Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International Conference on Transparent Optical Networks

Enabling PUF-based Authentication in QKD Networks

S. Tahir, Stella Civelli, Marco Ferrari, Luca Potì, Emilio Paolini, Pantea Nadimi Goki, Marco Brunero, Alberto Gatto, Nicola Andriolli, Alessio Giorgetti

Published Jul 6, 2025• 3 citations
Publisher

Abstract

Quantum key distribution (QKD) constitutes a paradigm shift in secure communications. As QKD moves from experimental to operational deployments in optical networks, the need for standardized, programmable, and vendor-neutral control frameworks becomes essential. This demo presents a modular and standards-compliant solution based on NETCONF/YANG framework aligned with ETSI standards, enabling dynamic configuration and monitoring of QKD nodes. A novel integration of physical unclonable functions is introduced, enabling node-level authentication required for quantum key exchange.

DOI
10.1109/icton67126.2025.11125408

Related papers

PU-QKD: Enhancing Authentication of Quantum Key Distribution via Physical Unclonable Function

Mieszko Ferens, Edlira Dushku, Simon Rommel +2 more

The rapid advances in quantum computing pressure the existing essential cryptographic algorithms. In this context, Quantum Key Distribution (QKD) has been proposed as a quantum safe solution for key distribution. However, current QKD systems require an authenticated classical channel which relies on pre-shared symmetric keys that are manually distributed and do not guarantee the identity of the hardware that hosts them. This paper proposes a novel scheme, the Physically Unclonable Quantum Key Distribution (PU-QKD) system, to intrinsically authenticate the communicating endpoints in QKD. The PU-QKD scheme leverages classical Physical Unclonable Functions (PUFs) to encode the data transmission in discrete variable QKD protocols (e.g., BB84). Our scheme maintains the information-theoretic security of QKD protocols by integrating the PUF as an additional layer. Authentication is bound to hardware, providing a robust fingerprint, while lower post-processing overhead increases key rates. Additionally, the proposed scheme is resilient against state-of-the-art PUF vulnerabilities, such as modeling attacks.

Globecom•Dec 8, 2025•2 citations

Unconditional Authentication in Quantum Key Distribution via Hybrid Entangled Physical Unclonable Functions

Nicolas Laurent-Puig, Mina Doosti, Adriano Innocenzi +1 more

Quantum Key Distribution (QKD) enables Information-Theoretically Secure (ITS) key exchange, robust even against future quantum computing threats. However, a fundamental limitation of QKD is the requirement for an authenticated classical channel, which necessitates a pre-shared secret key. In this work, we address this challenge by adopting a Hybrid Entangled Physical Unclonable Function (PUF) protocol for authentication. We demonstrate that this PUF-based method generates an ITS initial key under minimal explicit hardware assumptions. This approach allows us to experimentally perform a fully ITS-authenticated entanglement-based QKD protocol that relies solely on such assumptions, effectively eliminating the need for pre-shared secrets. This represents a significant step towards the practical realization of quantum network protocols using lightweight, readily available hardware assumptions, without weakening security guarantees.

quant-pharXiv:2605.04650•Physical Review Research•May 7, 2026•0 citations

Integrating QKD and classical optical networks: an SDN control approach

Emilio Paolini, Nicola Andriolli, Marco Brunero +4 more

This demo presents an SDN-based control framework for integrating Quantum Key Distri- bution (QKD) with classical optical networks. It addresses limitations of existing standards, enabling efficient and secure integration of QKD into communication networks. The framework advances the practical deployment of QKD technology in real-world scenarios.

IET conference proceedings.•Nov 13, 2023•3 citations

Advancing Security in Quantum-Enabled Optical Networks

A. Barreiro, R. Maes, Alex Alvarado +1 more

Quantum communication networks can improve long-term security, but they still depend on computational assumptions to authenticate devices, links, and network control. This work examines how SRAM-based physical unclonable functions can support authentication in quantum key distribution networks. Two roles are considered: authentication of the bootstrap exchange before QKD-derived keys are available, and the possible reuse of a shared forward-error-correction layer for both SRAM-PUF key reconstruction and continuous-variable QKD information reconciliation. These directions are then considered in the context of the QuCT NL testbed as a platform for in-field validation under realistic operating and adversarial conditions.

