Newest papers

Orchestrating Key Scarcity: Global Capacity Allocation in Hybrid QKD-PQC Networks

Pablo P. Rejo, Manuel Fernández‐Veiga, Ana Fernández Vilas, Diego Cajaraville-Aboy, Javier Vecino-Peñas, Rebeca P. Díaz-Redondo · 2026 · arXiv (Cornell University)

DOI: 10.48550/arxiv.2610.27332 · cited by 0 works (OpenAlex) · open-access PDF

Korean

이 문서는 분산 키 관리 시스템 (DKMS)을 통해 네트워크를 통한 응용 프로그램에 양자 안전 대칭 암호화 키를 제공합니다. Quantum Key Distribution (QKD)에 속하는 거리 및 속도 제한을 극복하기 위해, 아키텍처는 하이브리드 디자인을 채택합니다 : 그것은 물리적 키 운송을위한 다중 호프 신뢰할 수있는 리레일을 사용하면서 네트워크를 통한 최종 포스트 양자 암호화 (PQC) 계층을 적용하여 전송 키 자료가 중간 노드로부터 엄격하게 보호되도록합니다. QKD가 키 생성을 희귀한 물리적 자원으로 변환하기 때문에, 예측할 수없는 응용 프로그램을 관리하면 중요한 용량 할당 문제가 발생합니다.이 작업의 핵심 공헌은

Machine translation (Meta M2M100); the English original follows.

Abstract

This article presents a Distributed Key Management System (DKMS) that provisions quantum-safe symmetric encryption keys to applications across a network. To overcome the distance and rate limitations inherent to Quantum Key Distribution (QKD), the architecture adopts a hybrid design: it utilizes multi-hop trusted relays for physical key transport, while applying an end-to-end Post-Quantum Cryptography (PQC) layer to ensure the relayed key material remains strictly protected from intermediate nodes. Because QKD transforms key generation into a scarce physical resource, managing unpredictable application demands poses a critical capacity allocation problem. The core contribution of this work is an SDN-driven control plane that globally orchestrates the network. Rather than relying on vulnerable hop-by-hop capacity reservations, a central controller simultaneously computes optimal filling rates and multipath routing for all per-peer key buffers. This global orchestration ensures that no application is starved and that all key buffers synchronize their filling processes. Evaluated on a Kubernetes-based digital twin across five distinct network topologies, the controller successfully filled all key buffers to capacity in under six minutes. Furthermore, under deliberately excessive demand, the network demonstrated graceful degradation, safely rejecting excess requests through controlled rate-limiting rather than experiencing catastrophic failure.

Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese

Topics: Key (lock), Computer science, Computer network, Quantum key distribution, Physical layer, Key management

Sources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange