Skip to main content

Faking photon number on a transition-edge sensor

Abstract

We study potential security vulnerabilities of a single-photon detector based on superconducting transition-edge sensor. In one experiment, we show that an adversary could fake a photon number result at a certain wavelength by sending a larger number of photons at a longer wavelength, which is an expected and known behaviour. In another experiment, we unexpectedly find that the detector can be blinded by bright continuous-wave light and then, a controlled response simulating single-photon detection can be produced by applying a bright light pulse. We model an intercept-and-resend attack on a quantum key distribution system that exploits the latter vulnerability and, under certain assumptions, able to steal the key.

Introduction

Photon detectors are indispensable in quantum communication applications [1]. To ensure the reliability of detection results, it is important to characterize the detectors being used both within the intended working parameters and possible unintended conditions. This characterization could help in revealing possible flaws and imperfections. These flaws could lead to misguided detection results or, worse, exploitable vulnerabilities in the case of quantum cryptography applications. This characterization guides the work on improving the robustness of quantum systems. Over the years, many attacks have been reported on various types of photon detectors based on avalanche photodiodes [211] and superconducting nanowires [1214]. This has led to the development of countermeasures [15, 16] and imperfection-insensitive protocols [17, 18].

Transition-edge sensor (TES) is a photon detector capable of providing full photon-number-resolving capability [1921]. Optical TES arrays are under development and applied in few-photon color imaging [2225]. A combination of TESes and lithium niobate waveguides makes available a variety of new quantum optics experiments [26]. The photon-number-resolving power of TES has been used for characterizing solid-state single-photon sources [27]. It has also achieved the highest detection efficiency among photon-number-resolving detectors up to 95% at \(1550~\text{nm}\) [2830]. This type of detector is used in various applications that require high detection probability, such as loophole-free Bell test [31]. Its photon number resolving capability could also be used to monitor against attacks on a quantum key distribution (QKD) system [32]. As one of the potential detectors in quantum communication where the reliability of detection result affects overall security, the TES photon detector should be investigated for its robustness and possible flaws. In this study, we experimentally demonstrate two potential vulnerabilities of TES, namely, a wavelength attack where the photon number result could be controlled by changing signal’s wavelength and a faked-state attack where the adversary increases the temperature of TES with an appropriate bright continuous-wave (CW) laser then forces an arbitrary photon number detection result using a bright pulsed laser.

Experimental setup

A transition-edge sensor is a sensitive micro-calorimeter whose sensing element consists of an absorber and a superconductive thermometer with a positive temperature coefficient of resistance (\(\mathrm{d}{R}/\mathrm{d}{T}>0\)) [33]. During the operation, the sensing element’s temperature is kept near the transition temperature via voltage-biasing [34]. This voltage-biasing is provided by an external total bias current flowing through a shunt resistor \(R_{s}\) connected in parallel with the TES [Fig. 1(a)]. In our setup \(R_{s} = 16.1~\text{m}\Omega \), which is much smaller than the TES normal-conductivity resistance of \(3~\Omega \).

Figure 1
figure 1

Experimental setup. (a) Internal circuit diagram of the TES system, consisting of the TES photon detector and its DC-SQUID readout. The TES photon detector is mounted on a 100-mK cold stage chilled by an adiabatic demagnetization refrigerator (ADR). The TES current \(I_{\text{TES}}\) is readout by DC-SQUID electronics and transferred proportionally to a voltage output \(V_{\text{out}}\). (b) Blinding and fake signal power is controlled by variable attenuators (Att), combined at a \(50\!:\!50\) fiber-optic beam splitter (BS), measured by an optical power meter (PM), and applied to the TES system under test. Its output voltage \(V_{\text{out}}\) is recorded and analyzed by a data acquisition module (DAQ) connected to a computer (PC)

The current passing through the TES \(I_{\text{TES}}\) flows through an inductive coil \(L_{\text{in}}\). The latter couples its magnetic flux via a mutual inductance (\(M_{\text{in}}\)) to a direct-current superconducting quantum interference device (DC-SQUID). The SQUID serves as a low-noise amplifier of \(I_{\text{TES}}\). A feedback coil \(L_{\text{FB}}\) inside the adiabatic demagnetization refrigerator (ADR), together with a room-temperature amplifier G and feedback resistor \(R_{\text{FB}}\) are used to transform the signal from the TES into a measurable voltage \(V_{\text{out}}\) [35]. \(I_{\text{TES}}\) is obtained by dividing \(V_{\text{out}}\) by the current-to-voltage gain of the DC-SQUID and amplifier G (0.375 V/μA in this experiment), while the voltage across TES \(V_{\text{TES}}\) is calculated by multiplying \(R_{s}\) by the current through it (total bias current with \(I_{\text{TES}}\) subtracted).

When a photon from the input optical fiber hits the detector, the photon’s energy is absorbed, raising the TES’ temperature and resistance. This change of resistance reduces \(I_{\text{TES}}\) and proportionally reduces \(V_{\text{out}}\). From the relation of TES temperature and \(I_{\text{TES}}\), it can be seen that the change of \(V_{\text{out}}\) during the detection is proportional to the absorbed energy of the photon(s), enabling photon-number discrimination.

In our setup, the TES and SQUID are attached on a copper block attached in turn to the cold plate of the ADR. Under normal operating conditions, both the TES and SQUID are at \(100~\text{mK}\) temperature. Their bias currents are provided by specialised electronic circuits (commercially available from Magnicon GmbH).

To measure the response of the TES to various optical signals, we use a setup shown in Fig. 1(b). The TES is a fiber-coupled \(10\times 10\) μm Ti device in a multilayer optical resonator designed to maximise coupling at \(1550~\text{nm}\) wavelength and is similar to devices reported in [29, 36]. The photon coupling efficiency in our TES sample under test is \({\approx} 1\%\) owing to a misaligned fiber end to the TES effective area. However, this should not affect the results of our study in a qualitative way, because the misalignment merely introduces additional optical attenuation and can be compensated by applying a brighter test signal. Our light source consists of a CW blinding laser and a pulsed laser (with about \(16~\text{ns} \) pulse width), combined on a fiber-optic beamsplitter (BS). The energy of laser pulse can be adjusted by the variable attenuator (OZ Optics DA-100). A power meter (PM) is used for monitoring the laser output power. A function generator produces trigger pulses to synchronize the laser source and signal recordings. The signal from the TES is digitized by a data acquisition module (DAQ) and analyzed on a computer (PC). The DAQ is a 16-bit, \(125~\text{MHz} \) sampling rate analog-to-digital converter (AlazarTech ATS660) mounted on a peripheral component interconnect (PCI) bus of the PC. This DAQ allows measuring signals of millivolt level. Typical single-photon responses are shown in Fig. 2(a). These oscillograms show the signal without a constant bias (DC component), which is removed in post-processing. The peak voltage value during 5 μs following the application of the optical pulse is assumed to be the amplitude of the detector response \(V_{\text{max}}\).

Figure 2
figure 2

Oscillograms of \(V_{\text{out}}\) without DC component. Each plot shows five typical oscillograms taken under identical conditions. (a) Single-photon responses (colored or gray traces). For comparison, a typical \(V_{\text{out}}\) trace without an input pulse is plotted in black. (b) Fake “single-photon” responses under \(1550~\text{nm}\) blinding attack with \(2.4\times 10^{-18}~\text{J} \) pulse energy (i.e., about 19-photon weak coherent pulse)

Results

In this section, we investigate two potentially exploitable vulnerabilities of the TES detector.

Wavelength-dependent response

TES output voltage amplitude \(V_{\text{max}}\) is inherently proportional to the energy of photons absorbed, and sensitive to a wide range of wavelengths. In principle, N photons with a wavelength arriving simultaneously have the same combined energy E as one photon with the wavelength λ. This can be seen from the relation \(E = N h c/\lambda \), where h is Planck’s constant and c is the speed of light in vacuum. Thus TES would produce the same output in these two cases [3739]. This is a known property of the TES and a potential security vulnerability.

We illustrate this fact with a simple experiment that shows how an attacker Eve could fake a single-photon detection result by sending multiple photons with proportionally lower photon energy. We send weak-coherent signals from several lasers of different wavelengths through the input fiber of the TES. We then record the voltage response’s amplitude \(V_{\text{max}}\) from the TES. The histogram in Fig. 3 shows that the response signal of single-photon detection from a \(450~\text{nm}\) photon is overlapped with two-photons detection from \(780~\text{nm}\) and three-photons detection from \(1550~\text{nm}\) photons. This shows that an expected photon number readout from the TES could be faked by multiple photons with a proportionally longer wavelength. It shows that the photon number measurement results from the TES alone cannot be used to characterize the photon number distribution of photon signal through an untrusted channel, such as the quantum channel, where the adversary could intercept and replace the signal with photons of arbitrary wavelength. Thus, any QKD scheme using photon number distribution from TES to monitor Eve’s activity in the quantum channel is vulnerable to this wavelength-dependent attack [32]. A narrow-band wavelength filter should prevent this attack. However, the characterization of the filter’s performance against exploitable wavelengths is needed.

Figure 3
figure 3

Histogram of TES output voltage under weak-coherent laser illumination at \(1550~\text{nm}\) (red), \(780~\text{nm}\) (black), and \(450~\text{nm}\) (blue). The leftmost peak represents zero-photon detection. Subsequent peaks to the right represent higher photon number detections. These peaks appear at the voltage level proportional to the energy of the photons

Blinding attack

In a blinding attack on QKD receiver, Eve renders the QKD detectors incapable of producing a typical single-photon detection result (blinded), but able to produce the expected detection output results when experiencing a bright-light pulse. This type of attack has been demonstrated in various single-photon detectors [4, 69, 12].

In the ideal condition, the TES operates at the transition edge between superconductivity and normal resistive state. In this region, a small change of energy such as single-photon absorption could induce a measurable change in the output voltage proportional to the energy absorbed. By setting a voltage threshold level for each input photon energy, one could discriminate the number of absorbed photons. From the known characteristic of TES [33] at a slightly higher temperature than the operational regime, it could produce the same voltage output level when absorbing much higher energy that can be delivered by a bright laser pulse. In this section, we experimentally demonstrate this behavior.

We first investigate the behavior of TES when its temperature is increased beyond the designed transition-edge region. We set the TES to the operating temperature of \(100~\text{mK}\). We record the current-voltage (I–V) characteristic curves of the TES at different temperatures [29]. These characteristic curves, shown in Fig. 4(a), will be used as a reference for the following experiments. At low temperature (\(100~\text{mK}\)), \(I_{\text{TES}}\) is roughly inverse proportional on \(V_{\text{TES}}\). As the temperature increases, \(I_{\text{TES}}\) becomes lower. Once the device reaches its critical temperature of \(\approx 180~\text{mK}\), \(I_{\text{TES}}\) becomes directly proportional on \(V_{\text{TES}}\) as the TES becomes a normal resistor.

Figure 4
figure 4

I–V curves of the TES (a) at different heat-bath temperatures and (b) at \(100~\text{mK}\) temperature under bright laser illumination. Dots are measurement results while a solid line is their bin-averaging. For ease of comparison between the plots, the curves from (a) are reprinted as black dotted lines in (b); it can be seen that the plots closely resemble each other. This confirms Eve’s ability to control TES’s temperature using bright light through the input fiber

We now demonstrate the ability of Eve to control the temperature using bright light. A CW laser at \(1550~\text{nm}\) is coupled through the input fiber of TES. Figure 4(b) shows that the I–V characteristics at different temperature of the device under test can be replicated. This shows that an adversary could arbitrarily control the temperature of TES using bright CW laser.

For the faked-state attack, the appropriate blinding laser power is one that puts the response at the threshold between the transition-edge regime and the normal resistor regime. In this region, the TES is ‘blinded’ from single-photon input as the change of voltage produced by an additional absorption is minimal. At the same time, the system in this condition could produce the same voltage level as the system at normal operating temperature when absorbing a bright laser pulse. The histogram of faked-state results with different peak power is shown in Fig. 5(a) and typical oscillograms in Fig. 2(b). Here, the fake signals are laser pulses with \(16~\text{ns} \) width and \(100~\text{kHz} \) repetition rate (i.e., 10 μs interval). The histograms correspond to the detection within the first 5 μs window that is equivalent to half the interval between the consecutive pulses. We did this to reduce background counts. We record ≈3300 samples for each histogram. The detector response exhibits a strong superlinearity [40] between Eve’s pulse energies of 1.2 to \(9.6 \times 10^{-18}~\text{J} \) (mean photon number \(\mu \approx 9\) to 75). This is a potential security loophole, i.e., the voltage response of TES can be controlled by Eve who has access to the input channel. She can choose a bright laser power such that the voltage output represents a ‘photon number’ of her choice.