International Conference on Transparent Optical Networks•Jul 1, 2026•0 citations

Increasing Security by using quantum keys and physical unclonable functions

Andrade, Sebastian

Quantum Key Distribution (QKD) represents a groundbreaking advancement in the field of cryptography, leveraging the principles of quantum mechanics to establish secure communication channels. Unlike classical cryptographic methods, QKD promises theoretically unbreakable security by ensuring that any attempt at eavesdropping can be detected. This thesis explores the practical implementation, challenges, and comparative security of various QKD scenarios within modern network infrastructures. We specifically analyze the security implications of integrating QKD with Software-Defined Networking (SDN) and compare it against Quantum Random Number Generators (QRNG), Post-Quantum Cryptography (PQC), and Physical Unclonable Functions under different conditions, with the aim of providing a comprehensive evaluation of the strengths and vulnerabilities of each approach, guiding future developments in secure communication systems. After the analysis performed in this Master Thesis, we can safely conclude that the Quantum Key Distribution scenario is the ideal use case, having the highest overall security score. Meanwhile, the scenarios of QRNG and PQC are the closest to the ideal security when compared to QKD. Finally, while the PUF scenario has the lowest overall security score, it still presents better authentication features that can prove beneficial if combined with other scenarios.

•Jul 11, 2024•0 citations

A Multi-Level Quantum-Resistant Authentication Framework for Next-Generation Power Systems

Xin Jin, Lanlan Zhang, Yucheng Wang +3 more

The advent of large-scale quantum computing poses critical threats to classical public-key cryptography, raising urgent concerns for mission-critical infrastructures such as power systems. Existing authentication mechanisms—whether based on physical unclonable functions (PUFs), quantum key distribution (QKD), or post-quantum cryptography (PQC)—each offer unique advantages but also face limitations when deployed in isolation. This paper presents a multi-level quantum-resistant authentication methodology that systematically integrates PUF-based device identity, QKD-derived symmetric keys, and PQC-based primitives. To unify these heterogeneous sources, we design a structured session key fusion mechanism that incorporates entropy preprocessing, cross-layer validation tokens, forward-linked context binding, and dual key derivation functions (KDFs). The resulting session key is inseparably derived from all layers, eliminating single points of failure and enhancing defense against both classical and quantum adversaries. Compared with prior single-layer or loosely coupled approaches, the proposed design achieves defense-in-depth, practical scalability across edge and backbone infrastructures, and alignment with emerging cryptographic standards, providing a secure pathway for next-generation power communication systems.

