PQC-Enhanced QKD Networks: A Layered Approach

• URL: http://arxiv.org/abs/2604.05599v1
• Date: Tue, 07 Apr 2026 08:48:05 GMT
• Title: PQC-Enhanced QKD Networks: A Layered Approach
• Abstract summary: We present a layered and modular network architecture that combines Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC)<n>To ensure interoperability and efficient practical deployment, hop-wise tunnels between physically secured nodes are protected by WireGuard.<n>Rosenpass performs a PQC key exchange to establish an end-to-end data channel without modifying deployed QKD devices or network protocols.
• Score: 0.5249805590164902
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: We present a layered and modular network architecture that combines Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) to provide scalable end-to-end security across long distance multi-hop, trusted-node quantum networks. To ensure interoperability and efficient practical deployment, hop-wise tunnels between physically secured nodes are protected by WireGuard with periodically rotated pre-shared keys sourced via the ETSI GS QKD 014 interface. On top, Rosenpass performs a PQC key exchange to establish an end-to-end data channel without modifying deployed QKD devices or network protocols. This dual-layer composition yields post-quantum forward secrecy and authenticity under practical assumptions. We implement the design using open-source components and validate and evaluate it in simulated and lab test-beds. Experiments show uninterrupted operation over multi-hop paths, low resource footprint and fail-safe mechanisms. We further discuss the design's compositional security, wherein the security of each individual component is preserved under their combination and outline migration paths for operators integrating QKD-aware overlays in existing infrastructures.

Related papers

• A Scalable Cloud-Orchestrated and Service-Oriented Multi-Domain QKD Network with PQC Integration [0.0]
  This work presents a flexible multi-domain and multi-site quantum-secure network architecture integrating vendor-agnostic QKD, SDN orchestration, and cloud-managed trust services.<n> Communication is based on Zero Trust Network Access protocols featuring multi-level authentication mechanisms.<n>The proposed framework extends quantum-safe key transport beyond native QKD boundaries while preserving flexibility, interoperability, and compatibility with existing infrastructures.
  arXiv  Detail & Related papers  (2026-07-14T13:37:28Z)
• Deploying and validating a metropolitan QKD secure network: architecture and field performance [76.02413102965598]
  Quantum Key Distribution provides information-theoretic security for key establishment.<n>A metropolitan-scale quantum-secure network between data centers in Milan is reported.<n>Results establish the technical and operational readiness of metropolitan QKD networks for production deployment.
  arXiv  Detail & Related papers  (2026-07-13T15:51:26Z)
• Topology-Hiding Connectivity-Assurance for QKD Inter-Networking [0.15293427903448018]
  We introduce a topology-hiding connectivity assurance protocol to enhance trust in quantum key distribution networks.<n>Our protocol allows network providers to jointly prove the existence of a secure connection between endpoints without revealing internal topology details.
  arXiv  Detail & Related papers  (2026-04-02T10:30:43Z)
• Combined Quantum and Post-Quantum Security Performance Under Finite Keys [3.9556117884773]
  hybrid schemes that combine Quantum Key Distribution (QKD) with Post-Quantum Cryptography (PQC)<n>Most existing hybrid designs omit realistic finite-key effects on QKD key rates and do not specify how to maintain security when both QKD and PQC primitives leak information through side-channels.<n>We advance a recently proposed hybrid QKD-PQC system by integrating tight finite-key security to the QKD primitive and improving the design for better scalability.
  arXiv  Detail & Related papers  (2025-12-04T03:52:08Z)
• Hybrid Quantum Security for IPsec [1.8637078358591843]
  This paper presents the first systematic comparison of sequential versus parallel hybrid QKD-PQC key establishment strategies for IPsec.<n>We introduce two novel approaches for incorporating QKD into Internet Key Exchange version 2 (IKEv2) with support for both ETSI GS QKD 004 stateful and ETSI GS QKD 014 stateless API specifications.<n>Our key insight is that parallel hybrid approaches eliminate the multiplicative latency penalties inherent in sequential methods mandated by RFC 9370.
  arXiv  Detail & Related papers  (2025-07-12T13:54:04Z)
• Hybrid Implementation for Untrusted-node-based Quantum Key Distribution Network [16.242325482656927]
  Quantum key distribution (QKD) serves as a cornerstone of secure quantum communication.<n>We present a hybrid system that seamlessly integrates TF-QKD and MDI-QKD into one untrusted-node-based architecture.<n> Experiments demonstrate secure finite-size key rates for sending-or-not-sending QKD and MDI-QKD over fiber distances of 150 to 431 km.
  arXiv  Detail & Related papers  (2025-03-07T02:27:41Z)
• High-Fidelity Coherent-One-Way QKD Simulation Framework for 6G Networks: Bridging Theory and Reality [105.73011353120471]
  Quantum key distribution (QKD) has been emerged as a promising solution for guaranteeing information-theoretic security.<n>Due to the considerable high-cost of QKD equipment, a lack of QKD communication system design tools is challenging.<n>This paper introduces a QKD communication system design tool.
  arXiv  Detail & Related papers  (2025-01-21T11:03:59Z)
• Practical hybrid PQC-QKD protocols with enhanced security and performance [44.8840598334124]
  We develop hybrid protocols by which QKD and PQC inter-operate within a joint quantum-classical network. In particular, we consider different hybrid designs that may offer enhanced speed and/or security over the individual performance of either approach.
  arXiv  Detail & Related papers  (2024-11-02T00:02:01Z)
• Towards efficient and secure quantum-classical communication networks [47.27205216718476]
  There are two primary approaches to achieving quantum-resistant security: quantum key distribution (QKD) and post-quantum cryptography (PQC) We introduce the pros and cons of these protocols and explore how they can be combined to achieve a higher level of security and/or improved performance in key distribution. We hope our discussion inspires further research into the design of hybrid cryptographic protocols for quantum-classical communication networks.
  arXiv  Detail & Related papers  (2024-11-01T23:36:19Z)
• Quantum-Secured Data Centre Interconnect in a field environment [38.4938584033229]
  Quantum key distribution (QKD) is an established quantum technology at a high readiness level. In this article, we present the successful implementation of a QKD field trial within a commercial data centre environment. The achieved average secret key rate of 2.392 kbps and an average quantum bit error rate of less than 2% demonstrate the commercial feasibility of QKD in real-world scenarios.
  arXiv  Detail & Related papers  (2024-10-14T08:05:25Z)
• Composable Continuous-Variable Multi-User QKD with Discrete Modulation: Theory and Implementation [2.7163502859846873]
  We generalize a well-established discrete-modulated continuous-variable (CV) QKD protocol from the point-to-point to the point-to-multipoint setting.<n> Experimentally, we validate the protocol in a passive optical network with 10 km access links, achieving a composable secure key rate of $2.185 times 10-3$ bits per symbol.
  arXiv  Detail & Related papers  (2024-06-20T18:00:01Z)
• Practical quantum secure direct communication with squeezed states [37.69303106863453]
  We report the first table-top experimental demonstration of a CV-QSDC system and assess its security.<n>This realization paves the way into future threat-less quantum metropolitan networks, compatible with coexisting advanced wavelength division multiplexing (WDM) systems.
  arXiv  Detail & Related papers  (2023-06-25T19:23:42Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.