Quantum Key Distribution Networks Design: Overview and Challenges

Quantum cryptography, and especially quantum key distribution (QKD), is steadily progressing to become a viable tool for cryptographic services. In recent years we have witnessed a dramatic increase in the secure bit rate of QKD, as well as its extension to ever longer fibre- and air-based links and the emergence of metro-scale trusted networks. In the foreseeable future even global-scale communications may be possible using quantum repeaters or Earth–satellite links. A handful of start-ups and some bigger companies are already active in the field. The launch of an initiative to form industrial standards for QKD, under the auspices of the European Telecommunication Standards Institute, described in the paper by Laenger and Lenhart in this Focus Issue, can be taken as a sign of the growing commercial interest.

A new QKD implementation scheme of BB84 protocol is introduced based on FPGA. Firstly, the overall design method and the functional division are described in detail. Then, the logic design of the sub-module are significantly studied, including random data module, laser source drive module, error correcting module, receiver/transmitter interface module, extracting original key module and error rate estimation module. Finally, the partial simulation results are given to verify the correctness of the design function. The set-up advantage is the small size, high bitrates, flexible configuration, and convenient algorithm update.

Abstract: This book presents a comprehensive exploration of quantum cryptography as an emergent paradigm in secure communications, enhanced through the integration of quantum computing and machine learning methodologies. Grounded in the principles of quantum mechanics—superposition, entanglement, and the no-cloning theorem—it develops a conceptual and mathematical framework for information-theoretic security resistant to both classical and quantum adversaries. The work identifies the limitations of classical cryptographic systems in the advent of large-scale quantum computation and proposes hybrid architectures that leverage machine learning for adaptive threat detection, protocol optimization, and anomaly classification in quantum key distribution (QKD) environments. Methodologically, the text synthesizes theoretical analysis, formal security proofs, and empirical evaluation using both quantum simulation platforms and experimental testbeds. Key results demonstrate that quantum–machine learning synergies can improve key generation rates, enhance noise tolerance, and accelerate real-time countermeasure deployment. The implications extend to the design of scalable, interoperable cryptographic systems compatible with emerging quantum internet infrastructures, while also addressing ethical and regulatory considerations in deployment. By combining rigorous academic analysis with practical implementation insights, this book establishes a scholarly and applied foundation for next-generation secure communication systems in the quantum era. Keywords Quantum cryptography, quantum key distribution, quantum computing, machine learning, quantum machine learning, cryptographic security, post-quantum cryptography, hybrid architectures, adaptive protocol optimization, information-theoretic security, secure communications, quantum internet, ethical implications in cryptography

This study proposes a group key service node placement method for quantum key distribution (QKD) networks based on partially trusted relays, aiming to optimize network structure, improve key distribution efficiency, reduce communication delay, and ensure transmission integrity and confidentiality. Based on graph theory, a key information model for the quantum key distribution network is established, which defines node types, functions, and connectivity. Leveraging the secure transmission protocol of quantum keys, the unconditional security of the key during transmission is ensured. Furthermore, this study proposes a QKD network architecture incorporating partially trusted relays, which combines trusted and untrusted relay technologies. An improved p-median model is introduced and solved using a greedy algorithm to ensure secure quantum key distribution and optimal deployment of group key service nodes. Experimental results demonstrate that the location of group key service nodes in quantum key distribution network ensures the minimum number of key service nodes and minimizes the path length from network demand nodes to group key service nodes. Furthermore, this method significantly improves the key distribution efficiency, success rate, security, energy consumption, resource consumption, network coverage, and blind area of quantum key distribution network.

By leveraging the fundamental principles of quantum mechanics, quantum cryptography represents a paradigm shift in secure communication by providing information-theoretic security, where any eavesdropping attempt can be intrinsically detected, and by offering resistance to computational attacks, including those posed by future quantum computers that threaten classical cryptographic schemes. To establish Quantum Key Distribution (QKD) as a significant tool in cybersecurity, this study examines the foundational principles of quantum cryptography, focusing on quantum algorithms, quantum bits, and quantum gates. We examine the fundamental QKD protocols and conduct a comparative study of prominent QKD protocols, including BB84, B92, E91, B92, SARG04, COW, Continuous Variable, Six State, Device Independent, and advanced protocols such as MDI-QKD and Twin-Field QKD, to evaluate key rate, distance, and security parameters. A systematic review of the literature has been conducted on the evolution of QKD protocols and networks, QKD integration with advanced technologies like blockchain, IoT, and machine learning, and the practical deployment of quantum communication is studied in this paper. The integration of AI and ML into QKD systems is investigated to explain future algorithm development and performance improvements. Also the function of QKD in quantum networks and the Internet of Things (IoT) is assessed. This paper further delves into the operation of quantum networks, detailing the roles of quantum relays, routers, repeaters, and Free Space Optics (FSO) in enhancing the efficiency and scalability of QKD. Assessing simulators such as SimulaQron, Qiskit, QuNetSim, and QKDNetSim, offering a perception into experimental implementation and protocol validation, resolves the difficulties in quantum-secured communication systems. At last, some security threats are discussed, including Laser damage, Trojan horse attacks, photon-number splitting, and detector blinding, for mitigation of risk strategies. Overall, this work contributes to the importance of QKD and quantum networks in shaping the future of secure wireless communication.

