DemoQuanDT

Jan 1, 2022

Duration: January 2022 – March 2025

DemoQuanDT is an application-oriented research project to demonstrate and investigate quantum communication networks by establishing an entire QKD route within the German telecommunication network. Connecting Berlin and Bonn over a link distance of 923 km, the project includes all necessary components, systems, and processes for carrier-grade quantum key distribution.

The project addresses the growing threat that quantum computers pose to asymmetric cryptography used in everyday internet protocols. It investigates how to profitably combine Post-Quantum Cryptography (PQC) with Quantum Key Distribution (QKD) and how to integrate both into existing communication protocols such as TLS. The overall objective is to develop reliable and usable protection against quantum computers, especially for critical infrastructures.

Partners

Funded by the German Federal Ministry of Education and Research (BMBF).

PQC QKD

Publications

DemoQuanDT: a carrier-grade QKD network

Abstract

Quantum key distribution networks (QKDNs) enable secure communication even in the age of powerful quantum computers. In the hands of a network operator, which can offer its service to many users, the economic viability of a QKDN increases significantly. The highly challenging operator–user relationship in a large-scale network setting demands additional requirements to ensure carrier-grade operation. Addressing this challenge, this work presents a carrier-grade QKDN architecture, which combines the functional QKDN architecture with the operational perspective of a network operator, ultimately enhancing the economic viability of QKDNs. The focus is on the network and key management aspects of a QKDN while assuming state-of-the-art commercial QKD modules. The presented architecture was rolled out within an in-field demonstrator, connecting the cities of Berlin and Bonn over a link distance of 923 km across Germany. We could show that the proposed network architecture is feasible, integrable, and scalable, making it suitable for deployment in real-world networks. Overall, the presented carrier-grade QKDN architecture promises to serve as a blueprint for network operators providing QKD-based services to their customers.

P. Horoschenkoff, Johanna Henrich, R. Böhn, I. Khan, J. Rödiger, M. Gunkel, M. Bauch, J. Benda, P. Bläcker, E. Eichhammer, U. Eismann, G. Frenck, H. Griesser, W. Jontofsohn, N. Kopshoff, S. Röhrich, F. Seidl, N. Schark, E. Sollner, D. Von Blanckenburg, Andreas Heinemann, M. Stiemerling, M. Gärtner

Performance Impact of PQC KEMs on TLS 1.3 Under Varying Network Characteristics

Abstract

Widely used asymmetric primitives such as RSA or Elliptic Curve Diffie Hellman (ECDH), which enable authentication and key exchange, could be broken by Quantum Computers (QCs) in the coming years. Quantum-safe alternatives are urgently needed. However, a thorough investigation of these schemes is crucial to achieve sufficient levels of security, performance, and integrability in different application contexts. The integration into Transport Layer Security (TLS) plays an important role, as this security protocol is used in about 90% of today’s Internet connections and relies heavily on asymmetric cryptography. In this work, we evaluate different Post Quantum Cryptography (PQC) key establishment schemes in TLS 1.3 by extending the framework of Paquin et al.. We analyze the TLS handshake performance under variation of network parameters such as packet loss. This allows us to investigate the suitability of PQC KEMs in specific application contexts. We observe that Kyber and other structured lattice-based algorithms achieve very good overall performance and partially beat classical schemes. Other approaches such as FrodoKEM, HQC and BIKE show individual disadvantages. For these algorithms, there is a clear performance decrease when increasing the security level or using a hybrid implementation, e.g., a combination with ECDH. This is especially true for FrodoKEM, which, however, meets high security requirements in general. It becomes clear that performance is strongly influenced by the underlying network processes, which must be taken into account when selecting PQC algorithms.

Johanna Henrich, Andreas Heinemann, Alexander Wiesmaier, Nicolai Schmitt

Crypto-Agile Design and Testbed for QKD-Networks