A communication protocol for the distribution of cryptographic keys generated by a quantum random number generator (QRNG) has been developed by introducing a minor modification to Kerberos and using SRP as the authentication mechanism. The protocol, named Qerberos, allows two users to acquire the same symmetric key generated by a trusted third party with access to a QRNG, whose keys have higher entropy than a classical generator. An implementation that employs two different Q RN Gs has been tested for different parameters achieving good performance and short request times.
A communication protocol for the distribution of cryptographic keys generated by a quantum random number generator (QRNG) has been developed by introducing a minor modification to Kerberos and using SRP as the authentication mechanism. The protocol, named Qerberos, allows two users to acquire the same symmetric key generated by a trusted third party with access to a QRNG, whose keys have higher entropy than a classical generator. An implementation that employs two different Q RN Gs has been tested for different parameters achieving good performance and short request times.
Quantum Key Distribution (QKD) protocols, such as BB84, require secure authentication of their classical communication channel to ensure message integrity and authenticity, which is fundamental to successfully distribute unconditionally secure keys and prevent critical vulnerabilities. Traditionally, QKD relies on pre-shared secret keys for this authentication, posing significant scalability challenges. Employing asymmetric encryption methods is also not a viable alternative, as these methods are either vulnerable to quantum computing attacks or lack rigorous security proofs. To address these issues, we propose using the well-established Kerberos authentication protocol, which relies on symmetric cryptography inherently resistant to known quantum attacks, to securely distribute symmetric session keys that authenticate classical communication in QKD systems. We demonstrate the feasibility and practical security advantages of employing Kerberos-generated session keys, inherently resistant to quantum computing attacks, without modifying existing Kerberos workflows, providing a practical quantum-secure solution that leverages existing IT infrastructure.
Secure communication has become essential due to the rapid increase in cyber-attacks and data security threats in modern networks. Traditional communication systems mainly rely on classical security methods, which may become vulnerable to advanced attacks. Quantum Key Distribution (QKD) improves secure communication by generating cryptographic keys using quantum principles, making key interception extremely difficult. In this work, a Quantum Random Number Generator (QRNG) is integrated with classical communication to develop a hybrid quantum-classical communication framework. The QRNG generates highly random bits that improve authentication, randomness, and key security. The proposed system compares three QKD protocols: BB84, B92, and E91 using different bit sizes of 8000, 10000, and 13000 bits. The protocols are evaluated using important metrics such as QBER, key rate, entropy, erasure rate, throughput, and correlation. Experimental results show that all protocols achieved entropy values close to 1 and correlation values near zero, indicating strong randomness and secure key generation. Among the evaluated protocols, E91 achieved lower QBER values and higher key rates, while BB84 showed stable and reliable performance. B92 produced comparatively higher error rates under similar conditions. The throughput remained nearly 278–281 bits/sec across all experiments. A ranking-based analysis confirmed that E91 provides the best balance between security, efficiency, and communication performance, making it suitable for future quantum-secure communication systems.
Currently many symmetric key cryptographic tools which are known to be quantum-safe. They all share Secret symmetric keys through an untrusted medium which is usually done with public key methods which are prone to quantum attacks. One among the recommended solutions to the key distribution problem is Quantum Key Distribution (QKD). QKD utilizes an authenticated Communication channel along with a quantum communication channel so that a secret key is generated. Whatever may be the protocol to implement proposed QKD, they all need both a quantum channel, and an authenticated classical. OTP (One Time Pad) is used when two parties wish to communications have to share a key called pad. This pad is a randomly generated key and the length of the key should be equal to the message so it can be sent. The proposed QKD parameters that result in almost 35.67% smaller keys for quantum security and an implementation of QKD in network which is publicly available and usable in practice.
Secure Information exchange in the present times is a very crucial process. Introduction to a secure quantum paradigm by utilizing the principle of quantum physics and quantum mechanics achieves this secrecy. To ensure secure cryptography, E91 is used for Quantum Key Distribution (QKD) along with the integration of Quantum Random Number Generator (QRNG) for unpredictable assignment of basis. The E91 protocol leverages the Bell’s inequality along with the quantum entanglement for secure exchange of secret keys between the two parties also utilising correlation checks to identify eavesdroppers. Integrating a QRNG with the E91 QKD protocol framework provides secure, unpredictable keys by leveraging genuine random numbers derived from the inherent randomness of quantum superposition. IBM’s Qiskit simulations confirm the security of the key exchange process along with the evaluation of the Quantum Bit Error Rate (QBER) and S Value to evaluate overall communication reliability.
In the ever-evolving field of cybersecurity, randomness plays a critical role in cryptographic systems. Traditional pseudo-random number generators, while widely used, can be vulnerable to attacks due to their deterministic nature. This paper explores the integration of quantum randomness into SSH authentication by utilizing a Quantum Random Number Generator (QRNG) to enhance key generation across various asymmetric cryptographic algorithms, specifically RSA, ECDSA, and EdDSA. Quantum-generated randomness offers a higher level of unpredictability, strengthening the security of cryptographic keys. We propose a method to generate keys using quantum random bits, hash them using SHA-256, and secure them for SSH authentication. The generated keys are evaluated for security improvements over conventional methods, and the performance of SSH authentication is analyzed. The results demonstrate that incorporating quantum randomness into key generation increases the cryptographic strength of the keys, offering a more robust defense against potential cryptanalytic attacks, while maintaining compatibility with existing SSH protocols. This approach signifies a step forward in leveraging quantum technologies to enhance network communication security.
High-entropy random numbers are an essential part of cryptography, and Quantum Random Number Generators (QRNG) are an emergent technology that can provide high-quality keys for cryptographic algorithms but unfortunately are currently difficult to access. Existing Entropy-as-a-Service solutions require users to trust the central authority distributing the key material, which is not desirable in a high-privacy environment. In this paper, we present a novel key transmission protocol that allows users to obtain cryptographic material generated by a QRNG in such a way that the server is unable to identify which user is receiving each key. This is achieved with the inclusion of Zero Knowledge Succinct Non-interactive Arguments of Knowledge (zk-SNARK), a cryptographic primitive that allow users to prove knowledge of some value without needing to reveal it. The security analysis of the protocol proves that it satisfies the properties of Anonymity, Unforgeability and Confidentiality, as defined in this document. We also provide an implementation of the protocol demonstrating its functionality and performance, using NFC as the transmission channel for the QRNG key.