Light with a complex amplitude structure invokes interesting fundamental properties such as phase and polarization singularities, which also enables novel applications in classical and quantum optical experiments [1]. One feature, namely a twisted phase front and its orbital angular momentum, attracted a lot of attention due its broad range of applications. In the quantum domain, structured photons are highly beneficial since they serve as a physical realizations of high-dimensional states, which allow for example an enlarged information content per single carrier and are known to have a better noise resistance in quantum cryptography applications [2]. At first, I will present a set of laboratory experiments, in which we investigate different quantum cryptographic protocols. Our versatile approach relies on a heralded single photon source, a preparation stage at Alice’s sender, a 1 m-long quantum channel, and a detection stage at Bob’s receiver unit. Because the generation and detection is performed using computer generated, re-programmable holograms displayed on spatial light modulators, the same setup can be used to experimentally survey different quantum key distribution techniques and compare their benefits and deficiencies. The investigated protocols are all based on high-dimensional quantum states and include the seminal protocol of Bennett & Brassard, tomographic protocols, and recently introduced differential phase shift protocols [3,4]. We compare the performance of the different approaches in terms of noise resistance and secret key rates. Our study highlights the benefits of using structured photons and high-dimensional quantum states for different implementations and channel conditions. In a second series of experiments, we get a step closer to real world implementations and investigate long distance and underwater quantum cryptography using high-dimensional quantum information encoded on structured light. We establish an approx. 280m long intra-city quantum link and study the influence of turbulence on achievable key rates [5]. We further test the effect of water turbulences on an underwater quantum channel using twisted photons in an outdoor pool of 3 m length [6]. Although we are able establish a secure channel with three dimensional quantum states, we find mode deformations and vortex splitting due to strong turbulent conditions most probably caused by local variations in temperature. We perform a detailed analysis of the observed turbulence and find that underwater channels may give rise to turbulent conditions that are fundamentally different in terms of temporal and spatial disturbance from those present in a free-space channel. [1] H. Rubinsztein-Dunlop et al. Roadmap on structured light, Journal of Optics 19, 013001 (2017) [2] M. Erhard, R. Fickler, M. Krenn, A. Zeilinger, Twisted Photons: New Quantum Perspectives in High Dimensions, Nature Light: Science & Applications, 7 17146 (2018) [3] F. Bouchard et al. Experimental investigation of quantum key distribution protocols with twisted photons, arXiv:1802.05773 [4] F. Bouchard, A. Sit, K. Heshami, R. Fickler, E. Karimi, Round-Robin Differential Phase-Shift Quantum Key Distribution with Twisted Photons, arXiv:1803.00166 [5] A. Sit et al. High-Dimensional Intra-City Quantum Cryptography with Structured Photons, Optica 4, 1006 (2017) [6] F. Bouchard et al. Underwater Quantum Key Distribution in Outdoor Conditions with Twisted Photons, arXiv:1801.10299

Quantum computing has the capability of parallel computing and is superior to classical computing in solving some specific problems. Once a large-scale quantum computer is developed, the security of classical cryptographic algorithms and protocols, which is based on the assumption of computational complexity, will be severely challenged. Quantum cryptography is a new cryptosystem; its security is based on the principles of quantum mechanics, and can resist the attack of quantum computing. This paper focuses on the nearly 40 years development of quantum cryptographic protocols, including quantum key distribution (QKD), quantum secure direct communication, quantum secret sharing, quantum identity authentication, two-party secure computation, and quantum private query, and summarizes the problems in the process of development. The analysis shows that the quantum cryptographic protocols are in an unbalanced state: QKD is far ahead of other protocols and other protocols are difficult to achieve breakthroughs. In the future, practical quantum protocols for digital signature and two-party secure computation are core issues that needs to be addressed urgently. Therefore, research on quantum and post-quantum cryptography should be conducted synchronously, cross-over study and talent cultivation for the quantum science and cryptography disciplines should be strengthened, and the examination and evaluation mechanism of relevant basic research needs to be optimized.

