From Practice to Theory: The "Bright Illumination" Attack on Quantum Key Distribution Systems
Rotem Liss, Tal Mor
备注：
17 pages
发表信息：
In Proceedings of the International Conference on the Theory and Practice of Natural Computing (TPNC 2020), pages 82-94. Lecture Notes in Computer Science, vol 12494. Springer, Cham (2020)
The "Bright Illumination" attack [Lydersen et al., Nat. Photon. 4, 686-689 (2010)] is a practical attack, fully implementable against quantum key distribution systems. In contrast to almost all developments in quantum information processing (for example, Shor's factorization algorithm, quantum teleportation, Bennett-Brassard (BB84) quantum key distribution, the "Photon-Number Splitting" attack, and many other examples), for which theory has been proposed decades before a proper implementation, the "Bright Illumination" attack preceded any sign or hint of a theoretical prediction. Here we explain how the "Reversed-Space" methodology of attacks, complementary to the notion of "quantum side-channel attacks" (which is analogous to a similar term in "classical" - namely, non-quantum - computer security), has missed the opportunity of predicting the "Bright Illumination" attack.
Detector control attacks on quantum key distribution systems exploit the linear mode of avalanche photodiode in single photon detectors. So far, the protocols under consideration have been the BB84 protocol and its derivatives. Here we present how bright tailored illumination exploiting the linear mode of detectors can be used to eavesdrop on distributed-phase-reference protocols, such as differential-phase-shift and coherent-one-way.
We propose a countermeasure against the so-call tailored bright illumination attacl dor Differential-Phase-Shift QKD (DPS-QKD). By Monitoring a rate of coincidence detection at a pair of superconducting nanowire single photon detectors (SSPDs) which is connected at each of the output ports of Bob's Mach-Zehnder interferometer, Alice and Bob can detect and defeat this kind of attack.
Semiconductor avalanche photodiodes (APDs) are commonly used for single photon detection in quantum key distribution. Recently, many attacks using bright illumination have been proposed to manipulate gated InGaAs APDs. In order to devise effective counter-measures, careful analysis of these attacks must be carried out to distinguish between incorrect operation and genuine loopholes. Here, we show that correctly-operated, gated APDs are immune to continuous-wave illumination attacks, while monitoring the photocurrent for anomalously high values is a straightforward counter-measure against attac…
We derive the time-dependent photo-detection probability equation of a superconducting single photon detector (SSPD) to study the responsive property for a pulse train at high repetition rate. Using this equation, we analyze the characteristics of SSPDs when illuminated by bright pulses in blinding attack on a quantum key distribution (QKD). We obtain good agreement between expected values based on our equation and actual experimental values. Such a time-dependent probability analysis contributes to security analysis.
We experimentally demonstrate that a superconducting nanowire single-photon detector is deterministically controllable by bright illumination. We found that bright light can temporarily make a large fraction of the nanowire length normally-conductive, can extend deadtime after a normal photon detection, and can cause a hotspot formation during the deadtime with a highly nonlinear sensitivity. In result, although based on different physics, the superconducting detector turns out to be controllable by virtually the same techniques as avalanche photodiode detectors. As demonstrated earlier, when …
The peculiar properties of quantum mechanics allow two remote parties to communicate a private, secret key, which is protected from eavesdropping by the laws of physics. So-called quantum key distribution (QKD) implementations always rely on detectors to measure the relevant quantum property of single photons. Here we demonstrate experimentally that the detectors in two commercially available QKD systems can be fully remote-controlled using specially tailored bright illumination. This makes it possible to tracelessly acquire the full secret key; we propose an eavesdropping apparatus built of o…
It has previously been shown that the gated detectors of two commercially available quantum key distribution (QKD) systems are blindable and controllable by an eavesdropper using continuous-wave illumination and short bright trigger pulses, manipulating voltages in the circuit [L. Lydersen et al., Nat. Photonics DOI:10.1038/nphoton.2010.214]. This allows for an attack eavesdropping the full raw and secret key without increasing the quantum bit error rate (QBER). Here we show how thermal effects in detectors under bright illumination can lead to the same outcome. We demonstrate that the detecto…
In Quantum Illumination (QI), a signal beam initially entangled with an idler beam held at the receiver interrogates a target region bathed in thermal background light. The returned beam is measured jointly with the idler in order to determine whether a weakly reflecting target is present. Using tools from quantum information theory, we derive lower bounds on the average error probability of detecting both specular and fading targets and on the mean squared error of estimating the reflectance of a detected target, which are obeyed by any QI transmitter satisfying a signal energy constraint. Fo…