International Symposium on Computer Engineering and Intelligent Communications (ISCEIC)•Nov 24, 2025•0 citations
Quantum key distribution (QKD) constitutes a paradigm shift in secure communications. As QKD moves from experimental to operational deployments in optical networks, the need for standardized, programmable, and vendor-neutral control frameworks becomes essential. This demo presents a modular and standards-compliant solution based on NETCONF/YANG framework aligned with ETSI standards, enabling dynamic configuration and monitoring of QKD nodes. A novel integration of physical unclonable functions is introduced, enabling node-level authentication required for quantum key exchange.
The rapid advances in quantum computing pressure the existing essential cryptographic algorithms. In this context, Quantum Key Distribution (QKD) has been proposed as a quantum safe solution for key distribution. However, current QKD systems require an authenticated classical channel which relies on pre-shared symmetric keys that are manually distributed and do not guarantee the identity of the hardware that hosts them. This paper proposes a novel scheme, the Physically Unclonable Quantum Key Distribution (PU-QKD) system, to intrinsically authenticate the communicating endpoints in QKD. The PU-QKD scheme leverages classical Physical Unclonable Functions (PUFs) to encode the data transmission in discrete variable QKD protocols (e.g., BB84). Our scheme maintains the information-theoretic security of QKD protocols by integrating the PUF as an additional layer. Authentication is bound to hardware, providing a robust fingerprint, while lower post-processing overhead increases key rates. Additionally, the proposed scheme is resilient against state-of-the-art PUF vulnerabilities, such as modeling attacks.
Quantum Key Distribution (QKD) enables Information-Theoretically Secure (ITS) key exchange, robust even against future quantum computing threats. However, a fundamental limitation of QKD is the requirement for an authenticated classical channel, which necessitates a pre-shared secret key. In this work, we address this challenge by adopting a Hybrid Entangled Physical Unclonable Function (PUF) protocol for authentication. We demonstrate that this PUF-based method generates an ITS initial key under minimal explicit hardware assumptions. This approach allows us to experimentally perform a fully ITS-authenticated entanglement-based QKD protocol that relies solely on such assumptions, effectively eliminating the need for pre-shared secrets. This represents a significant step towards the practical realization of quantum network protocols using lightweight, readily available hardware assumptions, without weakening security guarantees.
Quantum communication networks can improve long-term security, but they still depend on computational assumptions to authenticate devices, links, and network control. This work examines how SRAM-based physical unclonable functions can support authentication in quantum key distribution networks. Two roles are considered: authentication of the bootstrap exchange before QKD-derived keys are available, and the possible reuse of a shared forward-error-correction layer for both SRAM-PUF key reconstruction and continuous-variable QKD information reconciliation. These directions are then considered in the context of the QuCT NL testbed as a platform for in-field validation under realistic operating and adversarial conditions.
Quantum Key Distribution (QKD) represents a groundbreaking advancement in the field of cryptography, leveraging the principles of quantum mechanics to establish secure communication channels. Unlike classical cryptographic methods, QKD promises theoretically unbreakable security by ensuring that any attempt at eavesdropping can be detected. This thesis explores the practical implementation, challenges, and comparative security of various QKD scenarios within modern network infrastructures. We specifically analyze the security implications of integrating QKD with Software-Defined Networking (SDN) and compare it against Quantum Random Number Generators (QRNG), Post-Quantum Cryptography (PQC), and Physical Unclonable Functions under different conditions, with the aim of providing a comprehensive evaluation of the strengths and vulnerabilities of each approach, guiding future developments in secure communication systems. After the analysis performed in this Master Thesis, we can safely conclude that the Quantum Key Distribution scenario is the ideal use case, having the highest overall security score. Meanwhile, the scenarios of QRNG and PQC are the closest to the ideal security when compared to QKD. Finally, while the PUF scenario has the lowest overall security score, it still presents better authentication features that can prove beneficial if combined with other scenarios.
The advent of large-scale quantum computing poses critical threats to classical public-key cryptography, raising urgent concerns for mission-critical infrastructures such as power systems. Existing authentication mechanisms—whether based on physical unclonable functions (PUFs), quantum key distribution (QKD), or post-quantum cryptography (PQC)—each offer unique advantages but also face limitations when deployed in isolation. This paper presents a multi-level quantum-resistant authentication methodology that systematically integrates PUF-based device identity, QKD-derived symmetric keys, and PQC-based primitives. To unify these heterogeneous sources, we design a structured session key fusion mechanism that incorporates entropy preprocessing, cross-layer validation tokens, forward-linked context binding, and dual key derivation functions (KDFs). The resulting session key is inseparably derived from all layers, eliminating single points of failure and enhancing defense against both classical and quantum adversaries. Compared with prior single-layer or loosely coupled approaches, the proposed design achieves defense-in-depth, practical scalability across edge and backbone infrastructures, and alignment with emerging cryptographic standards, providing a secure pathway for next-generation power communication systems.