A Quantum Key Can Look Safe While the Eavesdropper Learns the Drift
A new preprint models an adaptive attacker that follows changing channel noise. It does not show a breach of deployed QKD equipment.

Quantum-key systems are designed to reveal interference, but their physical channels and devices do not stay perfectly constant. An October 1 preprint asks what happens when an eavesdropper learns to change strategy as channel noise drifts. The authors formulate the problem as a constrained decision process that selects an attack circuit round by round.[1][2]
In the authors’ simulated device-independent E91 setting, an adaptive policy raises the reported Holevo information from 0.135 for the best fixed circuit to 0.348 while satisfying the model’s zero-detection constraint. They report that as 98% of a dynamic-programming upper bound. Those figures describe this protocol, noise model and constraint—not a universal weakness in quantum cryptography.[1][2]
The BB84 experiment uses a drifting bit-flip channel. There, the learned attack improves fidelity by 0.024 over a conservative noise-indexed rule and reaches 99% of the model’s upper bound. The circuit search explores both gate structure and rotation angles, and the authors report recovering known analytical cloners in validation checks.[1][2]
This is a fresh preprint built on models and simulation. It is not a breach of a commercial QKD product, a field interception or evidence that an attacker can generally remain invisible. “Zero detection” is bounded by the paper’s specified abort constraint, and the numerical gains depend on the chosen protocol and channel model.[1][2]
The practical question is whether adaptive attacks retain an advantage when tested against measured device behavior, finite data and real control limits. Until hardware experiments reproduce the effect, the result is best read as a warning for security evaluations: a fixed attack model may miss an opponent that learns the same drift operators monitor.[1][2]