Inherent security of phase coding quantum key distribution systems against detector blinding attacks

An attack exploiting single-photon avalanche diode (SPAD) blinding is one of the effective methods of 'quantum hacking' (Lydersen et al 2010 Nat. Photon. 4 686) or cracking quantum key distribution (QKD) systems. This attack was experimentally demonstrated for various QKD systems based on both phase and polarization coding. After such an attack, the eavesdropper knows the whole key, has not produced errors, and is not detected. So far this attack is the only one that was demonstrated in the explicit form on many real QKD systems. It is important that these demonstrations were actually performed in reality, i.e. not in speculations as some other attacks. Therefore, the presence of vulnerability in QKD systems based on polarization coding is an existing fact, rather than just a potential threat. It is often assumed that all systems regardless of the encoding method are vulnerable to such an attack. However, in the case of phase coding, some essential features of photocount statistics on the receiving side make a difference. In this Letter we prove that detector blinding attack, when acts on QKD systems with phase coding, leads to a distortion of the photocounts statistics so the eavesdropper may always be detected. Moreover, one does not need to change the design of the QKD system and/or its control electronics, as it is sufficient to amend only the processing of the quantum states registration results to make the system secure. At the same time, polarization coding-based systems remain vulnerable to such an attack and do not guarantee key security.