Hydropower facilities are often remotely monitored or controlled from a centralized remote control room. Additionally, major component manufacturers monitor the performance of installed components, increasingly via public communication infrastructures. While these communications enable efficiencies and increased reliability, they also expand the cyber-attack surface. Communications may use the internet to remote control a facility's control systems, or it may involve sending control commands over a network from a control room to a machine. The content could be encrypted and decrypted using a public key to protect the communicated information. These cryptographic encoding and decoding schemes become vulnerable as more advances are made in computer technologies, such as quantum computing. In contrast, quantum key distribution (QKD) and other quantum cryptographic protocols are not based upon a computational problem, and offer an alternative to symmetric cryptography in some scenarios. Although the underlying mechanism of quantum cryptogrpahic protocols such as QKD ensure that any attempt by an adversary to observe the quantum part of the protocol will result in a detectable signature as an increased error rate, potentially even preventing key generation, it serves as a warning for further investigation. In QKD, when the error rate is low enough and enough photons have been detected, a shared private key can be generated known only to the sender and receiver. We describe how this novel technology and its several modalities could benefit the critical infrastructures of dams or hydropower facilities. The presented discussions may be viewed as a precursor to a quantum cybersecurity roadmap for the identification of relevant threats and mitigation.
Hydropower facilities are often remotely monitored or controlled from a centralized remote control room. Additionally, major component manufacturers monitor the performance of installed components, increasingly via public communication infrastructures. While these communications enable efficiencies and increased reliability, they also expand the cyber-attack surface. Communications may use the internet to remote control a facility's control systems, or it may involve sending control commands over a network from a control room to a machine. The content could be encrypted and decrypted using a public key to protect the communicated information. These cryptographic encoding and decoding schemes become vulnerable as more advances are made in computer technologies, such as quantum computing. In contrast, quantum key distribution (QKD) and other quantum cryptographic protocols are not based upon a computational problem, and offer an alternative to symmetric cryptography in some scenarios. Although the underlying mechanism of quantum cryptogrpahic protocols such as QKD ensure that any attempt by an adversary to observe the quantum part of the protocol will result in a detectable signature as an increased error rate, potentially even preventing key generation, it serves as a warning for further investigation. In QKD, when the error rate is low enough and enough photons have been detected, a shared private key can be generated known only to the sender and receiver. We describe how this novel technology and its several modalities could benefit the critical infrastructures of dams or hydropower facilities. The presented discussions may be viewed as a precursor to a quantum cybersecurity roadmap for the identification of relevant threats and mitigation.
Quantum computing promises significant computational speed-ups that could compromise the security of current public-key cryptography. As quantum technologies advance, SCADA systems will increasingly require enhanced cybersecurity measures. Two main quantum-safe approaches exist: Post-Quantum Cryptography (PQC) and Quantum Key Distribution (QKD). QKD offers the unique advantage of information-theoretic security, ensuring security regardless of an adversary’s computational power. This thesis addresses two identified research gaps: protecting SCADA networks against potential quantum-computer-based attacks and identifying relevant use cases for QKD to guide further research and adoption. The objective was to assess whether QKD is a viable solution for securing SCADA communications in hydropower plants against quantum threats. The analysis included designing a QKD-based SCADA communication architecture for a hydropower network, conducting a quantum vulnerability assessment, simulating the proposed setup and evaluating the advantages and disadvantages of QKD migration. The results indicate that, at the time of writing, QKD is not a viable option for securing SCADA communications in hydropower plants, as its disadvantages outweigh its benefits. For instance, QKD cannot guarantee availability, which is a critical requirement for SCADA in many critical infrastructures, including hydropower, and it is more costly than alternative quantum-safe solutions.
Quantum key distribution (QKD), a cryptographic method grounded in the laws of quantum mechanics rather than computational hardness, promises provably secure communications. Its integration into critical infrastructure offers a pathway to secure resilient operation of next-generation control systems, from power-intensive data centers to remotely operated microreactors located in energy-deprived remote communities. While QKD has been demonstrated in laboratory and network settings, its use in safety-critical control systems remains unexplored where requirements on latency, key availability, and operational stability pose unique challenges. Here, we introduce a QKD-secured data acquisition and control framework for embedding quantum cybersecurity directly into safety-critical cyber-physical systems and report the first end-to-end experimental demonstration in a nuclear reactor. The framework establishes the conditions necessary to achieve secure, low-latency, real-time operation in safety-critical environments. Using a phase-encoding decoy-state BB84 system deployed on Purdue's 10 kWth fully digital research reactor (PUR-1) we validate the model and achieve real-time encryption and decryption of 2,000 reactor signals. Experiments demonstrated a stable secret-key rate of 320 kbps with a quantum bit error rate of 3.8% at 54 km, and maximum optical-fiber distances of 82 km with One-Time Pad (OTP) encryption and 140 km with AES-256. We further evaluated compliance with latency and key availability conditions using three cryptographic schemes (OTP, AES-256, ASCON), finding that all variants supported real-time operation at typical data reporting rates. Our results establish a universal framework for quantum-cybersecurity in safety-critical systems, demonstrating that quantum communication technologies can enable secure, low-latency, real-time operation of nuclear reactors and other critical infrastructure.
