A commercial quantum key distribution (QKD) system needs to be formally certified to enable its wide deployment. The certification should include the system's robustness against known implementation loopholes and attacks that exploit them. Here we ready a fiber-optic QKD system for this procedure. The system has a prepare-and-measure scheme with decoy-state BB84 protocol, polarisation encoding, qubit source rate of 312.5 MHz, and is manufactured by QRate. We detail its hardware and post-processing. We analyse the hardware for known implementation loopholes, search for possible new loopholes, and discuss countermeasures. We then amend the system design to address the highest-risk loopholes identified. We also work out technical requirements on the certification lab and outline its possible structure.
Practical Phase-Coding Side-Channel-Secure Quantum Key Distribution
CAS Key Laboratory of Quantum Information, University of Science and Technology of China（中国科学院量子信息重点实验室，中国科学技术大学）；CAS Center for Excellence in Quantum Information and Quantum Physics, University of Science and Technology of China（中国科学院量子信息与量子物理学前沿卓越中心，中国科学技术大学）；State Key Laboratory of Cryptology（密码学国家重点实验室）
Transmitter-device-independent quantum key distribution
Beijing Academy of Quantum Information Sciences（北京量子信息科学研究院）；Laboratoire d’Information Quantique, Université Libre de Bruxelles（布鲁塞尔自由大学量子信息实验室）；School of Science and State Key Laboratory of Information Photonics and Optical Communications, Beijing University of Posts and Telecommunications（北京邮电大学理学院信息光子学与光通信国家重点实验室）
Wide-spectrum security of quantum key distribution
University of Science and Technology of China（中国科学技术大学）；China Telecom Quantum Information Technology Group Co., Ltd.（中国电信量子信息技术集团有限公司）；University of Vigo（维戈大学）