Figure 5
figure 5

Detector response to the faked-state attack. For comparison, the black curve shows the normal response to a weak coherent pulse (WCP) attenuated to a single-photon level, containing the zero-photon response (left peak) and the one-photon response (right peak). (a) Fake histogram of output voltage at different faked-state pulse energies (their equivalent mean photon number μ is given in brackets). The detector is blinded with \(0.25~\text{nW} \) CW light. (b) An attack model on a BB84 QKD system with TES as a detector. The threshold (green vertical dashed line) marks the minimum TES voltage output that the system in our model would register as a detection. The fake response is shown for two cases where Bob and Eve pick the same (red) and different (blue) measurement bases under fake pulsed signal of \(2.4\times 10^{-18}~\text{J} \) pulse energy

The physics of the detector in this regime is not clear to us and needs to be investigated further. Multiplying the mean photon number by the assumed coupling efficiency (1%) yields much less than one photon per pulse in the region of strong superlinearity, which cannot explain the observed drastic change in the distributions in Fig. 5(a). A follow-up experiment with another TES sample may be needed.

Attack model

To emphasize the threat of vulnerability found in the previous section, we pick a well-known attack on a well-known QKD protocol. Although the TES has the photon number resolving capability and may be used in future implementations of more advanced protocols, we assume for simplicity that it is used as a threshold detector in the standard Bennett-Brassard 1984 (BB84) [41] QKD system. Here we model a faked-state attack on this system [4]. We assume here that the wavelength of the signal used by Alice and Bob is \(780~\text{nm}\). In this attack model, the adversary Eve intercepts each signal from Alice and measures it in a random basis. She then reproduces a bright fake signal identical to her detection result and sends it to Bob. Here, she also sends a CW blinding laser power set to \(0.25~\text{nW} \) and sets her fake pulsed signal at \(2.4\times 10^{-18}~\text{J} \) pulse energy, both at \(1550~\text{nm}\). In case of Bob’s measurement basis choice being different from that of Eve, the power of the fake signal would be split equally between Bob’s detectors (we assumed here Bob’s basis choice modulator is wavelength-independent). As shown in Fig. 5(b), most of the response signal from TES would fall below the single-photon detection threshold, thus remain unregistered. However, if their basis choices matched, sometimes the signal will be registered. This attack condition causes extra detection loss in Bob. Eve could hide this loss from Alice and Bob if the original quantum channel loss between Alice and Bob is lower than the detection loss induced by Eve’s attack. When the basis of measurement between Eve and Bob are different, half of the registered detection events would cause an error in the key. This can be seen in the portion of the blue histogram to the right of the single-photon threshold (green line) in Fig. 5(b). With this estimated detection probability and error rate, the quantum bit error rate of the attack could be calculated. Our calculation shows that this attack on a QKD system with the TES under test and the specific parameters assumed above would induce 7.4% quantum bit error rate (QBER). This QBER is lower than the 11% abort threshold of the BB84 protocol [42], thus the security of the key could be compromised.

This shows a possible vulnerability of a QKD system with TES as a single-photon threshold detector. This attack is applicable to other QKD protocols that use threshold detectors, such as coherent-one-way (COW) protocol [7]. For future QKD schemes that use the TES as a photon number resolving detector, an attack with multiple detection thresholds will need to be constructed.

Conclusion

We have experimentally demonstrated two possible security vulnerabilities of TES as a photon detector. In this study, we have illustrated the ability of Eve to fake photon-number results in TES using different wavelengths. We have also shown that the characteristics of TES could be altered by a bright CW laser, and photon-number detection results could be faked using laser pulses with appropriate peak power. Using this result, we model an attack on a BB84-QKD system with TES as a detector and show that Eve could perform the intercept-and-resend attack while inducing as low as 7.4% error rate, under certain specific assumptions. Since the TES under test has a misalignment of its input coupling, which limits its detection efficiency, we speculate that an attack on a higher-efficiency TES with better energy resolution might yield a better result for Eve. Understanding a physical model of the TES under attack can be a topic of a future study. Countermeasures to such attacks, such as adding a pulse integrator to detect the changes in the output voltage’s pulse shape, will need to be considered in the future when TESes begin getting employed in secure quantum communication schemes. However, the effect on performance and possible loopholes of each countermeasure will need a further investigation.

Availability of data and materials

Raw experimental data and calculations can be obtained from the corresponding author upon a reasonable request.

