Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Optical Fiber Communication Conference

Quantum-safe 10 Gbps Site-to-Site IPsec VPN Tunnel over 46 km Deployed Fibre

Obada Alia, A. Huang, H. Luo, Omar Amer, Marco Pistoia, C. Lim

Published Jan 1, 2024• 8 citations
Publisher

Abstract

We successfully demonstrated a 10 Gbps QKD-secured IPsec VPN tunnel between two JPMorgan Chase datacenters in a metro network over 46 km of deployed telecom fiber with over 168 hours of continuous operation.
DOI
10.1364/ofc.2024.th3b.5

Related papers

100 Gbps Quantum-safe IPsec VPN Tunnels over 46 km Deployed Fiber

Obada Alia, Huang, Albert, Huan Luo +3 more

We demonstrated for the first time quantum-safe high-speed 100 Gbps site-to-site IPsec tunnels secured using Quantum Key Distribution (QKD) technology. The demonstration was conducted between two JPMorgan Chase Data Centers (DCs) in an air-gapped environment over 46 km of deployed telecom fiber across Singapore achieving 45 days of continuous operation. Two different Virtual Private Network (VPN) tunnel configurations were tested: (1) a QKD-secured VPN tunnel configuration with a maximum throughput of 80 Gbps and (2) a multi-VPN tunnel configuration exhibiting 12 QKD-secured VPN tunnels with a throughput of 8.39 Gbps per tunnel resulting in an aggregated throughput of 99.62 Gbps for all tunnels. For the QKD system performance, we achieved an average Secret Key Rate (SKR) of 7.4 kbps (about 29 AES-256 keys per second), an average Quantum Bit Error Rate (QBER) of 0.8% and an average visibility of 98.6%. We utilized the ETSI-QKD-014 REST-based Application Programming Interface (API) to exchange the QKD generated keys between the key management server in the QKD system and the next-generation firewalls in order to encrypt and decrypt the data. The data was encrypted by the quantum-safe keys using the AES-256-GCM cipher suite with a key refresh rate of 120 seconds without affecting the VPN tunnel connectivity and performance

arXiv:2405.04415•May 7, 2024•2 citations

Quantum-safe MACsec Connectivity to Public Cloud Providers in a Metropolitan Network over Deployed Fiber

Obada Alia, A. Huang, R. Lai +4 more

We successfully demonstrated a wire-rate 10 Gbps QKD-secured MACsec link between JPMorganChase datacenter and a major Cloud Service Provider (CSP) via dedicated network connection providing quantum-safe connectivity to the cloud without utilizing the public internet.

Optical Fiber Communication Conference•Jan 1, 2025•2 citations

Field Trial of Quantum-Secured IPsec Tunnels with Chip-based QKD

Philip Sibson, Jake Kennard, Tom Crabtree +9 more

We report a field trial of chip-based QKD over 28.5km of deployed G.652 fibre, integrated using RFC 8784 with Juniper routers, with concurrent IPsec tunnels consuming independent keys. This illustrates practical quantum-resilient transport layer communication.

Optical Fiber Communication Conference•Jan 1, 2024•3 citations

Multi-Domain IPsec Over MACsec QKD Field Deployed Demonstration

Alkinoos Papageorgopoulos, Konstantinos Tsimvrakidis, Nikolaos Makris +9 more

We experimentally demonstrate a field-deployed, multi-domain network combining Layer 3 IPsec over Layer 2 MACsec secured with Quantum Generated Keys. The system achieves stable long-duration operation, low latency, zero packet loss, and scalable quantum-safe key management across domains.

International Conference on Quantum Communications, Networking, and Computing (QCNC)•Apr 6, 2026•0 citations

VPN Service Provisioning via Virtual Router Deployment and Quantum Key Distribution

Alejandro Aguado, Vı́ctor López, Jesús Martínez-Mateo +3 more

Here we demonstrate, for the first time, VPN services integrated within a virtual router using QKD to perform encryption and authentication. Any management operation is also secured using QKD, providing a whole quantum-safe ecosystem.

