Quantum Key Distribution (QKD) and Entanglement Routing in Quantum Networks: Protocols, Repeater Topologies, and Co-Existence with Post-Quantum Cryptography
Anish Kumar Singh, Anurag Kumar, Dr. Vishal Shrivastava, Dr. Vibhakar Pathak, Er. Kishan Sharma
The impending realization of fault-tolerant quantum computers threatens the foundational public-key cryptography underpinning global telecommunications and financial infrastructure. While algorithmic Post-Quantum Cryptography (PQC) provides mathematical computational hardness against quantum cryptanalysis, Quantum Key Distribution (QKD) establishes an alternative information-theoretically secure physical paradigm based on the immutable laws of quantum mechanics: the No-Cloning theorem and Heisenberg's uncertainty principle. However, deploying scalable, wide-area quantum networks introduces formidable physical and systems engineering challenges: exponential optical fiber attenuation that restricts direct point-to-point QKD to beneath 150 km, high dark-count rates in superconducting nanowire single-photon detectors (SNSPDs), non-deterministic Bell-state entanglement swapping across quantum repeaters, and intense Raman scattering cross-talk when multiplexing quantum channels alongside multi-terabit classical DWDM optical networks. This paper delivers an exhaustive, mathematically formal technical investigation and empirical architectural evaluation of quantum networking and QKD systems. We formalize the asymptotic secret key rate bounds under the Decoy-State BB84 and Measurement-Device-Independent (MDI-QKD) protocols, model continuous entanglement routing over quantum repeaters utilizing bipartite Bell-pair purification, and establish optical co-existence bounds under Dense Wavelength Division Multiplexing (DWDM). Furthermore, we construct an empirical optical testbed evaluating an 8-node metropolitan quantum network co-propagating QKD over 100 Gbps classical optical traffic, paired with hybrid PQC-QKD key derivation functions (ML-KEM + QKD). Our empirical findings demonstrate that decoy-state BB84 achieves a sustainable secret key rate of 1.42 kbps across 100 km of standard single-mode fiber (SMF-28), while hybrid PQC-QKD integration eliminates single-point cryptographic failures with less than 2.4 ms handshake latency overhead. Finally, we formulate open challenges in memory-assisted atomic quantum repeaters, satellite-to-ground freespace entanglement links, and quantum internet transport protocols.
The impending realization of fault-tolerant quantum computers threatens the foundational public-key cryptography underpinning global telecommunications and financial infrastructure. While algorithmic Post-Quantum Cryptography (PQC) provides mathematical computational hardness against quantum cryptanalysis, Quantum Key Distribution (QKD) establishes an alternative information-theoretically secure physical paradigm based on the immutable laws of quantum mechanics: the No-Cloning theorem and Heisenberg's uncertainty principle. However, deploying scalable, wide-area quantum networks introduces formidable physical and systems engineering challenges: exponential optical fiber attenuation that restricts direct point-to-point QKD to beneath 150 km, high dark-count rates in superconducting nanowire single-photon detectors (SNSPDs), non-deterministic Bell-state entanglement swapping across quantum repeaters, and intense Raman scattering cross-talk when multiplexing quantum channels alongside multi-terabit classical DWDM optical networks. This paper delivers an exhaustive, mathematically formal technical investigation and empirical architectural evaluation of quantum networking and QKD systems. We formalize the asymptotic secret key rate bounds under the Decoy-State BB84 and Measurement-Device-Independent (MDI-QKD) protocols, model continuous entanglement routing over quantum repeaters utilizing bipartite Bell-pair purification, and establish optical co-existence bounds under Dense Wavelength Division Multiplexing (DWDM). Furthermore, we construct an empirical optical testbed evaluating an 8-node metropolitan quantum network co-propagating QKD over 100 Gbps classical optical traffic, paired with hybrid PQC-QKD key derivation functions (ML-KEM + QKD). Our empirical findings demonstrate that decoy-state BB84 achieves a sustainable secret key rate of 1.42 kbps across 100 km of standard single-mode fiber (SMF-28), while hybrid PQC-QKD integration eliminates single-point cryptographic failures with less than 2.4 ms handshake latency overhead. Finally, we formulate open challenges in memory-assisted atomic quantum repeaters, satellite-to-ground freespace entanglement links, and quantum internet transport protocols.
