We propose a secure and scalable file-encryption scheme for cloud systems by integrating Post-Quantum Cryptography (PQC), Quantum Key Distribution (QKD), and Advanced Encryption Standard (AES) within a distributed architecture. While prior studies have primarily focused on secure key exchange or authentication protocols (e.g., layered PQC-QKD key distribution), our scheme extends beyond key management by implementing a distributed encryption architecture that protects large-scale files through integrated PQC, QKD, and AES. To support high-throughput encryption, our proposed scheme partitions the target file into fixed-size subsets and distributes them across slave nodes, each performing parallel AES encryption using a locally reconstructed key from a PQC ciphertext. Each slave node receives a PQC ciphertext that encapsulates the AES key, along with a PQC secret key masked using QKD based on the BB84 protocol, both of which are centrally generated and managed by the master node for secure coordination. In addition, an encryption and transmission pipeline is designed to overlap I/O, encryption, and communication, thereby reducing idle time and improving resource utilization. The master node performs centralized decryption by collecting encrypted subsets, recovering the AES key, and executing decryption in parallel. Our evaluation using a real-world medical dataset shows that the proposed scheme achieves up to 2.37× speedup in end-to-end runtime and up to 8.11× speedup in encryption time over AES (Original). In addition to performance gains, our proposed scheme maintains low communication cost, stable CPU utilization across distributed nodes, and negligible overhead from quantum key management.
We propose a secure and scalable file-encryption scheme for cloud systems by integrating Post-Quantum Cryptography (PQC), Quantum Key Distribution (QKD), and Advanced Encryption Standard (AES) within a distributed architecture. While prior studies have primarily focused on secure key exchange or authentication protocols (e.g., layered PQC-QKD key distribution), our scheme extends beyond key management by implementing a distributed encryption architecture that protects large-scale files through integrated PQC, QKD, and AES. To support high-throughput encryption, our proposed scheme partitions the target file into fixed-size subsets and distributes them across slave nodes, each performing parallel AES encryption using a locally reconstructed key from a PQC ciphertext. Each slave node receives a PQC ciphertext that encapsulates the AES key, along with a PQC secret key masked using QKD based on the BB84 protocol, both of which are centrally generated and managed by the master node for secure coordination. In addition, an encryption and transmission pipeline is designed to overlap I/O, encryption, and communication, thereby reducing idle time and improving resource utilization. The master node performs centralized decryption by collecting encrypted subsets, recovering the AES key, and executing decryption in parallel. Our evaluation using a real-world medical dataset shows that the proposed scheme achieves up to 2.37× speedup in end-to-end runtime and up to 8.11× speedup in encryption time over AES (Original). In addition to performance gains, our proposed scheme maintains low communication cost, stable CPU utilization across distributed nodes, and negligible overhead from quantum key management.
Recent developments in quantum-enhanced security have demonstrated encouraging promise for enhancing cloud computing environments' security. Utilizing quantum physics, in particular Quantum Key Distribution (QKD), provides a new method for generating cryptographic keys and improves cloud data transport security. The present study offers a thorough investigation of the integration of QKD with conventional encryption techniques, including Advanced Encryption Standard (AES), in order to tackle the dynamic cyber security scenario in cloud computing. The approach entails combining AES for encryption and decryption procedures and establishing a QKD layer within the cloud architecture to produce true quantum keys utilizing Quantum in Cloud technology. Data transmission security is greatly improved by the smooth integration of AES with QKD-generated keys, guaranteeing confidentiality, integrity, and authenticity. In addition, strong key management practices are put in place to handle cryptographic keys safely at every stage of their lifespan, reducing the possibility of unwanted access or interception. The suggested approach successfully addresses the difficulties presented by cyber threats by offering a robust and flexible means of enhancing security in cloud-based systems. Using both traditional and quantum encryption methods, this strategy provides a strong barrier against cyber-attacks, data leaks, and other security flaws. After 70 simulation rounds, the suggested strategy, which is implemented using the QKD-AES framework in Python software, achieved a data access rate of 820 MB/s. In addition to providing an accurate and quantitative assessment of the performance, this also exhibits a high data access rate attained under simulated conditions. At 15 milliseconds, the key generation time was achieved with efficiency, guaranteeing the quick creation of secure cryptographic keys in cloud environments. Overall, there is a lot of potential in using quantum-enhanced security techniques to protect sensitive data and guarantee the integrity of cloud computing infrastructures.
With quantum computing nearing cryptographically relevant capabilities, classical file transfer systems face significant vulnerabilities, necessitating quantum-resistant solutions. This paper presents a hybrid architecture for secure file transfer, integrating a simulated BB84 quantum key distribution (QKD) protocol with adaptive encryption to achieve post-quantum security. The system intelligently selects one-time pad (OTP) cryptography for files up to 1MB, ensuring perfect secrecy, and AES-256-GCM for larger files, balancing efficiency and integrity, both using quantum-derived keys. Implemented in a TCP-based client-server framework, it employs a quantum key management module to maintain a pool of secure keys, with real-time error detection for eavesdropping. Experimental evaluation demonstrates robust key generation (error rate < 1% without eavesdropping, ~ 15% with interception), reliable encryption, and efficient transfers on standard hardware, eliminating the need for specialized quantum devices. This scalable, software-based solution advances quantum-enhanced protection for distributed file-sharing environments, addressing the urgent demand for practical post-quantum security.
