Quantum Key Distribution (QKD) networks enable unconditionally secure key exchange using quantum mechanical principles. However, routing cryptographic keys across multi-hop quantum networks introduces challenges unique to quantum communication. This survey analyzes and classifies 26 routing strategies proposed between 2013 and 2024 for terrestrial, satellite, and hybrid QKD infrastructures. Dynamic, key-aware routing algorithms have been shown to reduce service rejection rates by 25-40% compared to static shortest-path methods by incorporating real-time key pool availability and link error rates. Multi-path strategies improve resilience against trusted-node compromise by distributing keys across disjoint routes, albeit with an increase in key consumption of 30-60%. SDN-based orchestration frameworks emerge as essential enablers of flexible, QoS-aware routing for hybrid networks integrating terrestrial fibers and intermittent satellite links. Critical research directions include reducing dependence on trusted nodes through quantum repeaters or post-quantum cryptography, developing standardized key management interfaces for interoperability, and adopting AI-driven predictive routing for adapting to fluctuating network states. This comprehensive synthesis of routing algorithms, performance trade-offs, and unresolved issues offers practical guidance for engineering secure, adaptable, and large-scale QKD networks capable of meeting real-world deployment demands.
Quantum Key Distribution (QKD) networks enable unconditionally secure key exchange using quantum mechanical principles. However, routing cryptographic keys across multi-hop quantum networks introduces challenges unique to quantum communication. This survey analyzes and classifies 26 routing strategies proposed between 2013 and 2024 for terrestrial, satellite, and hybrid QKD infrastructures. Dynamic, key-aware routing algorithms have been shown to reduce service rejection rates by 25-40% compared to static shortest-path methods by incorporating real-time key pool availability and link error rates. Multi-path strategies improve resilience against trusted-node compromise by distributing keys across disjoint routes, albeit with an increase in key consumption of 30-60%. SDN-based orchestration frameworks emerge as essential enablers of flexible, QoS-aware routing for hybrid networks integrating terrestrial fibers and intermittent satellite links. Critical research directions include reducing dependence on trusted nodes through quantum repeaters or post-quantum cryptography, developing standardized key management interfaces for interoperability, and adopting AI-driven predictive routing for adapting to fluctuating network states. This comprehensive synthesis of routing algorithms, performance trade-offs, and unresolved issues offers practical guidance for engineering secure, adaptable, and large-scale QKD networks capable of meeting real-world deployment demands.
Quantum Key Distribution (QKD) has progressed from a theoretical cryptographic concept to an emerging secure communication infrastructure technology. While early work focused on protocol security and physical-layer feasibility, current research increasingly addresses scalable network deployment, hardware acceleration, and integration with classical communication systems. As QKD expands from point-to-point links to metropolitan, backbone, and hybrid satellite–terrestrial networks, new engineering challenges arise in topology design, entropy generation, real-time key distillation, and multi-vendor interoperability. This survey provides an infrastructure-oriented review of QKD networks, examining architectural models, quantum randomness as a root of trust, FPGA and system-on-chip (SoC) based acceleration techniques, and programmable control-plane integration. Key management system architectures and standardized interfaces are analyzed to highlight their roles in enabling scalable, interoperable deployments. The paper also synthesizes major standardization efforts and deployment initiatives shaping carrier-grade QKD infrastructures. Finally, open engineering challenges, including scalability, control-plane integration, certification harmonization, and hybridization with post-quantum cryptography, are identified, positioning QKD as a foundational component of next-generation secure communication systems.
Quantum computing advances pose a serious threat to conventional public-key cryptographic systems such as RSA and elliptic curve cryptography as quantum algorithms may undermine the computational assumptions that guaranty their security. This challenge has driven the development of quantumsafe security approaches among which Quantum Key Distribution (QKD) represents a fundamentally different paradigm based on quantum mechanical principles rather than mathematical complexity. This paper presents a structured review of recent progress in QKD based on a systematic analysis of literature between 2020 and 2025, we examine core protocols including discrete-variable, continuous-variable, measurement-deviceindependent, and twin-field approaches, while also discussing their relationship with post-quantum cryptography as a complementary strategy for future secure communication systems. We provide a unified comparison framework to support practical design and policy decisions by organizing protocols and implementations along deployment dimensions. The study analyze theoretical foundations, implementation technologies across fiber, free-space, satellite, and integrated photonic platforms, and key performance trade-offs involving scalability, security robustness, and deployment feasibility. Findings indicate substantial progress in transitioning QKD from laboratory research toward practical implementations, supported by advances in network architectures, integrated hardware and hybrid cryptographic designs. The comparative analysis will highlight distinct strengths and limitations among protocol families and emphasize the potential of combining QKD with post-quantum cryptographic methods to enhance resilience. Remaining challenges including scalability constraints, implementation-level vulnerabilities, performance limitations over long distances, and integration with existing communication infrastructures are critically discussed. Finally, emerging research directions such as quantum repeaters, hybrid quantum-classical security models, and exploratory directions such as artificial intelligence-assisted optimizations are identified as key factors in enabling the evolution of QKD toward largescale quantum-secure networking.
