Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International Conference on Optical Network Design and Modeling (ONDM)

Performance Evaluation of Key Management Systems for Quantum Key Distribution Networks

Tommy van Duijn, Simon Rommel

Published May 1, 2026• 0 citations
Publisher

Abstract

Key Management Systems (KMSs) are essential for secure and scalable Quantum Key Distribution (QKD) networks. For successful integration of QKD into existing security protocols, it is crucial that KMSs can reliably deliver keys with sufficiently low latency. Yet, the performance of practical implementations remains insufficiently characterized. We benchmarked the throughput and latency of the key-delivery interfaces of several commercial KMS solutions alongside an in-house developed system. Our evaluation reveals that the KMS performance degrades significantly under high-workload conditions, indicating that current designs require substantial optimization before they can support large-scale, high-demand QKD deployments.

DOI
10.23919/ondm68511.2026.11618870

Related papers

Automated Deployment and Configuration of Key Management Systems in QKD Networks

van Duijn, S. Rommel

Quantum key distribution (QKD) enables information-theoretically secure key exchange, but its practical deployment at scale depends on secure and reliable key management systems (KMSs). As QKD networks grow in size and complexity, manual configuration and operation of KMSs could become a major source of operational overhead and risk of misconfiguration. We demonstrate the automated deployment and configuration of KMSs for QKD networks using a workflow orchestrator, achieving successful deployment and full configuration of KMSs and key acquisition and delivery services within 4min.

•Aug 19, 2026•0 citations

Comparison of distributed and centralized quantum key management systems for meshed QKD networks

Mario Wenning, Jonas Berl, Tobias Fehenberger +1 more

Recent developments in quantum key distribution (QKD) demonstrate the maturity of securing sensitive data against the emerging quantum computing threat. For QKD-secured long-haul and meshed optical transport networks (OTNs), quantum key management systems (QKMSs) are essential to overcome current distance limitations of available QKD devices. In this work, we present and compare two implementations of QKMSs, analyzing their scalability with an emulated QKD network (QKDN) utilizing recorded performance metrics from deployed QKD devices. First, we use a state-of-the-art Internet routing scheme, i.e., open shortest path first (OSPF), demonstrating that key management entities (KMEs) can solve the key routing problem utilizing distributed routing. Second, we apply software-defined networking (SDN) to implement centralized routing with a SDN controller. This paper compares distributed with centralized key routing regarding scalability, throughput, and latency. Both schemes facilitate up to six key relays between any pair of nodes in parallel with average key relay durations per hop below 300 ms given the Nobel-Germany topology and any-to-any demand matrix. With a network-wide joint key routing optimization in the SDN controller, up to 16.7% higher demands can be served compared to distributed key routing. Within the inherent compatibility of our study to network-function virtualization (NFV), we guideline future integration of QKMSs into deployed OTNs.

Journal of Optical Communications and Networking•Jan 10, 2025•7 citations

Key Management Systems for Large-Scale Quantum Key Distribution Networks

Paul James, Stephan Laschet, Sebastian Ramacher +1 more

The Key Management System (KMS) is an important component in scaling up from link-to-link key generation to large key distribution networks. In this work we provide an overview of a KMS in the context of Quantum Key Distribution Networks (QKDN) and give a thorough summary of the functionality of a KMS in such an application. Beyond classical QKDNs, we discuss Post Quantum Cryptography (PQC) hybridization techniques at the KMS level. These methods add an additional layer of security against quantum computer driven attacks. We also discuss selected topics regarding the development, deployment and operation of components for such security infrastructure. In addition, relevant standards in the realm of Quantum Key Distribution (QKD) are outlined and analyzed. As some of the necessary interfaces have not been standardized, namely the interface between two KMS instances and the interface between the KMS and the Software Defined Network (SDN) Agent, we propose APIs for these two cases. The design of the interface between the KMS and QKD modules is discussed and, considering their resource constraints, a push mode for the ETSI GS QKD 004 standard is proposed. Finally, implementation details of a prototype KMS are outlined and trade-offs are discussed.

