Quantum random number generation (QRNG) and quantum key distribution (QKD) are the first applications of quantum physics at the level of individual quanta that have matured into commercial products. Both have been commercially available for over 10 years and increasingly adopted in information security systems. Current efforts focus on standardization and certification of QRNG and QKD devices and their components in order to validate the technology and enable more widespread adoption. Since no official certification scheme specific to quantum devices has been devised so far, alternative options must be investigated. This paper describes our approaches and efforts to enable compliance of commercial QRNG and QKD network devices with security standards such as AIS 20/311 and FIPS 140-2.2
Quantum random number generation (QRNG) and quantum key distribution (QKD) are the first applications of quantum physics at the level of individual quanta that have matured into commercial products. Both have been commercially available for over 10 years and increasingly adopted in information security systems. Current efforts focus on standardization and certification of QRNG and QKD devices and their components in order to validate the technology and enable more widespread adoption. Since no official certification scheme specific to quantum devices has been devised so far, alternative options must be investigated. This paper describes our approaches and efforts to enable compliance of commercial QRNG and QKD network devices with security standards such as AIS 20/311 and FIPS 140-2.2
Applications of quantum technologies are rapidly progressing in communications systems implementations. In particular, quantum key distribution (QKD) and quantum random number generation have become key applications for cryptography and physical layer security. Unlike classical cryptography and network security, in QKD, security is ensured by the laws of physics and is, in principle, unbreachable by an interceptor. In particular, peculiar properties and postulates of quantum physics, such as superposition, entanglement, and quantum measurement uncertainty, are exploited to achieve system security. Quantum random number generator (QRNG) is also an important component in the implementation of QKD protocols. Likewise, in QRNG, true randomness (unpredictability using past data and uniformity of statistical distribution) is guaranteed by the laws of quantum physics. In this study, we review prominent aspects of QKD and QRNG, related standards, protocols, and hardware components. Moreover, a comprehensive review of the current QKD protocols and quantum random number generation methods is also presented.
In recent years, Quantum information technology (QIT) has accelerated its development in academic research with continuously highlights and achievements that have attracted the attention of the entire society. Network security is currently the main application field of QIT and two types of quantum security products have been released: Quantum Key Distribution systems and Quantum Random Number Generators. This article introduces the two quantum security products and reveals that the application of QIT in network security is currently in its initial stage, consisting of a total of six stages. Both product and market sides need continuous innovation and development, and it may take time for QIT to truly manifest significant commercial value. It also offers prospects for the technological evolution of the two quantum products in the further process of industrialization, mainly involving the multiplexing of QKD with classical optical communication and the chip based QRNG. The aim of this study is to consolidate consensus and contribute to the industrial application of QIT in network security.
Abstract Cryptographic processes rely on randomness to ensure secure encryption by generating unpredictable keys and patterns, thereby preventing attackers from guessing them. This chapter explores various methods for generating randomness, with a focus on Quantum Random Number Generators (QRNGs), which are considered the most secure option for cryptographic implementations. QRNGs leverage the inherent unpredictability of quantum phenomena and are being explored for a variety of use cases, from small devices to large-scale servers, with the potential to enhance security in diverse systems. However, their broader adoption faces limitations, such as cost, scalability, and integration challenges, which must be addressed for widespread practical implementation.
Abstract One of the most important obstacles for the social deployment of Quantum Key Distribution (QKD) systems is the lack of standards for security certification. Proper selection of application will circumvent other obstacles, such as cost, key generation distance, and rate. Nevertheless, security certification of real systems, or “implementation security certification” is indispensable. Such certification should be clear and tractable for non‐experts and should be performed with standardized characterization methods. Otherwise, the potential users cannot adopt the QKD system with confidence, because the highest level of security is what QKD appeals. This report discusses the process of the implementation security certification and the requirements for device characterization. It also presents several case studies on the requirements and experimental characterization of QKD devices for the security certification.
Quantum key distribution (QKD) and quantum random number generation (QRNG) will play a key role in the future of data communication security. QKD can be used by trusted parties to share a secret key, leading to long-term secure communications. QRNG allows the production of fully unpredictable and certifiable random numbers, which can be used in numerous applications, including cryptography and large stochastic simulations. Both QKD and QRNG can be implemented using commercially available photonic components, which are mostly bulky and assembled into a discrete module. Although this approach can benefit from the superior performance and maturity of each individual component, it does not guarantee the large-scale deployment and commercial viability of the technology. A preferable alternative relies on integrating some or all functionalities in a single photonic integrated circuit (PIC) fabricated at the wafer scale, in this way reducing size, weight, complexity, cost, and power consumption. Integrated photonics can thus dramatically improve the performance and reliability of QKD systems and QRNG devices. Here, we review recent literature on designs, related materials, and fabrication processes, which is representative of state-of-the-art PIC-based QKD and QRNG. We conclude the paper by pointing out the challenges that need to be addressed in the future for reaching a wide-scale deployment of these integrated technologies.
The generation of random numbers and the study of its properties have been an elusive field for a fair portion of the century. The application of random numbers is employed in many use cases such as cryptography, neural networks, numerical simulation, and gambling. The performance of each of these use cases is profoundly impacted by the employed random numbers; henceforth, the quality of randomness is of critical importance when it comes to their usage. A poorly generated random number can make a security system vulnerable, or any numerical or statistical evaluation misleading. Although various modes of classical random number generators exist and still function to provide strong cryptographic properties, emergence of quantum mechanical randomness has shed light on a novel path of generating certified randomness which supersedes the classical counterpart in terms of security. Harnessing quantum mechanical phenomena enables generation of true random numbers which can be certified and further implemented to elevate the net quality of the specific use cases. In this work, we generate and analyze random numbers from three different sources — 50: 50 beam splitter (BS), quantum key distribution (QKD) setup with classical post-processing scheme, and a commercially available quantum random number generator (QRNG) (ID Quantique (IDQ)). The quality of the generated random numbers from the various sources is checked in statistical tests and compared. Further on, we have developed a system which implements the QRNG-based random numbers to facilitate message authentication code (MAC) and one time password (OTP) protocols, demonstrating a communication network application. In this manner we discuss about a network which integrates quantum mechanics to the current classical networking approaches to enhance certain aspects of the networking protocol — in this case, the security.