Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

IEEE Consumer Communications and Networking Conference

Kerberos-Authenticated Classical Channel for Quantum Key Distribution: A Symmetric-Key Approach to Quantum-Safe Authentication

Hannes Künstner, Ashutosh Dhar Dwivedi, Jens Myrup Pedersen

Published Jan 9, 2026• 0 citations
Publisher

Abstract

Quantum Key Distribution (QKD) protocols, such as BB84, require secure authentication of their classical communication channel to ensure message integrity and authenticity, which is fundamental to successfully distribute unconditionally secure keys and prevent critical vulnerabilities. Traditionally, QKD relies on pre-shared secret keys for this authentication, posing significant scalability challenges. Employing asymmetric encryption methods is also not a viable alternative, as these methods are either vulnerable to quantum computing attacks or lack rigorous security proofs. To address these issues, we propose using the well-established Kerberos authentication protocol, which relies on symmetric cryptography inherently resistant to known quantum attacks, to securely distribute symmetric session keys that authenticate classical communication in QKD systems. We demonstrate the feasibility and practical security advantages of employing Kerberos-generated session keys, inherently resistant to quantum computing attacks, without modifying existing Kerberos workflows, providing a practical quantum-secure solution that leverages existing IT infrastructure.

DOI
10.1109/ccnc65079.2026.11366285

Related papers

Quantum Key Distribution (QKD) for Symmetric Key Transfer

Asoke Nath, Shreya Maity, Soham Banerjee +1 more

Classical cryptographic systems are increasingly challenged by advances in computing power and new algorithmic techniques, particularly with the rise of quantum computing, which threatens the security of current encryption methods. This has spurred interest in quantum-resistant cryptography, aimed at creating algorithms that can withstand attacks from quantum computers. Traditionally, secure key transport over alternate channels has been a significant challenge, but quantum mechanics offers a solution. Quantum Key Distribution (QKD) is a revolutionary method for secure communication that leverages quantum principles. Unlike traditional methods, QKD provides unconditional security, with key security ensured by the laws of physics rather than computational difficulty. The BB84 protocol, introduced in 1984 by Bennett and Brassard, is a leading QKD scheme known for its simplicity and effectiveness in generating eavesdropping-resistant cryptographic keys. It facilitates secure key transport over alternate channels. This documentation aims to advance QKD security by practically implementing and analyzing the BB84 protocol. Through detailed theoretical analysis, simulation studies, and experimental validation, the practical impacts, and limitations of BB84-based QKD systems are examined. Additionally, a practical implementation of quantum key distribution using a sudoku key demonstrates the process's simplicity and effectiveness. These findings are expected to pave new paths in the field of cryptanalysis in the emerging Quantum Age.

International Journal of Scientific Research in Computer Science Engineering and Information Technology•May 15, 2024•2 citations

Quantum Key Distribution Protocols with Classical Authentication

Jincheng Zhang

Quantum Key Distribution (QKD) offers theoretically unbreakable key exchange, but is vulnerable to man-in-the-middle attacks if the identities of the communicating parties are not rigorously verified. This paper proposes a novel QKD protocol integrating classical authentication to provide a layered security approach. The core concept involves utilizing a QKD system alongside a robust classical authentication mechanism. This layered approach significantly reduces the risk of successful attacks by ensuring that both parties are who they claim to be before key exchange occurs. The protocol's security relies on the assumption that the classical authentication system is itself secure. We detail the protocol's components, focusing on the integration of Bennett-Brassard (BB84) or a similar QKD scheme with a practical authentication protocol, and analyze its security properties. The proposed system is designed to mitigate the threats posed by adversaries who can intercept and manipulate the quantum key exchange without compromising the authentication process. The potential for improved security and resilience is demonstrated, representing a significant advancement in the practical application of QKD.

•Sep 3, 2026•0 citations

An Efficient Algorithm on Quantum Computing With Quantum Key Distribution for Secure Communication

Ganapathy Senthil Murugan

Currently many symmetric key cryptographic tools which are known to be quantum-safe. They all share Secret symmetric keys through an untrusted medium which is usually done with public key methods which are prone to quantum attacks. One among the recommended solutions to the key distribution problem is Quantum Key Distribution (QKD). QKD utilizes an authenticated Communication channel along with a quantum communication channel so that a secret key is generated. Whatever may be the protocol to implement proposed QKD, they all need both a quantum channel, and an authenticated classical. OTP (One Time Pad) is used when two parties wish to communications have to share a key called pad. This pad is a randomly generated key and the length of the key should be equal to the message so it can be sent. The proposed QKD parameters that result in almost 35.67% smaller keys for quantum security and an implementation of QKD in network which is publicly available and usable in practice.

