Topology-Hiding Path Validation for Large-Scale Quantum Key Distribution Networks
- URL: http://arxiv.org/abs/2604.01831v1
- Date: Thu, 02 Apr 2026 09:45:43 GMT
- Title: Topology-Hiding Path Validation for Large-Scale Quantum Key Distribution Networks
- Abstract summary: We present a path validation protocol specifically designed for QKD networks.<n>It enables the receiver to verify compliance with agreed-upon policies.<n> Protocol preserves the operator's confidentiality by ensuring that no sensitive information about the network topology is revealed to users.
- Score: 1.4136330551561629
- License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
- Abstract: Secure long-distance communication in quantum key distribution (QKD) networks depends on trusted repeater nodes along the entire transmission path. Consequently, these nodes will be subject to strict auditing and certification in future large-scale QKD deployments. However, trust must also extend to the network operator, who is responsible for fulfilling contractual obligations -- such as ensuring certified devices are used and transmission paths remain disjoint where required. In this work, we present a path validation protocol specifically designed for QKD networks. It enables the receiver to verify compliance with agreed-upon policies. At the same time, the protocol preserves the operator's confidentiality by ensuring that no sensitive information about the network topology is revealed to users. We provide a formal model and a provably secure generic construction of the protocol, along with a concrete instantiation. For long-distance communication involving 100 nodes, the protocol has a computational cost of 1-2.5s depending on the machine, and a communication overhead of less than 70kB - demonstrating the efficiency of our approach.
Related papers
- Deploying and validating a metropolitan QKD secure network: architecture and field performance [76.02413102965598]
Quantum Key Distribution provides information-theoretic security for key establishment.<n>A metropolitan-scale quantum-secure network between data centers in Milan is reported.<n>Results establish the technical and operational readiness of metropolitan QKD networks for production deployment.
arXiv Detail & Related papers (2026-07-13T15:51:26Z) - PQC-Enhanced QKD Networks: A Layered Approach [0.5249805590164902]
We present a layered and modular network architecture that combines Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC)<n>To ensure interoperability and efficient practical deployment, hop-wise tunnels between physically secured nodes are protected by WireGuard.<n>Rosenpass performs a PQC key exchange to establish an end-to-end data channel without modifying deployed QKD devices or network protocols.
arXiv Detail & Related papers (2026-04-07T08:48:05Z) - Topology-Hiding Connectivity-Assurance for QKD Inter-Networking [0.15293427903448018]
We introduce a topology-hiding connectivity assurance protocol to enhance trust in quantum key distribution networks.<n>Our protocol allows network providers to jointly prove the existence of a secure connection between endpoints without revealing internal topology details.
arXiv Detail & Related papers (2026-04-02T10:30:43Z) - Integrity from Algebraic Manipulation Detection in Trusted-Repeater QKD Networks [0.745554610293091]
Quantum Key Distribution (QKD) allows secure communication without relying on computational assumptions.<n>We present the first protocol that provably provides both confidentiality and integrity.
arXiv Detail & Related papers (2026-01-20T15:44:56Z) - Verifier-initiated quantum message-authentication via quantum zero-knowledge proofs [38.81686642226027]
We introduce a new method where the verifier can request authentication only when needed, improving efficiency for quantum networks and blockchain applications.<n>Our approach adapts the concept of zero-knowledge widely used in classical cryptography to quantum settings, ensuring that verification reveals nothing about secret keys.<n>This work delivers the first general verifier-initiated quantum signature scheme with formal security, paving the way for scalable, secure authentication in future quantum infrastructures and decentralized systems.
arXiv Detail & Related papers (2025-12-05T04:40:34Z) - Practical hybrid PQC-QKD protocols with enhanced security and performance [44.8840598334124]
We develop hybrid protocols by which QKD and PQC inter-operate within a joint quantum-classical network.
In particular, we consider different hybrid designs that may offer enhanced speed and/or security over the individual performance of either approach.
arXiv Detail & Related papers (2024-11-02T00:02:01Z) - Towards efficient and secure quantum-classical communication networks [47.27205216718476]
There are two primary approaches to achieving quantum-resistant security: quantum key distribution (QKD) and post-quantum cryptography (PQC)
We introduce the pros and cons of these protocols and explore how they can be combined to achieve a higher level of security and/or improved performance in key distribution.
We hope our discussion inspires further research into the design of hybrid cryptographic protocols for quantum-classical communication networks.
arXiv Detail & Related papers (2024-11-01T23:36:19Z) - Composable Continuous-Variable Multi-User QKD with Discrete Modulation: Theory and Implementation [2.7163502859846873]
We generalize a well-established discrete-modulated continuous-variable (CV) QKD protocol from the point-to-point to the point-to-multipoint setting.<n> Experimentally, we validate the protocol in a passive optical network with 10 km access links, achieving a composable secure key rate of $2.185 times 10-3$ bits per symbol.
arXiv Detail & Related papers (2024-06-20T18:00:01Z) - The Evolution of Quantum Secure Direct Communication: On the Road to the Qinternet [49.8449750761258]
Quantum secure direct communication (QSDC) is provably secure and overcomes the threat of quantum computing.<n>We will detail the associated point-to-point communication protocols and show how information is protected and transmitted.
arXiv Detail & Related papers (2023-11-23T12:40:47Z) - Practical quantum secure direct communication with squeezed states [37.69303106863453]
We report the first table-top experimental demonstration of a CV-QSDC system and assess its security.<n>This realization paves the way into future threat-less quantum metropolitan networks, compatible with coexisting advanced wavelength division multiplexing (WDM) systems.
arXiv Detail & Related papers (2023-06-25T19:23:42Z) - Learning Quantum Entanglement Distillation with Noisy Classical
Communications [39.000858564696856]
entanglement distillation aims to enhance the fidelity of entangled qubits through local operations and classical communication.
Existing distillation protocols assume the availability of ideal, noiseless, communication channels.
In this paper, we study the case in which communication takes place over noisy binary symmetric channels.
arXiv Detail & Related papers (2022-05-17T18:10:16Z) - Remote quantum-safe authentication of entities with physical unclonable
functions [0.0]
We discuss the requirements that an entity authentication protocol has to offer in order to be useful for remote entity authentication in practice.
We propose a protocol, which can operate over large distances, and offers security against both classical and quantum adversaries.
arXiv Detail & Related papers (2021-08-01T15:03:23Z) - Practical quantum multiparty signatures using quantum-key-distribution
networks [0.0]
We develop an unconditionally secure signature scheme that guarantees authenticity and transferability of arbitrary length messages in a quantum key distribution network.
We provide a comprehensive security analysis of the developed scheme, perform an optimization of the scheme parameters with respect to the secret key consumption, and demonstrate that the developed scheme is compatible with the capabilities of currently available QKD devices.
arXiv Detail & Related papers (2021-07-27T17:41:40Z)
This list is automatically generated from the titles and abstracts of the papers in this site.
This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.