Abstract: The present disclosure provides for an architecture for a multi-interface card environment, such as a server that includes multiple network interface cards (NICs) or peripheral component interconnect express (PCIe) cards. The architecture includes a passive optical splitter coupled between a leader clock and the multiple interface cards or PCIes. The optical splitter can be used to distribute clock time from the leader clock to the interface cards. The architecture provides for distribution of timing in a scalable manner in the multi-NIC environments for cloud deployments.

Abstract: A data transmission method and a device are provided. When determining that the first network element and the second network element is disconnected, the first network element stores identification information of the last frame of data and connection status information that are transmitted before the connection is disconnected. When determining a condition for re-communication is meet, the first network element generates a third key based on a first key and a second key, where the first key is a key used to transmit the last frame of data, and the second key includes a key used by the first network element and the second network element to transmit each of j frames of data before the last frame of data. The first network element communicates with the second network element based on the third key, identification information of an ith frame of data, and the connection status information.

Abstract: Provided herein are various techniques and equipment for establishing secure non-classical communications between distant nodes. In one example, a method includes introducing, by at least one photon source, source photons into corresponding waveguides configured to convert the source photons into randomly timed pairs of resultant non-classical photons having corresponding polarization states. The method also includes providing first photons of each of the pairs for measurement of the corresponding polarization states and timing, and providing second photons of each of the pairs for combination into a beam for transfer to a distant node and establishment of a cryptographic key, where the second photons from one of the waveguides is presented in an orthogonal polarization before combination.

Abstract: Systems, apparatuses, methods, and computer program products are disclosed for quantum entanglement authentication (QEA). An example method includes generating, at a second computing device, a second number based on a subset of a second set of entangled quantum particles associated with the second computing device. Each entangled quantum particle in the second set of entangled quantum particles may be entangled with a respective entangled quantum particle in a second set of entangled quantum particles associated with a second computing device. The example method further includes transmitting the second number to a first computing device. In some instances, the example method may further include authenticating a session between the first computing device and the second computing device in an instance in which the second number corresponds, or is identical, to a first number.

Abstract: The present application relates to a method for securely transmitting a sequence of quantum states between a first participant Ci and a second participant Cj among a plurality of N participants, and to a device implementing said secure transmission method.

Abstract: A first key management entity (KME) in a mobile edge network engages in quantum key distribution (QKD) with a second KME in a far network to generate a secret cryptographic key that is shared between the first KME and the second KME. The first KME determines a key identifier (ID) for associating with the cryptographic key, and sends the key ID to the second KME for association with the secret cryptographic key at the second KME. The first KME receives a session request from a first session endpoint for a session across at least one of the mobile edge network or the far network. The first KME sends the key ID and the cryptographic key to the first session endpoint for establishing an encrypted session across the at least one of the mobile edge network or the far network.

Abstract: A cryptographic method and system. A plurality of ciphers is identified in a message received by a recipient, such message encrypting a digital asset. A private key associated with the recipient is obtained. The private key corresponds to a public key associated with the recipient. The method includes solving for x in the equation: [(f0(R0?1N?0 mod S)+P?+f?(Rn?1N?n mod S))/(h0(R0?1N?0 mod S)+Q?+h?(Rn?1N?n mod S))]*h(x)?f(x)=0 mod p, where (i) P?, Q?, N?0, and N?n correspond to the ciphers in the received message; (ii) R0, Rn and S are data elements of the private key; (iii) f(·) is a polynomial function defined by coefficients f0, f1, . . . f? that are also data elements of the private key; and (iv) h(·) is a polynomial function defined by coefficients h0, h1, . . . h? that are also data elements of the private key. The value of x is assigned to the digital asset, which is then stored in non-transitory memory or packaged in a message sent over the data network.

Abstract: Systems, apparatuses, methods, and computer program products are disclosed for secure communication based on random key derivation. An example method includes receiving an initial symmetric key shared between the key depot device and a host device. The method also includes receiving seed data shared between the key depot device and the host device. The method also includes establishing a connection to a client device. The method also includes generating, by key derivation circuitry of the key depot device, a first symmetric key based at least on a portion of the seed data. The method also includes causing transmission of the first symmetric key to the client device. The method also includes generating a key allocation indication that identifies an authentication target and comprises an indication of the generation of the first symmetric key. The method also includes causing transmission of the key allocation indication to the host device.

