Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Optical Fiber Communication Conference

91 1 Gbit/s Quantum-Resistant IPsec Programmable Encryptor

Carlos Rubio García, Abraham Cano, Juan José Vegas Olmos, Simon Rommel, Idelfonso Tafur Monroy

Published Jan 1, 2025• 1 citation
Publisher

Abstract

We demonstrate the first D PU-based triple-hybrid IPsec tunnel that simultaneously integrates classical and post-quantum cryptography, and quantum key distribution, providing accelerated quantum-resistant communications operating at 91.1 Gbit/s line rate.
DOI
10.1364/ofc.2025.tu2d.3

Related papers

Future Data Centers: Hardware-Offloaded Post-Quantum Secure Optical IPsec Tunnel for Confidential AI Training

Daniel Christian Lawo, R. Abu Bakar, Abraham Cano Aguilera +4 more

We propose a 100 Gbit/s line rate post-quantum cryptography (PQC) secured IPsec tunnel for optical intra-data center confidential AI training. Our IPsec tunnel also provides mobile client confidential training AI PQC-secure with 0.486 Gbit/s speed.

•Jan 1, 2025•0 citations

A hybrid approach to address the transition to quantum-resistant cryptography in telecommunication environments

Javier Faba, Juan P. Brito, Josefina Cresta +5 more

The existence of a cryptographically relevant quantum computer threatens the widely used classical cryptosystems such as RSA, DSA, ECDH and ECDSA. In order to communicate securely when those types of quantum computers exist, it is necessary to use quantum-resistant cryptography, which includes quantum and post-quantum cryptography. However, classical cryptography is so embedded in our current technology that the transition to purely quantum-resistant cryptography is a highly complex task. A hybrid approach among classical, quantum and post-quantum cryptography is the safest way to face this challenge. In this paper, we describe our hybrid approach to secure the communications in a telecommunications environment. Concretely, we propose a hybridization module that can be easily integrated in telecommunication architectures. It will provide a symmetric quantum-resistant key to and agent that will establish a quantum-secure IPsec tunnel between endpoints. The security is based on quantum and post-quantum protocols, providing the IPsec tunnel with a double quantum-resistant security shell.

International Conference on Quantum Communications, Networking, and Computing (QCNC)•Mar 31, 2025•3 citations

Wireless and Fiber-Based Post-Quantum-Cryptography-Secured IPsec Tunnel

Daniel Christian Lawo, Rana Abu Bakar, Abraham Cano Aguilera +4 more

In the near future, commercially accessible quantum computers are anticipated to revolutionize the world as we know it. These advanced machines are predicted to render traditional cryptographic security measures, deeply ingrained in contemporary communication, obsolete. While symmetric cryptography methods like AES can withstand quantum assaults if key sizes are doubled compared to current standards, asymmetric cryptographic techniques, such as RSA, are vulnerable to compromise. Consequently, there is a pressing need to transition towards post-quantum cryptography (PQC) principles in order to safeguard our privacy effectively. A challenge is to include PQC into existing protocols and thus into the existing communication structure. In this work, we report on the first experimental IPsec tunnel secured by the PQC algorithms Falcon, Dilithium, and Kyber. We deploy our IPsec tunnel in two scenarios. The first scenario represents a high-performance data center environment where many machines are interconnected via high-speed networks. We achieve an IPsec tunnel with an AES-256 GCM encrypted east–west throughput of 100 Gbit/s line rate. The second scenario shows an IPsec tunnel between a wireless NVIDIA Jetson and the cloud that achieves a 0.486 Gbit/s AES-256 GCM encrypted north–south throughput. This case represents a mobile device that communicates securely with applications running in the cloud.

Future Internet•Aug 21, 2024•10 citations

In-line rate encrypted links using pre-shared post-quantum keys and DPUs

Abraham Cano Aguilera, Carlos Rubio García, Daniel Christian Lawo +3 more

The development of quantum computers poses a risk to the cryptographic algorithms utilized by current public key infrastructure (PKI). High performance computing (HPC), inter- and intra-datacenter communications, and governmental communications are particularly vulnerable to security attacks by quantum computers. In response, there are on-going efforts on implementing post-quantum cryptography (PQC) despite the considerable overhead involved in processing PQC encrypted data packets in comparison with their classical counterparts. This work aims to help with the transition to quantum resistant cryptographic schemes by means of providing a thorough experimental performance comparison of the four algorithms selected by the National Institute of Standards and Technology (NIST) for standardization when implemented in a data processing unit (DPU). The experiments are conducted at line-rate, demonstrating for the first time operation at almost 100 Gbit/s and hence suitability for high-capacity data center environments.

Scientific Reports•Sep 11, 2024•8 citations

First Line-rate End-to-End Post-Quantum Encrypted Optical Fiber Link Using Data Processing Units (DPUs)

Abraham Cano Aguilera, Rana Abu Bakar, Faris Alhamed +5 more

We demonstrate the first 92.3-Gbits/s line-rate, end-to-end post-quantum cryptography optical fiber link based on HW accelerators and processing offloading.

