Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2206.01164

Authentication of quantum key distribution with post-quantum cryptography and replay attacks

Liujun Wang, You-Yang Zhou, Jian-Ming Yin, Qing Chen

Published Jun 2, 2022• 10 citations
arXivHTMLPDF

Abstract

With the development of quantum computers, traditional cryptographic systems are facing more and more serious security threats. Fortunately, quantum key distribution (QKD) and post-quantum cryptography (PQC) are two cryptographic mechanisms with quantum-resistant security, and both will become important solutions for future information security. However, neither of them is perfect, and they are complementary. Quantum key distribution has unconditional security that post-quantum cryptography does not have, and PQC can provide secure and convenient authentication for QKD networks. In this paper, we propose two protocols based on PQC to realize the full authentication of the QKD data post-processing, and we only need to assume the short-term security of PQC algorithm to ensure the long-term quantum resistant security of distributed keys. We found that for the above two authentication protocols, attackers cannot successfully implement replay attacks. These authentication protocols can solve the problems of the current pre-shared key authentication in the application of large-scale quantum key distribution networks, and are expected to realize a key distribution mechanism with practical operability and quantum resistant security, which will be beneficial to promote the deployment and application of quantum key distribution networks.

DOI
10.48550/arxiv.2206.01164

Related papers

Experimental Authentication of Quantum Key Distribution with Post-quantum Cryptography

Liujun Wang, Kaiyi Zhang, Jiayong Wang +9 more

Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computer. However, QKD requires the classical channel to be authenticated, and the current method is pre-sharing symmetric keys. For a QKD network of $n$ users, this method requires $C_n^2 = n(n-1)/2$ pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum resistant security, each user only needs to apply for a digital certificate from certificate authority (CA) to achieve efficient and secure authentication for QKD. We only need to assume the short-term security of the PQC algorithm to achieve the long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using PQC authentication we only need to believe the CA is safe, rather than all trusted relays. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum safe communication.

arXiv:2009.04662•Sep 10, 2020•6 citations

A PQC and QKD Hybridization for Quantum-Secure Communications

Dominik Marchsreiter, Johanna Sepúlveda

Large quantum computers will be able to break the cryptographic algorithms on which current secure communications rely on. Post-Quantum Cryptography (PQC) and Quantum key distribution (QKD) are two security technologies that show protection capabilities against the latent quantum threat. While PQC relies on different hard mathematical problems to develop a wide variety of cryptographic operations, QKD is based on quantum physics laws to generate and distribute symmetric cryptographic keys through different QKD protocols. These keys can be used by different applications to perform security transformations. QKD still requires authentication to prevent man-in-the-middle attacks. The hybridization of PQC and QKD is an important step for future secure infrastructures, being able to provide long-term security. In this work we propose authenticated QKD approaches that rely on pre-shared keys and hybrid PQC/QKD alternatives and which are able to securely exchange secret QKD keys through authenticated channels. We identify the different configuration alternatives and their parameters, as well as we develop a wide performance evaluation. Results show that pre-shared keys and PQC-based authentication through Dilithium algorithm are the fastest alternatives. Also, we show the potential of the T12 QKD protocol.

Euromicro Conference on Digital System Design (DSD)•Sep 6, 2023•16 citations

Experimental authentication of quantum key distribution with post-quantum cryptography

Liujun Wang, Kaiyi Zhang, Jiayong Wang +9 more

Abstract Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computers. However, QKD requires the classical channel to be authenticated, the current method for which is pre-sharing symmetric keys. For a QKD network of n users, this method requires $${C}_{n}^{2}=n(n-1)/2$$ C n 2 = n ( n − 1 ) / 2 pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of a mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum-resistant security, each user only needs to apply for one digital certificate from a certificate authority (CA) to achieve efficient and secure authentication for QKD. We need to assume only the short-term security of the PQC algorithm to achieve long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency, and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using the PQC public-key infrastructure, the nodes need to mutually trust only the CA to authenticate each other. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum-safe communication.

npj Quantum Information•May 6, 2021•154 citations

Quantum Key Distribution: Security Analysis of BB84 and E91 Under Realistic Attack Models

Bjursten, Sara

Cryptography is crucial to protect sensitive data. Traditional cryptography relies on mathematical difficulty to secure valuable data against intruders. However, with the rise of quantum computers, these assumptions are threatened as quantum computers can process information much faster. The security models need to be upgraded to withstand quantum computers. RSA and ECC, two common asymmetric cryptosystems, have been upgraded using post-quantum cryptography (PQC). Another solution might be to leverage the principles of quantum mechanics to ensure secure communication. The most common application of quantum cryptography is quantum key distribution (QKD), which solves the key exchange problem using quantum physics, complementing conventional cryptographic techniques by enabling secure key generation, while classical methods remain necessary for authentication and protocol implementation. QKD is secure in theory, but practical implementations often differ from theory due to imperfect devices. An intruder can find loopholes and vulnerabilities to attack the QKD systems and jeopardize its security. In this thesis, current knowledge of these attacks has been reviewed and simulated on two different QKD protocols. The simulations highlight the importance of researching the attacks and implementing countermeasures.