Abbreviations

TES:

transition-edge sensor

QKD:

quantum key distribution

CW:

continuous-wave

DC-SQUID:

direct-current superconducting quantum interference device

ADR:

adiabatic demagnetization refrigerator

DAQ:

data acquisition unit

QBER:

quantum-bit error rate

BB84:

Bennett-Brassard 1984 (QKD protocol)

COW:

coherent-one-way (QKD protocol)

References

  1. Hadfield RH. Single-photon detectors for optical quantum information applications. Nat Photonics. 2009;3:696–705.

    ADS  Article  Google Scholar 

  2. Makarov V, Anisimov A, Skaar J. Effects of detector efficiency mismatch on security of quantum cryptosystems. Phys Rev A. 2006;74:022313. Erratum ibid. 2008;78:019905.

    ADS  Article  Google Scholar 

  3. Zhao Y, Fung C-HF, Qi B, Chen C, Lo H-K. Quantum hacking: experimental demonstration of time-shift attack against practical quantum-key-distribution systems. Phys Rev A. 2008;78:042333.

    ADS  Article  Google Scholar 

  4. Lydersen L, Wiechers C, Wittmann C, Elser D, Skaar J, Makarov V. Hacking commercial quantum cryptography systems by tailored bright illumination. Nat Photonics. 2010;4:686–9.

    ADS  Article  Google Scholar 

  5. Lydersen L, Skaar J. Security of quantum key distribution with bit and basis dependent detector flaws. Quantum Inf Comput. 2010;10:60–76.

    MathSciNet  MATH  Google Scholar 

  6. Lydersen L, Wiechers C, Wittmann C, Elser D, Skaar J, Makarov V. Thermal blinding of gated detectors in quantum cryptography. Opt Express. 2010;18:27938–54.

    ADS  Article  Google Scholar 

  7. Lydersen L, Skaar J, Makarov V. Tailored bright illumination attack on distributed-phase-reference protocols. J Mod Opt. 2011;58:680–5.

    ADS  Article  Google Scholar 

  8. Gerhardt I, Liu Q, Lamas-Linares A, Skaar J, Kurtsiefer C, Makarov V. Full-field implementation of a perfect eavesdropper on a quantum cryptography system. Nat Commun. 2011;2:349.

    ADS  Article  Google Scholar 

  9. Huang A, Sajeed S, Chaiwongkhot P, Soucarros M, Legré M, Makarov V. Testing random-detector-efficiency countermeasure in a commercial system reveals a breakable unrealistic assumption. IEEE J Quantum Electron. 2016;52:8000211.

    Article  Google Scholar 

  10. Qian Y-J, He D-Y, Wang S, Chen W, Yin Z-Q, Guo G-C, Han Z-F. Hacking the quantum key distribution system by exploiting the avalanche-transition region of single-photon detectors. Phys Rev Appl. 2018;10:064062.

    ADS  Article  Google Scholar 

  11. Fei Y-Y, Meng X-D, Gao M, Wang H, Ma Z. Quantum man-in-the-middle attack on the calibration process of quantum key distribution. Sci Rep. 2018;8:4283.

    ADS  Article  Google Scholar 

  12. Lydersen L, Akhlaghi MK, Majedi AH, Skaar J, Makarov V. Controlling a superconducting nanowire single-photon detector using tailored bright illumination. New J Phys. 2011;13:113042.

    Article  Google Scholar 

  13. Tanner MG, Makarov V, Hadfield RH. Optimised quantum hacking of superconducting nanowire single-photon detectors. Opt Express. 2014;22:6734–48.

    ADS  Article  Google Scholar 

  14. Elezov M, Ozhegov R, Goltsman G, Makarov V. Countermeasure against bright-light attack on superconducting nanowire single-photon detector in quantum key distribution. Opt Express. 2019;27:30979–88.

    ADS  Article  Google Scholar 

  15. Koehler-Sidki A, Lucamarini M, Dynes JF, Roberts GL, Sharpe AW, Yuan Z, Shields AJ. Intensity modulation as a preemptive measure against blinding of single-photon detectors based on self-differencing cancellation. Phys Rev A. 2018;98:022327.

    ADS  Article  Google Scholar 

  16. Qian Y-J, He D-Y, Wang S, Chen W, Yin Z-Q, Guo G-C, Han Z-F. Robust countermeasure against detector control attack in a practical quantum key distribution system. Optica. 2019;6:1178–84.

