Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Journal of Optical Communications and Networking

100 Gbps quantum-secured and O-RAN-enabled programmable optical transport network for 5G fronthaul

E. Arabul, Romerson Deiny Oliveira, Amin Emami, Stavros Typos, Constantinos Vrontos, Rui Wang, Reza Nejabati, Dimitra E. Simeonidou

Published Mar 31, 2023• 9 citations
Publisher

Abstract

We have successfully demonstrated the first 5G open radio access network (O-RAN)-enabled and quantum-secured optical network solution and tested its performance in a 5G fronthaul use case. Our proposed solution is unique in a way that it combines a quantum key distribution (QKD)-compatible on-demand programmable 100 Gbps Ethernet encryptor with multi-tenant network operation while satisfying the stringent timing requirements of the 5G O-RAN with ultra-low pipeline latency. Moreover, our encryption cores provide the fastest reconfiguration speeds with the highest transmission capacity. By using dynamic reconfiguration technology, encryption schemes can be switched between Advanced Encryption Standard (AES) variations AES-256, AES-192, and AES-128 and Camellia-256, XOR, or no-encryption configurations in 16.7 ms for encryption and 24.1 ms for decryption. Furthermore, the key slicing functionality was introduced to our system, allowing users to have their separate key storages within the field programmable gate array and different key exchange schemes or refresh rates per client, where a secret key rate of 1.6 keys/s per client for less than 10 Gb of encrypted data could be provided. With encryption, the lowest system latency of 817.6 ns was achieved. Without encryption, the system latency could be as low as 667.2 ns. When our proposed system was tested in 5G fronthaul where our design was placed between a 5G radio unit and a 5G distributed unit/central unit, and the traffic between the 5G customer premises equipment and 5G core user plane function was transported and encrypted by our system over 100 Gbps, no significant impact on network latency on the millisecond scale was observed. Our system’s 10 Gbps fronthaul interface was stressed with a large Ethernet frame (1500B) at a rate of ≈9.8Gbps with 300,000 Internet Control Message Protocol pings, and less than 1% data loss was observed.

DOI
10.1364/jocn.483644

Related papers

QKD in Support of Secured P2P and P2MP Key Exchange for Low-Latency 5G Connectivity

Argiris Ntanos, Dimitris Zavitsanos, Giannis Giannoulis +1 more

A quantum-secured packetized optical fronthaul segment is thoroughly discussed. We present an extensive study on the integration of a Discrete Variable-Quantum Key Distribution (DV-QKD) link supporting the Advanced Encryption Standard-256 (AES-256) encryption of packetized fronthaul operating at 10Gbps. Secure key rates exceeding the 1Kbps and short rotation times down to 1.4s are reported for Point-to-Point (P2P) topologies by considering the latency budget of 5G fronthaul connectivity. For the multi-user environment, the Bob stations implementation of quantum layer is adapted to satisfy the connectivity needs of Point-to-Multipoint (P2MP) scenario, allowing for successful distribution of AES-256 keys to N=16 5G terminal nodes with ultra-low attack success probabilities of less than 2-60.

IEEE 5G World Forum (5GWF)•Sep 1, 2020•9 citations

On the QKD Integration in Converged Fiber/Wireless Topologies for Secured, Low-Latency 5G/B5G Fronthaul

Dimitris Zavitsanos, Argiris Ntanos, Giannis Giannoulis +1 more

A research contribution focusing on the Quantum Key Distribution (QKD)-enabled solutions assisting in the security framework of an optical 5G fronthaul segment is presented. We thoroughly investigate the integration of a BB84-QKD link, operating at telecom band, delivering quantum keys for the Advanced Encryption Standard (AES)-256 encryption engines of a packetized fronthaul layer interconnecting multiple 5G terminal nodes. Secure Key Rate calculations are studied for both dedicated and shared fiber configurations to identify the attack surface of AES-encrypted data links in each deployment scenario. We also propose a converged fiber-wireless scenario, exploiting a mesh networking extension operated by mmWave wireless links. In addition to the quantum layer performance, emphasis is placed on the strict requirements of 5G-oriented optical edge segments, such as the latency and the availability of quantum keys. We find that for the dark fiber case, secret keys can be distilled at fiber lengths much longer than the maximum fiber fronthaul distance corresponding to the round-trip latency barrier, for both P2P and P2MP topologies. On the contrary, the inelastic Raman scattering makes the simultaneous transmission of quantum and classical signals much more challenging. To counteract the contamination of noise photons, a resilient classical/QKD coexistence scheme is adopted. Motivated by the recent advancements in quantum technology roadmap, our analysis aims to introduce the QKD blocks as a pillar of the quantum-safe security framework of the 5G/B5G-oriented fronthaul infrastructure.