Abstract: Elliptic Curve Cryptography (ECC) can provide security against quantum computers that could feasibly determine private keys from public keys. A server communicating with a device can store and use PKI keys comprising server private key ss, device public key Sd, and device ephemeral public key Ed. The device can store and use the corresponding PKI keys, such as server public key Ss. The key use can support all of (i) mutual authentication, (ii) forward secrecy, and (iii) shared secret key exchange. The server and the device can conduct an ECDHE key exchange with the PKI keys to mutually derive a symmetric ciphering key K1. The device can encrypt a device public key PK.Device with K1 and send to the server as a first ciphertext. The server can encrypt a server public key PK.Network with at least K1 and send to the device as a second ciphertext.

Abstract: Methods of quantum key distribution include receiving a frequency bin photon at a location, selecting a frequency bin photon quantum key distribution measurement basis, with a quantum frequency processor, performing a measurement basis transformation on the received frequency bin photon so that the frequency bin photon is measurable in the selected frequency bin photon quantum key distribution measurement basis, and detecting the frequency bin photon in the selected quantum key distribution measurement basis and assigning a quantum key distribution key value based on the detection to a portion of a quantum key distribution key. Apparatus and methods for encoding, decoding, transmitting, and receiving frequency bin photons are disclosed.

Abstract: The present disclosure relates to an eavesdropper detection apparatus and an operating method thereof, capable of effectively detecting an eavesdropper existing between a transmitter and a receiver in bit transmission by a quantum key distribution scheme.

Abstract: Systems and methods for adaptive recursive descent data redundancy are described herein. In one embodiment, a method can include identifying the data object or file for Quantum Fragmentation, determining, via a first portion of a Quantum Fragmentation instance, a factor of fragmentation for the data object or file, transforming the data object or file into a plurality of first data fragments according to the factor of fragmentation by applying one or more cryptographic processing, integrity checking, and resilient fragmentation schemes, via the first portion of the Quantum Fragmentation instance, and persisting, via the first portion of the Quantum Fragmentation instance, each of the plurality of first data fragments to a data store of a plurality of available Cloud or other data stores or to a subsequent portion of the Quantum Fragmentation instance, wherein the persistence for each of the first data fragment occurs independently from the other first data fragments.

Abstract: A framework for managing authorization for performance of actions with a computing system. For example, techniques for performing authorization of users and/or clients for access to an infrastructure service provided by a cloud servicer provider (CSP) and/or for performance of actions with the infrastructure service.

Abstract: A quantum resistant method is provided for supporting user equipment (UE) roaming across APs/eNBs/gNBs belonging to various Wireless LAN Controllers (WLCs) in enterprise 5G and WiFi co-located deployments. The method may include initializing a SKS server in an electrical communication with a master WLC with a random post-quantum common secret seed (PQSEED) to generate a post-quantum pre-shared key (PQPSK) and a respective PQPSK-ID. The method may also include sending an encrypted PQSEED along with a PQPSK-ID to a second WLC. The method may further include joining AP (WiFi) to the master WLC using a CAPWAP/DTLS protocol. The method may further include sending the PQPSK-ID from the master WLC to the UE in an EAP success packet when the UE is associated with the AP (WiFi).

Abstract: Methods, apparatus, and systems are provided for performing a quantum key distribution (QKD) protocol between a first device, a second device, and an intermediary device. The intermediary device transmitting: a first secret symbol string over a first quantum channel to the first device; a first basis set over a first communication channel to the first device. The intermediary device; a second secret symbol string over a second quantum channel to the second device; a second basis set over a second communication channel to the second device. The intermediary device generating a third symbol string based on combining the first and second secret symbol strings and transmitting to the second device, via the second communication channel, data representative of the third symbol string.

Abstract: A system and a receiver for generating quantum key(s) using conjugated homodyne detection is provided. The receiver may communicate with a transmitter via an insecure quantum channel and a classical channel to generate the quantum key(s). A decoder, in the receiver, may determine, based at least in part on quadratures X, P measured by conjugated homodyne detectors, a raw-key signal corresponding to a key signal generated by the transmitter, and a distribution of photon numbers corresponding to a quantum signal received via the insecure quantum channel. Information about the key signal is exchanged between the receiver and the transmitter via the classical channel and used to determine a quantum bit error rate of the determined raw-key signal. A gain is also obtained. A secure-key rate is calculated based at least in part on the gain, the quantum bit error rate, and the photon number distribution.

