Modern quantum key distribution (QKD) network designs are based on sending photons from one node to another and require free-space or dedicated fiber optic cables between nodes. The purpose of this is to co-generate secret key material on both sides of the quantum channel. In addition to this quantum link, there are several insecure classical channels that allow QKD algorithms to exchange book-keeping information and send symmetrically encrypted data. The attenuation of photons transmitted through fiber becomes too high to practically generate key material over fiber at distances of more than 100 km. Free-space transmission through the atmosphere or the vacuum of space can reduce attenuation, but at the cost of system complexity and sensitivity to other impairments, such as weather. To extend the effective range of QKD networks, we present a method that combines QKD algorithms with post-quantum, homomorphic key-switching to allow multiple parties to effectively share secret key material over longer distances through semi-trusted relay nodes. We define how such a system should work for arbitrary network topologies and provide proofs that our scheme is both correct and secure. We assess the feasibility of this solution by building and evaluating two implementations based on lattice-based cryptography: learning with errors.
Modern quantum key distribution (QKD) network designs are based on sending photons from one node to another and require free-space or dedicated fiber optic cables between nodes. The purpose of this is to co-generate secret key material on both sides of the quantum channel. In addition to this quantum link, there are several insecure classical channels that allow QKD algorithms to exchange book-keeping information and send symmetrically encrypted data. The attenuation of photons transmitted through fiber becomes too high to practically generate key material over fiber at distances of more than 100 km. Free-space transmission through the atmosphere or the vacuum of space can reduce attenuation, but at the cost of system complexity and sensitivity to other impairments, such as weather. To extend the effective range of QKD networks, we present a method that combines QKD algorithms with post-quantum, homomorphic key-switching to allow multiple parties to effectively share secret key material over longer distances through semi-trusted relay nodes. We define how such a system should work for arbitrary network topologies and provide proofs that our scheme is both correct and secure. We assess the feasibility of this solution by building and evaluating two implementations based on lattice-based cryptography: learning with errors.
The secure communication system called Quantum Key Distribution (QKD) needs improvements in long-distance implementation because energy loss and eavesdropping threats exist. The authors present the Multi-layer Proxy Encryption Scheme (MPES) which combines proxy re-encryption together with entangled quantum particles to achieve security enhancements along with distant QKD transmission capability. Quantum repeaters within the MPES model conduct multiple encryption and decryption operations which guards fiber-optic channel data transfers. The trust-based shortest path algorithm enables more efficient photon transfer which leads to decreased transmission loss and improved efficiency. The experimental data shows that key errors decreased by 62.5% while energy efficiency increased by 90.90% when implementing the MPES against standard BB84 protocol operation. Optimal conditions for photon mean free path required keeping wavelengths at 0.0051 nm and determined the most efficient photon energy span to be between 0.01 MeV. The new modeling system enhances quantum communication protection and simultaneously achieves satisfactory key transmission speeds. The conducted research shows MPES presents itself as an effective solution for quantum-secure communication at extended ranges within cloud environments.
• Zero-trust relay for QKD networks using homomorphic encryption on conventional hardware • External QRNG integration to enhance crypto-agility in embedded random key generation • An extra confidentiality layer through the integration of cryptographic hardware Quantum key distribution (QKD) enables unconditionally secure symmetric key exchange between parties. However, terrestrial fibre-optic links face inherent distance constraints due to quantum signal degradation. Traditional solutions to overcome these limits rely on trusted relay nodes, which perform intermediate re-encryption of keys using one-time pad (OTP) encryption. This approach, however, exposes keys as plaintext at each relay, requiring significant trust and stringent security controls at every intermediate node. These “trusted” relays become a security liability if compromised. To address this issue, we propose a zero-trust relay design that applies fully homomorphic encryption (FHE) to perform intermediate OTP re-encryption without exposing plaintext keys, effectively mitigating the risks associated with potentially compromised or malicious relay nodes. Additionally, the architecture enhances crypto-agility by incorporating external quantum random number generators, thus decoupling key generation from specific QKD hardware and reducing vulnerabilities tied to embedded key-generation modules. The solution is designed with the existing European Telecommunication Standards Institute (ETSI) QKD standards in mind, enabling straightforward integration into current infrastructures. Its feasibility has been successfully demonstrated through a hybrid network setup combining simulated and commercially available QKD equipment. The proposed zero-trust architecture thus significantly advances the scalability and practical security of large-scale QKD networks, greatly reducing reliance on fully trusted infrastructure.