Applied Sciences•Jul 28, 2020•45 citations

QKD-secured and dynamic multi-tenant O-RAN 5G fronthaul with quantum and classical channels co-existence

Romerson Deiny Oliveira, R. Wang, E. Arabul +6 more

We reported a field trial of a dynamic QKD-protected optical network for O-RAN fronthaul with FPGA-based encryption. The coexistence of quantum and classical channels is enabled on deployed fibres with 609.05ns latency for one-way frame encryption and 2 kbps of key rate.

IET conference proceedings.•Nov 13, 2023•3 citations

QURSA: architecture for quantum-safe 5G

Ana Fernández Vilas, Florina Almenárez, Manuel Fernández‐Veiga +7 more

The evolving 5G architecture, moving from proprietary monolithic hardware towards the disaggregated and modular Open Radio Access Network (Open RAN), introduces new, critical interfaces requiring robust security. While IPSec is a prevalent solution for securing IP communications, the advent of quantum computing threatens its traditional cryptographic underpinnings; it may be deprecated in the near future. To address this, we propose a quantum-safe Open RAN framework for securing fronthaul (i.e., Radio Unit-Distributed Unit) and backhaul (i.e., Centralized Unit-5G core) interfaces. Our framework employs a hybrid key exchange scheme, combining post-quantum cryptography (PQC) with quantum keys as cryptographic material, designed for seamless integration with TLS, IKEv2/IPSec, and MACSec standards, and compatible with ETSI QKD 004 and 014 APIs. Furthermore, we present a novel key distribution protocol for Quantum Key Distribution Networks (QKDN). This protocol incorporates encapsulation techniques inspired by onion routing, combined with PQC, to ensure confidentiality, integrity, authenticity, and anonymity. It also leverages post-quantum public key encryption to protect shared secrets from intermediate nodes within the QKDN, mitigating intermediary attacks. We have deployed a proof-of-concept of our proposal, experimentally validating both air-based and fiber-based QKD, primarily using ML-KEM and ML-DSA standards for PQC algorithms.

SPIE Quantum Technologies for Defence and Security•Oct 29, 2025•0 citations

Secure Open Fronthaul Interface for 5G Networks

Joo Yeon Cho, Andrew Sergeev

The open fronthaul interface is a standard protocol for a link between the radio units and the distributed unit in RAN, enabling different vendors interoperable. We study the security requirements of the open fronthaul interface for 5G networks. The O-RAN management plane (M-plane) mandates an end-to-end security using SSHv2, whereas the O-RAN control and user plane (CU-plane) do not support any security measure yet. We investigate MACsec for the CU-plane security, which is recommended as one of security options in the eCPRI specification. Furthermore, we implemented quantum-safe crypto solutions using a hybrid mode key exchange and signature schemes, which can be applied for the post-quantum SSH and MACsec protocols.

International Conference on Availability, Reliability and Security (ARES)•Aug 16, 2021•15 citations