The speedy evolution of cyber threats is a serious threat to the protection of sensitive health information, with increasing threats from quantum computing. Conventional security does not keep up with evolving threats, and innovative solutions are needed. This paper introduces a secure hybrid cloud architecture that combines post-quantum cryptography (PQC), advanced hashing, and quantum key distribution (QKD) to authenticate further and protect data in healthcare systems. The primary mission is to generate an attack-resistant authentication process, robust data integrity assurance, and a functional system for key management with extensibility and regulation compliance. The considered infrastructure utilizes PQC-based robust encryption, robust hashing to authenticate data integrity, and QKD for providing secure key exchange augmented with multi-factor authentication. Implementing quantum-resistant protocols properly secures healthcare data in public and private cloud centers. Performance testing reveals a 99.6% overall success rate, 99.8% key exchange success, and 99.9% detection accuracy with QKD. PQC integration offers robust encryption, and advanced hashing techniques offer tamper-evident data integrity. The results establish the strong security, scalability, and quantum age cyber threat tolerance of the approach as a secure solution for guarding healthcare applications and delivering confidential, integrity-guaranteeing data protection.
To meet the performance and scalability demands of current cloud systems, cryptographic systems should be resistant to both quantum and classical adversaries, especially considering the future potential provided by quantum computing. The presented manuscript provides an integrated, quantum-resistant, cloud-based encryption architecture built on the combination of post-quantum authentication, scalable, multi-tenant, key-management methods, and side-channel-conscious design in a cloud-native paradigm. The lattice-based post-quantum key-encapsulation scheme to derive the long-lived and tenant-specific cryptographic key is built into the system to remove all possible single-point failure sources. Long-lived and tenant-specific cryptographic keys are subsequently replicated in a threshold-based key-management service (KMS) cluster. Lightweight symmetric primitives are used to compute session keys thus reducing client-side latency on resource-constrained devices. The AES -256-GCM or Ascon encryption schemes are deployed to guarantee confidentiality of data. Moreover, the architecture uses the symmetric message authentication codes and lattice-signature schemes produced using quantum-safe primitives to ensure the data integrity and authenticity. By distributing key computations across isolated KMS nodes and restricting direct use of long-lived secrets to bounded and infrequent operations, the implementation utilizes leakage-resilient techniques. The system, which is designed for elastic scalability, provides fine-grained access control through configurable lattice-based attribute-based encryption and dynamically allocates keys for new tenants. Experimental benchmarks show that the technique attains strong multi-tenant isolation and side-channel information leakage resistance while minimizing handshake latency by considerable amounts over per-session post-quantum exchanges. This model surmounts the shortcomings of current post-quantum, multi-tenant, and cloud-native security systems by integrating quantum-resistant cryptographical principles, distributed mechanisms for trust, and lightweight operational techniques and thus offers a practical and flexible solution for secure protection of sensitive cloud-hosted data in the future quantum era.
Cloud computing manifests exceptional capacity to facilitate easy to manage, cost effective, flexible and powerful resources across the internet. Due to maximum and shared utilization of utilization of resources, cloud computing enhances the capabilities of resources. There is a dire need for data security in the wake of the increasing capabilities of attackers and high magnitude of sensitive data. Cryptography is employed to ensure secrecy and authentication of data. Conventional information assurance methods are facing increasing technological advances such as radical developments in mathematics, potential to perform big computations and the prospects of wide-ranging quantum computations. Quantum cryptography is a promising solution towards absolute security in cryptosystems. This paper proposes integration of Advanced Encryption Standard (AES) algorithm with quantum cryptography. The proposed scheme is robust and meets essential security requirements. The simulation results show that the Quantum AES produces complex keys which are hard to predict by adversaries than the keys generated by the AES itself.
Cloud-native application ecosystems increasingly rely on large-scale microservices architectures composed of ephemeral containers, serverless functions, and service-mesh–enabled workloads that are dynamically instantiated and terminated. While Transport Layer Security (TLS) and classical public-key cryptographic mechanisms currently provide confidentiality and authentication for inter-service communication, these approaches are increasingly inadequate in the presence of emerging quantum computing capabilities. In particular, widely deployed algorithms such as RSA and elliptic curve cryptography (ECC) are vulnerable to quantum attacks, exposing long-lived secrets, archived data, and east–west service traffic to “harvest-now, decrypt-later” adversarial strategies. Moreover, existing encryption and key management solutions are not designed to provide true end-to-end encryption (E2EE) across highly dynamic microservices boundaries, nor do they adequately support crypto-agility in cloud-native environments. This paper proposes a scalable, quantum-resistant end-to-end encryption management framework tailored for cloud-native microservices ecosystems. The framework integrates post-quantum cryptographic (PQC) key exchange mechanisms with automated, policy-driven key lifecycle management to secure both data-in-motion and data-at-rest across heterogeneous deployment models. By decoupling cryptographic control planes from application logic and leveraging service identity–based trust establishment, the proposed approach enables seamless E2EE without disrupting microservice scalability or elasticity. Experimental evaluation conducted on a Kubernetes-based microservices testbed demonstrates that the framework achieves strong quantum-resilient security guarantees with manageable latency overhead, while supporting high-throughput service-to-service communication and rapid key rotation. The results indicate that quantum-resistant encryption can be practically integrated into modern cloud-native systems, providing a future-proof security foundation for next-generation distributed applications.