Oslo (Norway) - A Norwegian University of Science student named Vadim Makarov has discovered a vulnerability in what was previously thought to be unbreakable quantum encryption. He is using a form of high intensity laser light to intercept the encrypted data stream covertly. While quantum encryption is regularly used to secure Swiss bank transactions, as well as their much publicized 2007 election results, Makarov claims it's easily hacked. He claims to have developed a black box device which he says, "turns the equipment into a puppet-box that an eavesdropper can control."

Quantum encryption is a complex process wherein a stream of paired photons are created at the source. Each has a specific and unique quantum signature that can be detected. The sender and receiver both obtain a secret key used to encrypt the message, without which the message is lost. This form of encryption can be used to determine if the message was intercepted en route. It won't tell who intercepted it, only that it was intercepted. And this form of encryption is often relied upon to insure privacy and security. And now it appears it may all be for naught.

According to Makarov, the secret is in the way the sender and receiver communicate their secret key. And it is exactly here where the exploit can be found.

His team demonstrated that it is possible to allow the entire transmission to go from sender to receiver without being altered or an intrusion being detected. The intruder simply hooks into what the receiver is receiving (which is actually very complex). Then, by continuing to monitor the follow-on communications back and forth from sender to receiver wherein the secret key is obtained, the intruder is able to decode the transmission without ever having been detected.

Makarov and his colleagues say they have developed systems that can defeat two out of the three primary forms of quantum encryption used today. And their research is continuing on the third.

A russian

Oct 03, 2008 22:53     

That name is russian.
Mat report abuse vote down vote up Votes: -15

ouchie

Oct 03, 2008 23:29     

As Homer Simpson would say, "D'OH!"
MorituriMax report abuse vote down vote up Votes: -7

Quantum cryptography wasn't hacked, the hardware on...

Oct 04, 2008 08:29     

Quantum cryptography wasn't hacked, the hardware on which it was implemented was. That's a world of difference.
timewarp report abuse vote down vote up Votes: +23

close!

Oct 04, 2008 09:20     

I guess humans are getting close to the way how aliens will hack..if they get to us. "Aliens! , human are ready!"
Arjun report abuse vote down vote up Votes: -16

Why didn't I think of this !

Oct 04, 2008 09:58     

Why, because this guy is probably the only person in the world who is capable. I'm sure there isn't a system that can't be hacked by someone. To respond to timewarp. The encryption system is only as good as the weakest link. And it's not always the encryption itself. The same as hacking BluRay. They broke into the system through a vulnerability in the system. The end result is the same they got the goods.

J. Doe report abuse vote down vote up Votes: -3

Cant crack TrueCrypt though!

Oct 04, 2008 22:10     

Maybe Quantum cryptography encryption, but not what TrueCrypt uses! Impossible to crack!
Tiddles report abuse vote down vote up Votes: -2

Heh... misleading headline.

Oct 05, 2008 07:40     

The point trying to be made here is that the headline of this story was misleading. The cryptography was not hacked.
Elixir report abuse vote down vote up Votes: +4

Heh... misleading headline

Oct 06, 2008 07:34     

I disagree, if you cant maintain the secrecy of the key then the encryption is useless. Did they crack and decrypt the encryption, no, but key transfer is part of the encryption process and if that is weak then the rest is easily void.
obvious report abuse vote down vote up Votes: +0

Tree pasibilities:

Oct 07, 2008 09:09     

Choose the right: a- Is a bluff. b- Quantum criptography is NOT cracked. The hardware is bad designed. c- Foundation of modern physics are falling into shameful bits, at the floor. Makarov will get an instantaneous Nobel Prize.
mm report abuse vote down vote up Votes: +0

Speaking of TrueCrypt, which would you choose for y...

Oct 07, 2008 23:15     

Speaking of TrueCrypt, which would you choose for your OWN computer in a FREE encryption program: a.) TrueCrypt b.) AxCrypt c.) Cypherix LE d.) ? Yours?
Todd McDillion report abuse vote down vote up Votes: +3

This tells the whole story

Oct 08, 2008 04:01     

http://www.iet.ntnu.no/groups/optics/qcr/
KJ report abuse vote down vote up Votes: +0

Hackers don't hack the encryption these days

Oct 10, 2008 16:27     

they hack the password. Because that is usually orders of magnitude simpler.
MorituriMax report abuse vote down vote up Votes: +1

RE: Quantum cryptography wasn't hacked, the hardware on...

Oct 12, 2008 05:41     

Yep, again. You dont have to hack it.. if u can by-pass it. Any body remember the HDDVD scenario !
Sukhi report abuse vote down vote up Votes: +0

For the particular system they are using, hacking t...

Oct 17, 2008 13:46     

For the particular system they are using, hacking the hardware gives the same result. However you can't say they hacked quantum cryptography. The theory behind the cryptography is still sound, it just needs to be implemented better.
Rar report abuse vote down vote up Votes: +1

The hacking the password comment is moot

Feb 18, 2009 03:49     

The whole point of quantum cryptography is to protect against man in the middle attacks. It doesn't matter if the password portion of the system is weak it has nothing to do with what this invention tries to accomplish. If you want to argue attacks on the entire system don't forget that most networks used layered security. This method is only one part of the solution.
Gary report abuse vote down vote up Votes: +1