Quantum-Resistant Security Protocols for Optical Fronthaul in the 5G Era

N. Nithiyanandam, Debanjan Baidya, Ramireddy Harshavardhan

This comprehensive investigation delves into the pivotal realm of security within 5G optical fronthaul networks, addressing a multitude of challenges and solutions. Security threats, including eavesdropping and denial-of-service (DoS) attacks, are scrutinized in-depth, offering insights into the vulnerabilities these networks face. This article places particular emphasis on the evaluation of key security protocols, such as Media-ACSec, IntPro-Sec, and WireGuard. Each protocol strengths and weaknesses are dissected, highlighting the simplicity and efficiency of Media-ACSec, the complexity and challenges of IntPro-Sec, and the compelling speed and reliability of WireGuard. The concept of overhead is explored, demonstrating the minimal impact of these security protocols on data transmission, thus showcasing their suitability for the stringent latency requirements of optical fronthaul networks. Furthermore, the discussion extends to re-key intervals, stressing the importance of timely key replacement to enhance security. Notably, the content delves into quantum-resistance, examining how these security protocols can adapt to emerging quantum threats. Practical insights are gleaned from an experimental analysis, providing valuable data on the relationship between encryption/decryption processes, latency, and maximum transmission distances in optical fronthaul networks. The results underscore the essential role of hardware acceleration in optimizing network performance while maintaining stringent security standards. In conclusion, this exploration offers a comprehensive view of evolving security paradigms in the dynamic landscape of 5G optical fronthaul networks, shedding light on the challenges and solutions that define this critical segment of modern telecommunications.