Optical Fiber Communication Conference•Jan 1, 2018•7 citations

400-Gbps Coherent Transmission of 100-Gbps QKD-Secured Data Stream Over 184-km of Standard Single Mode Fiber Through Three QKD Links and Two Trusted Nodes

Erwan Pincemin, Paulette Gavignet, Fabrice Herviou +14 more

Security of data transported in telecommunication networks is of primary importance for internet service providers (ISP) as data safety is at the basis of the mutual trust with customers. People were looking for theoretically secure transmission techniques since a long-time to ensure long-term confidentiality of data flows exchanged on these networks. Besides advanced encryption algorithms and the recently proposed post-quantum cryptography (PQC), a physics-based technology using quantum key distribution (QKD) was proposed a long time ago to approach this objective. QKD recently gained a renewed interest with many research programs worldwide supported by public authorities, and some pre-industrial QKD systems delivered to the market. However, some constraints of optical transport networks make sometimes complicated the deployment of such QKD systems in the field, such as the need of a dedicated fiber infrastructure for QKD, or the impossibility for a quantum key to pass through an optical amplifier. In this paper, we report the transmission of a coherent 400-Gbps dual-polarization 16QAM channel that transports QKD-secured 100-GbEthernet data stream with other fifty-four WDM channels at 100-Gbps over 184-km of standard single mode fiber (SSMF) through three QKD links (of 66-km, 50-km and 66-km, respectively) and two trusted nodes. On the two longest sections of the link, the quantum key and WDM signals are propagated on two different fibers, while on the shortest section of 50-km the QKD signal and WDM comb co-propagate on a same fiber. Secret key rates (SKR) and quantum bit error rate (QBER) are measured and reported on each of the three fiber sections. Various analyses are carried out on the co-propagation section of 50-km: the SKR / QBER sensitivity to the optical power of the WDM comb, or to the optical signal-to-noise ratio (OSNR) of the WDM channels co-propagating with the quantum signal is studied. The unique arrangement of the most advanced QKD and WDM technologies reported here constitutes, in our opinion, a world first, and demonstrates that QKD and WDM solutions can coexist in already deployed optical transport networks.

Journal of Lightwave Technology•May 6, 2024•8 citations
We demonstrated for the first time quantum-safe high-speed 100 Gbps site-to-site IPsec tunnels secured using Quantum Key Distribution (QKD) technology. The demonstration was conducted between two JPMorgan Chase Data Centers (DCs) in an air-gapped environment over 46 km of deployed telecom fiber across Singapore achieving 45 days of continuous operation. Two different Virtual Private Network (VPN) tunnel configurations were tested: (1) a QKD-secured VPN tunnel configuration with a maximum throughput of 80 Gbps and (2) a multi-VPN tunnel configuration exhibiting 12 QKD-secured VPN tunnels with a throughput of 8.39 Gbps per tunnel resulting in an aggregated throughput of 99.62 Gbps for all tunnels. For the QKD system performance, we achieved an average Secret Key Rate (SKR) of 7.4 kbps (about 29 AES-256 keys per second), an average Quantum Bit Error Rate (QBER) of 0.8% and an average visibility of 98.6%. We utilized the ETSI-QKD-014 REST-based Application Programming Interface (API) to exchange the QKD generated keys between the key management server in the QKD system and the next-generation firewalls in order to encrypt and decrypt the data. The data was encrypted by the quantum-safe keys using the AES-256-GCM cipher suite with a key refresh rate of 120 seconds without affecting the VPN tunnel connectivity and performance
Security of data transported in telecommunication networks is of primary importance for internet service providers (ISP) as data safety is at the basis of the mutual trust with customers. People were looking for theoretically secure transmission techniques since a long-time to ensure long-term confidentiality of data flows exchanged on these networks. Besides advanced encryption algorithms and the recently proposed post-quantum cryptography (PQC), a physics-based technology using quantum key distribution (QKD) was proposed a long time ago to approach this objective. QKD recently gained a renewed interest with many research programs worldwide supported by public authorities, and some pre-industrial QKD systems delivered to the market. However, some constraints of optical transport networks make sometimes complicated the deployment of such QKD systems in the field, such as the need of a dedicated fiber infrastructure for QKD, or the impossibility for a quantum key to pass through an optical amplifier. In this paper, we report the transmission of a coherent 400-Gbps dual-polarization 16QAM channel that transports QKD-secured 100-GbEthernet data stream with other fifty-four WDM channels at 100-Gbps over 184-km of standard single mode fiber (SSMF) through three QKD links (of 66-km, 50-km and 66-km, respectively) and two trusted nodes. On the two longest sections of the link, the quantum key and WDM signals are propagated on two different fibers, while on the shortest section of 50-km the QKD signal and WDM comb co-propagate on a same fiber. Secret key rates (SKR) and quantum bit error rate (QBER) are measured and reported on each of the three fiber sections. Various analyses are carried out on the co-propagation section of 50-km: the SKR / QBER sensitivity to the optical power of the WDM comb, or to the optical signal-to-noise ratio (OSNR) of the WDM channels co-propagating with the quantum signal is studied. The unique arrangement of the most advanced QKD and WDM technologies reported here constitutes, in our opinion, a world first, and demonstrates that QKD and WDM solutions can coexist in already deployed optical transport networks.