International journal of communication•May 14, 2020•2 citations

PU-QKD: Enhancing Authentication of Quantum Key Distribution via Physical Unclonable Function

Mieszko Ferens, Edlira Dushku, Simon Rommel +2 more

The rapid advances in quantum computing pressure the existing essential cryptographic algorithms. In this context, Quantum Key Distribution (QKD) has been proposed as a quantum safe solution for key distribution. However, current QKD systems require an authenticated classical channel which relies on pre-shared symmetric keys that are manually distributed and do not guarantee the identity of the hardware that hosts them. This paper proposes a novel scheme, the Physically Unclonable Quantum Key Distribution (PU-QKD) system, to intrinsically authenticate the communicating endpoints in QKD. The PU-QKD scheme leverages classical Physical Unclonable Functions (PUFs) to encode the data transmission in discrete variable QKD protocols (e.g., BB84). Our scheme maintains the information-theoretic security of QKD protocols by integrating the PUF as an additional layer. Authentication is bound to hardware, providing a robust fingerprint, while lower post-processing overhead increases key rates. Additionally, the proposed scheme is resilient against state-of-the-art PUF vulnerabilities, such as modeling attacks.

Globecom•Dec 8, 2025•2 citations

Unconditionally Secure Authentication in Quantum Key Distribution

Sufyan T. F. Al-Janabi

Quantum key distribution (QKD) is a method using some properties of quantum mechanics to create a secret shared cryptographic key even if an eavesdropper has access to unlimited computational power. All QKD protocols require that the parties have access to an authentic channel. Otherwise, QKD is vulnerable to man-in-themiddle attacks. This paper studies QKD from this point of view, emphasizing the necessity and sufficiency of using unconditionally secure authentication in QKD. In this work, a hybrid unconditionally secure authentication strategy is proposed for QKD protocols. It is based on a mixture of normal application of authentication codes and the so-called "counter-based" authentication method such that to achieve a better trade off between security and efficiency (in terms of the required size of initially shared secret data). Based on this strategy, a complete authenticated QKD protocol is described for a specific implementation of the well-known BB84 protocol. Some advantages of our protocol in comparison to other proposals are also highlighted.

Anbar journal for engineering sciences/Mağallaẗ al-anbār li-l-ʻulūm al-handasiyyaẗ•Dec 1, 2006•0 citations

Unconditionally Secure Authentication in Quantum Key Distribution

Sufyan T. F. Al-Janabi

Quantum key distribution (QKD) is a method using some properties of quantum mechanics to create a secret shared cryptographic key even if an eavesdropper has access to unlimited computational power. All QKD protocols require that the parties have access to an authentic channel. Otherwise, QKD is vulnerable to man-in-the-middle attacks. This paper studies QKD from this point of view, emphasizing the necessity and sufficiency of using unconditionally secure authentication in QKD. In this work, a new technique of using unconditionally secure authentication is proposed for quantum cryptosystems. This technique is based on a hybrid of normal application of authentication codes and the so-called “counter-based” authentication method such that to achieve a better trade-off between security and efficiency (in terms of the required size of initially shared secret data). Based on this strategy, an authenticated version of a typical QKD protocol (the well-known BB84 protocol) is described. Some advantages of our protocol in comparison to other proposals are also highlighted.

