Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper introduces a layered network architecture combining Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) for scalable, long-distance security in multi-hop quantum networks. The architecture uses WireGuard with QKD-sourced keys for hop-wise security and Rosenpass for end-to-end PQC key exchange, ensuring interoperability with existing QKD deployments. Experimental validation demonstrates uninterrupted operation, low resource usage, and fail-safe mechanisms, highlighting the design's compositional security.
Achieve post-quantum security and forward secrecy in QKD networks without modifying existing QKD devices or network protocols.
We present a layered and modular network architecture that combines Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) to provide scalable end-to-end security across long distance multi-hop, trusted-node quantum networks. To ensure interoperability and efficient practical deployment, hop-wise tunnels between physically secured nodes are protected by WireGuard with periodically rotated pre-shared keys sourced via the ETSI GS QKD 014 interface. On top, Rosenpass performs a PQC key exchange to establish an end-to-end data channel without modifying deployed QKD devices or network protocols. This dual-layer composition yields post-quantum forward secrecy and authenticity under practical assumptions. We implement the design using open-source components and validate and evaluate it in simulated and lab test-beds. Experiments show uninterrupted operation over multi-hop paths, low resource footprint and fail-safe mechanisms. We further discuss the design's compositional security, wherein the security of each individual component is preserved under their combination and outline migration paths for operators integrating QKD-aware overlays in existing infrastructures.