The use of linearly independent signal states in realistic implementations of quantum key distribution (QKD) enables an eavesdropper to perform unambiguous state discrimination. We explore quantitatively the limits for secure QKD imposed by this fact taking into account that the receiver can monitor, to some extent the photon-number statistics of the signals even with todays standard detection schemes. We compare our attack to the beam-splitting attack and show that security against the beam-splitting attack does not necessarily imply security against the attack considered here.

• Received 20 March 2000

DOI:https://doi.org/10.1103/PhysRevA.62.022306