Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

IACR Communications in Cryptology

AKE Protocol Combining PQC and QKD

Loïc Ferreira

Published Jan 8, 2026• 0 citations
Publisher

Abstract

With the advent of quantum computing, which threatens the very foundations of classical cryptography, several authenticated key exchange (AKE) protocols have been proposed, combining classical and post-quan­tum cryptographic algorithms, and a quantum key distribution (QKD) sub-protocol. The goal being to associate the claimed information theoretic security of QKD, and the security based upon computational assumptions of classical and post-quantum cryptography. To our knowledge, in existing security proofs of such hybrid AKE protocols, the QKD phase is treated as a black box and the impact of establishing the output quantum key appears similar as setting a symmetric key beforehand at the two communicating parties. In this paper, we describe an hybrid AKE protocol and a security model that captures multiple security properties. Our security analysis integrates the security loss induced by the QKD phase as well as that of implied by the classical and post-quantum cryptographic algorithms involved in the protocol.

DOI
10.62056/aesgsgbmo

Related papers

QKD Oracles for Authenticated Key Exchange

Kathrin Hövelmanns, Daan Planken, Christian Schaffner +1 more

Authenticated Key Exchange (AKE) establishes shared ('symmetric') cryptographic keys which are essential for secure online communication. AKE protocols can be constructed from public-key cryptography like Key Encapsulation Mechanisms (KEMs). Another approach is to use Quantum Key Distribution (QKD) to establish a symmetric key, which uses quantum communication. Combining post-quantum AKE and QKD appropriately may provide security against quantum attacks even if only one of the two approaches turns out to be secure. We provide an extensive review of existing security analyses for combined AKE and their formal security models, and identify some gaps in their treatment of QKD key IDs. In particular, improper handling of QKD key IDs leads to Dependent-Key attacks on AKE. As our main conceptual contribution, we model QKD as an oracle that closely resembles the standard ETSI 014 QKD interface. We demonstrate the usability of our QKD oracle for cryptographic security analyses by integrating it into a prominent security model for AKE, called CK+ model, thereby obtaining a security model for combined AKE that catches Dependent-Key attacks. In this model, we formally prove security of a new protocol that combines QKD with a triple-KEM handshake. This is the first provably secure hybrid protocol that maintains information-theoretic security of QKD.

arXiv:2509.12478•Sep 15, 2025•0 citations

Quantum Key Distribution in the Classical Authenticated Key Exchange Framework

Michele Mosca, Douglas Stebila, Berkant Ustaoğlu

Key establishment is a crucial primitive for building secure channels: in a multi-party setting, it allows two parties using only public authenticated communication to establish a secret session key which can be used to encrypt messages. But if the session key is compromised, the confidentiality of encrypted messages is typically compromised as well. Without quantum mechanics, key establishment can only be done under the assumption that some computational problem is hard. Since digital communication can be easily eavesdropped and recorded, it is important to consider the secrecy of information anticipating future algorithmic and computational discoveries which could break the secrecy of past keys, violating the secrecy of the confidential channel. Quantum key distribution (QKD) can be used generate secret keys that are secure against any future algorithmic or computational improvements. QKD protocols still require authentication of classical communication, however, which is most easily achieved using computationally secure digital signature schemes. It is generally considered folklore that QKD when used with computationally secure authentication is still secure against an unbounded adversary, provided the adversary did not break the authentication during the run of the protocol. We describe a security model for quantum key distribution based on traditional classical authenticated key exchange (AKE) security models. Using our model, we characterize the long-term security of the BB84 QKD protocol with computationally secure authentication against an eventually unbounded adversary. By basing our model on traditional AKE models, we can more readily compare the relative merits of various forms of QKD and existing classical AKE protocols. This comparison illustrates in which types of adversarial environments different quantum and classical key agreement protocols can be secure.

arXiv:1206.6150•Jun 27, 2012•2 citations

Quantum secure communication using hybrid post-quantum cryptography and quantum key distribution

Nick Aquina, Simon Rommel, Idelfonso Tafur Monroy

Once a cryptographically relevant quantum computer is built, confidential information that is communicated today can be decrypted and exposed. Key exchange methods currently used can then be broken and the key used to protect the data can be recovered. Depending on the duration for which information needs to remain confidential, quantum-safe solutions have to be used now to protect data transmitted today. In this paper, we review recent advances in integrating the combination of two different quantum-safe solutions, Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC), in existing protocols. We also combine classical cryptography, PQC and QKD to securely exchange a key that remains secure even if only one of the three key exchange methods is secure. This is one of the first steps to update existing communication methods such that they remain secure even if only one of PQC, QKD or classical cryptography is secure.

