Optical Fiber Communication Conference

First Line-rate End-to-End Post-Quantum Encrypted Optical Fiber Link Using Data Processing Units (DPUs)

Abraham Cano Aguilera, Rana Abu Bakar, Faris Alhamed, Carlos Rubio García, José Luis Imaña, Idelfonso Tafur Monroy, Filippo Cugini, Juan José Vegas Olmos

Published Jan 1, 2024• 5 citations

Publisher

Abstract

We demonstrate the first 92.3-Gbits/s line-rate, end-to-end post-quantum cryptography optical fiber link based on HW accelerators and processing offloading.

DOI: 10.1364/ofc.2024.m1g.4

Related papers

In-line rate encrypted links using pre-shared post-quantum keys and DPUs

Abraham Cano Aguilera, Carlos Rubio García, Daniel Christian Lawo +3 more

The development of quantum computers poses a risk to the cryptographic algorithms utilized by current public key infrastructure (PKI). High performance computing (HPC), inter- and intra-datacenter communications, and governmental communications are particularly vulnerable to security attacks by quantum computers. In response, there are on-going efforts on implementing post-quantum cryptography (PQC) despite the considerable overhead involved in processing PQC encrypted data packets in comparison with their classical counterparts. This work aims to help with the transition to quantum resistant cryptographic schemes by means of providing a thorough experimental performance comparison of the four algorithms selected by the National Institute of Standards and Technology (NIST) for standardization when implemented in a data processing unit (DPU). The experiments are conducted at line-rate, demonstrating for the first time operation at almost 100 Gbit/s and hence suitability for high-capacity data center environments.

Scientific ReportsSep 11, 20248 citations

First Demonstration of 200 Gbps Regime Line-Rate Quantum-Secure MACsec Optical Links Using Commodity Hardware Offloads

Abraham Cano Aguilera, Carlos Rubio García, Daniel Christian Lawo +3 more

We demonstrate the first MACsec implementation at 196 Gbps over an end-to-end quantum-secure link using Quantum Key Distribution, Post-Quantum Cryptography, and Classical Cryptography with network offloads and hardware accelerators.

Optical Fiber Communication ConferenceJan 1, 20251 citation

91 1 Gbit/s Quantum-Resistant IPsec Programmable Encryptor

Carlos Rubio García, Abraham Cano, Juan José Vegas Olmos +2 more

We demonstrate the first D PU-based triple-hybrid IPsec tunnel that simultaneously integrates classical and post-quantum cryptography, and quantum key distribution, providing accelerated quantum-resistant communications operating at 91.1 Gbit/s line rate.

Optical Fiber Communication ConferenceJan 1, 20251 citation

Quantum-noise protected data encryption for WDM networks

Eric Corndorf, Gregory S. Kanter, Chuang Liang +1 more

We demonstrate quantum-noise protected data encryption over a 2OOkm optically amplified WDM fiber line at 650Mbps rate using off-the-shelf components. This demonstration paves the way for widespread deployment of quantum cryptography in WDM networks.

Conference on Lasers and Electro-OpticsMay 16, 20046 citations

Quantum communications: A practical perspective

Prem Kumar, Eric Corndorf, Chuang Liang +2 more

A practical quantum-noise protected data encryption system is demonstrated for WDM networks. Using off-the-shelf components, a data rate of 650 Mbps is achieved over a 200-km-long optically amplified WDM fiber line.

Frontiers in OpticsJan 1, 20040 citations

First end‐to‐end PQC protected DPU‐to‐DPU communications

Abraham Cano Aguilera, X. Arnal i Clemente, D.C. Lawo +2 more

Abstract The appearance of quantum computing in the short foreseeable future and its capability to break conventional cryptographic algorithms forces to change the paradigm of secure real‐time communications. Thus, government organizations, data centers, and enterprises among others are migrating their public key infrastructure towards using post‐quantum cryptography (PQC) algorithms in order to mitigate the security threats posed by quantum computers. This letter presents the first quantum resilient secure end‐to‐end communication link based on PQC algorithms operating between two data‐processing units DPU. Both data‐processing units employ on‐board ARM processors to perform the computationally expensive cryptographic building blocks—in that case CRYSTALS‐Kyber as a key encapsulation mechanism and CRYSTALS‐Dilithium for digital signature scheme in combination with advanced encryption standard with 256‐bit key.

Electronics LettersSep 1, 20238 citations