent them)
- Attacks exploiting deviation of mean photon number in quantum key distribution and coin tossing
- Photon-number-solving Decoy State Quantum Key Distribution
- Finite-key-size effect in commercial plug-and-play QKD system
- Attacking quantum key distribution by light injection via ventilation openings
- Mixed Qubit Cannot Be Universally Broadcast
- Mixed basis quantum key distribution with linear optics
- Realistic vulnerabilities of decoy-state quantum key distribution
- Information Geometric Security Analysis of Differential Phase Shift Quantum Key Distribution Protocol
- Quantum-Space Attacks
- A generic construction of quantum-oblivious-key-transfer-based private query with ideal database security and zero failure