Quantum Key Distribution (QKD) constitutes one of the most profound practical applications of quantum mechanics, enabling two parties to exchange cryptographic keys whose security is guaranteed by the fundamental laws of physics rather than the assumed computational hardness of mathematical problems. As quantum computing capabilities continue to advance, classical public-key infrastructure faces an existential threat, rendering QKD a critical component of post-quantum secure communication architectures. This paper presents a comprehensive survey of QKD spanning foundational protocols, rigorous security proofs, hardware implementation challenges, deployment experiences across metropolitan fiber networks, and recent satellite-based experiments. We analyze the BB84, E91, B92, SARG04, continuous-variable, measurement-device-independent (MDI-QKD), and twin-field (TF-QKD) protocols in depth, examining their security assumptions, achievable key rates, and practical limitations. Particular attention is given to side-channel vulnerabilities in realistic implementations, decoy-state methods for mitigating photon-number-splitting attacks, and finite-key security analysis. We review key performance benchmarks from commercial systems and discuss integration with classical network infrastructure. The paper concludes by identifying open challenges in quantum repeater development, satellite QKD scalability, and standardization efforts essential for large-scale deployment.
The existence of quantum computing presents an existential threat to the traditional cryptographic algorithms, and there is a need to create communication mechanisms that are fundamentally secure. In this regard, the concept of Quantum Key Distribution (QKD) provides information-theoretic security, which is founded on quantum mechanics. Nevertheless, conventional QKD protocols have serious shortcomings such as lack of distance in communication, vulnerability to side-channel attacks, and inability to support the large-scale heterogeneous network. We suggest that HQNet-QKD a Hybrid Quantum Key Distribution framework can help solve these issues by offering a more secure, scalable and future-proof key exchange framework in hybrid classical-quantum networks. To support multi-layered security, the proposed architecture is a network ensuring the smoothness of decoy-state BB84, Measurement-Device-Independent QKD (MDI-QKD), entanglement/twin-field-based QKD with verifiable Secret Sharing (VSS) and Post-Quantum Cryptography (PQC). It provides a complete methodology such as system architecture, mathematical modeling, and end-to-end key synthesis. When used over a distance of 300 km, simulation and testing have shown that HQNet-QKD can achieve up to2.7×higher secret key rate (SKR) than conventional methods, secret communication at 700 km and resilience to both quantum and classical attacks more than 96%. In addition, the framework guarantees forward secrecy, detector-side immunity, contextbound key derivation, and composability and thus resistant to current and future adversaries. It has a low-computational overhead modular design, making it trivial to deploy in a real world, in applications like quantum-secured 5G backbones, cloud data centers, critical infrastructure, and satellite-based communication systems. The findings make HQNet-QKD a new generation solution to quantum-safe secure communication and the first step towards the implementation of the quantum internet.
Quantum key distribution (QKD) is a straightforward cryptographic protocol for secure communication using quantum mechanics principles. This book chapter provides an introduction to QKD protocols based on theoretical principles, applicability, and recent advancements. The chapter provides an overview of the most popular BB84 protocol and its extensions, including measurement-device-independent QKD (MDI-QKD) and twin-field QKD (TF-QKD). The chapter includes continuous-variable QKD (CV-QKD) and its applicability to real networks. Security attacks, including side-channel attacks and photon-number splitting (PNS) attacks, are addressed with a focus on countermeasures, including decoy-state techniques and device-independent protocols. Application of QKD for network security, cloud computing, and critical infrastructure is addressed. Integration of QKD with classical cryptography techniques, post-quantum cryptography, and innovative quantum network topologies is addressed to investigate applicability for large-scale implementation. The chapter discusses recent advancements in superconducting nanowire single-photon detectors, quantum memory-assisted QKD, and free-space QKD in atmospheric channels. It also discusses innovative reconciliation techniques, authentication schemes, future developments, and deployment challenges and provides valuable information for researchers and practitioners.
