Reuse & Permissions

It is not necessary to obtain permission to reuse this article or its components as it is available under the terms of the Creative Commons Attribution 4.0 International license. This license permits unrestricted use, distribution, and reproduction in any medium, provided attribution to the author(s) and the published article's title, journal citation, and DOI are maintained. Please note that some figures may have been included with permission from other third parties. It is your responsibility to obtain the proper permission from the rights holder directly for these figures.

Export citation

Export citation

Choose format for download:

Download Citation
  • Open Access

Power-consumption back door in quantum key distribution

Beatriz Lopes da Costa1,2,3,4,*, Matías R. Bolaños5, Ricardo Chaves1,6, Claudio Narduzzi5, Marco Avesani5,7, Davide Giacomo Marangon5,7, Andrea Stanco5,7, Giuseppe Vallone5,7, Paolo Villoresi5,7 et al.

Yasser Omar1,2,3,4,†

  • *Contact author: m.beatriz.costa@tecnico.ulisboa.pt
  • †Contact author: contact.yasser@pqi.pt

Phys. Rev. Applied 24, 054004 – Published 3 November, 2025

DOI: https://doi.org/10.1103/f92x-c3zj

Abstract

Over recent decades, quantum key distribution (QKD) has arisen as a promising solution for secure communications; however, like all cryptographic protocols, implementations of QKD can open security vulnerabilities. Until now, the study of physical vulnerabilities in QKD setups has focused primarily on the optical channel. In classical cryptoanalysis, power and electromagnetic side-channel analysis are powerful techniques that can be used to access secret information about the encryption key in symmetric-key algorithms. Such attacks have rarely been used in QKD, since they require an eavesdropper to have access to Alice’s or Bob’s setup; however, security proofs of QKD protocols generally assume that these setups are secure, making it crucial to understand the security measures required to ensure this protection. In this work, we propose and implement a power side-channel analysis of a QKD system by exploiting the power consumption of the electronic driver controlling the electro-optical components of the QKD transmitter. QKD modules typically require very precise electronic drivers, such as field-programmable gate arrays (FPGAs). Here, we show that the FPGA’s power consumption can leak information about the QKD operation and consequently the transmitted key. Our results are consistent and show critical information leakage, having reached a maximum accuracy of 73.35% in predicting transmitted qubits at a 100-MHz repetition frequency. We also discuss possible countermeasures to prevent such an attack.

View figure in article

Physics Subject Headings (PhySH)

Article Text

References (38)