The accelerating development of quantum computing capabilities poses an unprecedented challenge to conventional encryption methodologies that currently underpin global digital security infrastructure. Classical cryptographic systems, including widely adopted standards such as RSA and AES, derive their security from the computational intractability of specific mathematical problems, a foundation that quantum algorithms threaten to fundamentally undermine. This research presents a comprehensive investigation into the practical implementation of Quantum Key Distribution as a transformative approach to establishing unconditionally secure communication channels. Through experimental deployment of the BB84 protocol augmented with advanced quantum error correction and privacy amplification techniques, we systematically evaluate the performance characteristics and security guarantees of QKD in realistic network environments. Our experimental framework achieves a secure key generation rate of 2.5 megabits per second while maintaining an average quantum bit error rate of 3.2 percent, demonstrating the practical viability of quantum-secured communication. The implementation exhibits exceptional eavesdropping detection capabilities with a 98.5 percent success rate in identifying unauthorized interception attempts. Comparative security analysis reveals that QKD-based encryption reduces vulnerability to brute-force attacks by 65 percent when contrasted with classical encryption standards. The integration of lattice-based post-quantum cryptographic algorithms provides an additional security layer against store-now-decrypt-later attack strategies. These findings substantiate the position of Quantum Key Distribution as a cornerstone technology for next-generation cybersecurity frameworks, offering robust protection against both current threats and the anticipated capabilities of large-scale quantum computers.
Cyber-physical systems (CPS) are a technological marvel forming our modern world's backbone. These systems, which integrate physical processes, embedded systems, networking infrastructure, IoT, communication protocols, intelligent algorithms, and other application-specific resources, mark the convergence of computing with control and communication. They unify physical and cyber systems, paving the way for the next generation of critical systems such as autonomous transportation, smart grids, industrial IoT, and more. The next-generation CPS, characterized by their integration of physical processes, embedded systems, networking infrastructure, IoT, communication protocols, and intelligent algorithms, are set to revolutionize our world. These systems will incorporate AI and ML-based algorithms for decision-making and optimization. At the same time, edge and fog computing models will be integrated into the infrastructure to reduce data transmission latencies. New-generation networks like 5G and above will provide high-speed connectivity and seamless integration of devices and components. Digital twins will become a standard tool for simulating new scenarios, predictive maintenance, and more. As security threats for cyber-physical systems evolve alarmingly, robust protection becomes increasingly crucial. Quantum Key Distribution (QKD) is a promising solution in this context. With their ability to provide secure cryptographic key exchanges in the operating environments of cyber-physical systems, QKD protocols are gaining traction as the industry shifts towards quantum computing.
In an era of unprecedented technological advancement, the rise of quantum computing poses both opportunities and challenges to network security. While quantum computers promise to revolutionize data processing and problem-solving, they also render traditional cryptographic protocols vulnerable, threatening the integrity of current network security systems. Quantum cryptography, particularly quantum key distribution (QKD), emerges as a groundbreaking solution, leveraging the principles of quantum mechanics to ensure unparalleled data security. Unlike classical methods, QKD guarantees secure communication by detecting eavesdropping attempts, as any observation of quantum states disrupts their integrity. This paper explores the pivotal role of quantum cryptography in shaping future network security protocols amidst a landscape of increasing cyber threats. It provides a comprehensive analysis of QKD systems, their integration into existing infrastructure, and their resilience against potential quantum-based attacks. The discussion includes real-world implementations, such as satellite-based QKD networks and fiber-optic quantum communication systems, illustrating their practical viability and scalability. Furthermore, the paper addresses current challenges, including cost, technical complexity, and interoperability with classical networks, offering insights into ongoing research aimed at overcoming these hurdles. As global reliance on digital infrastructure grows, the transition to quantum-resilient security frameworks becomes imperative. Policymakers, industry leaders, and technology developers must collaborate to advance quantum cryptographic technologies and ensure their accessibility. By securing communication channels against both classical and quantum threats, quantum cryptography is positioned to redefine the foundations of network security, paving the way for a more secure and interconnected digital future.
The machinery of industrial environments was connected to the Internet years ago with the scope of increasing their performance. However, this change made such environments vulnerable against cyber-attacks that can compromise their correct functioning resulting in economic or social problems. Moreover, implementing cryptosystems in the communications between operational technology (OT) devices is a more challenging task than for information technology (IT) environments since the OT networks are generally composed of legacy elements, characterized by low-computational capabilities. Consequently, implementing cryptosystems in industrial communication networks faces a tradeoff between the security of the communications and the amortization of the industrial infrastructure. Critical infrastructure (CI) refers to the industries which provide key resources for the daily social and economical development, e.g., electricity. Furthermore, a new threat to cybersecurity has arisen with the theoretical proposal of quantum computers, due to their potential ability of breaking state-of-the-art cryptography protocols, such as RSA or elliptic curve cryptography. Many global agents have become aware that transitioning their secure communications to a quantum secure paradigm is a priority that should be established before the arrival of fault-tolerance. In this article, we aim to describe the problematic of implementing post-quantum cryptography (PQC) to CI environments. For doing so, we describe the requirements for these scenarios and how they differ against IT. We also introduce classical cryptography and how quantum computers pose a threat to such security protocols. Furthermore, we introduce state-of-the-art proposals of PQC protocols and present their characteristics. We conclude by discussing the problematic of integrating PQC in industrial environments.