Quantum illumination is a quantum-optical sensing technique in which an entangled source is exploited to improve the detection of a low-reflectivity object that is immersed in a bright thermal background. Entangled sources between microwave and optical fields can be exploited to improve detection in microwave quantum illumination technique. We proposed a scheme to enhance the entanglement between the output fields of microwave and optical cavity by introducing optical parametric amplifier medium in cavity optomechanical system. We show that improving signal-to-noise ratio and decreasing error …
Quantum illumination is a quantum-optical sensing technique in which an entangled source is exploited to improve the detection of a low-reflectivity object that is immersed in a bright thermal background. Here we describe and analyze a system for applying this technique at microwave frequencies, a more appropriate spectral region for target detection than the optical, due to the naturally-occurring bright thermal background in the microwave regime. We use an electro-optomechanical converter to entangle microwave signal and optical idler fields, with the former being sent to probe the target re…
Quantum illumination is a quantum-optical sensing technique in which an entangled source is exploited to improve the detection of a low-reflectivity object that is immersed in a bright thermal background. Here we describe and analyze a system for applying this technique at microwave frequencies, a more appropriate spectral region for target detection than the optical, due to the naturally-occurring bright thermal background in the microwave regime. We use an electro-optomechanical converter to entangle microwave signal and optical idler fields, with the former being sent to probe the target re…
We experimentally demonstrate that a single-photon detector ID210 commercially available from ID Quantique is vulnerable to blinding and can be fully controlled by bright illumination. In quantum key distribution, this vulnerability can be exploited by an eavesdropper to perform a faked-state attack giving her full knowledge of the key without being noticed. We consider the attack on standard BB84 protocol and a subcarrier-wave scheme, and outline a possible countermeasure.
We propose Gaussian quantum illumination(QI) protocol exploiting asymmetrically squeezed two-mode(ASTM) state that is generated by applying single-mode squeezing operations on each mode of an initial two-mode squeezed vacuum(TMSV) state, in order to overcome the limited brightness of a TMSV state. We show that the performance of the optimal receiver is enhanced by local squeezing operation on a signal mode whereas the performance of a realistic receiver can be enhanced by local squeezing operations on both input modes. Under a fixed mean photon number of the signal mode, the ASTM state can be …
Quantum key distribution (QKD) has been proved to be information-theoretically secure in theory. Unfortunately, the imperfect devices in practice compromise its security. Thus, to improve the security property of practical QKD systems, a commonly used method is to patch the loopholes in the existing QKD systems. However, in this work, we show an adversary's capability of exploiting the imperfection of the patch itself to bypass the patch. Specifically, we experimentally demonstrate that, in the detector under test, the patch of photocurrent monitor against the detector blinding attack can be d…
In quantum illumination entangled light is employed to enhance the detection accuracy of an object when compared with the best classical protocol. On the other hand, cloaking is a stealth technology based on covering a target with a material deflecting the light around the object to avoid its detection. Here, we propose a quantum illumination protocol especially adapted to quantum microwave technology. This protocol seizes the phase-shift induced by some cloaking techniques, such as scattering reduction, allowing for a $3$ dB improvement in the detection of a cloaked target. The method can als…
Quantum illumination consists in shining quantum light on a target region immersed in a bright thermal bath, with the aim of detecting the presence of a possible low-reflective object. If the signal is entangled with the receiver, then a suitable choice of the measurement offers a gain with respect to the optimal classical protocol employing coherent states. Here, we tackle this detection problem by using quantum estimation techniques to measure the reflectivity parameter of the object, showing an enhancement in the signal-to-noise ratio up to 3 dB with respect to the classical case when imple…
An optical transmitter irradiates a target region containing a bright thermal-noise bath in which a low-reflectivity object might be embedded. The light received from this region is used to decide whether the object is present or absent. The performance achieved using a coherent-state transmitter is compared with that of a quantum illumination transmitter, i.e., one that employs the signal beam obtained from spontaneous parametric downconversion (SPDC). By making the optimum joint measurement on the light received from the target region together with the retained SPDC idler beam, the quantum i…
Quantum illumination uses a quantum state of the electromagnetic field to detect the presence of a target against a bright background more sensitively than any classical state. Most often, the quantum state is a two-mode squeezed vacuum consisting of signal and idler modes with a non-zero phase-sensitive cross correlation, which serves as the signature for target detection, and a zero phase-insensitive cross correlation, which means the modes produce no fringes in second order interference. Here it is shown that applying phase-sensitive amplification to the idler modes of a two-mode squeezed v…
