Unauthorized light injection has always been a vital threat to the practical security of a quantum-key-distribution (QKD) system. An optical-power limiter (OPL) based on the thermo-optical defocusing effect has been proposed and implemented, limiting the injected hacking light. As a hardware countermeasure, the performance of the OPL under various light-injection attacks will be tested to clarify the security boundary before it is widely deployed. To investigate the security boundary of the OPL in quantum cryptography, we comprehensively test and analyze the behavior of the OPL under continuous-wave (cw) light-injection attacks and pulse-illumination attacks with pulse repetition rates of $0.5$ Hz, $40$ MHz, and $1$ GHz. The test results illuminate the security boundary of the OPL, which allows one to properly employ the OPL in use cases. The methodology of testing and analysis proposed here is applicable to other power-limitation components in a QKD system.

The twin-field class quantum key distribution (TF-class QKD) has experimentally demonstrated the ability to surpass the fundamental rate-distance limit without requiring a quantum repeater, as a revolutional milestone. In TF-class QKD implementation, an optical phase-locked loop (OPLL) structure is commonly employed to generate a reference light with correlated phase, ensuring coherence of optical fields between Alice and Bob. In this configuration, the reference light, typically located in the untrusted station Charlie, solely provides wavelength reference for OPLL and does not participate in quantum-state encoding. However, the reference light may open a door for Eve to enter the source stations that are supposed to be well protected. Here, by identifying vulnerabilities of an acousto-optic modulator (AOM) in the OPLL scheme, we propose and demonstrate a wavelength-switching attack on a TF-class QKD system. This attack involves Eve deliberately manipulating the wavelength of the reference light to increase mean photon number of prepared quantum states, while maintaining stable interference between Alice and Bob as required by TF-class QKD protocols. The maximum observed increase in mean photon number is 8.7%, which has been theoretically proven to compromise the security of a TF-class QKD system. Moreover, we have shown that with well calibration of the modulators, the attack can be eliminated. Through this study, we highlight the importance of system calibration in the practical security in TF-class QKD implementation.

Laser-seeding attack enables an attacker to control the source output and eavesdrops on the key information, compromising the security of the continuous-variable (CV) quantum key distribution (QKD) system. In this paper, we suggest an improved optical power limiter (OPL) to defend against a laser-seeding attack on CV QKD systems. The proposed OPL utilizes a temperature monitor to detect Eve's attacks through temperature changes, providing an effective optical component for improving the security and reliability of the CV QKD system in practical environments, which is called an OPL-T scheme. In particular, we consider the security threats of a laser-seeding attack on two common CV QKD systems and prove their theoretical security degradation. Experiments are conducted to verify the effective OPL-T, and the results show that this defense scheme has an advantage in resisting the laser-seeding attack. Numerical simulations demonstrate the security analysis on CV QKD equipped with an OPL-T, which further confirms the effectiveness of our scheme. This work provides a practical solution for the security enhancements of continuous-variable quantum communication in practical applications.

Considering the ocean water’s optical attenuation is significantly larger than that of Fiber Channel, we propose an approach to enhance the security of underwater continuous-variable quantum key distribution (CVQKD). In particular, the photon subtraction operation is performed at the emitter to enhance quantum entanglement, thereby improving the underwater transmission performance of the CVQKD. Simulation results show that the photon subtraction operation can effectively improve the performance of CVQKD in terms of underwater transmission distance. We also compare the performance of the proposed protocol in different water qualities, which shows the advantage of our protocol against water deterioration. Therefore, we provide a suitable scheme for establishing secure communication between submarine and submarine vehicles.

We report a new type of vulnerability based on a physical principle that has not been previously exploited in quantum hacking—optical pumping of a laser in practical implementations of quantum key distribution (QKD) systems. We show that it is possible to increase the pulse energy of a source laser diode not only by injection-locking it with external light near its emission wavelength of 1550 nm, but also by optically pumping it at a much shorter wavelength. We experimentally demonstrate a 10% increase in pulse energy when exposing the laser diode to continuous-wave (cw) laser light at 1310 nm with a power of 1.6 mW via its fiber pigtail. This effect may allow an eavesdropper to steal the secret key. A possible countermeasure is to install broadband optical filters and isolators at the source output and to characterize them during security certification.