International Conference on Emerging Technologies in Engineering Applications (ICETEA)•Jun 5, 2025•0 citations
We have successfully demonstrated the first 5G open radio access network (O-RAN)-enabled and quantum-secured optical network solution and tested its performance in a 5G fronthaul use case. Our proposed solution is unique in a way that it combines a quantum key distribution (QKD)-compatible on-demand programmable 100 Gbps Ethernet encryptor with multi-tenant network operation while satisfying the stringent timing requirements of the 5G O-RAN with ultra-low pipeline latency. Moreover, our encryption cores provide the fastest reconfiguration speeds with the highest transmission capacity. By using dynamic reconfiguration technology, encryption schemes can be switched between Advanced Encryption Standard (AES) variations AES-256, AES-192, and AES-128 and Camellia-256, XOR, or no-encryption configurations in 16.7 ms for encryption and 24.1 ms for decryption. Furthermore, the key slicing functionality was introduced to our system, allowing users to have their separate key storages within the field programmable gate array and different key exchange schemes or refresh rates per client, where a secret key rate of 1.6 keys/s per client for less than 10 Gb of encrypted data could be provided. With encryption, the lowest system latency of 817.6 ns was achieved. Without encryption, the system latency could be as low as 667.2 ns. When our proposed system was tested in 5G fronthaul where our design was placed between a 5G radio unit and a 5G distributed unit/central unit, and the traffic between the 5G customer premises equipment and 5G core user plane function was transported and encrypted by our system over 100 Gbps, no significant impact on network latency on the millisecond scale was observed. Our system’s 10 Gbps fronthaul interface was stressed with a large Ethernet frame (1500B) at a rate of ≈9.8Gbps with 300,000 Internet Control Message Protocol pings, and less than 1% data loss was observed.
A quantum-secured packetized optical fronthaul segment is thoroughly discussed. We present an extensive study on the integration of a Discrete Variable-Quantum Key Distribution (DV-QKD) link supporting the Advanced Encryption Standard-256 (AES-256) encryption of packetized fronthaul operating at 10Gbps. Secure key rates exceeding the 1Kbps and short rotation times down to 1.4s are reported for Point-to-Point (P2P) topologies by considering the latency budget of 5G fronthaul connectivity. For the multi-user environment, the Bob stations implementation of quantum layer is adapted to satisfy the connectivity needs of Point-to-Multipoint (P2MP) scenario, allowing for successful distribution of AES-256 keys to N=16 5G terminal nodes with ultra-low attack success probabilities of less than 2-60.
A research contribution focusing on the Quantum Key Distribution (QKD)-enabled solutions assisting in the security framework of an optical 5G fronthaul segment is presented. We thoroughly investigate the integration of a BB84-QKD link, operating at telecom band, delivering quantum keys for the Advanced Encryption Standard (AES)-256 encryption engines of a packetized fronthaul layer interconnecting multiple 5G terminal nodes. Secure Key Rate calculations are studied for both dedicated and shared fiber configurations to identify the attack surface of AES-encrypted data links in each deployment scenario. We also propose a converged fiber-wireless scenario, exploiting a mesh networking extension operated by mmWave wireless links. In addition to the quantum layer performance, emphasis is placed on the strict requirements of 5G-oriented optical edge segments, such as the latency and the availability of quantum keys. We find that for the dark fiber case, secret keys can be distilled at fiber lengths much longer than the maximum fiber fronthaul distance corresponding to the round-trip latency barrier, for both P2P and P2MP topologies. On the contrary, the inelastic Raman scattering makes the simultaneous transmission of quantum and classical signals much more challenging. To counteract the contamination of noise photons, a resilient classical/QKD coexistence scheme is adopted. Motivated by the recent advancements in quantum technology roadmap, our analysis aims to introduce the QKD blocks as a pillar of the quantum-safe security framework of the 5G/B5G-oriented fronthaul infrastructure.
The evolving 5G architecture, moving from proprietary monolithic hardware towards the disaggregated and modular Open Radio Access Network (Open RAN), introduces new, critical interfaces requiring robust security. While IPSec is a prevalent solution for securing IP communications, the advent of quantum computing threatens its traditional cryptographic underpinnings; it may be deprecated in the near future. To address this, we propose a quantum-safe Open RAN framework for securing fronthaul (i.e., Radio Unit-Distributed Unit) and backhaul (i.e., Centralized Unit-5G core) interfaces. Our framework employs a hybrid key exchange scheme, combining post-quantum cryptography (PQC) with quantum keys as cryptographic material, designed for seamless integration with TLS, IKEv2/IPSec, and MACSec standards, and compatible with ETSI QKD 004 and 014 APIs. Furthermore, we present a novel key distribution protocol for Quantum Key Distribution Networks (QKDN). This protocol incorporates encapsulation techniques inspired by onion routing, combined with PQC, to ensure confidentiality, integrity, authenticity, and anonymity. It also leverages post-quantum public key encryption to protect shared secrets from intermediate nodes within the QKDN, mitigating intermediary attacks. We have deployed a proof-of-concept of our proposal, experimentally validating both air-based and fiber-based QKD, primarily using ML-KEM and ML-DSA standards for PQC algorithms.
The open fronthaul interface is a standard protocol for a link between the radio units and the distributed unit in RAN, enabling different vendors interoperable. We study the security requirements of the open fronthaul interface for 5G networks. The O-RAN management plane (M-plane) mandates an end-to-end security using SSHv2, whereas the O-RAN control and user plane (CU-plane) do not support any security measure yet. We investigate MACsec for the CU-plane security, which is recommended as one of security options in the eCPRI specification. Furthermore, we implemented quantum-safe crypto solutions using a hybrid mode key exchange and signature schemes, which can be applied for the post-quantum SSH and MACsec protocols.
This comprehensive investigation delves into the pivotal realm of security within 5G optical fronthaul networks, addressing a multitude of challenges and solutions. Security threats, including eavesdropping and denial-of-service (DoS) attacks, are scrutinized in-depth, offering insights into the vulnerabilities these networks face. This article places particular emphasis on the evaluation of key security protocols, such as Media-ACSec, IntPro-Sec, and WireGuard. Each protocol strengths and weaknesses are dissected, highlighting the simplicity and efficiency of Media-ACSec, the complexity and challenges of IntPro-Sec, and the compelling speed and reliability of WireGuard. The concept of overhead is explored, demonstrating the minimal impact of these security protocols on data transmission, thus showcasing their suitability for the stringent latency requirements of optical fronthaul networks. Furthermore, the discussion extends to re-key intervals, stressing the importance of timely key replacement to enhance security. Notably, the content delves into quantum-resistance, examining how these security protocols can adapt to emerging quantum threats. Practical insights are gleaned from an experimental analysis, providing valuable data on the relationship between encryption/decryption processes, latency, and maximum transmission distances in optical fronthaul networks. The results underscore the essential role of hardware acceleration in optimizing network performance while maintaining stringent security standards. In conclusion, this exploration offers a comprehensive view of evolving security paradigms in the dynamic landscape of 5G optical fronthaul networks, shedding light on the challenges and solutions that define this critical segment of modern telecommunications.