Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

EPJ Quantum Technology

A scalable quantum-safe authentication framework for multi-site QKD networks using post-quantum cryptography

Aneesh Kumar K. B., Kurunandan Jain, Prabhakar Krishnan, P. Prabu, Ramesh Chandra Poonia

Published Oct 23, 2026• 0 citations
Publisher

Abstract

Quantum Key Distribution (QKD) offers information-theoretic security for key exchange; however, its effective implementation is contingent upon the security of the classical communication channel, especially for authentication purposes. This work presents a system-level study of quantum-safe authentication for the classical channel in multi-site QKD networks, comparing two post-quantum cryptographic (PQC) approaches within a unified evaluation framework: one based on lattice-based digital signatures, and one based on message authentication codes (MACs) bootstrapped by PQC key establishment. We develop a multi-site network model to analyze the scalability and deployment limitations of traditional pre-shared key methods. The framework is evaluated using both simulations and hardware-based experiments, considering communication cost, computational overhead, and the impact on the key generation rate. The results show that signature-based authentication offers stateless per-message verification at a higher per-block cost, while MAC-based authentication is better suited to high-throughput environments, both at the same linear onboarding cost. The study quantifies the trade-offs between security, scalability, and performance, and provides practical guidance for deploying quantum-safe authentication in real-world QKD systems.

DOI
10.1140/epjqt/s40507-026-00584-x

Related papers

Authentication of the QKD classical channel through Post-Quantum Cryptography in a multi-site 5G/6G quantum-safe communication network

Asier Atutxa, Ane Sanz, Eire Salegi +3 more

Breakthroughs in the field of quantum computing are forcing society to adapt the systems it employs to future threats. Telecommunications networks are no exception, and technologies such as Quantum Key Distribution (QKD) have been developed to establish secure and confidential mechanisms for quantum-safe key distribution. However, the lack of flexibility and scalability of this technology hinders its implementation in 5G/6G networks. In this context, this paper presents the design and development of a QKD classical channel authentication system based on Post-Quantum Cryptography (PQC) algorithms for securing multi-site 5G/6G networks. It also presents the deployment in an experimental infrastructure with a 5G core securization use case, and a comprehensive validation and performance evaluation, measuring key parameters such as protocol timing, error rate, and keyrate. Results show that the PQC authentication offers a similar performance compared to the inflexible, vendor-specific authentication mechanism, obtaining Quantum Bit Error Rate (QBER) measurements ranging from 2.5% to 3.5% in both cases, while only reducing the keyrate 4.53% (from 525.27 bps to 501.44 bps).

International Conference on Quantum Communications, Networking, and Computing (QCNC)•Mar 31, 2025•4 citations

Quantam Authentication Techniques Against Emerging Threats in QKD

T. Aditya Sai Srinivas, Aanala Hari, Manasu Madhavi +3 more

Quantum Key Distribution (QKD) is a pioneering development in secure communication, an information-theoretic secure communications protocol that is founded on quantum mechanics. However, the effectiveness of such systems which safeguard the classical communication mediums against interception and impersonation depends on the strength of the authentication mechanisms that are used in the QKD systems. The proposed study is Hybrid Quantum Authentication Framework that is based on a combination of Wegman-Carter authentication, Quantum Digital Signature (QDS), and Post-quantum Cryptography (PQC) to counter new threats of Man-in-the-Middle (MITM), replay, and key exhaustion attacks. Based on the Quantum Encryption Dataset retrieved on the Kaggle platform, the framework was experimentally tested following the dataset augmentation to incorporate the authentication parameters and simulated attack labels. The results of the experiment prove that the hybrid model proposed can attain an authentication accuracy of 98.6%, which is significantly higher than that of standalone methods, MISM and replay attack detection rates of 99 and 98, respectively. The architecture lowers the key consumption by more than 40 percent, keeps the latency at 1.28 ms and the throughput at 92 percent, proving the scalability and computational efficiency of the architecture. Comparable performance and scalability studies also indicate that the model remains highly reliable as the size of the network increases with little growth in the latency. Generally, the suggested hybrid solution is robust, flexible and effective authentication of QKD networks and a viable solution in the next-generation quantum-safe communications infrastructure that can withstand classical and quantum attackers.

