Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International Conference on Systems, Control and Communications (ICSCC)

Berlin OpenQKD Testbed Evaluating Quantum Key Distribution in Provider Networks

Ralf-Peter Braun, Michaela Ritter, Ronny Döring, Marc Geitz

Published Oct 20, 2023• 6 citations
Publisher

Abstract

Quantum Key Distribution technology is evaluated for carrier-grade provider networks in the Berlin OpenQKD testbed, which is operated by Deutsche Telekom. It includes the investigation of modular architectures, standardized interfaces and layered network structures containing quantum, key management, and application layers as well as hybrid technologies, consisting of Quantum Key Distribution and Post-Quantum Cryptography. The testbed incorporates field-installed wireline fiber links together with wireless radio connections, enabling carrier-grade use cases and proof of concepts under real telecommunication operating environments for various scenarios of layer interworking, vendor agnostic networking, and quantum security for network as well as end-to-end user applications.

DOI
10.1145/3634865.3634872

Related papers

The OpenQKD Testbed in Berlin

Ralf-Peter Braun, Marc Geitz

The Berlin OpenQKD Testbed demonstrates the integration of QKD technology into a field installed network infrastructure using a PQC secured key management system and hybrid key exchange protocols to secure communication applications.

Asia Communications and Photonics Conference•Jan 1, 2021•4 citations

Hybrid QKD & PQC Protocols implemented in the Berlin OpenQKD testbed

Marc Geitz, Ronny Döring, Ralf-Peter Braun

This paper introduces several hybrid protocols based on Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) implemented in the OpenQKD testbed Berlin to improve the security of the QKD nodes. Instead of following the ETSI QKD014 standard of a key management system based on classical security, i.e., RSA authentication and ECC encryption, we implemented a quantum-secure Key Management System based on PQC Key Encapsulation and Signature algorithms. The hardware and the software components of the QKD network authenticate themselves using a PQC trust chain and Pre-Shared Secrets, wherever supported. The communication between QKD nodes, as for the encryption key forwarding process, is hardened by Post-Quantum Cryptography to prevent cryptographic key exposure on intermediate network nodes. Using the two implemented key exchange processes, based on QKD and PQC, applications are able to request any kind of encryption key from the Key Management System and combine them arbitrarily to compute more reliable cryptographic keys.

International Conference on Frontiers of Signal Processing (ICFSP)•Oct 23, 2023•20 citations

DemoQuanDT: a carrier-grade QKD network

Peter Horoschenkoff, Johanna Henrich, R. Böhn +20 more

Quantum key distribution networks (QKDNs) enable secure communication even in the age of powerful quantum computers. In the hands of a network operator, which can offer its service to many users, the economic viability of a QKDN increases significantly. The highly challenging operator–user relationship in a large-scale network setting demands additional requirements to ensure carrier-grade operation. Addressing this challenge, this work presents a carrier-grade QKDN architecture, which combines the functional QKDN architecture with the operational perspective of a network operator, ultimately enhancing the economic viability of QKDNs. The focus is on the network and key management aspects of a QKDN while assuming state-of-the-art commercial QKD modules. The presented architecture was rolled out within an in-field demonstrator, connecting the cities of Berlin and Bonn over a link distance of 923 km across Germany. We could show that the proposed network architecture is feasible, integrable, and scalable, making it suitable for deployment in real-world networks. Overall, the presented carrier-grade QKDN architecture promises to serve as a blueprint for network operators providing QKD-based services to their customers.

arXiv:2503.21186•Journal of Optical Communications and Networking•Jul 1, 2025•7 citations

A Survey of Quantum Key Distribution Networks: Architectures, Hardware Platforms, and Control-Plane Integration

Hamza Korhan, Mert Bayraktar, Francesco Vista +3 more

Quantum Key Distribution (QKD) has progressed from a theoretical cryptographic concept to an emerging secure communication infrastructure technology. While early work focused on protocol security and physical-layer feasibility, current research increasingly addresses scalable network deployment, hardware acceleration, and integration with classical communication systems. As QKD expands from point-to-point links to metropolitan, backbone, and hybrid satellite–terrestrial networks, new engineering challenges arise in topology design, entropy generation, real-time key distillation, and multi-vendor interoperability. This survey provides an infrastructure-oriented review of QKD networks, examining architectural models, quantum randomness as a root of trust, FPGA and system-on-chip (SoC) based acceleration techniques, and programmable control-plane integration. Key management system architectures and standardized interfaces are analyzed to highlight their roles in enabling scalable, interoperable deployments. The paper also synthesizes major standardization efforts and deployment initiatives shaping carrier-grade QKD infrastructures. Finally, open engineering challenges, including scalability, control-plane integration, certification harmonization, and hybridization with post-quantum cryptography, are identified, positioning QKD as a foundational component of next-generation secure communication systems.