    ADS  Article  Google Scholar 

  17. Lo H-K, Curty M, Qi B. Measurement-device-independent quantum key distribution. Phys Rev Lett. 2012;108:130503.

    ADS  Article  Google Scholar 

  18. Lucamarini M, Yuan ZL, Dynes JF, Shields AJ. Overcoming the rate-distance limit of quantum key distribution without quantum repeaters. Nature. 2018;557:400.

    ADS  Article  Google Scholar 

  19. Berggren KK, Dauler EA, Kerman AJ, Nam S-W, Rosenberg D. Detectors based on superconductors. In: Experimental methods in the physical sciences. vol. 45. Amsterdam: Elsevier; 2013. p. 185–216.

    Google Scholar 

  20. Eisaman MD, Fan J, Migdall A, Polyakov SV. Single-photon sources and detectors. Rev Sci Instrum. 2011;82:071101.

    ADS  Article  Google Scholar 

  21. Zhang W, Geng Y, Wang Z, Zhong J, Li P, Miao W, Ren Y, Yao Q, Wang J, Shi S. Development of titanium-based transition-edge single-photon detector. IEEE Trans Appl Supercond. 2019;29:2100505.

    Google Scholar 

  22. Konno T, Takasu S, Hattori K, Fukuda D. Development of an optical transition-edge sensor array. J Low Temp Phys. 2020;199:27–33.

    ADS  Article  Google Scholar 

  23. Niwa K, Numata T, Hattori K, Fukuda D. Few-photon color imaging using energy-dispersive superconducting transition-edge sensor spectrometry. Sci Rep. 2017;7:45660.

    ADS  Article  Google Scholar 

  24. Fukuda D, Niwa K, Hattori K, Inoue S, Kobayashi R, Numata T. Confocal microscopy imaging with an optical transition edge sensor. J Low Temp Phys. 2018;193:1228–35.

    ADS  Article  Google Scholar 

  25. Nagler PC, Greenhouse MA, Moseley SH, Rauscher BJ, Sadleir JE. Development of transition edge sensor detectors optimized for single-photon spectroscopy in the optical and near-infrared. Proc SPIE. 2018;10709:1070931.

    Google Scholar 

  26. Höpker JP, Gerrits T, Lita A, Krapick S, Herrmann H, Ricken R, Quiring V, Mirin R, Nam SW, Silberhorn C, Bartley TJ. Integrated transition edge sensors on titanium in-diffused lithium niobate waveguides. APL Photon. 2019;4:056103.

    ADS  Article  Google Scholar 

  27. Helversen MV, Böhm J, Schmidt M, Gschrey M, Schulze J-H, Strittmatter A, Rodt S, Beyer J, Heindel T, Reitzenstein S. Quantum metrology of solid-state single-photon sources using photon-number-resolving detectors. New J Phys. 2019;21:035007.

    Article  Google Scholar 

  28. Lita AE, Miller AJ, Nam SW. Counting near-infrared single-photons with 95% efficiency. Opt Express. 2008;16:3032–40.

    ADS  Article  Google Scholar 

  29. Fukuda D, Fujii G, Numata T, Yoshizawa A, Tsuchida H, Fujino H, Ishii H, Itatani T, Inoue S, Zama T. Photon number resolving detection with high speed and high quantum efficiency. Metrologia. 2009;46:S288–S292.

    ADS  Article  Google Scholar 

  30. Miller AJ, Lita AE, Calkins B, Vayshenker I, Gruber SM, Nam SW. Compact cryogenic self-aligning fiber-to-detector coupling with losses below one percent. Opt Express. 2011;19:9102–10.

    ADS  Article  Google Scholar 

  31. Giustina M, Versteegh MAM, Wengerowsky S, Handsteiner J, Hochrainer A, Phelan K, Steinlechner F, Kofler J, Larsson J-A, Abellán C, Amaya W, Pruneri V, Mitchell MW, Beyer J, Gerrits T, Lita AE, Shalm LK, Nam SW, Scheidl T, Ursin R, Wittmann B, Zeilinger A. Significant-loophole-free test of Bell’s theorem with entangled photons. Phys Rev Lett. 2015;115:250401.

    ADS  Article  Google Scholar 

  32. Xu B, Peng X, Guo H. Passive scheme with a photon-number-resolving detector for monitoring the untrusted source in a plug-and-play quantum-key-distribution system. Phys Rev A. 2010;82:042301.