IEEE Global Conference on Wireless Computing and Networking (GCWCN)•Nov 22, 2025•0 citations

Lightweight Post-Quantum Authentication Framework of Lattice and Code-Based Post-Quantum Signature Schemes under Mobility Constraints in MANETS

R. Priyavani, N. Kowsalya

The rapid advancement of quantum computing poses a significant threat to conventional public-key cryptographic mechanisms deployed in Mobile Ad Hoc Networks (MANETs). Due to their decentralized architecture, dynamic topology, and resource-constrained nodes, MANETs require security solutions that are not only quantum-resistant but also computationally efficient. This paper presents a comparative evaluation of lattice-based and code-based post-quantum digital signature schemes for secure data transmission in MANET environments. The study focuses on analyzing key performance parameters including key generation time, signature and verification latency, end-to-end transmission delay, and overall security strength under varying mobility conditions. Simulation experiments are conducted using realistic mobility datasets and network models to assess the feasibility of deploying post-quantum signatures in dynamic MANET scenarios. The results demonstrate that while lattice-based schemes offer better computational efficiency, code-based schemes provide stronger security guarantees at the cost of increased communication overhead. This work highlights the critical trade-offs between security, performance, and scalability, and provides practical insights for designing lightweight post-quantum security frameworks for future mobile networks.

International Journal of Computer Sciences and Engineering•Jan 31, 2026•0 citations

Simulation and analysis of a QKD-PQC protocol for secure communication channel authentication

G. K. Sandhia, M Ranjani, Srivatsan K +2 more

Quantum computing threatens traditional cryptographic systems based on integer factorization and discrete logarithm problems. This paper proposes a hybrid secure communication framework integrating Quantum Key Distribution (QKD) with Post-Quantum Cryptography (PQC) for authentication. The BB84 protocol is used for quantum key generation, while CRYSTALS-Dilithium signatures secure the classical communication channel. A Python-based simulator models photon transmission, Quantum Bit Error Rate (QBER), intercept-resend attacks, and authentication verification. Results show that QBER increases proportionally with eavesdropping probability, enabling reliable attack detection. The integration of QKD secrecy with PQC authentication ensures both confidentiality and integrity. Performance evaluation demonstrates that the additional latency introduced by PQC authentication remains within acceptable limits. The proposed hybrid framework provides a scalable and quantum-resistant solution suitable for next-generation secure communication systems.

•Mar 23, 2026•0 citations

Simulation and analysis of a QKD-PQC protocol for secure communication channel authentication

G. K. Sandhia, M Ranjani, Srivatsan K +2 more

Quantum computing threatens traditional cryptographic systems based on integer factorization and discrete logarithm problems. This paper proposes a hybrid secure communication framework integrating Quantum Key Distribution (QKD) with Post-Quantum Cryptography (PQC) for authentication. The BB84 protocol is used for quantum key generation, while CRYSTALS-Dilithium signatures secure the classical communication channel. A Python-based simulator models photon transmission, Quantum Bit Error Rate (QBER), intercept-resend attacks, and authentication verification. Results show that QBER increases proportionally with eavesdropping probability, enabling reliable attack detection. The integration of QKD secrecy with PQC authentication ensures both confidentiality and integrity. Performance evaluation demonstrates that the additional latency introduced by PQC authentication remains within acceptable limits. The proposed hybrid framework provides a scalable and quantum-resistant solution suitable for next-generation secure communication systems.