Optical Fiber Communication Conference•Jan 1, 2024•5 citations

Enhanced Network Security Protocols for the Quantum Era: Combining Classical and Post-Quantum Cryptography, and Quantum Key Distribution

Carlos Rubio García, Abraham Cano Aguilera, Catalina Stan +3 more

The emergence of quantum computing poses a threat to classical cryptography algorithms, necessitating a shift to quantum secure cryptography. Hybrid protocols combining at least one classical and one quantum-resistant cryptographic algorithm are becoming the standard for securing communications. In this work, we present our novel solution for integrating three different cryptographic assumptions (two of them quantumresistant) into hybrid network security protocols, ensuring that three different cryptographic assumptions must be broken before the protocol becomes vulnerable. Our solution allows for a seamless integration of classical and post-quantum (PQ) cryptography, and quantum key distribution (QKD) into existing network security protocols (e.g., TLS, IPsec) without any major modifications to the protocols themselves. This crypto-agility ensures the mitigation of some of the most well known challenges of both PQ cryptography and QKD. Our findings demonstrate the feasibility of such triple-hybrid network security protocols, showing non-substantial decrease in performance and almost no added packet overhead compared to state of the art protocols. In exchange, we pave the way towards next generation networks where the potential of new quantum-resistant cryptographic schemes can be leveraged in a dynamic and agile fashion, thus fostering a new era of unbreakable communication systems.

IEEE Journal on Selected Areas in Communications•May 13, 2025•37 citations
The existence of a cryptographically relevant quantum computer threatens the widely used classical cryptosystems such as RSA, DSA, ECDH and ECDSA. In order to communicate securely when those types of quantum computers exist, it is necessary to use quantum-resistant cryptography, which includes quantum and post-quantum cryptography. However, classical cryptography is so embedded in our current technology that the transition to purely quantum-resistant cryptography is a highly complex task. A hybrid approach among classical, quantum and post-quantum cryptography is the safest way to face this challenge. In this paper, we describe our hybrid approach to secure the communications in a telecommunications environment. Concretely, we propose a hybridization module that can be easily integrated in telecommunication architectures. It will provide a symmetric quantum-resistant key to and agent that will establish a quantum-secure IPsec tunnel between endpoints. The security is based on quantum and post-quantum protocols, providing the IPsec tunnel with a double quantum-resistant security shell.
In the near future, commercially accessible quantum computers are anticipated to revolutionize the world as we know it. These advanced machines are predicted to render traditional cryptographic security measures, deeply ingrained in contemporary communication, obsolete. While symmetric cryptography methods like AES can withstand quantum assaults if key sizes are doubled compared to current standards, asymmetric cryptographic techniques, such as RSA, are vulnerable to compromise. Consequently, there is a pressing need to transition towards post-quantum cryptography (PQC) principles in order to safeguard our privacy effectively. A challenge is to include PQC into existing protocols and thus into the existing communication structure. In this work, we report on the first experimental IPsec tunnel secured by the PQC algorithms Falcon, Dilithium, and Kyber. We deploy our IPsec tunnel in two scenarios. The first scenario represents a high-performance data center environment where many machines are interconnected via high-speed networks. We achieve an IPsec tunnel with an AES-256 GCM encrypted east–west throughput of 100 Gbit/s line rate. The second scenario shows an IPsec tunnel between a wireless NVIDIA Jetson and the cloud that achieves a 0.486 Gbit/s AES-256 GCM encrypted north–south throughput. This case represents a mobile device that communicates securely with applications running in the cloud.
The development of quantum computers poses a risk to the cryptographic algorithms utilized by current public key infrastructure (PKI). High performance computing (HPC), inter- and intra-datacenter communications, and governmental communications are particularly vulnerable to security attacks by quantum computers. In response, there are on-going efforts on implementing post-quantum cryptography (PQC) despite the considerable overhead involved in processing PQC encrypted data packets in comparison with their classical counterparts. This work aims to help with the transition to quantum resistant cryptographic schemes by means of providing a thorough experimental performance comparison of the four algorithms selected by the National Institute of Standards and Technology (NIST) for standardization when implemented in a data processing unit (DPU). The experiments are conducted at line-rate, demonstrating for the first time operation at almost 100 Gbit/s and hence suitability for high-capacity data center environments.
The emergence of quantum computing poses a threat to classical cryptography algorithms, necessitating a shift to quantum secure cryptography. Hybrid protocols combining at least one classical and one quantum-resistant cryptographic algorithm are becoming the standard for securing communications. In this work, we present our novel solution for integrating three different cryptographic assumptions (two of them quantumresistant) into hybrid network security protocols, ensuring that three different cryptographic assumptions must be broken before the protocol becomes vulnerable. Our solution allows for a seamless integration of classical and post-quantum (PQ) cryptography, and quantum key distribution (QKD) into existing network security protocols (e.g., TLS, IPsec) without any major modifications to the protocols themselves. This crypto-agility ensures the mitigation of some of the most well known challenges of both PQ cryptography and QKD. Our findings demonstrate the feasibility of such triple-hybrid network security protocols, showing non-substantial decrease in performance and almost no added packet overhead compared to state of the art protocols. In exchange, we pave the way towards next generation networks where the potential of new quantum-resistant cryptographic schemes can be leveraged in a dynamic and agile fashion, thus fostering a new era of unbreakable communication systems.