i-manager’s Journal on Software Engineering•Mar 15, 2007•4 citations
Quantum Key Distribution (QKD) protocols, such as BB84, require secure authentication of their classical communication channel to ensure message integrity and authenticity, which is fundamental to successfully distribute unconditionally secure keys and prevent critical vulnerabilities. Traditionally, QKD relies on pre-shared secret keys for this authentication, posing significant scalability challenges. Employing asymmetric encryption methods is also not a viable alternative, as these methods are either vulnerable to quantum computing attacks or lack rigorous security proofs. To address these issues, we propose using the well-established Kerberos authentication protocol, which relies on symmetric cryptography inherently resistant to known quantum attacks, to securely distribute symmetric session keys that authenticate classical communication in QKD systems. We demonstrate the feasibility and practical security advantages of employing Kerberos-generated session keys, inherently resistant to quantum computing attacks, without modifying existing Kerberos workflows, providing a practical quantum-secure solution that leverages existing IT infrastructure.
Classical cryptographic systems are increasingly challenged by advances in computing power and new algorithmic techniques, particularly with the rise of quantum computing, which threatens the security of current encryption methods. This has spurred interest in quantum-resistant cryptography, aimed at creating algorithms that can withstand attacks from quantum computers. Traditionally, secure key transport over alternate channels has been a significant challenge, but quantum mechanics offers a solution. Quantum Key Distribution (QKD) is a revolutionary method for secure communication that leverages quantum principles. Unlike traditional methods, QKD provides unconditional security, with key security ensured by the laws of physics rather than computational difficulty. The BB84 protocol, introduced in 1984 by Bennett and Brassard, is a leading QKD scheme known for its simplicity and effectiveness in generating eavesdropping-resistant cryptographic keys. It facilitates secure key transport over alternate channels. This documentation aims to advance QKD security by practically implementing and analyzing the BB84 protocol. Through detailed theoretical analysis, simulation studies, and experimental validation, the practical impacts, and limitations of BB84-based QKD systems are examined. Additionally, a practical implementation of quantum key distribution using a sudoku key demonstrates the process's simplicity and effectiveness. These findings are expected to pave new paths in the field of cryptanalysis in the emerging Quantum Age.
Quantum Key Distribution (QKD) offers theoretically unbreakable key exchange, but is vulnerable to man-in-the-middle attacks if the identities of the communicating parties are not rigorously verified. This paper proposes a novel QKD protocol integrating classical authentication to provide a layered security approach. The core concept involves utilizing a QKD system alongside a robust classical authentication mechanism. This layered approach significantly reduces the risk of successful attacks by ensuring that both parties are who they claim to be before key exchange occurs. The protocol's security relies on the assumption that the classical authentication system is itself secure. We detail the protocol's components, focusing on the integration of Bennett-Brassard (BB84) or a similar QKD scheme with a practical authentication protocol, and analyze its security properties. The proposed system is designed to mitigate the threats posed by adversaries who can intercept and manipulate the quantum key exchange without compromising the authentication process. The potential for improved security and resilience is demonstrated, representing a significant advancement in the practical application of QKD.
Currently many symmetric key cryptographic tools which are known to be quantum-safe. They all share Secret symmetric keys through an untrusted medium which is usually done with public key methods which are prone to quantum attacks. One among the recommended solutions to the key distribution problem is Quantum Key Distribution (QKD). QKD utilizes an authenticated Communication channel along with a quantum communication channel so that a secret key is generated. Whatever may be the protocol to implement proposed QKD, they all need both a quantum channel, and an authenticated classical. OTP (One Time Pad) is used when two parties wish to communications have to share a key called pad. This pad is a randomly generated key and the length of the key should be equal to the message so it can be sent. The proposed QKD parameters that result in almost 35.67% smaller keys for quantum security and an implementation of QKD in network which is publicly available and usable in practice.
The rapid advances in quantum computing pressure the existing essential cryptographic algorithms. In this context, Quantum Key Distribution (QKD) has been proposed as a quantum safe solution for key distribution. However, current QKD systems require an authenticated classical channel which relies on pre-shared symmetric keys that are manually distributed and do not guarantee the identity of the hardware that hosts them. This paper proposes a novel scheme, the Physically Unclonable Quantum Key Distribution (PU-QKD) system, to intrinsically authenticate the communicating endpoints in QKD. The PU-QKD scheme leverages classical Physical Unclonable Functions (PUFs) to encode the data transmission in discrete variable QKD protocols (e.g., BB84). Our scheme maintains the information-theoretic security of QKD protocols by integrating the PUF as an additional layer. Authentication is bound to hardware, providing a robust fingerprint, while lower post-processing overhead increases key rates. Additionally, the proposed scheme is resilient against state-of-the-art PUF vulnerabilities, such as modeling attacks.
Quantum key distribution (QKD) is a method using some properties of quantum mechanics to create a secret shared cryptographic key even if an eavesdropper has access to unlimited computational power. All QKD protocols require that the parties have access to an authentic channel. Otherwise, QKD is vulnerable to man-in-themiddle attacks. This paper studies QKD from this point of view, emphasizing the necessity and sufficiency of using unconditionally secure authentication in QKD. In this work, a hybrid unconditionally secure authentication strategy is proposed for QKD protocols. It is based on a mixture of normal application of authentication codes and the so-called "counter-based" authentication method such that to achieve a better trade off between security and efficiency (in terms of the required size of initially shared secret data). Based on this strategy, a complete authenticated QKD protocol is described for a specific implementation of the well-known BB84 protocol. Some advantages of our protocol in comparison to other proposals are also highlighted.
Quantum key distribution (QKD) is a method using some properties of quantum mechanics to create a secret shared cryptographic key even if an eavesdropper has access to unlimited computational power. All QKD protocols require that the parties have access to an authentic channel. Otherwise, QKD is vulnerable to man-in-the-middle attacks. This paper studies QKD from this point of view, emphasizing the necessity and sufficiency of using unconditionally secure authentication in QKD. In this work, a new technique of using unconditionally secure authentication is proposed for quantum cryptosystems. This technique is based on a hybrid of normal application of authentication codes and the so-called “counter-based” authentication method such that to achieve a better trade-off between security and efficiency (in terms of the required size of initially shared secret data). Based on this strategy, an authenticated version of a typical QKD protocol (the well-known BB84 protocol) is described. Some advantages of our protocol in comparison to other proposals are also highlighted.