IEEE Access•Jan 1, 2026•0 citations

Quantum Data Encryption as a Service on Demand: Eindhoven QKD Network Testbed

Thiago R. Raddo, Simon Rommel, Victor Land +2 more

The widespread acceptance and deployment of quantum key distribution (QKD) for data encryption requires a better understanding of the technology concerning device-to-system interfacing and network performance from current vendors. Despite the existence of a few QKD testbeds worldwide, they are neither open-access nor capable of validating components from different system and component vendors business cases. User trials in testbeds have yet to yield a robust, open business case. This paper introduces the open-access QKD testbed currently being developed in the Eindhoven region which will focus on the creation of an open environment for end-to-end validation of distinct business cases, QKD security proofs, and technology certification and standardization. At this site, a quantum-to-the-home network scenario for providing quantum encryption as a service on demand, for end-to-end security to end-users, is also proposed. It is expected that this testbed will lead to a better understanding of what further developments are required for current networks to be augmented with QKD.

International Conference on Transparent Optical Networks•Jul 1, 2019•15 citations

Implementation of a Hybrid QKD/PQC Network and Applications

Christoph Döberl, Wolfgang Eibner, Hannes Hübel +7 more

The European Quantum Communication Infrastructure (EuroQCI) initiative is fostering the deployment of national quantum key distribution (QKD) testbeds across the European Union. In this context, we report on the design, implementation, and evaluation of the Austrian testbed, with a particular focus on advances in key management and applicationlevel integration of QKD. First, we introduce a hybrid key management system (KMS) that combines QKD-derived keys in a decentralized architecture with post-quantum authenticated key exchange, enabling end-to-end hybrid keys while reducing trust assumptions in intermediate nodes. Second, we present three QKD-enabled applications: (i) a secure secret-sharing-based storage system leveraging QKD-protected share distribution, (ii) a QKD-integrated extension of Jitsi employing ETSI GS QKD 014 group keys to reduce overhead in multi-party communication, and (iii) a hybrid QKD/PQC WireGuard-based VPN enabling QKD-secured HSM backup operations without requiring modifications to proprietary HSM protocols. Finally, we describe the deployment of these solutions in a national network comprising a four-node metropolitan testbed and a 200 km long-distance link with trusted nodes, and provide performance measurements for both the network and the hybrid KMS. Together, these results demonstrate the feasibility of integrating QKD into heterogeneous applications and hybrid cryptographic infrastructures.

