Title:Quantum hacking: adding a commercial actively-quenched module to the list of single-photon detectors controllable by Eve

Abstract: We show how PerkinElmer SPCM-AQR actively-quenched detector module can be controlled by an eavesdropper. The scheme uses bright optical pulses to get the detector blinded. In this mode, one can trigger a detector click controllably (with sub-nanosecond time jitter) if one applies at its input another bright optical pulse above some intensity threshold. This loophole may be exploited to launch an intercept-resend (faked-state) attack against quantum cryptosystems using these detectors. An example is given in the case of a four-state protocol implemented with polarization coding.