Quantum hypothesis testing is one of the most basic tasks in quantum information theory and has fundamental links with quantum communication and estimation theory. In this paper, we establish a formula that characterizes the decay rate of the minimal Type-II error probability in a quantum hypothesis test of two Gaussian states given a fixed constraint on the Type-I error probability. This formula is a direct function of the mean vectors and covariance matrices of the quantum Gaussian states in question. We give an application to quantum illumination, which is the task of determining whether th…
Quantum illumination (QI) is an entanglement-enhanced sensing system whose performance advantage over a comparable classical system survives its usage in an entanglement-breaking scenario plagued by loss and noise. In particular, QI's error-probability exponent for discriminating between equally-likely hypotheses of target absence or presence is 6 dB higher than that of the optimum classical system using the same transmitted power. This performance advantage, however, presumes that the target return, when present, has known amplitude and phase, a situation that seldom occurs in lidar applicati…
Quantum illumination can utilize entangled light to detect the low-reflectivity target that is hidden in a bright thermal background. This technique is applied to the detection of an object in the curved spacetime of the Earth, in order to explore how the curvature of spacetime affects quantum illumination. It is found that the spatial quantum illumination with entangled state transmitter outperforms that with coherent-state transmitter in the near-Earth curved spacetime. Moreover, either the quantum illumination system or the coherent-state system is employed, and gravity can enhance the spac…
An optical transmitter that uses entangled light generated by spontaneous parametric downconversion (SPDC), in conjunction with an optimal quantum-optical receiver (whose implementation is not yet known) is in principle capable of obtaining up to a 6 dB gain in the error-probability exponent over the optimum-reception un-entangled coherent-state lidar to detect the presence of a far-away target subject to entanglement-breaking loss and noise in the free-space link [Lloyd'08, Tan'08]. We present an explicit design of a structured quantum-illumination receiver, which in conjunction with the SPDC…
The signal half of an entangled twin-beam, generated using spontaneous parametric downconversion, interrogates a region of space that is suspected of containing a target, and has high loss and high (entanglement-breaking) background noise. A joint measurement is performed on the returned light and the idler beam that was retained at the transmitter. An optimal quantum receiver, whose implementation is not yet known, was shown to achieve 6 dB gain in the error-probability exponent relative to that achieved with a single coherent-state (classical) laser transmitter and the optimum receiver. We p…
Quantum illumination is a powerful sensing technique that employs entangled signal-idler photon pairs to boost the detection efficiency of low-reflectivity objects in environments with bright thermal noise. The promised advantage over classical strategies is particularly evident at low signal powers, a feature which could make the protocol an ideal prototype for non-invasive biomedical scanning or low-power short-range radar. In this work we experimentally investigate the concept of quantum illumination at microwave frequencies. We generate entangled fields using a Josephson parametric convert…
Fast gated avalanche photodiodes (APDs) are the most commonly used single photon detectors for high bit rate quantum key distribution (QKD). Their robustness against external attacks is crucial to the overall security of a QKD system or even an entire QKD network. Here, we investigate the behavior of a gigahertz-gated, self-differencing InGaAs APD under strong illumination, a tactic Eve often uses to bring detectors under her control. Our experiment and modelling reveal that the negative feedback by the photocurrent safeguards the detector from being blinded through reducing its avalanche prob…
Quantum states of light can improve imaging whenever the image quality and resolution are limited by the quantum noise of the illumination. In the case of a bright illumination, quantum enhancement is obtained for a light field composed of many squeezed transverse modes. A possible realization of such a multi-spatial-mode squeezed state is a field which contains a transverse plane in which the local electric field displays reduced quantum fluctuations at all locations, on any one quadrature. Using nondegenerate four-wave mixing in a hot vapor, we have generated a bichromatic multi-spatial-mode…
Single photon detectors based on passively-quenched avalanche photodiodes can be temporarily blinded by relatively bright light, of intensity less than a nanowatt. I describe a bright-light regime suitable for attacking a quantum key distribution system containing such detectors. In this regime, all single photon detectors in the receiver Bob are uniformly blinded by continuous illumination coming from the eavesdropper Eve. When Eve needs a certain detector in Bob to produce a click, she modifies polarization (or other parameter used to encode quantum states) of the light she sends to Bob such…
We explore bright-light control of superconducting nanowire single-photon detectors (SNSPDs) in the shunted configuration (a practical measure to avoid latching). In an experiment, we simulate an illumination pattern the SNSPD would receive in a typical quantum key distribution system under hacking attack. We show that it effectively blinds and controls the SNSPD. The transient blinding illumination lasts for a fraction of a microsecond and produces several deterministic fake clicks during this time. This attack does not lead to elevated timing jitter in the spoofed output pulse, and hence doe…