•Jan 1, 2026•0 citations

Quantum-Resilient Cryptography and Safe Guarding Post Quantum Cryptographic Protocols Against Quantum Threats

S Hemajothi, Keerthana B, Janani R +1 more

The Hybrid approach in Quantum Cryptography creates adaptable security model which provides the safest Communication in the emerging quantum era. The development of quantum computing raise questions about the long-term security. Traditional algorithms, such as RSA, ECC, and Diffie-Hellman, which is seemed computationally secure but it can be effectively solved by quantum algorithms such as Shor's and Grover's. This problem leads to the origination of two key trends in current studies, namely Post-Quantum Cryptography (PQC), designing mathematical approaches to encryption resistant to quantum attacks; Quantum Key Distribution (QKD) using the principles of quantum mechanics to assure security in communications. Accordingly, this research proposes a hybrid security framework including reliable data encryption and authentication using PQC, combined with the safe key- exchange method of QKD. The model is implemented in Python, Qiskit, and PQClean's Kyber and Dilithium algorithms to show how these two paradigms can cooperate toward quantum- resilient communication. To present the system performance, key exchange efficiency, computational overhead, and security strength have been considered. According to the results, this hybrid approach gives superior defense against quantum threats while maintaining practical effectiveness for real-world applications such as cloud security, 6G networks, and the Internet of Things.

International Conference on Pervasive Computing and Social Networking (ICPCSN)•May 6, 2026•0 citations

Practical hybrid PQC-QKD protocols with enhanced security and performance

Zeng, Pei, Bandyopadhyay, Debayan, Méndez, José A. Méndez +10 more

Quantum resistance is vital for emerging cryptographic systems as quantum technologies continue to advance towards large-scale, fault-tolerant quantum computers. Resistance may be offered by quantum key distribution (QKD), which provides information-theoretic security using quantum states of photons, but may be limited by transmission loss at long distances. An alternative approach uses classical means and is conjectured to be resistant to quantum attacks, so-called post-quantum cryptography (PQC), but it is yet to be rigorously proven, and its current implementations are computationally expensive. To overcome the security and performance challenges present in each, here we develop hybrid protocols by which QKD and PQC inter-operate within a joint quantum-classical network. In particular, we consider different hybrid designs that may offer enhanced speed and/or security over the individual performance of either approach. Furthermore, we present a method for analyzing the security of hybrid protocols in key distribution networks. Our hybrid approach paves the way for joint quantum-classical communication networks, which leverage the advantages of both QKD and PQC and can be tailored to the requirements of various practical networks.

