Enterprise Networks

Bidirectional Quantum-Resistant Connection

The Challenge

Large enterprises require massive data transfer speeds between data centers, but these fiber optic connections are prime targets for tapping and interception. Fortunately, such physical-layer infrastructure can be protected using quantum cryptography such as quantum key distribution (QKD), where security derives from the transmission/detection of single photons of light and the fundamentals of quantum mechanics, rather than computational assumptions. To leverage the benefits of both PQC and QKD, new approaches need to be developed for QKD-PQC hybridization to provide defence in depth while simultaneously satisfying the requirements of high-speed modern fibre infrastructure.

The Q-FENCE Solution

This pilot integrates commercial Quantum Key Distribution (QKD) systems with the Q-FENCE cryptographic core over a high-speed fiber network. It creates a bidirectional, quantum-resistant connection that seamlessly manages encryption keys across multiple sites. By augmenting Q-FENCE with QKD, this task will allow for testing and benchmarking within real-world applications, assessing the effectiveness of QKD-enhanced security in diverse scenarios. TEUR’s QKD technology will facilitate secure quantum key exchange to deliver cryptographic keys, adding a layer of quantum resilience to conventional PQC. Additionally, by connecting with a deployed optical fiber network running between Waterford, Cork and Dublin, Ireland, we can expand the networked setup, simulating a larger-scale deployment across multi-node enterprise environment.

Location

The use case is planned for deployment on a fiber network between Waterford, Cork, and Dublin, Ireland.

Key Features

The use of QKD offers a layer of information-theoretic secure key exchange, which can be flexibly combined with PQC approaches to offer both cryptoagility and defense in depth. The solution employs both hardware-based and software-based approaches, deployed to real-world fiber infrastructure.

The Impact

This integration will allow Q-FENCE to retrieve symmetric keys generated via QKD, offering enhanced security for applications requiring high confidentiality. The QKD system will undergo extensive testing to benchmark its performance within Q-FENCE, evaluating key distribution speed, latency, security resilience, and scalability under varied real-world conditions. The results will guide future developments in PQC and QKD, as well as demonstrating a secure best-in-class cryptoagile fiber network.