Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Optical Fiber Communication Conference

Quantum-safe MACsec Connectivity to Public Cloud Providers in a Metropolitan Network over Deployed Fiber

Obada Alia, A. Huang, R. Lai, Huan Luo, J. Goh, Marco Pistoia, Charles Ci Wen Lim

Published Jan 1, 2025• 2 citations
Publisher

Abstract

We successfully demonstrated a wire-rate 10 Gbps QKD-secured MACsec link between JPMorganChase datacenter and a major Cloud Service Provider (CSP) via dedicated network connection providing quantum-safe connectivity to the cloud without utilizing the public internet.
DOI
10.1364/ofc.2025.tu2d.1

Related papers

Quantum-safe 10 Gbps Site-to-Site IPsec VPN Tunnel over 46 km Deployed Fibre

Obada Alia, A. Huang, H. Luo +3 more

We successfully demonstrated a 10 Gbps QKD-secured IPsec VPN tunnel between two JPMorgan Chase datacenters in a metro network over 46 km of deployed telecom fiber with over 168 hours of continuous operation.

Optical Fiber Communication Conference•Jan 1, 2024•8 citations

100 Gbps Quantum-safe IPsec VPN Tunnels over 46 km Deployed Fiber

Obada Alia, Huang, Albert, Huan Luo +3 more

We demonstrated for the first time quantum-safe high-speed 100 Gbps site-to-site IPsec tunnels secured using Quantum Key Distribution (QKD) technology. The demonstration was conducted between two JPMorgan Chase Data Centers (DCs) in an air-gapped environment over 46 km of deployed telecom fiber across Singapore achieving 45 days of continuous operation. Two different Virtual Private Network (VPN) tunnel configurations were tested: (1) a QKD-secured VPN tunnel configuration with a maximum throughput of 80 Gbps and (2) a multi-VPN tunnel configuration exhibiting 12 QKD-secured VPN tunnels with a throughput of 8.39 Gbps per tunnel resulting in an aggregated throughput of 99.62 Gbps for all tunnels. For the QKD system performance, we achieved an average Secret Key Rate (SKR) of 7.4 kbps (about 29 AES-256 keys per second), an average Quantum Bit Error Rate (QBER) of 0.8% and an average visibility of 98.6%. We utilized the ETSI-QKD-014 REST-based Application Programming Interface (API) to exchange the QKD generated keys between the key management server in the QKD system and the next-generation firewalls in order to encrypt and decrypt the data. The data was encrypted by the quantum-safe keys using the AES-256-GCM cipher suite with a key refresh rate of 120 seconds without affecting the VPN tunnel connectivity and performance

arXiv:2405.04415•May 7, 2024•2 citations

First Demonstration of 200 Gbps Regime Line-Rate Quantum-Secure MACsec Optical Links Using Commodity Hardware Offloads

Abraham Cano Aguilera, Carlos Rubio García, Daniel Christian Lawo +3 more

We demonstrate the first MACsec implementation at 196 Gbps over an end-to-end quantum-secure link using Quantum Key Distribution, Post-Quantum Cryptography, and Classical Cryptography with network offloads and hardware accelerators.

Optical Fiber Communication Conference•Jan 1, 2025•1 citation

Deploying and validating a metropolitan QKD secure network: architecture and field performance

Claudia De Lazzari, Nicola Biagi, Damiano Giani +15 more

The advent of cryptographically relevant quantum computers poses an existential threat to classical public-key infrastructure. Quantum Key Distribution (QKD) addresses this challenge by providing information-theoretic security for key establishment, independently of any computational hardness assumption. In this work, the deployment and experimental validation of a metropolitan-scale quantum-secure network between data centers in Milan is reported. The network operates over installed fiber infrastructure and implements a layered architecture integrating QKD hardware, standards-compliant Key Management (KM), and centralized Software-Defined Networking (SDN) orchestration. Dynamic path reconfiguration via active optical switching and trusted-node routing allow automated fail-over solutions. Application-layer validation across diverse protocols and workloads confirms the seamless interoperability of all system components. These results establish the technical and operational readiness of metropolitan QKD networks for production deployment, and offer a replicable blueprint for building quantum-secure communication infrastructure at metropolitan scale.

quant-pharXiv:2607.11727•Jul 14, 2026•0 citations

Multi-Domain IPsec Over MACsec QKD Field Deployed Demonstration

Alkinoos Papageorgopoulos, Konstantinos Tsimvrakidis, Nikolaos Makris +9 more

We experimentally demonstrate a field-deployed, multi-domain network combining Layer 3 IPsec over Layer 2 MACsec secured with Quantum Generated Keys. The system achieves stable long-duration operation, low latency, zero packet loss, and scalable quantum-safe key management across domains.