International Conference on Availability, Reliability and Security (ARES)•Aug 9, 2023•27 citations

Enhancing Key Availability and Efficiency in QKDNs via Decentralized Key Flooding

María Álvarez-Roa, Sebastian R. Verschoor, Simon Rommel

The key flooding protocol in Quantum Key Distribution Networks (QKDNs) is a fully decentralized strategy that proactively distributes key material to pre-establish end-to-end key pools, enabling immediate delivery to clients. We enhance this protocol to increase key availability and overall distribution efficiency. The protocol has been implemented in an in-house developed, fully functional Key Management System (KMS), and the evaluation has been carried out over a Docker-based simulated network with a representative topology, demonstrating practicality and feasibility in realistic deployment scenarios. Experimental results show that, under moderate network load, the enhanced protocol significantly improves key request success rates by up to 5.6 % while authentication overhead is reduced by up to 59 % compared to the baseline flooding approach. The protocol maintains stable performance under stress conditions, preserving robustness against increased traffic.

•Jan 1, 2026•0 citations

Quantum Key Distribution Networks Design: Overview and Challenges

Pankaj Kumar, Neel Kanth Kundu, Binayak Kar

ABSTRACT Quantum cryptography has increasingly attracted interest from both industry and academia for its potential in real‐world applications. With advancements in quantum electronics, practical quantum devices are now commercially available and poised for broader adoption. Quantum key distribution (QKD) leverages fundamental principles of quantum mechanics to ensure secure communication, whereas quantum key distribution networks (QKDN) serve as the foundational infrastructure for deploying and scaling these secure systems. This paper examines the design methodologies specific to QKD within QKDN, emphasising both the conceptual framework and the practical challenges inherent in the field. In the pursuit of developing robust QKDN design, several key obstacles, related to the foundational QKD technology, must be addressed. These include decoherence, which affects the stability of quantum states and reduces key generation rates; latency, which disrupts synchronisation throughout the QKD network; and intrinsic quantum noise, an inherent property of quantum systems that primarily limits the overall performance of the QKD network. In addition, the limited communication ranges and the requirement for highly specialised hardware complicate the practical deployment of these networks. This work serves as an introductory guide for researchers entering the field, providing an overview of the fundamental principles of QKD network design and the distinctive routing characteristics inherent to such systems. It outlines the essential steps and considerations for building efficient and resilient QKDN infrastructures, including a discussion of the foundational principles, protocols and existing challenges.

IET Quantum Communication•Jan 1, 2026•3 citations

Quantum Secure Key Management & Delivery Protocol in the QKD framework

Manjiri Harmalkar, Kurunandan Jain, K. Suresh Kumar +1 more

The current Quantum Key Distribution (QKD) key delivery API relies on HTTPS for secure communication. It is vulnerable to quantum computer threats due to its use of public key cryptography. To mitigate insider attacks, leveraging quantum computing threats within the security boundary and encrypting communication between the application and the KMS is essential. This paper focuses on simulating a 2-node QKD topology using the DARPAN Application. Additionally, we conduct tests on QKD KMS APIs with the Postman tool to ensure consistent retrieval of shared keys at both communication endpoints. Through our simulations and tests, we aim to validate the effectiveness and reliability of the proposed approach in securely managing cryptographic keys within the QKD-network.