Abstract: A computer implemented method for encoding bits by qubits to perform information-theoretically secure quantum gate computation, according to which pairs of quantum bits consisting of a first qubit as an encoding of “0” and a second qubit as an encoding of “1” are randomly selected, such that the first and second qubits are orthogonal to each other as quantum states and are interchanged by a NOT gate. Each qubit rotating to a desired initial direction and then each rotated qubit is further rotated to its antipodal direction by applying a quantum NOT or CNOT gate to the each rotated qubit, without any knowledge about the desired direction. A unitary gate is further applied over the qubits, using an ancillary |0 qubit that creates an equally weighted superposition of the qubits.

Abstract: A quantum key distribution system may include a transceiver including a state randomizer to impart a random state transformation to one or more qubits of a generated faint pulse and a quantum bit encoder to reflect the faint pulse back to the transceiver with one or more encoded bits. The transceiver may receive a return pulse through the communication channel, where the state randomizer reverses the random state transformation. The transceiver may include three or more detectors to measure the return pulse at time-gated timeslots associated with possible paths of the return pulse. Reception of the faint pulse from the quantum bit encoder as the return pulse triggers a detector in a first known subset of the detectors, while reception of a faked-state pulse from a third party as the return pulse results in a non-zero probability of triggering of a detector in a second known subset of the detectors.

Abstract: A method and an apparatus for receiving quantum optical communication while reducing receiver, increasing maximum detection speed, or both. The disclosure comprises transforming the polarization encoded output of a QKD system to time-bin encoded output at the detector level. The disclosure also comprises a method and an apparatus using a quantum optical switch and several SPD units to increase communication speed.

Abstract: Systems, apparatuses, methods, and computer program products are disclosed for post-quantum cryptography (PQC). An example method includes receiving data. The example method further includes generating a set of data attributes about the data. The example method further includes generating a data envelope based on the set of data attributes. Subsequently, the example method includes generating an enveloped data structure based on the data envelope and the data.

Abstract: Systems, apparatuses, methods, and computer program products are disclosed for quantum entanglement authentication (QEA). An example method includes generating, at a first computing device, a first number based on a subset of a first set of entangled quantum particles associated with the first computing device. Each entangled quantum particle in the first set of entangled quantum particles may be entangled with a respective entangled quantum particle in a second set of entangled quantum particles associated with a second computing device. The example method further includes transmitting an electronic identification of the subset of the first set of entangled quantum particles to the second computing device. In some instances, the example method may further include receiving a second number from the second computing device and authenticating a session between the first computing device and the second computing device in an instance in which the second number corresponds, or is identical, to the first number.

Abstract: A system method for quantum key includes providing an initial key in a first data processing device and a second data processing device; providing, in the second data processing device, a quantum signal comprising a plurality of quantum states; determining, in the second data processing device, a plurality of quantum measurement parameters, a raw signal by quantum measuring the plurality of quantum states employing the plurality of quantum measurement parameters; generating with the initial key, in the second data processing device, an encrypted signal; determining, in at least one of the first data processing device and the second data processing device, a reconciled signal from the encrypted signal; determining, in at least one of the first data processing device and the second data processing device, a shared key from the reconciled signal by correcting the first reconciled signal.

Abstract: Methods, systems, and apparatus for transmitting qubits encoding quantum information with reduced risk of interception from an eavesdropper. In one aspect, a method includes encoding quantum information into an information qubit; encrypting the information qubit, comprising performing i) a parity operation on the information qubit and a parity control qubit and ii) a phase operation on the information qubit and a phase control qubit; performing, by a sender party, a sequence of one or more quantum logic gates on the phase control qubit; sending the information qubit, parity control qubit, and phase control qubit to a recipient party; and sending data identifying the sequence of one or more quantum logic gates to the recipient party, wherein the recipient party obtains the quantum information encoded into the information qubit using the information qubit, parity control qubit, phase control qubit, and data identifying the sequence of one or more quantum logic gates.

Abstract: A method of checking the integrity of a wireless distributed communication packet using a trust field in a wireless distributed communication system may comprise: allowing a first terminal to acquire a trust-field-generation-specific secret key of a second terminal; allowing the second terminal to generate a trust field utilizing all bits to be transmitted to the first terminal; allowing the second terminal to generate a first packet using the trust field and all the bits to be transmitted; allowing the second terminal to transmit the first packet to the first terminal; and allowing the first terminal to check the integrity of the first packet using the trust-field-generation-specific secret key and the trust field included in the first packet.