International Conference on Quantum Communications, Networking, and Computing (QCNC)•Apr 6, 2026•0 citations

Bichromatic Quantum Teleportation of Weak Coherent Polarization States on a Metropolitan Fiber

Zofia A. Borowska, Shane Andrewski, Giorgio De Pascalis +12 more

As quantum technologies mature, telecommunication operators have a clear opportunity to unlock and scale new services by providing the connectivity layer that links quantum computers, sensors, clocks, and other quantum devices. Realizing this opportunity requires demonstrating quantum networking protocols, including quantum teleportation, under real-world conditions on existing telecom infrastructure. In this work, we demonstrate quantum teleportation over Deutsche Telekom's metropolitan fiber testbed in Berlin using commercial components deployed at the telecom datacenter. A local Bell-state measurement between 795 nm photons from a weak coherent source and from a bichromatic warm-atom entangled photon source enables conditional state transfer onto an O-band photon, which is transmitted through a 30-km field-deployed fiber loop under real-world environmental conditions. The teleported state is reconstructed after propagation via state tomography, achieving an average teleportation fidelity of 90\% on the deployed link. System performance is evaluated in both the absence and the presence of co-propagating C-band classical traffic within the same fiber, demonstrating compatibility with wavelength-division multiplexed telecom infrastructure carrying live data channels.

quant-pharXiv:2602.16613•Feb 19, 2026•2 citations
We demonstrated for the first time quantum-safe high-speed 100 Gbps site-to-site IPsec tunnels secured using Quantum Key Distribution (QKD) technology. The demonstration was conducted between two JPMorgan Chase Data Centers (DCs) in an air-gapped environment over 46 km of deployed telecom fiber across Singapore achieving 45 days of continuous operation. Two different Virtual Private Network (VPN) tunnel configurations were tested: (1) a QKD-secured VPN tunnel configuration with a maximum throughput of 80 Gbps and (2) a multi-VPN tunnel configuration exhibiting 12 QKD-secured VPN tunnels with a throughput of 8.39 Gbps per tunnel resulting in an aggregated throughput of 99.62 Gbps for all tunnels. For the QKD system performance, we achieved an average Secret Key Rate (SKR) of 7.4 kbps (about 29 AES-256 keys per second), an average Quantum Bit Error Rate (QBER) of 0.8% and an average visibility of 98.6%. We utilized the ETSI-QKD-014 REST-based Application Programming Interface (API) to exchange the QKD generated keys between the key management server in the QKD system and the next-generation firewalls in order to encrypt and decrypt the data. The data was encrypted by the quantum-safe keys using the AES-256-GCM cipher suite with a key refresh rate of 120 seconds without affecting the VPN tunnel connectivity and performance
The advent of cryptographically relevant quantum computers poses an existential threat to classical public-key infrastructure. Quantum Key Distribution (QKD) addresses this challenge by providing information-theoretic security for key establishment, independently of any computational hardness assumption. In this work, the deployment and experimental validation of a metropolitan-scale quantum-secure network between data centers in Milan is reported. The network operates over installed fiber infrastructure and implements a layered architecture integrating QKD hardware, standards-compliant Key Management (KM), and centralized Software-Defined Networking (SDN) orchestration. Dynamic path reconfiguration via active optical switching and trusted-node routing allow automated fail-over solutions. Application-layer validation across diverse protocols and workloads confirms the seamless interoperability of all system components. These results establish the technical and operational readiness of metropolitan QKD networks for production deployment, and offer a replicable blueprint for building quantum-secure communication infrastructure at metropolitan scale.
As quantum technologies mature, telecommunication operators have a clear opportunity to unlock and scale new services by providing the connectivity layer that links quantum computers, sensors, clocks, and other quantum devices. Realizing this opportunity requires demonstrating quantum networking protocols, including quantum teleportation, under real-world conditions on existing telecom infrastructure. In this work, we demonstrate quantum teleportation over Deutsche Telekom's metropolitan fiber testbed in Berlin using commercial components deployed at the telecom datacenter. A local Bell-state measurement between 795 nm photons from a weak coherent source and from a bichromatic warm-atom entangled photon source enables conditional state transfer onto an O-band photon, which is transmitted through a 30-km field-deployed fiber loop under real-world environmental conditions. The teleported state is reconstructed after propagation via state tomography, achieving an average teleportation fidelity of 90\% on the deployed link. System performance is evaluated in both the absence and the presence of co-propagating C-band classical traffic within the same fiber, demonstrating compatibility with wavelength-division multiplexed telecom infrastructure carrying live data channels.