IEEE India Council International Subsections Conference (INDISCON)•Aug 22, 2024•12 citations
Key Management Systems (KMSs) are essential for secure and scalable Quantum Key Distribution (QKD) networks. For successful integration of QKD into existing security protocols, it is crucial that KMSs can reliably deliver keys with sufficiently low latency. Yet, the performance of practical implementations remains insufficiently characterized. We benchmarked the throughput and latency of the key-delivery interfaces of several commercial KMS solutions alongside an in-house developed system. Our evaluation reveals that the KMS performance degrades significantly under high-workload conditions, indicating that current designs require substantial optimization before they can support large-scale, high-demand QKD deployments.
Quantum key distribution (QKD) enables information-theoretically secure key exchange, but its practical deployment at scale depends on secure and reliable key management systems (KMSs). As QKD networks grow in size and complexity, manual configuration and operation of KMSs could become a major source of operational overhead and risk of misconfiguration. We demonstrate the automated deployment and configuration of KMSs for QKD networks using a workflow orchestrator, achieving successful deployment and full configuration of KMSs and key acquisition and delivery services within 4min.
Recent developments in quantum key distribution (QKD) demonstrate the maturity of securing sensitive data against the emerging quantum computing threat. For QKD-secured long-haul and meshed optical transport networks (OTNs), quantum key management systems (QKMSs) are essential to overcome current distance limitations of available QKD devices. In this work, we present and compare two implementations of QKMSs, analyzing their scalability with an emulated QKD network (QKDN) utilizing recorded performance metrics from deployed QKD devices. First, we use a state-of-the-art Internet routing scheme, i.e., open shortest path first (OSPF), demonstrating that key management entities (KMEs) can solve the key routing problem utilizing distributed routing. Second, we apply software-defined networking (SDN) to implement centralized routing with a SDN controller. This paper compares distributed with centralized key routing regarding scalability, throughput, and latency. Both schemes facilitate up to six key relays between any pair of nodes in parallel with average key relay durations per hop below 300 ms given the Nobel-Germany topology and any-to-any demand matrix. With a network-wide joint key routing optimization in the SDN controller, up to 16.7% higher demands can be served compared to distributed key routing. Within the inherent compatibility of our study to network-function virtualization (NFV), we guideline future integration of QKMSs into deployed OTNs.
The Key Management System (KMS) is an important component in scaling up from link-to-link key generation to large key distribution networks. In this work we provide an overview of a KMS in the context of Quantum Key Distribution Networks (QKDN) and give a thorough summary of the functionality of a KMS in such an application. Beyond classical QKDNs, we discuss Post Quantum Cryptography (PQC) hybridization techniques at the KMS level. These methods add an additional layer of security against quantum computer driven attacks. We also discuss selected topics regarding the development, deployment and operation of components for such security infrastructure. In addition, relevant standards in the realm of Quantum Key Distribution (QKD) are outlined and analyzed. As some of the necessary interfaces have not been standardized, namely the interface between two KMS instances and the interface between the KMS and the Software Defined Network (SDN) Agent, we propose APIs for these two cases. The design of the interface between the KMS and QKD modules is discussed and, considering their resource constraints, a push mode for the ETSI GS QKD 004 standard is proposed. Finally, implementation details of a prototype KMS are outlined and trade-offs are discussed.
The key flooding protocol in Quantum Key Distribution Networks (QKDNs) is a fully decentralized strategy that proactively distributes key material to pre-establish end-to-end key pools, enabling immediate delivery to clients. We enhance this protocol to increase key availability and overall distribution efficiency. The protocol has been implemented in an in-house developed, fully functional Key Management System (KMS), and the evaluation has been carried out over a Docker-based simulated network with a representative topology, demonstrating practicality and feasibility in realistic deployment scenarios. Experimental results show that, under moderate network load, the enhanced protocol significantly improves key request success rates by up to 5.6 % while authentication overhead is reduced by up to 59 % compared to the baseline flooding approach. The protocol maintains stable performance under stress conditions, preserving robustness against increased traffic.
ABSTRACT Quantum cryptography has increasingly attracted interest from both industry and academia for its potential in real‐world applications. With advancements in quantum electronics, practical quantum devices are now commercially available and poised for broader adoption. Quantum key distribution (QKD) leverages fundamental principles of quantum mechanics to ensure secure communication, whereas quantum key distribution networks (QKDN) serve as the foundational infrastructure for deploying and scaling these secure systems. This paper examines the design methodologies specific to QKD within QKDN, emphasising both the conceptual framework and the practical challenges inherent in the field. In the pursuit of developing robust QKDN design, several key obstacles, related to the foundational QKD technology, must be addressed. These include decoherence, which affects the stability of quantum states and reduces key generation rates; latency, which disrupts synchronisation throughout the QKD network; and intrinsic quantum noise, an inherent property of quantum systems that primarily limits the overall performance of the QKD network. In addition, the limited communication ranges and the requirement for highly specialised hardware complicate the practical deployment of these networks. This work serves as an introductory guide for researchers entering the field, providing an overview of the fundamental principles of QKD network design and the distinctive routing characteristics inherent to such systems. It outlines the essential steps and considerations for building efficient and resilient QKDN infrastructures, including a discussion of the foundational principles, protocols and existing challenges.
The current Quantum Key Distribution (QKD) key delivery API relies on HTTPS for secure communication. It is vulnerable to quantum computer threats due to its use of public key cryptography. To mitigate insider attacks, leveraging quantum computing threats within the security boundary and encrypting communication between the application and the KMS is essential. This paper focuses on simulating a 2-node QKD topology using the DARPAN Application. Additionally, we conduct tests on QKD KMS APIs with the Postman tool to ensure consistent retrieval of shared keys at both communication endpoints. Through our simulations and tests, we aim to validate the effectiveness and reliability of the proposed approach in securely managing cryptographic keys within the QKD-network.