EPJ Web of Conferences•Jan 1, 2026•0 citations

Experimental Authentication of Quantum Key Distribution with Post-quantum Cryptography

Liujun Wang, Kaiyi Zhang, Jiayong Wang +9 more

Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computer. However, QKD requires the classical channel to be authenticated, and the current method is pre-sharing symmetric keys. For a QKD network of $n$ users, this method requires $C_n^2 = n(n-1)/2$ pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum resistant security, each user only needs to apply for a digital certificate from certificate authority (CA) to achieve efficient and secure authentication for QKD. We only need to assume the short-term security of the PQC algorithm to achieve the long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using PQC authentication we only need to believe the CA is safe, rather than all trusted relays. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum safe communication.

arXiv:2009.04662•Sep 10, 2020•6 citations
Quantum Key Distribution (QKD) offers information-theoretic security for key exchange; however, its effective implementation is contingent upon the security of the classical communication channel, especially for authentication purposes. This work presents a system-level study of quantum-safe authentication for the classical channel in multi-site QKD networks, comparing two post-quantum cryptographic (PQC) approaches within a unified evaluation framework: one based on lattice-based digital signatures, and one based on message authentication codes (MACs) bootstrapped by PQC key establishment. We develop a multi-site network model to analyze the scalability and deployment limitations of traditional pre-shared key methods. The framework is evaluated using both simulations and hardware-based experiments, considering communication cost, computational overhead, and the impact on the key generation rate. The results show that signature-based authentication offers stateless per-message verification at a higher per-block cost, while MAC-based authentication is better suited to high-throughput environments, both at the same linear onboarding cost. The study quantifies the trade-offs between security, scalability, and performance, and provides practical guidance for deploying quantum-safe authentication in real-world QKD systems.
Breakthroughs in the field of quantum computing are forcing society to adapt the systems it employs to future threats. Telecommunications networks are no exception, and technologies such as Quantum Key Distribution (QKD) have been developed to establish secure and confidential mechanisms for quantum-safe key distribution. However, the lack of flexibility and scalability of this technology hinders its implementation in 5G/6G networks. In this context, this paper presents the design and development of a QKD classical channel authentication system based on Post-Quantum Cryptography (PQC) algorithms for securing multi-site 5G/6G networks. It also presents the deployment in an experimental infrastructure with a 5G core securization use case, and a comprehensive validation and performance evaluation, measuring key parameters such as protocol timing, error rate, and keyrate. Results show that the PQC authentication offers a similar performance compared to the inflexible, vendor-specific authentication mechanism, obtaining Quantum Bit Error Rate (QBER) measurements ranging from 2.5% to 3.5% in both cases, while only reducing the keyrate 4.53% (from 525.27 bps to 501.44 bps).
Quantum Key Distribution (QKD) is a pioneering development in secure communication, an information-theoretic secure communications protocol that is founded on quantum mechanics. However, the effectiveness of such systems which safeguard the classical communication mediums against interception and impersonation depends on the strength of the authentication mechanisms that are used in the QKD systems. The proposed study is Hybrid Quantum Authentication Framework that is based on a combination of Wegman-Carter authentication, Quantum Digital Signature (QDS), and Post-quantum Cryptography (PQC) to counter new threats of Man-in-the-Middle (MITM), replay, and key exhaustion attacks. Based on the Quantum Encryption Dataset retrieved on the Kaggle platform, the framework was experimentally tested following the dataset augmentation to incorporate the authentication parameters and simulated attack labels. The results of the experiment prove that the hybrid model proposed can attain an authentication accuracy of 98.6%, which is significantly higher than that of standalone methods, MISM and replay attack detection rates of 99 and 98, respectively. The architecture lowers the key consumption by more than 40 percent, keeps the latency at 1.28 ms and the throughput at 92 percent, proving the scalability and computational efficiency of the architecture. Comparable performance and scalability studies also indicate that the model remains highly reliable as the size of the network increases with little growth in the latency. Generally, the suggested hybrid solution is robust, flexible and effective authentication of QKD networks and a viable solution in the next-generation quantum-safe communications infrastructure that can withstand classical and quantum attackers.