The security of quantum cryptography relies on the foundations of quantum mechanics, in contrast to traditional public key cryptography which relies on the computational difficulty of certain mathematical functions, and cannot provide any indication of eavesdropping or guarantee of key security. The proposal present in this work develops a quantum key distribution model to safeguard security in large networks, in the directions of classical cryptography and quantum cryptography. Two three-party Quantum key distribution are used in this model, one with implicit user authentication and the other with explicit mutual authentication, are proposed to demonstrate the merits of the new combination. The performance of Quantum Key Distribution (QKD) systems have notably progressed since the early experimental demonstrations. The current evolutions in QKD research indicate that the pace of this progression is very likely to be maintained, if not increased, in the future years. In parallel to these improvements of QKD techniques, commercial products are also being developed, making QKD deployment a feasible alternative for securing real data networks. Deployment of a real QKD network is however far from being straightforward. It requires development of a network architecture connecting multiple users that may possibly be very far away from each other. Considering the fact that the existing QKD links are only point-to-point, and intrinsically limited in distance, deployment of a practical QKD network structure is a nontrivial problem. The proposed work describes the proposed architecture for a QKD network specify the requirements relevant to the network design, protocols, and services. The objective of this specification is to define the major components and their main features The proposal provides security against such attacks as man-in-the-middle, eavesdropping and replay. It also improves the efficiency of the quantum key distribution which contains the fewest number of communication rounds among existing Quantum key distributions. In this model two parties can share and use a long-term secret (repeatedly). To prove the security of the proposed schemes, this proposed model provides a primitive called the Unbiased-Chosen Basis (UCB) assumption with the quantum key in angular positions.

Quantum Key Distribution (QKD) networks allow multiple users to generate and share secret quantum keys with unconditional security. Although many schemes of QKD networks have been presented, they are only concentrated on the system realization and physical implementations. For the complete practical quantum network, a succinct theoretic model that systematically describes the working processes from physical schemes to key process protocols, from network topology to key management, and from quantum communication to classical communication is still absent. One would hope that research and experience have shown that there are certain succinct model in the design of communication network. With demonstration of the different QKD links and the four primary types of quantum networks including probability multiplexing, wavelength multiplexing, time multiplexing and quantum multiplexing, we suggest a layer model for QKD networks which will be compatible with different implementations and protocols. We divide it into four main layers by their functional independency while defining each layer's services and responsibilities in detail, orderly named quantum links layer, quantum networks layer, quantum key distribution protocols process layer, and keys management layer. It will be helpful for the systematic design and construction of real QKD networks.

The demand for security is growing exponentially in every field of developing technology. Over the decades, classical and modern cryptographic algorithms have served this need with an appreciable performance. But with the realization of threats to this backbone cryptography, researchers have developed a keen interest in Quantum cryptography(QC). QC provides an unconditionally secure means of information transfer through the basic laws of quantum mechanics. Quantum key distribution(QKD) is one of the most developed application of QC. But due to primitive technology it is still facing many developmental glitches. Although there is a fare amount of QKD experimentation available, the experiments are limited with specific set of parameters. To observe the effect of parameter variation it is essential to model the QKD process. This paper discusses the simulation approach for understanding and testing the working of practical prepare and measure QKD protocol. The developed model is tested with the experimental test data from three QKD setups. Performance parameters such as quantum bit error rate and secret key rate are analyzed. It is observed that the simulated results matches with the experimental results.

Quantum secure direct communication (QSDC) is an important branch of quantum communication that is capable of directly transmitting secret messages over a quantum channel. It may be viewed as a concrete realization of Wyner’s wiretap channel theory, which ensures the reliable and secure communication of information in the presence of noise and eavesdropping. Hence it is a fully-fledged quantum-communications protocol, which does not require a separate secret key negotiation phase. By contrast, its quantum key distribution (QKD) counterpart represents a secret key-negotiation protocol, which has to be followed up by a separate classical communication session. The essential difference between these two modes of quantum communication lies in the employment of a block-based data transmission technique, proposed by Long and Liu in 2000. However, the original block-based data transmission requires quantum memory, which is not widely available at the time of writing. Recently, this difficulty has been overcome by using classical coding theory, which has been successfully applied to the single-qubit DL04 QSDC. Here we will present a single-photon-memory QSDC protocol based on entangled pairs of photons. We commence by comparing QSDC to QKD, followed by an example of the single-photon QSDC and single-photon QKD protocol. Then we continue by modifying the so-called two-step QSDC protocol designed for deterministic QKD by reducing the number of qubits in a block into a single one, in which Alice prepares Einstein-Podolsky-Rosen (EPR) photon pairs and partitions them into two parts: the so-called pioneer qubit and the follow-up qubit. The pioneer photon is transferred first to Bob, while the follow-up photon is used either for performing encoding or for eavesdropping detection. Bob extracts the candidate key by combining the two particles of the EPR pair to perform Bell-basis measurement. Then the protocol is transformed into a single-photon-memory QSDC using coding theory. Our theoretical analysis shows that the resultant protocol is robust to individual attacks. Additionally, a high communication efficiency is achieved.