Abstract: A system and method for quantum key distribution includes determining an intrinsic loss along a quantum channel; generating a pulse sequence; transmitting the pulse sequence via the quantum channel; receiving the pulse sequence; determining invalid signal positions and providing the invalid signal positions; determining a first reconciled signal from the first signal and the invalid signal positions, and determining a second reconciled signal from the second signal and the invalid signal positions; determining a total loss along the quantum channel from the at least one test pulse received, determining a signal loss from the total loss and the intrinsic loss, and providing the signal loss; determining a shared by error correcting the first reconciled signal and the second reconciled signal; and determining an amplified key from the shared key by shortening the shared key by a shortening amount that is determined from the signal loss.

Abstract: Elliptic Curve Cryptography (ECC) can provide security against quantum computers that could feasibly determine private keys from public keys. A server communicating with a device can store and use PKI keys comprising server private key ss, device public key Sd, and device ephemeral public key Ed. The device can store and use the corresponding PKI keys, such as server public key Ss. The key use can support all of (i) mutual authentication, (ii) forward secrecy, and (iii) shared secret key exchange. The server and the device can conduct an ECDHE key exchange with the PKI keys to mutually derive a symmetric ciphering key K1. The device can encrypt a device public key PK.Device with K1 and send to the server as a first ciphertext. The server can encrypt a server public key PK.Network with at least K1 and send to the device as a second ciphertext.

Abstract: There is herein provided a method of performing Quantum Key Distribution, the method including transmitting, in a first basis state, a first photon from a quantum transmitter to a quantum receiver; transmitting, in a second basis state, a second photon from the quantum transmitter to the quantum receiver, the second basis state being non-orthogonal to the first basis state and the transmitter and receiver being optically connected by both a first optical channel and a second optical channel, wherein transmitting the first photon from the quantum transmitter to the quantum receiver in the first basis state comprises: transmitting the first photon from the quantum transmitter to the quantum receiver along either the first optical channel or the second optical channel, wherein transmitting the second photon from the quantum transmitter to the quantum receiver in the second basis state comprises: transmitting a first portion of the probability distribution of the second photon from the transmitter to the receiver

Abstract: Disclosed is a quantum key distribution system using an RFI (reference frame independent) QKD (quantum key distribution) protocol, which includes a first signal processing circuit that generates transmission basis information and transmission bit information, a quantum channel transmitter that generates a single photon or coherent light, and modulates the single photon or the coherent light based on the transmission basis information and the transmission bit information to generate a quantum signal, a quantum channel receiver that receives the quantum signal through a quantum channel and detects reception bit information from the quantum signal based on reception basis information, and a second signal processing circuit that generates the reception basis information, transmits the reception basis information to the first signal processing circuit through a public channel, and receives the transmission basis information from the first signal processing circuit through the public channel.

Abstract: A system and method for performing differential phase shift in a quantum network are disclosed. The method includes determining a quantum key distribution (QKD) configuration for a quantum signal comprising a series of pulses based on signal amplitude, signal pulse width and block length. Further, the method includes grouping pulses to generate quantum signal blocks based on determined QKD configuration. The method includes assigning a random label to each of the quantum signal block based on the determined quantum key distribution configuration. Also, the method includes performing hybrid phase modulation to each of the pulses individually and to each of the quantum signal blocks with a defined phase difference between the each of the pulses individually and each of the quantum signal blocks. The hybrid phase modulation is performed based on the assigned random label. Further, the method includes transmitting the hybrid phase modulated quantum signal blocks to receiving units.

Abstract: Message authenticators for quantum-secured communications facilitate low-latency authentication with assurances of security. Low-latency message authenticators are especially valuable in infrastructure systems where security and latency constraints are difficult to satisfy with conventional non-quantum cryptography. For example, a message transmitter receives a message and derives an authentication tag for the message based at least in part on an authenticator that uses one or more quantum keys. The message transmitter outputs the message and its authentication tag. A message receiver receives a message and authentication tag for the message. The message receiver derives a comparison tag for the message based at least in part on an authenticator that uses one or more quantum keys. The message receiver checks whether the message is authentic based on a comparison of the authentication tag and the comparison tag. In example implementations, the authenticator uses stream-wise cyclic redundancy code operations.

Abstract: A quantum entity authentication apparatus and method. The quantum entity authentication apparatus includes a quantum state preparation unit for preparing an authentication quantum state that is generated based on an authentication key previously shared with an entity, a quantum channel verification unit for transmitting a quantum state, generated by performing an operation using a prestored unique operator on the authentication quantum state, to a quantum measurement device, and for verifying security of a quantum channel by using a result of Bell measurement and the authentication quantum state, the result of Bell measurement being revealed by the quantum measurement device for the quantum state, and a quantum entity authentication unit for, when the security of the quantum channel is verified, authenticating the entity using the result of the Bell measurement and the unique operator.

