Key material plays a critical role in cryptography. Devices that are unable to generate high-quality keys are exposed to multiple vulnerabilities. In this work, we present an Entropy-as-a-Service (EaaS) architecture to address this problem. The proposed solution creates secure keys and sends them to a mobile application using a Quantum Random Number Generator (QRNG). Futhermore, our solution provides anonymity to the users who request a key while ensuring that the EaaS provider can still apply access control policies. Keys are sent via a quantum channel and received by the mobile application via NFC to ensure security. A certificate is generated with the key to authenticate the user in the application services. This certificate creates an identity separate from his real identity.
Key material plays a critical role in cryptography. Devices that are unable to generate high-quality keys are exposed to multiple vulnerabilities. In this work, we present an Entropy-as-a-Service (EaaS) architecture to address this problem. The proposed solution creates secure keys and sends them to a mobile application using a Quantum Random Number Generator (QRNG). Futhermore, our solution provides anonymity to the users who request a key while ensuring that the EaaS provider can still apply access control policies. Keys are sent via a quantum channel and received by the mobile application via NFC to ensure security. A certificate is generated with the key to authenticate the user in the application services. This certificate creates an identity separate from his real identity.
High-entropy random numbers are an essential part of cryptography, and Quantum Random Number Generators (QRNG) are an emergent technology that can provide high-quality keys for cryptographic algorithms but unfortunately are currently difficult to access. Existing Entropy-as-a-Service solutions require users to trust the central authority distributing the key material, which is not desirable in a high-privacy environment. In this paper, we present a novel key transmission protocol that allows users to obtain cryptographic material generated by a QRNG in such a way that the server is unable to identify which user is receiving each key. This is achieved with the inclusion of Zero Knowledge Succinct Non-interactive Arguments of Knowledge (zk-SNARK), a cryptographic primitive that allow users to prove knowledge of some value without needing to reveal it. The security analysis of the protocol proves that it satisfies the properties of Anonymity, Unforgeability and Confidentiality, as defined in this document. We also provide an implementation of the protocol demonstrating its functionality and performance, using NFC as the transmission channel for the QRNG key.
This work aims to make quantum-generated keys accessible to end users and integrate them into practical applications, enabling end-to-end secure communication across multiple interfaces. QKD and PQC are strategically implemented at various communication points to establish a unified, quantum-resistant cryptographic framework. QRNGs are central to this approach, generating high-entropy quantum keys and enabling their secure distribution without requiring specialised hardware. To address these objectives, an Entropy-as-a-Service architecture is introduced, providing end users with efficient and secure access to quantum key material. As a case study, this architecture is integrated into a group messaging application, showcasing its practicality and relevance for everyday communications.
As quantum technologies advance, the security of popular cryptographic protocols becomes more threatened by the capabilities of Cryptographically Relevant Quantum Computers (CRQCs). In this scenario, Post-Quantum Cryptography (PQC) has become a potential solution to prolong the life of existing Public Key Infrastructure (PKI) systems. However, PQC protocols depend on high-quality randomness for key generation and encapsulation procedures, with the quality of the entropy source potentially having a profound impact on the security of the overall system. In this work, we demonstrate a proof-of-concept enabling the incorporation of Quantum Random Number Generation (QRNG) devices within communication networks using PQC-based Transport Layer Security (TLS).Using open-source cryptographic libraries and commercial QRNG hardware, we demonstrate their use as entropy sources via an Entropy-as-a-Service (EaaS) model. We highlight two particular use cases: a fully virtualized private PKI network and a connection to an external PQC-enabled server. Experimental results show that EaaS QRNG enables real-time entropy monitoring and quality assessment in cryptographic management systems, with negligible impact on TLS handshake time.
One of the solutions to the problem of secure communication is the Quantum Random Number Generators (QRNGs) which generate true randomness based on quantum mechanical principles.QRNGs are different from conventional pseudo random number generator in that they use quantum uncertainty to generate outputs which are very unpredictable.This work attempts to examine different QRNG architectures, study the possible integration of cryptographic frameworks with these architectures and highlight potential vulnerabilities in the integration of cryptographic frameworks with QRNG architectures.Post-processing techniques, i.e.Zero-Phase Component Analysis (ZPCA) and neural network based techniques are also studied to increase entropy and suppress environmental noise in QRNG systems.Key findings show that system jitter models based QRNG architectures are more scalable and less expensive for use in real world applications.Additionally, incorporating cryptographic protocols with the QRNGs endows them with the ability to resist quantum threats, and hence, provide better key distribution in the secure IoT communication frameworks.However, as security problems such as side channel attacks and hardware manipulation are still big issues.It also points out some of the emerging research trends including hybrid QRNG architectures, i.e., QRNG with classical PRNG to increase the entropy rate.As such, the proposed methodologies attempt to enhance QRNG scalability, security, and energy efficiency in cloud infrastructures, in mobile systems and in critical security environments.The advancement of these technologies will assume a crucial function in the advancement of quantum-safe frames for current advanced computerized foundation.
Nowadays, instant messaging applications have become the main channel of communication between people. In response to demands of privacy by users, some applications have begun to incorporate end-to-end encryption to protect conversations. The Messaging Layer Security (MLS) is a recent protocol that offers end-to-end encryption designed for groups, providing both efficiency and security. In this work we develop a messaging application that uses MLS as the basis for secure communications between users. The application will use a peer-to-peer network to prevent messages from passing through servers that could store them and try to decrypt them. Furthermore, the cryptographic keys used will be generated by a Quantum Random Number Generator and accessed through an Entropy-as-a-Service platform.
This paper presents a lightweight secure appliance for database encryption and authentication, leveraging quantum random number generator (QRNG) keys. The appliance functions as an integrated and transparent layer between application servers and relational databases, enabling fine-grained, field-level encryption and access control without requiring changes to existing systems. By integrating lightweight symmetric encryption, mutual authentication with digital signatures and ephemeral key exchange, and true quantum entropy for all key material, the solution achieves strong data confidentiality and integrity with minimal computational overhead. The modular architecture is suitable for edge, embedded, and enterprise environments, and supports seamless upgrades to post-quantum cryptographic algorithms, ensuring long-term data security in the quantum era.