  1. S.-K. Liao, et al., Satellite-relayed intercontinental quantum network, Phys. Rev. Lett. 120, 030501 (2018).
  2. J. Yin, et al., Satellite-based entanglement distribution over 1200 km, Science 356, 1140 (2017).
  3. M. Peev, et al., The SECOQC quantum key distribution network in Vienna, New J. Phys. 11, 075001 (2009).
  4. J. F. Dynes, A. Wonfor, W. W. Tam, A. W. Sharpe, R. Takahashi, M. Lucamarini, A. Plews, Z. L. Yuan, A. R. Dixon, J. Cho, Y. Tanizawa, J. P. Elbers, H. Greißer, I. H. White, R. V. Penty, and A. J. Shields, Cambridge quantum network, npj Quantum Inf. 5, 101 (2019).
  5. M. Sasaki, et al., Field test of quantum key distribution in the Tokyo QKD network, Opt. Express 19, 10387 (2011).
  6. D. J. Bernstein and T. Lange, Post-quantum cryptography, Nature 549, 188 (2017).
  7. P. W. Shor, in Proceedings 35th Annual Symposium on Foundations of Computer Science (IEEE Computer Society, Los Alamitos, CA, USA, 1994), p. 124.
  8. P. Kocher, J. Jaffe, and B. Jun, in Advances in Cryptology—CRYPTO’ 99, edited by M. Wiener (Springer Berlin Heidelberg, Berlin, Heidelberg, 1999), p. 388.
  9. F.-X. Standaert, in Secure Integrated Circuits and Systems (Springer, Boston, MA, 2010), p. 27.
  10. A. Huang, S.-H. Sun, Z. Liu, and V. Makarov, Quantum key distribution with distinguishable decoy states, Phys. Rev. A 98, 12330 (2018).
  11. V. Makarov, A. Anisimov, and J. Skaar, Effects of detector efficiency mismatch on security of quantum cryptosystems, Phys. Rev. A 74, 22313 (2006).
  12. N. Gisin, S. Fasel, B. Kraus, H. Zbinden, and G. Ribordy, Trojan-horse attacks on quantum-key-distribution systems, Phys. Rev. A 73, 22320 (2006).
  13. R. Wolf, Quantum Key Distribution (Springer International Publishing, Cham, 2021), Vol. 988.
  14. V. Zapatero, T. van Leent, R. Arnon-Friedman, W.-Z. Liu, Q. Zhang, H. Weinfurter, and M. Curty, Advances in device-independent quantum key distribution, npj Quantum Inf. 9, 10 (2023).
  15. A. Stanco, F. B. L. Santagiustina, L. Calderaro, M. Avesani, T. Bertapelle, D. Dequal, G. Vallone, and P. Villoresi, Versatile and concurrent FPGA-based architecture for practical quantum communication systems, IEEE Trans. Quantum Eng. 3, 1 (2022).
  16. M. Avesani, G. Foletto, M. Padovan, L. Calderaro, C. Agnesi, E. Bazzani, F. Berra, T. Bertapelle, F. Picciariello, F. B. Santagiustina, D. Scalcon, A. Scriminich, A. Stanco, F. Vedovato, G. Vallone, and P. Villoresi, Deployment-ready quantum key distribution over a classical network infrastructure in Padua, J. Lightwave Technol. 40, 1658 (2022).
  17. K. Wei, W. Li, H. Tan, Y. Li, H. Min, W.-J. Zhang, H. Li, L. You, Z. Wang, X. Jiang, T.-Y. Chen, S.-K. Liao, C.-Z. Peng, F. Xu, and J.-W. Pan, High-speed measurement-device-independent quantum key distribution with integrated silicon photonics, Phys. Rev. X 10, 031030 (2020).
  18. H.-F. Zhang, J. Wang, K. Cui, C.-L. Luo, S.-Z. Lin, L. Zhou, H. Liang, T.-Y. Chen, K. Chen, and J.-W. Pan, A real-time QKD system based on FPGA, J. Lightwave Technol. 30, 3226 (2012).
  19. A. Baliuka, M. Stöcker, M. Auer, P. Freiwang, H. Weinfurter, and L. Knips, Deep-learning-based radio-frequency side-channel attack on quantum key distribution, Phys. Rev. Appl. 20, 054040 (2023).
  20. K. Durak, N. C. Jam, and S. Karamzadeh, Attack to quantum cryptosystems through RF fingerprints from photon detectors, IEEE J. Sel. Top. Quantum Electron. 28, 1 (2022).
  21. J. J. Pantoja, V. A. Bucheli, and R. Donaldson, Electromagnetic side-channel attack risk assessment on a practical quantum-key-distribution receiver based on multi-class classification, EPJ Quantum Technol. 11, 78 (2024).
  22. P. Smith, D. Marangon, M. Lucamarini, Z. Yuan, and A. Shields, Out-of-band electromagnetic injection attack on a quantum random number generator, Phys. Rev. Appl. 15, 044044 (2021).
  23. A. Kuznetsov, O. Nariezhnii, I. Stelnyk, T. Kokhanovska, O. Smirnov, and T. Kuznetsova, in 2019 10th IEEE International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications (IDAACS) (IEEE, Metz, France, 2019), Vol. 2, p. 713.
  24. Y. H. Li, Y. Y. Fei, W. L. Wang, X. D. Meng, H. Wang, Q. H. Duan, Y. Han, and Z. Ma, Effect of external magnetic fields on practical quantum random number generator, EPJ Quantum Technol. 10, 49 (2023).
  25. T. Messerges, E. Dabbish, and R. Sloan, Examining smart-card security under the threat of power analysis attacks, IEEE Trans. Comput. 51, 541 (2002).
  26. C. O’Flynn and Z. David Chen, in 2015 IEEE 28th Canadian Conference on Electrical and Computer Engineering (CCECE) (IEEE, Halifax, NS, Canada, 2015), p. 750.
  27. F. Grünenfelder, A. Boaron, D. Rusca, A. Martin, and H. Zbinden, Simple and high-speed polarization-based QKD, Appl. Phys. Lett. 112, 051108 (2018).
  28. G. L. Roberts, M. Pittaluga, M. Minder, M. Lucamarini, J. F. Dynes, Z. L. Yuan, and A. J. Shields, Patterning-effect mitigating intensity modulator for secure decoy-state quantum key distribution, Opt. Lett. 43, 5110 (2018).
  29. C. Agnesi, M. Avesani, A. Stanco, P. Villoresi, and G. Vallone, All-fiber self-compensating polarization encoder for quantum key distribution, Opt. Lett. 44, 2398 (2019).
  30. Here, Vϕ corresponds to the voltage required for the modulator to perform a phase shift of ϕ.
  31. T. Güneysu and A. Moradi, in Cryptographic Hardware and Embedded Systems—CHES 2011, edited by B. Preneel and T. Takagi (Springer Berlin Heidelberg, Berlin, Heidelberg, 2011), p. 33.
  32. S. Nikova, C. Rechberger, and V. Rijmen, in Information and Communications Security, edited by P. Ning, S. Qing, and N. Li (Springer Berlin Heidelberg, Berlin, Heidelberg, 2006), p. 529.
  33. C. Tokunaga and D. Blaauw, Securing encryption systems with a switched capacitor current equalizer, IEEE J. Solid-State Circuits 45, 23 (2010).
  34. N. Kamoun, L. Bossuet, and A. Ghazel, in 2009 3rd International Conference on Signals, Circuits and Systems (SCS) (IEEE, Medenine, Tunisia, 2009), p. 1.
  35. E. Tena-Sánchez, F. E. Potestad-OrdÓñez, V. Zúñiga-González, and A. J. Acosta, Low-cost full correlated-power-noise generator to counteract side-channel attacks, Appl. Sci. 15, 3064 (2025).
  36. S. R. Bommana, S. Veeramachaneni, S. Ershad, and M. B. Srinivas, Mitigating side channel attacks on FPGA through deep learning and dynamic partial reconfiguration, Sci. Rep. 15, 13745 (2025).
  37. P. Socha, J. Brejník, S. Jeřábek, M. Novotný, and N. Mentens, in 2019 22nd Euromicro Conference on Digital System Design (DSD) (IEEE, Kallithea, Greece, 2019), p. 277.
  38. P. Sasdrich, A. Moradi, O. Mischke, and T. Güneysu, in 2015 IEEE International Symposium on Hardware Oriented Security and Trust (HOST) (IEEE, Washington, DC, USA, 2015), p. 130.

Outline

Information

Sign In to Your Journals Account

Filter

Filter

Article Lookup

Enter a citation