Abstract: An optical emitter comprising a primary laser and a plurality of secondary lasers wherein each secondary laser is optically injection locked to said primary laser, the emitter further comprising at least one polarisation controller configured to control the polarisation of the output of at least one of the secondary lasers, the emitter further comprising a combination unit that is configured to combine the outputs of the secondary laser modules into an output signal.

Abstract: Systems, apparatuses, methods, and computer program products are disclosed for post-quantum cryptography (PQC). An example method includes receiving data, a set of data attributes about the data, and a risk profile data structure indicative of a vulnerability of the data in a PQC data environment. The example method further includes retrieving PQC cryptographic performance information associated with a set of PQC cryptographic techniques. The PQC cryptographic performance information may comprise a set of PQC cryptographic performance attributes for a plurality of PQC cryptographic techniques in the set of PQC cryptographic techniques. The example method further includes selecting a PQC encryption algorithm for encrypting the data based on the set of data attributes, the risk profile data structure, the PQC cryptographic performance information, and a PQC optimization machine learning model. Subsequently, the example method includes encrypting the data based on the selected PQC encryption algorithm.

Abstract: Systems and methods performed for generating authentication information for an image using optical computing are provided. When a user takes a photo of an object, an optical authentication system receives light reflected and/or emitted from the object. The system also receives a random key from an authentication server. The system converts the received light to plenoptic data and uploads it to the authentication server. In addition, the system generates an optical hash of the received light using the random key, converts the generated optical hash to a digital optical hash, and uploads the digital optical hash to the authentication server. When the authentication server receives the upload, it verifies whether the time of the upload is within a certain threshold time from the sending of the random key and whether the digital optical hash was generated from the same light as the plenoptic data.

Abstract: A system and method for securely distributing quantum keys in a network are disclosed. The method includes receiving request for generating pair of quantum keys between source quantum node and target quantum node. Further, the method includes generating first pair of quantum keys based on the request. The method includes transmitting the first pair of quantum keys to the intermediate quantum node using a first quantum link. The method further includes generating intermediate pair of quantum key based on events detected at the intermediate quantum node. The method further includes interleaving the intermediate pair of quantum key with the first pair of quantum keys. Also, the method includes generating a second pair of quantum keys comprising interleaved intermediate pair of quantum key and first pair of quantum keys. Further, the method includes encoding and transmitting the second pair of quantum keys to target quantum node using second quantum link.

Abstract: An apparatus and method for quantum direct communication using single qubits. The apparatus includes a quantum state preparation unit for preparing quantum states including a message state prepared using pairs of single qubits based on a bit of a message to be sent to a communication partner, an authentication state prepared using random qubit pairs, and a verification state prepared using random qubit pairs, a quantum state communication unit for transmitting the quantum states to the communication partner and measuring a quantum state of a message received from the communication partner, an authentication unit for authenticating, using the authentication state, the communication partner depending on whether an authentication key previously shared with the communication partner is possessed, a verification unit for verifying security of a quantum channel using the verification state, and a message restoration unit for restoring the received message using the message state.

Abstract: A method for transmitting time information and quantum states on an optical medium is disclosed. The method includes transmitting information comprising a timing information and quantum states over a single wavelength on an optical medium. The method also includes receiving each transmitted information sequentially in the corresponding plurality of time slots at a receiver. The method also includes comparing each timing information received in the corresponding plurality of timeslots with timing information of a preceding hold over time slot of the plurality of time slots. The method also includes determining a time drift encountered at the receiver based on a compared result. The method also includes synchronising phase and frequency of the plurality of transmitted packets of the information based on minimization of determined time drift.

Abstract: A communication system is provided that includes a first quantum key distribution device and a communication device. The first quantum key distribution device is configured to be coupled to a second quantum key distribution device over a quantum channel and to generate a quantum key based on a quantum state transmitted along the quantum channel. The communication device is communicatively connected to the first quantum key distribution device within a network. The communication device is configured to receive the quantum key from the first quantum key distribution device and transmit the quantum key to an end device in the network via a classical link to enable the end device to use the quantum key for encrypting and/or decrypting messages communicated through the network.