Quantum Key Distribution (QKD) enables two distant users to exchange a secret key with information-theoretic security, based on the fundamental laws of quantum physics. While it is arguably the most mature application of quantum cryptography, it has inherent limitations in the achievable distance and the scalability to large-scale infrastructures. While the applicability of QKD can be readily increased with the use of intermediary trusted nodes, this adds additional privacy requirements on third parties. In this work, we present an efficient scheme leveraging a trusted node with lower privacy requirements thanks to the use of post-quantum cryptographic techniques, and implement it on a deployed fiber optic quantum communication network in the Paris area.
Quantum key distribution (QKD) is an emerging technology for secure distribution of keys between users linked by free-space or fiber optic transmission facilities. QKD has usually been designed for and operated over dedicated point-to-point links. However, the commercial world has been developing increasingly sophisticated fiber networks, with basic networking functions such as routing and multiplexing performed in the optical domain. One of the most important practical questions for the future of QKD is to what extent it can benefit from these trends, either to expand the capabilities of dedicated quantum networks, or to avoid the need for dedicated networks by combining quantum and conventional optical signals onto a single infrastructure. In this paper, we report on systematic investigations of these issues using a 1310-nm weak-coherent, phase-encoded B92 prototype QKD system developed by Los Alamos that includes the implementation of error correction, privacy amplification, and authentication. We have demonstrated reconfigurability of QKD networks via optical switching and successful QKD operation in the presence of amplified DWDM signals over 10 km of fiber. We have identified anti-Stokes Raman scattering of the DWDM signals in the fiber as a dominant transmission impairment for QKD, and developed filtering architectures to extend transmission distances to at least 25 km. We have also measured noise backgrounds and polarization variations in network fibers to understand applicability to real-world networks. We will discuss the implications of our results for the choice of QKD wavelengths, wavelength-spacing between QKD and conventional channels, and QKD network architectures.
The quantum key distribution (QKD) method allows for the safe creation of encryption keys between trusted entities for secure communication. The suggested system is designed to enable secure communication between multiple parties (a single sender, Alice, and multiple receivers, Bobs) connected via a public channel susceptible to interception. It enables Alice to privately share encryption keys with each Bob over dedicated quantum channels, which can then be used to decrypt messages sent over the public network. The procedure involves Alice generating optical signals with randomly assigned properties such as intensity, phase, polarization, and frequencies. Alice randomly sends either signal states carrying information or decoy states with different frequencies to the receivers (Bobs) over the quantum channels. She also sends a synchronization signal for timing alignment with the quantum signals over the optical links. At the receiving end, the synchronization pulse timestamps the incoming quantum signals. Each Bob then randomly alters the frequencies of the received quantum signals and randomly measures their phase or polarization. The key is created from the frequency, phase, or polarization information of the quantum signals, resulting in longer keys. Key management agents manage the securely QKD-generated keys to encrypt information before sending it to the intended receivers. Essentially, this framework establishes authenticated, private communication by using QKD over dedicated ultra-secure quantum links to distribute decryption keys, ensuring that only intended users can access the content. The approach is designed to ensure end-to-end secure communication across the network.
As quantum computing threatens to compromise classical cryptographic systems, the need for future-proof, information-theoretically secure methods of communication has become critical. Quantum Key Distribution (QKD) leverages the fundamental principles of quantum mechanics to enable the secure generation and exchange of encryption keys, immune to computational attacks. This paper investigates the integration of QKD into telecom infrastructures to enable ultra-secure communication. We examine the performance of key QKD protocols, such as BB84 and E91, over fiber-optic and free-space channels, and simulate their deployment within realistic metropolitan network topologies. Results show that secure key rates of up to 10 kbps can be maintained over 50–80 km fiber links with Quantum Bit Error Rates (QBER) below 5%. The study also explores architecture models based on trusted relay nodes and WDM coexistence, highlighting practical deployment considerations. Our findings suggest that QKD is a viable enhancement for telecom security and a necessary foundation for long-term quantum-resilient communication systems.