Abstract The increasing demand for secure communications in mobile and critical infrastructure networks has led to the emergence of Quantum Key Distribution (QKD) as a promising technique for enhancing cryptographic security in next-generation systems. This paper reviews recent progress in integrating QKD within mobile and wireless networks. It focuses on key enabling technologies, such as Software-Defined Networking (SDN), satellite-based, and aerial networks. The paper critically analyzes how these frameworks can address evolving security requirements in sixth-generation (6G) networks and smart city infrastructures. Additionally, it examines the role of Machine Learning (ML) in improving QKD performance and adaptability. Challenges such as key management, mobility support, scalability, and interoperability are explored. These challenges help identify current barriers and research directions. By consolidating developments and highlighting unresolved issues, this study offers researchers valuable insights. It discusses the convergence of quantum communication and advanced mobile architectures, facilitating the design of secure and resilient future communication infrastructures.
Quantum key distribution (QKD), a key application of quantum information technology and “one-time pad” (OTP) encryption, enables secure key exchange with information-theoretic security, meaning its security is grounded in the laws of physics rather than computational assumptions. However, in QKD networks, achieving long-distance communication often requires trusted relays to mitigate channel losses. This reliance introduces significant challenges, including vulnerabilities to compromised relays and the high costs of infrastructure, which hinder widespread deployment. To address these limitations, we propose a zero-trust spatiotemporal diversification framework for multipath–multi-key distribution. The proposed approach enhances the security of end-to-end key distribution by dynamically shuffling key exchange routes, enabling secure multipath key distribution. Furthermore, it incorporates a dynamic adaptive path recovery mechanism that leverages a recursive penalty model to identify and exclude suspicious or compromised relay nodes. To validate this framework, we conducted extensive simulations and compared its performance against established multipath QKD methods. The results demonstrate that the proposed approach achieves a 97.22% lower attack success rate with 20% attacker pervasiveness and a 91.42% reduction in the attack success rate for single key transmission. The total security percentage improves by 35% under 20% attacker pervasiveness, and security enhancement reaches 79.6% when increasing QKD pairs. Additionally, the proposed scheme exhibits an 86.04% improvement in defense against interception and nearly doubles the key distribution success rate compared to traditional methods. The results demonstrate that the proposed approach significantly improves both security robustness and efficiency, underscoring its potential to advance the practical deployment of QKD networks.
Quantum key distribution (QKD) protocols generate a same secret key at two nodes which are at different locations. Such key is used to encrypt and decrypt messages for unconditionally secure communications through a classical channel. Originally, QKD protocols are designed to work between two nodes which are directly connected through a point-to-point quantum channel. Currently, commercial QKD systems have limited range and key rate. To increase key rate and extend range, the key generated by QKD at one end node is relayed hop-by-hop to the other end node through multiple trusted nodes. In a QKD network with multiple pairs of communicating nodes, routing deals with the issue of deciding for each pair, which trusted nodes are used to form a path connecting the end nodes. This paper presents an overview of QKD and highlights the differences between QKD routing as compared to classical routing. The challenges of QKD routing are presented. Existing works dealing with the challenges are surveyed. This paper ends with a discussion on remaining research issues.
Hybrid-trusted Quantum Key Distribution (QKD) networks face unique security challenges due to semi-trusted nodes. These nodes may introduce security threats such as man-in-the-middle attacks and key storage side-channel leakage. With the increasing complexity of QKD network architectures and expanding application scenarios, substantial divergences have emerged between user requirements for communication duration and cryptographic security demands. To address security challenges in hybrid-trusted QKD environments and provide differentiated services for users with varying requirements, this paper proposes a Service Requirement-based Hybrid-Trusted QKD Network (SRHT-QKDN) routing scheme. We propose a time-slot allocation model for QKD that employs time-slot resources as substitutes for key-generation resources in resource allocation processes. For sustained key distribution required by prolonged communications, the scheme implements two distinct time slot allocation algorithms: continuous-consistent and discrete-inconsistent allocation, enabling periodic quantum key updates. Concurrently, QKD requests are classified into three security levels, with corresponding routing strategies developed for each tier to achieve security service differentiation while maintaining routing success rates. Simulations conducted under four distinct operational conditions demonstrate that the SRHT-QKDN routing scheme not only effectively fulfills key continuity requirements but also achieves optimal overall performance in request success rate and security assurance, outperforming two benchmark routing schemes.