International Conference on Quantum Communications, Networking, and Computing (QCNC)•Apr 6, 2026•0 citations
Quantum Key Distribution technology is evaluated for carrier-grade provider networks in the Berlin OpenQKD testbed, which is operated by Deutsche Telekom. It includes the investigation of modular architectures, standardized interfaces and layered network structures containing quantum, key management, and application layers as well as hybrid technologies, consisting of Quantum Key Distribution and Post-Quantum Cryptography. The testbed incorporates field-installed wireline fiber links together with wireless radio connections, enabling carrier-grade use cases and proof of concepts under real telecommunication operating environments for various scenarios of layer interworking, vendor agnostic networking, and quantum security for network as well as end-to-end user applications.
This paper introduces several hybrid protocols based on Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) implemented in the OpenQKD testbed Berlin to improve the security of the QKD nodes. Instead of following the ETSI QKD014 standard of a key management system based on classical security, i.e., RSA authentication and ECC encryption, we implemented a quantum-secure Key Management System based on PQC Key Encapsulation and Signature algorithms. The hardware and the software components of the QKD network authenticate themselves using a PQC trust chain and Pre-Shared Secrets, wherever supported. The communication between QKD nodes, as for the encryption key forwarding process, is hardened by Post-Quantum Cryptography to prevent cryptographic key exposure on intermediate network nodes. Using the two implemented key exchange processes, based on QKD and PQC, applications are able to request any kind of encryption key from the Key Management System and combine them arbitrarily to compute more reliable cryptographic keys.
Quantum key distribution networks (QKDNs) enable secure communication even in the age of powerful quantum computers. In the hands of a network operator, which can offer its service to many users, the economic viability of a QKDN increases significantly. The highly challenging operator–user relationship in a large-scale network setting demands additional requirements to ensure carrier-grade operation. Addressing this challenge, this work presents a carrier-grade QKDN architecture, which combines the functional QKDN architecture with the operational perspective of a network operator, ultimately enhancing the economic viability of QKDNs. The focus is on the network and key management aspects of a QKDN while assuming state-of-the-art commercial QKD modules. The presented architecture was rolled out within an in-field demonstrator, connecting the cities of Berlin and Bonn over a link distance of 923 km across Germany. We could show that the proposed network architecture is feasible, integrable, and scalable, making it suitable for deployment in real-world networks. Overall, the presented carrier-grade QKDN architecture promises to serve as a blueprint for network operators providing QKD-based services to their customers.
Quantum Key Distribution (QKD) has progressed from a theoretical cryptographic concept to an emerging secure communication infrastructure technology. While early work focused on protocol security and physical-layer feasibility, current research increasingly addresses scalable network deployment, hardware acceleration, and integration with classical communication systems. As QKD expands from point-to-point links to metropolitan, backbone, and hybrid satellite–terrestrial networks, new engineering challenges arise in topology design, entropy generation, real-time key distillation, and multi-vendor interoperability. This survey provides an infrastructure-oriented review of QKD networks, examining architectural models, quantum randomness as a root of trust, FPGA and system-on-chip (SoC) based acceleration techniques, and programmable control-plane integration. Key management system architectures and standardized interfaces are analyzed to highlight their roles in enabling scalable, interoperable deployments. The paper also synthesizes major standardization efforts and deployment initiatives shaping carrier-grade QKD infrastructures. Finally, open engineering challenges, including scalability, control-plane integration, certification harmonization, and hybridization with post-quantum cryptography, are identified, positioning QKD as a foundational component of next-generation secure communication systems.
The widespread acceptance and deployment of quantum key distribution (QKD) for data encryption requires a better understanding of the technology concerning device-to-system interfacing and network performance from current vendors. Despite the existence of a few QKD testbeds worldwide, they are neither open-access nor capable of validating components from different system and component vendors business cases. User trials in testbeds have yet to yield a robust, open business case. This paper introduces the open-access QKD testbed currently being developed in the Eindhoven region which will focus on the creation of an open environment for end-to-end validation of distinct business cases, QKD security proofs, and technology certification and standardization. At this site, a quantum-to-the-home network scenario for providing quantum encryption as a service on demand, for end-to-end security to end-users, is also proposed. It is expected that this testbed will lead to a better understanding of what further developments are required for current networks to be augmented with QKD.
The European Quantum Communication Infrastructure (EuroQCI) initiative is fostering the deployment of national quantum key distribution (QKD) testbeds across the European Union. In this context, we report on the design, implementation, and evaluation of the Austrian testbed, with a particular focus on advances in key management and applicationlevel integration of QKD. First, we introduce a hybrid key management system (KMS) that combines QKD-derived keys in a decentralized architecture with post-quantum authenticated key exchange, enabling end-to-end hybrid keys while reducing trust assumptions in intermediate nodes. Second, we present three QKD-enabled applications: (i) a secure secret-sharing-based storage system leveraging QKD-protected share distribution, (ii) a QKD-integrated extension of Jitsi employing ETSI GS QKD 014 group keys to reduce overhead in multi-party communication, and (iii) a hybrid QKD/PQC WireGuard-based VPN enabling QKD-secured HSM backup operations without requiring modifications to proprietary HSM protocols. Finally, we describe the deployment of these solutions in a national network comprising a four-node metropolitan testbed and a 200 km long-distance link with trusted nodes, and provide performance measurements for both the network and the hybrid KMS. Together, these results demonstrate the feasibility of integrating QKD into heterogeneous applications and hybrid cryptographic infrastructures.