Quantum key distribution (QKD) offers information-theoretic security, but device imperfections introduce implementation vulnerabilities. Experimental evidence regarding the security consequences of transmitter vulnerabilities in continuous-variable QKD (CV-QKD) remains limited. Researchers experimentally investigated a reversible photorefractive attack in a local-local-oscillator CV-QKD system at National University of Defence Technology, Shanghai Jiao Tong University, Shanghai Research Centre for Quantum Sciences, Hefei National Laboratory.

The objective was to characterise the impact of this specific vulnerability on practical CV-QKD systems. The approach involved implementing and testing a CV-QKD setup susceptible to the described photorefractive attack. Moderate blue-light illumination reduces the modulation variance of a lithium-niobate IQ modulator to a stable value. An experimental realization of this attack demonstrates its potential for compromising system security. These findings offer insights into device imperfections affecting CV-QKD implementations and highlight the need for key countermeasures.

Blue Light Manipulation Enables False Key Generation in Continuous-Variable QKD

National University of Defence Technology researchers, collaborating with Shanghai Jiao Tong University, induced a positive key rate in their continuous-variable QKD (CV-QKD) system even when no secure key should exist; this represents a sharp departure from prior theoretical work by exploiting the photorefractive properties of an IQ modulator. Specifically, they generated a false positive key rate equivalent to 1 bit per symbol, previously impossible without compromising calibration parameters.

This was achieved through manipulation during blue light illumination. This attack compromises modulation calibration within the CV-QKD setup, leading receivers to overestimate channel transmittance while simultaneously underestimating excess noise and artificially inflating estimated security levels.

A stable value measured at approximately 6.2 shot-noise units (SNU) was achieved as researchers reduced the modulation variance of an IQ modulator with blue light initially; this occurred without sharply increasing estimated excess noise and is reversible when illumination ceases because original variance gradually recovers. Following recovery, receiver measurements revealed overestimated channel transmittance alongside underestimated excess noise levels during key rate calculations. Optical manipulation became harder to detect after initial changes recovered, adding another layer of complexity for potential attacks.

Ambient Light Exposure Reveals Time-Varying Vulnerabilities In Quantum Key Distribution

Manipulating transmitter components can compromise continuous-variable QKD (CV-QKD), yet these findings also highlight a gap between theoretical models and real-world implementation. Previous security analyses often assume static device imperfections rather than changing conditions like those induced by blue light exposure.

The team acknowledges their experiment doesn’t yet demonstrate an external attacker successfully injecting illumination through a deployed quantum channel, which remains a key hurdle for practical exploitation. Even though demonstrating a full end-to-end hack remains elusive, requiring subtle illumination of fibre optic cables, this work matters greatly for future security; it’s one thing to theorise about imperfections in quantum systems but another to witness them change over time due to common environmental factors.

Readily available light can subtly alter components within quantum systems and will likely prompt new security protocols accounting for dynamic changes in transmitters as CV-QKD technology matures further here. This establishes that changing conditions to transmitter hardware can compromise continuous-variable QKD (CV-QKD) systems, specifically demonstrating a successful system-level attack exploiting photorefractive effects within an IQ modulator used to encode quantum information onto light waves. The team showed the manipulation becomes harder to detect as the component recovers its original state.

This research demonstrated how moderate blue-light illumination alters a lithium-niobate IQ modulator, a key component in continuous-variable QKD systems, and compromises calibration of the device. These temporary changes lead receivers to overestimate channel transmittance and underestimate noise levels, potentially resulting in falsely positive key rate calculations when no secure key exists. This work provides experimental evidence that reversible alterations to transmitter hardware represent a practical security concern for CV-QKD. Researchers found this manipulation became more difficult to identify after the initial change recovered, highlighting the need for security analyses considering dynamic imperfections.

👉 More information
🗞 Reversible photorefractive attack in continuous-variable quantum key distribution
✍️ Junxuan Liu, Qingquan Peng and Anqi Huang (National University of Defense Technology); Yuchao Liu, Piao Tan, Tao Wang and Peng Huang (Shanghai Jiao Tong University)
🧠 ArXiv: https://arxiv.org/abs/2610.40155

More like this