The rapid advancement of quantum computing poses a significant threat to conventional public-key cryptographic mechanisms deployed in Mobile Ad Hoc Networks (MANETs). Due to their decentralized architecture, dynamic topology, and resource-constrained nodes, MANETs require security solutions that are not only quantum-resistant but also computationally efficient. This paper presents a comparative evaluation of lattice-based and code-based post-quantum digital signature schemes for secure data transmission in MANET environments. The study focuses on analyzing key performance parameters including key generation time, signature and verification latency, end-to-end transmission delay, and overall security strength under varying mobility conditions. Simulation experiments are conducted using realistic mobility datasets and network models to assess the feasibility of deploying post-quantum signatures in dynamic MANET scenarios. The results demonstrate that while lattice-based schemes offer better computational efficiency, code-based schemes provide stronger security guarantees at the cost of increased communication overhead. This work highlights the critical trade-offs between security, performance, and scalability, and provides practical insights for designing lightweight post-quantum security frameworks for future mobile networks.
Quantum computing threatens traditional cryptographic systems based on integer factorization and discrete logarithm problems. This paper proposes a hybrid secure communication framework integrating Quantum Key Distribution (QKD) with Post-Quantum Cryptography (PQC) for authentication. The BB84 protocol is used for quantum key generation, while CRYSTALS-Dilithium signatures secure the classical communication channel. A Python-based simulator models photon transmission, Quantum Bit Error Rate (QBER), intercept-resend attacks, and authentication verification. Results show that QBER increases proportionally with eavesdropping probability, enabling reliable attack detection. The integration of QKD secrecy with PQC authentication ensures both confidentiality and integrity. Performance evaluation demonstrates that the additional latency introduced by PQC authentication remains within acceptable limits. The proposed hybrid framework provides a scalable and quantum-resistant solution suitable for next-generation secure communication systems.
Quantum computing threatens traditional cryptographic systems based on integer factorization and discrete logarithm problems. This paper proposes a hybrid secure communication framework integrating Quantum Key Distribution (QKD) with Post-Quantum Cryptography (PQC) for authentication. The BB84 protocol is used for quantum key generation, while CRYSTALS-Dilithium signatures secure the classical communication channel. A Python-based simulator models photon transmission, Quantum Bit Error Rate (QBER), intercept-resend attacks, and authentication verification. Results show that QBER increases proportionally with eavesdropping probability, enabling reliable attack detection. The integration of QKD secrecy with PQC authentication ensures both confidentiality and integrity. Performance evaluation demonstrates that the additional latency introduced by PQC authentication remains within acceptable limits. The proposed hybrid framework provides a scalable and quantum-resistant solution suitable for next-generation secure communication systems.
Quantum key distribution (QKD) can provide information theoretically secure key exchange even in the era of quantum computer. However, QKD requires the classical channel to be authenticated, and the current method is pre-sharing symmetric keys. For a QKD network of nnn users, this method requires Cn2=n(n−1)/2C_n^2 = n(n-1)/2Cn2​=n(n−1)/2 pairs of symmetric keys to realize pairwise interconnection. In contrast, with the help of mature public key infrastructure (PKI) and post-quantum cryptography (PQC) with quantum resistant security, each user only needs to apply for a digital certificate from certificate authority (CA) to achieve efficient and secure authentication for QKD. We only need to assume the short-term security of the PQC algorithm to achieve the long-term security of the distributed keys. Here, we experimentally verified the feasibility, efficiency and stability of the PQC algorithm in QKD authentication, and demonstrated the advantages when new users join the QKD network. Using PQC authentication we only need to believe the CA is safe, rather than all trusted relays. QKD combined with PQC authentication will greatly promote and extend the application prospects of quantum safe communication.