[Paper Review] Security flaw of counterfactual quantum cryptography in practical setting

Yanbing Li, Qiaoyan Wen+1 more|arXiv (Cornell University)|Dec 5, 2013

Quantum Computing Algorithms and Architecture3 citations

TL;DR

This paper identifies a critical security flaw in counterfactual quantum cryptography under practical high-loss channel conditions. It demonstrates that a polarization-splitting-measurement attack enables an eavesdropper (Eve) to extract the entire secret key when the one-way channel loss exceeds 50%, rendering the protocol insecure despite appearing indistinguishable from normal channel loss to legitimate parties.

ABSTRACT

Recently, counterfactual quantum cryptography proposed by T. G. Noh [Phys. Rev. Lett. 103, 230501 (2009)] becomes an interesting direction in quantum cryptography, and has been realized by some researchers (such as Y. Liu et al's [Phys. Rev. Lett. 109, 030501 (2012)]). However, we find out that it is insecure in practical high lossy channel setting. We analyze the secret key rates in lossy channel under a polarization-splitting-measurement attack. Analysis indicates that the protocol is insecure when the loss rate of the one-way channel exceeds $50%$.

Motivation & Objective

• To investigate the security of counterfactual quantum key distribution (QKD) in practical high-loss environments.
• To identify vulnerabilities in the protocol when subjected to realistic channel losses exceeding 50%.
• To analyze whether the protocol remains secure against eavesdropping under such lossy conditions.
• To evaluate the secret key rate under a novel polarization-splitting-measurement attack strategy.
• To determine whether the attack is detectable by legitimate parties (Alice and Bob) or mimics normal channel loss.

Proposed method

• Modeling the counterfactual QKD protocol using quantum states |φ₀⟩ and |φ₁⟩, representing horizontal and vertical polarization states with beam splitters and interferometric setups.
• Introducing a polarization-splitting-measurement attack where Eve intercepts and measures the photon's polarization in path b, using a beam splitter and polarizing beam splitters to extract information.
• Analyzing the mutual information I(A;B) between Alice and Bob, and I(E;A), I(E;B) between Eve and each party, to compute the secret key rate.
• Deriving the secret fraction r∞ = I(A;B) − min(I(E;A), I(E;B)) and the secret key rate RQKD = Rraw × r∞ using the raw key rate Rraw = (1 + 2η − η²)/8.
• Setting R = T = 1/2 for symmetric beam splitters and evaluating key rates across loss rates η from 0 to 1.
• Comparing the mutual information and secret fraction across different loss regimes, particularly focusing on η ≥ 0.5 where r∞ drops to zero.

Experimental results

Research questions

• RQ1 Is counterfactual quantum cryptography secure under high-loss channel conditions typical of long-distance fiber-based communication?
• RQ2 Can an eavesdropper exploit channel loss to extract the secret key without introducing detectable errors?
• RQ3 Does the polarization-splitting-measurement attack lead to a non-zero secret key rate when loss exceeds 50%?
• RQ4 Are the effects of the attack distinguishable from normal channel loss to Alice and Bob?
• RQ5 What is the behavior of the secret key rate as a function of channel loss under this attack model?

Key findings

• The secret key rate RQKD drops to zero when the channel loss rate η exceeds 50%, indicating complete insecurity under such conditions.
• The secret fraction r∞ becomes zero for η ≥ 0.5, meaning Eve gains full information about the key without being detected.
• The attack mimics normal channel loss, making it invisible to Alice and Bob, as the eavesdropping effect is indistinguishable from physical loss.
• At η = 1/3, the mutual information I(E;B) reaches a minimum of zero, but increases with deviation from this value, indicating non-monotonic behavior in Eve’s information gain.
• The raw key rate Rraw increases with η, but the secret key rate RQKD decreases monotonically, becoming zero at η ≥ 0.5.
• For long-distance fiber-based QKD systems (e.g., 15 km with ~3 dB loss or ~50% loss), the protocol is completely compromised by this attack.