    ADS  Article  Google Scholar 

  33. Irwin KD, Hilton GC. Transition-edge sensors. In: Topics appl. phys. vol. 99. Berlin: Springer; 2005. p. 63–150.

    Google Scholar 

  34. Irwin KD. An application of electrothermal feedback for high resolution cryogenic particle detection. Appl Phys Lett. 1995;66:1998–2000.

    ADS  Article  Google Scholar 

  35. Drung D, Hinnrichs C, Barthelmess H-J. Low-noise ultra-high-speed dc SQUID readout electronics. Supercond Sci Technol. 2006;19:S235.

    ADS  Article  Google Scholar 

  36. Fukuda D, Fujii G, Numata T, Amemiya K, Yoshizawa A, Tsuchida H, Fujino H, Ishii H, Itatani T, Inoue S, Zama T. Titanium-based transition-edge photon number resolving detector with 98% detection efficiency with index-matched small-gap fiber coupling. Opt Express. 2011;19:870–5.

    ADS  Article  Google Scholar 

  37. Rosenberg D, Lita AE, Miller AJ, Nam SW. Noise-free high-efficiency photon-number-resolving detectors. Phys Rev A. 2005;71:061803.

    ADS  Article  Google Scholar 

  38. Joshi S. Entangled photon pairs: efficient generation and detection, and bit commitment. Ph.D. thesis. National University of Singapore; 2014.

  39. Hattori K, Inoue S, Kobayashi R, Niwa K, Numata T, Fukuda D. Optical transition-edge sensors: dependence of system detection efficiency on wavelength. IEEE Trans Instrum Meas. 2019;68:2253–9.

    Article  Google Scholar 

  40. Lydersen L, Jain N, Wittmann C, Marøy Ø, Skaar J, Marquardt C, Makarov V, Leuchs G. Superlinear threshold detectors in quantum cryptography. Phys Rev A. 2011;84:032320.

    ADS  Article  Google Scholar 

  41. Bennett CH, Brassard G. Quantum cryptography: public key distribution and coin tossing. In: Proc. international conference on computers, systems, and signal processing. Bangalore, India. New York: IEEE Press; 1984. p. 175–9.

    Google Scholar 

  42. Gottesman D, Lo H-K, Lütkenhaus N, Preskill J. Security of quantum key distribution with imperfect devices. Quantum Inf Comput. 2004;4:325–60.

    MathSciNet  MATH  Google Scholar 

Download references

Funding

This research was funded by the Ministry of Education and Science of Russia (program NTI center for quantum communications) and NSERC of Canada. P.C. was supported by the Thai DPST scholarship and the NSRF via the Program Management Unit for Human Resources & Institutional Development, Research and Innovation (grant number B05F640051). J.Z. was supported in part by the National Key R&D Program of China (grant 2017YFA0304003) and in part by the National Natural Science Foundation of China (grants U1731119, U1831202, and U1931123). A.H. was supported by the National Natural Science Foundation of China (grant 6201101369). V.M. was supported by the Key program of special development funds of Zhangjiang national innovation demonstration zone (grant ZJ2018-ZD-009) and the Russian Science Foundation (grant 21-42-00040).

Author information

Authors and Affiliations

Authors

Contributions

PC, JZ, AH and HQ performed the experiment. PC and JZ developed the attack model and wrote the paper with input from all authors. VM and S-cS supervised the study. All authors read and approved the final manuscript.

Corresponding authors

Correspondence to Poompong Chaiwongkhot or Anqi Huang.

Ethics declarations

Competing interests

The authors declare that they have no competing interests.

Rights and permissions

Open Access This article is licensed under a Creative Commons Attribution 4.0 International License, which permits use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons licence, and indicate if changes were made. The images or other third party material in this article are included in the article’s Creative Commons licence, unless indicated otherwise in a credit line to the material. If material is not included in the article’s Creative Commons licence and your intended use is not permitted by statutory regulation or exceeds the permitted use, you will need to obtain permission directly from the copyright holder. To view a copy of this licence, visit http://creativecommons.org/licenses/by/4.0/.

Reprints and Permissions

About this article

Verify currency and authenticity via CrossMark

Cite this article

Chaiwongkhot, P., Zhong, J., Huang, A. et al. Faking photon number on a transition-edge sensor. EPJ Quantum Technol. 9, 23 (2022). https://doi.org/10.1140/epjqt/s40507-022-00141-2

Download citation

  • Received:

  • Accepted:

  • Published:

  • DOI: https://doi.org/10.1140/epjqt/s40507-022-00141-2