Quantum key distribution (QKD) exploits the laws of quantum physics to generate shared secret cryptographic keys and can detect eavesdroppers during the key generation process. However, previous QKD research has focused more on theory than practice. QKD is the most mature application of the quantum information field, offering the means for two parties to generate secure cryptographic keying material. Employing the laws of quantum physics, QKD can detect eavesdroppers during the key generation process, in which unauthorized observation of quantum communication induces discernible errors. However, QKD is a nascent technology where real-world systems are constructed from nonideal components and deployed in uncertain operational environments, which can adversely impact system security and performance. In this article, we study the performance impact of QKD implementation nonidealities and practical engineering limitations, evaluating three system examples using a modularized simulation framework. We also explore the QKD security–performance trade space to gain additional understanding of critical design tradeoffs associated with interactions between physical components and system-level considerations such as hardware, software, and protocols. Such evaluations provide insight and inform designers, researchers, and users when selecting among competing solutions; decision makers can also use them to guide future investments and developmental efforts. Our research team focuses on bridging the gap between QKD theory and practice. Theoretical and experimental physicists are working to advance QKD technology, but few are strongly focused on evaluating and improving the implementation of realized systems. For a general introduction to QKD, see Chip Elliot’s “Quantum Cryptography.”

We develop a novel key routing algorithm for quantum key distribution (QKD) networks that utilizes a distribution of keys between remote nodes, i.e., not directly connected by a QKD link, through multiple non-overlapping paths. This approach focuses on the security of a QKD network by minimizing potential vulnerabilities associated with individual trusted nodes. The algorithm ensures a balanced allocation of the workload across the QKD network links, while aiming for the target key generation rate between directly connected and remote nodes. We present the results of testing the algorithm on two QKD network models consisting of 6 and 10 nodes. The testing demonstrates the ability of the algorithm to distribute secure keys among the nodes of the network in an all-to-all manner, ensuring that the information-theoretic security of the keys between remote nodes is maintained even when one of the trusted nodes is compromised. These results highlight the potential of the algorithm to improve the performance of QKD networks.

Quantum Cryptography (QC) revolutionizes network communication – harnessing principles of quantum mechanics to enable the exchange of encrypted messages – for enabling secure data transmission in an era of quantum information processing. With a significant rise in quantum computing research and development efforts, there is an increasing interest in exploring QC (e.g., Quantum Key Distribution (QKD) and Quantum Secured Encryption (QSE)) against a multitude of security threats in futuristic networks for quantum information processing. The objective of this study is to review the existing research i.e., consolidating the published evidence, that streamlines and documents the predominant challenges, recurring solutions, security threats, and their counter-measures against the outlined research questions in the context of QC. To conduct this study, we followed the guidelines and method of Systematic Literature Reviews (SLRs) to answer seven research questions. These questions investigate the proposed solutions for state-of-the-art QC and its impact on future network security. Based on the seven (7) outlined research questions, this study systematically selected and reviewed one hundred and thirty four (134) research studies published from 2016 to 2023 with a focus on QC for quantum information processing. The results of this SLR establish a knowledge base for modern QC applications to guarantee network security in quantum-enabled network communications. The review reveals that though still in the phase of its inception, the research on QC is progressing rapidly, highlighting the necessity for network protocol and frameworks to cater for quantum network security. The SLR also highlights the challenges encountered while designing or implementing the QC systems, pinpointing the significance of keeping abreast of QKD networks and addressing possible ramifications for internet security in the future. The SLR provides theoretical foundations and evidence-based guidelines to tackle emerging and futuristic challenges of security in the context of QC and QKD for quantum information processing.

We introduce the concept of cryptographic reduction, in analogy with a similar concept in computational complexity theory. In this framework, class A of crypto-protocols reduces to protocol class B in a scenario X, if for every instance a of A, there is an instance b of B and a secure transformation X that reproduces a given b, such that the security of b guarantees the security of a. Here we employ this reductive framework to study the relationship between security in quantum key distribution (QKD) and quantum secure direct communication (QSDC). We show that replacing the streaming of independent qubits in a QKD scheme by block encoding and transmission (permuting the order of particles block by block) of qubits, we can construct a QSDC scheme. This forms the basis for the block reduction from a QSDC class of protocols to a QKD class of protocols, whereby if the latter is secure, then so is the former. Conversely, given a secure QSDC protocol, we can of course construct a secure QKD scheme by transmitting a random key as the direct message. Then the QKD class of protocols is secure, assuming the security of the QSDC class which it is built from. We refer to this method of deduction of security for this class of QKD protocols, as key reduction. Finally, we propose an orthogonal-state-based deterministic key distribution (KD) protocol which is secure in some local post-quantum theories. Its security arises neither from geographic splitting of a code state nor from Heisenberg uncertainty, but from post-measurement disturbance.