arXiv:2411.01086•Nov 2, 2024•4 citations
With the development of quantum computers, traditional cryptographic systems are facing more and more serious security threats. Fortunately, quantum key distribution (QKD) and post-quantum cryptography (PQC) are two cryptographic mechanisms with quantum-resistant security, and both will become important solutions for future information security. However, neither of them is perfect, and they are complementary. Quantum key distribution has unconditional security that post-quantum cryptography does not have, and PQC can provide secure and convenient authentication for QKD networks. In this paper, we propose two protocols based on PQC to realize the full authentication of the QKD data post-processing, and we only need to assume the short-term security of PQC algorithm to ensure the long-term quantum resistant security of distributed keys. We found that for the above two authentication protocols, attackers cannot successfully implement replay attacks. These authentication protocols can solve the problems of the current pre-shared key authentication in the application of large-scale quantum key distribution networks, and are expected to realize a key distribution mechanism with practical operability and quantum resistant security, which will be beneficial to promote the deployment and application of quantum key distribution networks.
Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computer. However, QKD requires the classical channel to be authenticated, and the current method is pre-sharing symmetric keys. For a QKD network of nnn users, this method requires Cn2=n(n−1)/2C_n^2 = n(n-1)/2Cn2​=n(n−1)/2 pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum resistant security, each user only needs to apply for a digital certificate from certificate authority (CA) to achieve efficient and secure authentication for QKD. We only need to assume the short-term security of the PQC algorithm to achieve the long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using PQC authentication we only need to believe the CA is safe, rather than all trusted relays. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum safe communication.
Large quantum computers will be able to break the cryptographic algorithms on which current secure communications rely on. Post-Quantum Cryptography (PQC) and Quantum key distribution (QKD) are two security technologies that show protection capabilities against the latent quantum threat. While PQC relies on different hard mathematical problems to develop a wide variety of cryptographic operations, QKD is based on quantum physics laws to generate and distribute symmetric cryptographic keys through different QKD protocols. These keys can be used by different applications to perform security transformations. QKD still requires authentication to prevent man-in-the-middle attacks. The hybridization of PQC and QKD is an important step for future secure infrastructures, being able to provide long-term security. In this work we propose authenticated QKD approaches that rely on pre-shared keys and hybrid PQC/QKD alternatives and which are able to securely exchange secret QKD keys through authenticated channels. We identify the different configuration alternatives and their parameters, as well as we develop a wide performance evaluation. Results show that pre-shared keys and PQC-based authentication through Dilithium algorithm are the fastest alternatives. Also, we show the potential of the T12 QKD protocol.
Abstract Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computers. However, QKD requires the classical channel to be authenticated, the current method for which is pre-sharing symmetric keys. For a QKD network of n users, this method requires Cn2=n(n−1)/2{C}_{n}^{2}=n(n-1)/2Cn2​=n(n−1)/2 C n 2 = n ( n − 1 ) / 2 pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of a mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum-resistant security, each user only needs to apply for one digital certificate from a certificate authority (CA) to achieve efficient and secure authentication for QKD. We need to assume only the short-term security of the PQC algorithm to achieve long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency, and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using the PQC public-key infrastructure, the nodes need to mutually trust only the CA to authenticate each other. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum-safe communication.
Cryptography is crucial to protect sensitive data. Traditional cryptography relies on mathematical difficulty to secure valuable data against intruders. However, with the rise of quantum computers, these assumptions are threatened as quantum computers can process information much faster. The security models need to be upgraded to withstand quantum computers. RSA and ECC, two common asymmetric cryptosystems, have been upgraded using post-quantum cryptography (PQC). Another solution might be to leverage the principles of quantum mechanics to ensure secure communication. The most common application of quantum cryptography is quantum key distribution (QKD), which solves the key exchange problem using quantum physics, complementing conventional cryptographic techniques by enabling secure key generation, while classical methods remain necessary for authentication and protocol implementation. QKD is secure in theory, but practical implementations often differ from theory due to imperfect devices. An intruder can find loopholes and vulnerabilities to attack the QKD systems and jeopardize its security. In this thesis, current knowledge of these attacks has been reviewed and simulated on two different QKD protocols. The simulations highlight the importance of researching the attacks and implementing countermeasures.
The Hybrid approach in Quantum Cryptography creates adaptable security model which provides the safest Communication in the emerging quantum era. The development of quantum computing raise questions about the long-term security. Traditional algorithms, such as RSA, ECC, and Diffie-Hellman, which is seemed computationally secure but it can be effectively solved by quantum algorithms such as Shor's and Grover's. This problem leads to the origination of two key trends in current studies, namely Post-Quantum Cryptography (PQC), designing mathematical approaches to encryption resistant to quantum attacks; Quantum Key Distribution (QKD) using the principles of quantum mechanics to assure security in communications. Accordingly, this research proposes a hybrid security framework including reliable data encryption and authentication using PQC, combined with the safe key- exchange method of QKD. The model is implemented in Python, Qiskit, and PQClean's Kyber and Dilithium algorithms to show how these two paradigms can cooperate toward quantum- resilient communication. To present the system performance, key exchange efficiency, computational overhead, and security strength have been considered. According to the results, this hybrid approach gives superior defense against quantum threats while maintaining practical effectiveness for real-world applications such as cloud security, 6G networks, and the Internet of Things.
Quantum resistance is vital for emerging cryptographic systems as quantum technologies continue to advance towards large-scale, fault-tolerant quantum computers. Resistance may be offered by quantum key distribution (QKD), which provides information-theoretic security using quantum states of photons, but may be limited by transmission loss at long distances. An alternative approach uses classical means and is conjectured to be resistant to quantum attacks, so-called post-quantum cryptography (PQC), but it is yet to be rigorously proven, and its current implementations are computationally expensive. To overcome the security and performance challenges present in each, here we develop hybrid protocols by which QKD and PQC inter-operate within a joint quantum-classical network. In particular, we consider different hybrid designs that may offer enhanced speed and/or security over the individual performance of either approach. Furthermore, we present a method for analyzing the security of hybrid protocols in key distribution networks. Our hybrid approach paves the way for joint quantum-classical communication networks, which leverage the advantages of both QKD and PQC and can be tailored to the requirements of various practical networks.