Jailbreaking Quantum Computers

Abstract

This work presented the first thorough exploration of the attacks on the interface between gate-level and pulse-level quantum circuits and pulse-level quantum circuits themselves. Typically, quantum circuits and programs that execute on quantum computers, are defined using gate-level primitives. However, to improve the expressivity of quantum circuits and to allow better optimization, pulse-level circuits are now often used. The attacks presented in this work leverage the inconsistency between the gate-level description of the custom gate, and the actual, low-level pulse implementation of this gate. By manipulating the custom gate specification, this work proposes numerous attacks: qubit plunder, qubit block, qubit reorder, timing mismatch, frequency mismatch, phase mismatch, and waveform mismatch. This work demonstrates these attacks on the real quantum computer and simulator, and shows that most current software development kits are vulnerable to these new types of attacks. In the end, this work proposes a defense framework. The exploration of security and privacy issues of the rising pulse-level quantum circuits provides insight into the future development of secure quantum software development kits and quantum computer systems.

Chuanqi Xu

Ph.D. Student

I am a PhD candidate at Yale University. My current research focuses on quantum computing and computer security, where I design novel attacks and defenses targeting quantum computers and quantum cloud providers. Specifically, my work explores security and privacy across the entire technology stack of quantum computers:

1. Investigating vulnerabilities in quantum processors and qubit technologies.
2. Developing secure and private quantum computer systems and architecture.
3. Ensuring the security of quantum algorithms, with a focus on quantum machine learning (QML).

Previously, I worked on RTL design (Verilog) for FPGAs, implementing Post-Quantum Cryptography (PQC) that is secure to both classical and quantum computer attacks.

I am actively seeking roles as a research scientist, software engineer, and quant researcher. I am broadly interested in developing systems and infrastructure, especially for ML/GenAI infrastructure and systems.