Post-quantum cryptography (PQC) and quantum key distribution (QKD) address the quantum threat from opposite directions: PQC replaces vulnerable public-key algorithms with schemes believed to resist quantum cryptanalysis, while QKD derives keys whose secrecy rests on physical assumptions rather than computational ones. Because each approach has a distinct failure mode, a growing body of work combines them so that a session key remains secure if either component holds. We first establish the deployed baseline, hybrid classical-plus-PQC key exchange, against which QKD-augmented designs must be judged. We then propose a taxonomy of hybrid PQC-QKD designs along eight dimensions (integration layer, combiner construction, authentication scope and source, QKD topology, trusted entities, key-delivery interface, classical component, and evidence type), and use it to compare published protocols, including Muckle and its successors, MACsec and TLS integrations, and IKEv2 mechanisms standardised in RFCs 8784, 9370, and 9867. We examine key-combiner constructions in light of the KEM-combiner literature and of NIST, ETSI, and ITU-T guidance, and map the security arguments for hybrid PQC-QKD protocols onto a common grid of security model, assumptions, permitted compromise, established guarantee, and limitations. We synthesise deployment evidence from metropolitan and national QKD networks, distinguishing the few testbeds that have run PQC in the key path from pure-QKD deployments, and summarise the standards and policy landscape, including the positions of national security agencies that recommend against relying on QKD alone. We close with open problems: authentication of the QKD classical channel, shared-infrastructure threat models, device certification versus formal proofs, formal verification of hybrid handshakes, and the lack of peer-reviewed deployment economics.
Quantum computing advances pose a serious threat to conventional public-key cryptographic systems such as RSA and elliptic curve cryptography as quantum algorithms may undermine the computational assumptions that guaranty their security. This challenge has driven the development of quantumsafe security approaches among which Quantum Key Distribution (QKD) represents a fundamentally different paradigm based on quantum mechanical principles rather than mathematical complexity. This paper presents a structured review of recent progress in QKD based on a systematic analysis of literature between 2020 and 2025, we examine core protocols including discrete-variable, continuous-variable, measurement-deviceindependent, and twin-field approaches, while also discussing their relationship with post-quantum cryptography as a complementary strategy for future secure communication systems. We provide a unified comparison framework to support practical design and policy decisions by organizing protocols and implementations along deployment dimensions. The study analyze theoretical foundations, implementation technologies across fiber, free-space, satellite, and integrated photonic platforms, and key performance trade-offs involving scalability, security robustness, and deployment feasibility. Findings indicate substantial progress in transitioning QKD from laboratory research toward practical implementations, supported by advances in network architectures, integrated hardware and hybrid cryptographic designs. The comparative analysis will highlight distinct strengths and limitations among protocol families and emphasize the potential of combining QKD with post-quantum cryptographic methods to enhance resilience. Remaining challenges including scalability constraints, implementation-level vulnerabilities, performance limitations over long distances, and integration with existing communication infrastructures are critically discussed. Finally, emerging research directions such as quantum repeaters, hybrid quantum-classical security models, and exploratory directions such as artificial intelligence-assisted optimizations are identified as key factors in enabling the evolution of QKD toward largescale quantum-secure networking.
Quantum Key Distribution (QKD) enables information-theoretically secure cryptographic key exchange by exploiting quantum mechanical properties -- photon polarisation, entanglement, and the no-cloning theorem -- to detect any eavesdropping attempt. Scaling QKD from point-to-point laboratory demonstrations to large-scale metropolitan and wide-area networks requires addressing three engineering challenges: photon loss over long fibre distances (limiting practical QKD to ~100-150 km without quantum repeaters), network topology design for multi-party key delivery, and integration of QKD with classical network infrastructure. This paper proposes the Quantum Key Distribution Network Architecture (QKDNA) framework, a systematic evaluation of five QKD protocol families (BB84, E91, MDI-QKD, Twin-Field QKD, and CV-QKD) across four network topology models (star, ring, mesh, and hierarchical trusted-node) on 16 real-world metropolitan network scenarios. QKDNA achieves maximum secure key rate of 18.4 Mbps (Twin-Field QKD, 80 km fibre, mesh topology) and demonstrates scalable QKD delivery to 48 simultaneous users. The framework contributes a Network QKD Deployment Index (NQDI) and quantitative guidance for national quantum network infrastructure planning.