Network-wide Quantum Key Distribution with Onion Routing Relay (Conference Version)

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Otero-García, Pedro, Pérez-Castro, David, Fernández-Veiga, Manuel, Fernández-Vilas, Ana
Format: Preprint
Published: 2025
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866916744143044608
author Otero-García, Pedro
Pérez-Castro, David
Fernández-Veiga, Manuel
Fernández-Vilas, Ana
author_facet Otero-García, Pedro
Pérez-Castro, David
Fernández-Veiga, Manuel
Fernández-Vilas, Ana
contents The advancement of quantum computing threatens classical cryptographic methods, necessitating the development of secure quantum key distribution (QKD) solutions for QKD Networks (QKDN). In this paper, a novel key distribution protocol, Onion Routing Relay (ORR), that integrates onion routing (OR) with post-quantum cryptography (PQC) in a key-relay (KR) model is evaluated for QKDNs. This approach increases the security by enhancing confidentiality, integrity, authenticity (CIA principles), and anonymity in quantum-secure communications. By employing PQC-based encapsulation, ORR aims to avoid the security risks posed by intermediate malicious nodes and ensures end-to-end security. Our results show a competitive performance of the basic ORR model, against current KR and trusted-node (TN) approaches, demonstrating its feasibility and applicability in high-security environments maintaining a consistent Quality of Service (QoS). The results also show that while basic ORR incurs higher encryption overhead, it provides substantial security improvements without significantly impacting the overall key distribution time. Nevertheless, the introduction of an end-to-end authentication extension (ORR-Ext) has a significant impact on the Quality of Service (QoS), thereby limiting its suitability to applications with stringent security requirements.
format Preprint
id arxiv_https___arxiv_org_abs_2505_13158
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Network-wide Quantum Key Distribution with Onion Routing Relay (Conference Version)
Otero-García, Pedro
Pérez-Castro, David
Fernández-Veiga, Manuel
Fernández-Vilas, Ana
Cryptography and Security
The advancement of quantum computing threatens classical cryptographic methods, necessitating the development of secure quantum key distribution (QKD) solutions for QKD Networks (QKDN). In this paper, a novel key distribution protocol, Onion Routing Relay (ORR), that integrates onion routing (OR) with post-quantum cryptography (PQC) in a key-relay (KR) model is evaluated for QKDNs. This approach increases the security by enhancing confidentiality, integrity, authenticity (CIA principles), and anonymity in quantum-secure communications. By employing PQC-based encapsulation, ORR aims to avoid the security risks posed by intermediate malicious nodes and ensures end-to-end security. Our results show a competitive performance of the basic ORR model, against current KR and trusted-node (TN) approaches, demonstrating its feasibility and applicability in high-security environments maintaining a consistent Quality of Service (QoS). The results also show that while basic ORR incurs higher encryption overhead, it provides substantial security improvements without significantly impacting the overall key distribution time. Nevertheless, the introduction of an end-to-end authentication extension (ORR-Ext) has a significant impact on the Quality of Service (QoS), thereby limiting its suitability to applications with stringent security requirements.
title Network-wide Quantum Key Distribution with Onion Routing Relay (Conference Version)
topic Cryptography and Security
url https://arxiv.org/abs/2505.13158