International Conference on Transparent Optical Networks•Jul 14, 2024•17 citations

Hybrid QKD and post-quantum cryptography in secure key exchange

Ivan Yavorov Smilenov

The advent of quantum computing poses a significant threat to classical cryptographic systems, necessitating the development of quantum-resistant alternatives. This thesis explores a hybrid key exchange framework combining Quantum Key Distribution (QKD) with Post-Quantum Cryptography (PQC) to secure classical post-processing steps such as information reconciliation and privacy amplification. Specifically, CRYSTALS-Kyber is used for key encapsulation, while CRYSTALS-Dilithium and SPHINCS+ provide digital signatures for authentication. While the mathematical security foundations of these algorithms are assumed, their integration is evaluated through performance benchmarking and system-level analysis. The results show that incorporating PQC-based authentication into QKD post-processing significantly improves resilience against quantum adversaries, while introducing only a reasonable computational and bandwidth overhead. This work contributes to the development of robust hybrid cryptographic systems capable of with standing both classical and quantum-era threats.

•Jun 17, 2025•0 citations

A PQC and QKD Hybridization for Quantum-Secure Communications

Dominik Marchsreiter, Johanna Sepúlveda

Large quantum computers will be able to break the cryptographic algorithms on which current secure communications rely on. Post-Quantum Cryptography (PQC) and Quantum key distribution (QKD) are two security technologies that show protection capabilities against the latent quantum threat. While PQC relies on different hard mathematical problems to develop a wide variety of cryptographic operations, QKD is based on quantum physics laws to generate and distribute symmetric cryptographic keys through different QKD protocols. These keys can be used by different applications to perform security transformations. QKD still requires authentication to prevent man-in-the-middle attacks. The hybridization of PQC and QKD is an important step for future secure infrastructures, being able to provide long-term security. In this work we propose authenticated QKD approaches that rely on pre-shared keys and hybrid PQC/QKD alternatives and which are able to securely exchange secret QKD keys through authenticated channels. We identify the different configuration alternatives and their parameters, as well as we develop a wide performance evaluation. Results show that pre-shared keys and PQC-based authentication through Dilithium algorithm are the fastest alternatives. Also, we show the potential of the T12 QKD protocol.

Euromicro Conference on Digital System Design (DSD)•Sep 6, 2023•16 citations

Quantum Cryptography and Key Distribution for Secure Communication in the Post Quantum World

Sai Srinivas Vellela, Pothuguntla Anusha, Nagagopi Raju Vullam +3 more

Quantum computing is posing a serious risk to classical cryptographic tools such as RSA and ECC as sophisticated quantum algorithms are able to crack their mathematical foundation in a time bound that is a a polynomial in the number of repetitions. In this paper, we will describe the process of integrating Post-Quantum Cryptography (PQC) and Quantum Key Distribution (QKD) into a hybrid approach to secure communications in the post-quantum world. The suggested methodology is a combination of the computational efficiency and scalability of PQC and the information-theoretic security and eavesdropping detection abilities of QKD. Simulation observations indicate that PQC-only systems are both faster in generating keys and scalable, but do not have a strong eavesdropping detection. On the other hand, non-conditional security is only a feature of systems based on QKD, but it is also highly overhead and slows down key rate. The hybrid PQC-Q KD model provides a balanced performance, high resilience, high authentication, high confidentiality, and realistic deployability. On balance, this discussion demonstrates that the hybrid approach is better than standalone methods and can provide a strong solution to protect against new quantum threats. The large-scale network protocol can be optimized, resources and further integration with other emerging technologies, such as 5G/6G, IoT or cloud computing, can be directed in future research.

International Conference on Sustainable Communication Networks and Application (ICSCNA)•Oct 15, 2025•2 citations
With the advent of quantum computing, which threatens the very foundations of classical cryptography, several authenticated key exchange (AKE) protocols have been proposed, combining classical and post-quan­tum cryptographic algorithms, and a quantum key distribution (QKD) sub-protocol. The goal being to associate the claimed information theoretic security of QKD, and the security based upon computational assumptions of classical and post-quantum cryptography. To our knowledge, in existing security proofs of such hybrid AKE protocols, the QKD phase is treated as a black box and the impact of establishing the output quantum key appears similar as setting a symmetric key beforehand at the two communicating parties. In this paper, we describe an hybrid AKE protocol and a security model that captures multiple security properties. Our security analysis integrates the security loss induced by the QKD phase as well as that of implied by the classical and post-quantum cryptographic algorithms involved in the protocol.
Authenticated Key Exchange (AKE) establishes shared ('symmetric') cryptographic keys which are essential for secure online communication. AKE protocols can be constructed from public-key cryptography like Key Encapsulation Mechanisms (KEMs). Another approach is to use Quantum Key Distribution (QKD) to establish a symmetric key, which uses quantum communication. Combining post-quantum AKE and QKD appropriately may provide security against quantum attacks even if only one of the two approaches turns out to be secure. We provide an extensive review of existing security analyses for combined AKE and their formal security models, and identify some gaps in their treatment of QKD key IDs. In particular, improper handling of QKD key IDs leads to Dependent-Key attacks on AKE. As our main conceptual contribution, we model QKD as an oracle that closely resembles the standard ETSI 014 QKD interface. We demonstrate the usability of our QKD oracle for cryptographic security analyses by integrating it into a prominent security model for AKE, called CK+ model, thereby obtaining a security model for combined AKE that catches Dependent-Key attacks. In this model, we formally prove security of a new protocol that combines QKD with a triple-KEM handshake. This is the first provably secure hybrid protocol that maintains information-theoretic security of QKD.
Key establishment is a crucial primitive for building secure channels: in a multi-party setting, it allows two parties using only public authenticated communication to establish a secret session key which can be used to encrypt messages. But if the session key is compromised, the confidentiality of encrypted messages is typically compromised as well. Without quantum mechanics, key establishment can only be done under the assumption that some computational problem is hard. Since digital communication can be easily eavesdropped and recorded, it is important to consider the secrecy of information anticipating future algorithmic and computational discoveries which could break the secrecy of past keys, violating the secrecy of the confidential channel. Quantum key distribution (QKD) can be used generate secret keys that are secure against any future algorithmic or computational improvements. QKD protocols still require authentication of classical communication, however, which is most easily achieved using computationally secure digital signature schemes. It is generally considered folklore that QKD when used with computationally secure authentication is still secure against an unbounded adversary, provided the adversary did not break the authentication during the run of the protocol. We describe a security model for quantum key distribution based on traditional classical authenticated key exchange (AKE) security models. Using our model, we characterize the long-term security of the BB84 QKD protocol with computationally secure authentication against an eventually unbounded adversary. By basing our model on traditional AKE models, we can more readily compare the relative merits of various forms of QKD and existing classical AKE protocols. This comparison illustrates in which types of adversarial environments different quantum and classical key agreement protocols can be secure.
Once a cryptographically relevant quantum computer is built, confidential information that is communicated today can be decrypted and exposed. Key exchange methods currently used can then be broken and the key used to protect the data can be recovered. Depending on the duration for which information needs to remain confidential, quantum-safe solutions have to be used now to protect data transmitted today. In this paper, we review recent advances in integrating the combination of two different quantum-safe solutions, Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC), in existing protocols. We also combine classical cryptography, PQC and QKD to securely exchange a key that remains secure even if only one of the three key exchange methods is secure. This is one of the first steps to update existing communication methods such that they remain secure even if only one of PQC, QKD or classical cryptography is secure.
The advent of quantum computing poses a significant threat to classical cryptographic systems, necessitating the development of quantum-resistant alternatives. This thesis explores a hybrid key exchange framework combining Quantum Key Distribution (QKD) with Post-Quantum Cryptography (PQC) to secure classical post-processing steps such as information reconciliation and privacy amplification. Specifically, CRYSTALS-Kyber is used for key encapsulation, while CRYSTALS-Dilithium and SPHINCS+ provide digital signatures for authentication. While the mathematical security foundations of these algorithms are assumed, their integration is evaluated through performance benchmarking and system-level analysis. The results show that incorporating PQC-based authentication into QKD post-processing significantly improves resilience against quantum adversaries, while introducing only a reasonable computational and bandwidth overhead. This work contributes to the development of robust hybrid cryptographic systems capable of with standing both classical and quantum-era threats.
Large quantum computers will be able to break the cryptographic algorithms on which current secure communications rely on. Post-Quantum Cryptography (PQC) and Quantum key distribution (QKD) are two security technologies that show protection capabilities against the latent quantum threat. While PQC relies on different hard mathematical problems to develop a wide variety of cryptographic operations, QKD is based on quantum physics laws to generate and distribute symmetric cryptographic keys through different QKD protocols. These keys can be used by different applications to perform security transformations. QKD still requires authentication to prevent man-in-the-middle attacks. The hybridization of PQC and QKD is an important step for future secure infrastructures, being able to provide long-term security. In this work we propose authenticated QKD approaches that rely on pre-shared keys and hybrid PQC/QKD alternatives and which are able to securely exchange secret QKD keys through authenticated channels. We identify the different configuration alternatives and their parameters, as well as we develop a wide performance evaluation. Results show that pre-shared keys and PQC-based authentication through Dilithium algorithm are the fastest alternatives. Also, we show the potential of the T12 QKD protocol.
Quantum computing is posing a serious risk to classical cryptographic tools such as RSA and ECC as sophisticated quantum algorithms are able to crack their mathematical foundation in a time bound that is a a polynomial in the number of repetitions. In this paper, we will describe the process of integrating Post-Quantum Cryptography (PQC) and Quantum Key Distribution (QKD) into a hybrid approach to secure communications in the post-quantum world. The suggested methodology is a combination of the computational efficiency and scalability of PQC and the information-theoretic security and eavesdropping detection abilities of QKD. Simulation observations indicate that PQC-only systems are both faster in generating keys and scalable, but do not have a strong eavesdropping detection. On the other hand, non-conditional security is only a feature of systems based on QKD, but it is also highly overhead and slows down key rate. The hybrid PQC-Q KD model provides a balanced performance, high resilience, high authentication, high confidentiality, and realistic deployability. On balance, this discussion demonstrates that the hybrid approach is better than standalone methods and can provide a strong solution to protect against new quantum threats. The large-scale network protocol can be optimized, resources and further integration with other emerging technologies, such as 5G/6G, IoT or cloud computing, can be directed in future research.