Quantum key distribution (QKD) has been researched for almost four decades and is currently making its way to commercial applications. However, deployment of the technology at scale is challenging because of the very particular nature of QKD and its physical limitations. Among other issues, QKD is computationally intensive in the post-processing phase, and devices are therefore complex and power hungry, which leads to problems in certain application scenarios. In this work, we study the possibility to offload computationally intensive parts in the QKD post-processing stack in a secure way to untrusted hardware. We show how error correction can be securely offloaded for discrete-variable QKD to a single untrusted server and that the same method cannot be used for long-distance continuous-variable QKD. Furthermore, we analyze possibilities for multi-server protocols to be used for error correction and privacy amplification. Even in cases where it is not possible to offload to an external server, being able to delegate computation to untrusted hardware components on the device itself could improve the cost and certification effort for device manufacturers.
Quantum key distribution (QKD) has been researched for almost four decades and is currently making its way to commercial applications. However, deployment of the technology at scale is challenging because of the very particular nature of QKD and its physical limitations. Among other issues, QKD is computationally intensive in the post-processing phase, and devices are therefore complex and power hungry, which leads to problems in certain application scenarios. In this work, we study the possibility to offload computationally intensive parts in the QKD post-processing stack in a secure way to untrusted hardware. We show how error correction can be securely offloaded for discrete-variable QKD to a single untrusted server and that the same method cannot be used for long-distance continuous-variable QKD. Furthermore, we analyze possibilities for multi-server protocols to be used for error correction and privacy amplification. Even in cases where it is not possible to offload to an external server, being able to delegate computation to untrusted hardware components on the device itself could improve the cost and certification effort for device manufacturers.
Recent experimental demonstrations of quantum key distribution (QKD) have caught worldwide attention for their ability to transmit encryption keys. Current commercial QKD typically uses discrete optical components, resulting in systems which are typically sized to fit within telecommunications racks. Widespread deployment of QKD systems will require low-SWaP (i.e., Size, Weight, and Power) QKD systems, thus Photonic Integration is seen as a key enabler of widespread adoption. QKD post-processing systems play a significant role in the distillation and high-speed generation of secure keys for discrete variable (DV) or continuous variable (CV) QKD protocols. Interest in using heterogeneous computing techniques for QKD post-processing is growing, owing to the emergence of domain-specific hardware accelerators for efficient quantum information processing applications. We hence discuss in a tutorial manner the principles and techniques of QKD post-processing. Characteristics of representative heterogeneous platforms for QKD post-processing implementations are compared, along with a review of the state-of-the-art QKD post-processing accelerators.
Security proofs of quantum key distribution (QKD) often require post-processing schemes to simplify the data structure, and hence the security proof. We show a generic method to improve resulting secure key rates by partially reversing the simplifying post-processing for error correction purposes. We apply our method to the security analysis of device-independent QKD schemes and of detection-device-independent QKD schemes, where in both cases one is typically required to assign binary values even to lost signals. In the device-independent case, the loss tolerance threshold is cut down by our method from 92.4% to 90.9%. The lowest tolerable transmittance of the detection-device-independent scheme can be improved from 78.0% to 65.9%
Quantum Key Distribution (QKD) is revolutionizing cryptography by promising information-theoretic security through the immutable laws of quantum mechanics. Yet, the challenge of transforming these idealized security models into practical, resilient systems remains a pressing issue, especially as quantum computing evolves. In this review, we critically dissect and synthesize the latest advancements in QKD protocols and their security vulnerabilities, with a strong emphasis on rigorous security proofs. We actively categorize contemporary QKD schemes into three key classes: uncertainty principle-based protocols (e.g., BB84), hybrid architectures that enable secure direct communication (eg, three-stage protocol), and continuous-variable frameworks. We further include two modern classes of QKD protocols, namely Twin-field QKD and Device-Independent QKD, both of which were developed to have practical implementations over the last decade. Moreover, we highlight important experimental breakthroughs and innovative mitigation strategies, including the deployment of advanced Quantum Error Correction Codes (QECCs), that significantly enhance channel fidelity and system robustness. By mapping the current landscape, from sophisticated quantum attacks to state-of-the-art error correction methods, this review fills an important gap in the literature. To bring everything together, the relevance of this review concerning quantum augmented networks (QuANets) is also presented. This allows the readers to gain a comprehensive understanding of the security promises of quantum key distribution from theoretical proofs to experimental validations.
