量子密码系统实际安全性研究与测试评估

量子密码，可有效抵御量子计算机对现有密码体系的攻击，已被证明能达到信息理论安全。量子密码已从理论、实验、实用化、全球化等多角度深入地进行研究和实践，发展整体趋势良好。但是在实用化中，量子密码系统的实际安全性越来越被重视。本项目重点关注量子密码系统的实际安全性能，拟研究实际量子密码系统中的安全脆弱性，推动量子密码系统的实际安全性的提升。具体来说，可以分为以下三个方面的研究：一是研究独立器件和设备的新安全漏洞，发现威胁量子密码系统安全的设备非完美性，特别是深入分析在MDI QKD系统中源端的未知安全问题；二是测试研究针对已知安全漏洞的防御措施有效性，评估防御措施是否能够抵御已知漏洞，试图发现新的安全性问题；三是研究系统性评估量子密码系统安全性的新方法，并利用此方法评估商用QKD系统及广域量子密码系统的安全性能，并研究提出综合性解决方案，为QKD标准化安全测评提供参考。

Quantum cryptography is immune to the hacking from a quantum computer, which is proved to be information-theoretical security. So far, quantum cryptography has progressed well, because its theory, implementation, and globalization have been further studied. However, in practice, the implementation security of a quantum cryptography system has attracted more and more attention. This proposal focuses on the practical security of quantum cryptography systems to figure out the security vulnerabilities, which will help upgrade the security performance of quantum cryptography systems. Specifically, this proposal plans to study the following three aspects. First, we will discover new security loopholes of individual components and devices, especially further study the imperfect source of MDI QKD systems. Then, we will test and evaluate the effectiveness of countermeasures against certain loopholes. Third, we will run a security analysis for a whole quantum cryptography system. That is, we will propose the methodology of systematic analysis and apply this method to real quantum cryptography systems.