Abstract Considering the rapid development of quantum technology, it has become inevitable to use this technology to develop an ultimately secured key exchange system. Quantum key distribution (QKD) technology has become more sophisticated, is expected to provide secure key distribution mechanism for the actual information security systems. The unique advantage of quantum cryptography is precisely its ability to guarantee absolute security. Previous works have demonstrated unconditional security of the ideal BB84 QKD system. However, on a typical QKD system, many practical situations often cannot satisfy the requirements of the ideal condition. This problem causes some security issues for practical QKD system. Therefore, it is necessary to analyze the security of QKD system under practical conditions, and identify the security implications on the practical physical systems and equipment, in order to find a method that guarantees the security of QKD system. The security of QKD system based on BB84 involves many aspects; this paper mainly focuses on how to resolve security issues that may exist, especially in the BB84 protocol post-processing. We introduce ways to tackle these issues and make vital key information leakage very small. Their impact on the security of entire QKD system is analyzed, and the interaction and security optimization between the various parts is researched. Finally, the thesis briefly introduces five sub-modules of post-processing of QKD system: the base comparison, error estimation, information correction, data check and privacy amplification; the existent security factors of each module is given, for error estimation and information correction is provided the secure model with those issues. Thus, the security model of post-processing is further optimized.
Quantum computing advances pose a serious threat to conventional public-key cryptographic systems such as RSA and elliptic curve cryptography as quantum algorithms may undermine the computational assumptions that guaranty their security. This challenge has driven the development of quantumsafe security approaches among which Quantum Key Distribution (QKD) represents a fundamentally different paradigm based on quantum mechanical principles rather than mathematical complexity. This paper presents a structured review of recent progress in QKD based on a systematic analysis of literature between 2020 and 2025, we examine core protocols including discrete-variable, continuous-variable, measurement-deviceindependent, and twin-field approaches, while also discussing their relationship with post-quantum cryptography as a complementary strategy for future secure communication systems. We provide a unified comparison framework to support practical design and policy decisions by organizing protocols and implementations along deployment dimensions. The study analyze theoretical foundations, implementation technologies across fiber, free-space, satellite, and integrated photonic platforms, and key performance trade-offs involving scalability, security robustness, and deployment feasibility. Findings indicate substantial progress in transitioning QKD from laboratory research toward practical implementations, supported by advances in network architectures, integrated hardware and hybrid cryptographic designs. The comparative analysis will highlight distinct strengths and limitations among protocol families and emphasize the potential of combining QKD with post-quantum cryptographic methods to enhance resilience. Remaining challenges including scalability constraints, implementation-level vulnerabilities, performance limitations over long distances, and integration with existing communication infrastructures are critically discussed. Finally, emerging research directions such as quantum repeaters, hybrid quantum-classical security models, and exploratory directions such as artificial intelligence-assisted optimizations are identified as key factors in enabling the evolution of QKD toward largescale quantum-secure networking.
Quantum key distribution (QKD) technology exhibits significant application demand in data security-sensitive fields such as military, government, finance, and healthcare. However, the deployment of conventional QKD systems typically requires large-scale specialized equipment and dedicated fiber connections, which substantially limits the flexibility of application scenarios and deployment efficiency. Although existing research has explored the potential of QKD in Internet of Things (IoT) environments, the specific challenges imposed by current hardware conditions and device limitations have not been thoroughly investigated. This study proposes a QKD framework that further decouples the receiver as a dedicated interface device and a mobile terminal (e.g., smartphones) for key distribution. Specifically, in continuous-variable quantum key distribution (CV-QKD) scenarios, mobile terminals can connect with QKD devices through dedicated interface devices to accomplish initial key distribution, while subsequent key negotiation is conducted through wireless communication. This architecture enables the execution of final post-processing operations by specialized devices even under physically disconnected conditions. The proposed solution effectively addresses the technical challenges of deploying QKD on computationally constrained terminal devices (e.g., IoT devices), thereby significantly expanding the application scope and practical feasibility of QKD technology.