Abstract: A method, non-transitory computer readable medium and device that minimize error conditions with substantially simultaneously and independently generated secret keys includes synchronizing with a mobile device configured to execute a corresponding key generation process. Data obtained based on at least one shared characteristic with the synchronized mobile device is converted into a plurality of binary numbers. At least one bit for each of the plurality of binary numbers which are at least measurably random is identified. An error condition with any of the determined bits for the plurality of binary numbers is identified. At least a portion of the determined bits for the plurality of binary numbers without the detected error condition are selected. A key is generated based on the selected determined bits for the plurality of binary numbers for use in securing communications with the synchronized mobile device.

Abstract: A node for a quantum communication network, said node comprising: a quantum transmitter, said quantum transmitter being adapted to encode information on weak light pulses; a quantum receiver, said quantum receiver being adapted to decode information from weak light pulses; at least three ports adapted to communicate with at least one other node; and an optical switch, said optical switch being configured to selectively connect the quantum transmitter and receiver to the ports such that the switch controls which of the ports is in communication with the quantum transmitter and quantum receiver.

Abstract: A path computation engine, PCE, (100) for an optical communications network comprising a plurality of nodes and a plurality of links.

Abstract: Continuous variable quantum secret sharing (CV-QSS) technologies are described that use laser sources and homodyne detectors. Here, a Gaussian-modulated coherent state (GMCS) prepared by one device passes through secure stations of other devices sequentially on its way to a trusted device, and each of the other devices coherently adds a locally prepared, independent GMCS to the group of propagating GMCSs. Finally, the trusted device measures both the amplitude and the phase quadratures of the received group of coherent GMCSs using double homodyne detectors. The trusted device suitably uses the measurement results to establish a secure key for encoding secret messages to be broadcast to the other devices. The devices cooperatively estimate, based on signals corresponding to their respective Gaussian modulations, the trusted device's secure key, so that the cooperative devices can decode the broadcast secret messages with the secure key.

Abstract: With respect to a key distribution system including N terminal devices Ui and a key distribution server used for exchanging a session key, the key distribution system includes an isogeny calculating unit configured to calculate a first public value using a basis of a first torsion subgroup of a predetermined elliptic curve at an odd-numbered terminal device Ui and calculate a second public value using a basis of a second torsion subgroup of the predetermined elliptic curve at an even-numbered terminal device Ui, when N is an even number, a distributing unit configured to distribute the first public value calculated at the odd-numbered terminal device Ui to a terminal device Ui?1 and a terminal device Ui+1, and distribute the second public value calculated at the even-numbered terminal device Ui to a terminal device Ui?1 and a terminal device Ui+1, from the key distribution server, a key generating unit configured to use second public values distributed by the distributing unit to generate the session key at t

Abstract: Provided is novel technology for secure security data transmission and more particularly for registering network-enabled security devices such as IP cameras to a security server over a public network such as to a cloud-based security service. An enrollment server is provided that is logged into using a computing device to request and receive an activation code for the security device. The activation code is then provided to the security device, e.g. directly by the computing device. The Security device authenticates itself based on the activation code and in one example provides a public key that will be used to verify its registration. Data transmissions by the device are secured in part on the basis of its registration.

Abstract: Systems and methods for processing and transmission of encrypted data are provided. The method includes: encrypting a first data set; encapsulating the encrypted first data set in a protective layer; and transmitting the encapsulated encrypted first data set to a destination over one or more communication channels. The encrypting is performed by using a homomorphic encryption (HE) technique. The encapsulating is performed by using a quantum key distribution (QKD) encapsulation technique to generate a QKD-protected layer. The communication channels may include a classical/non-quantum channel over which the QKD-encapsulated encrypted first set of data is transmitted and a quantum channel over which a quantum key distribution is conducted, or a single communication channel to conduct both.

Abstract: A share generating device obtains N seeds s0, . . . , sN?1, obtains a function value y=g(x, e)?Fm of plaintext x?Fm and a function value e, and obtains information containing a member yi and N?1 seeds sd, where d?{0, . . . , N?1} and d?i, as a share SSi of the plaintext x in secret sharing and outputs the share SSi. It is to be noted that the function value y is expressed by members y0?Fm(0), . . . , yN?1?Fm(N?1), which satisfy m=m(0)+ . . . +m(N?1).

Abstract: A quantum cryptographic key output apparatus includes a semiconductor laser device that repeatedly generates pulsed laser light, an encoder that encodes the pulsed laser light based on a quantum cryptographic key, an optical branching unit that branches the pulsed laser light, and an attenuator that attenuates a light intensity of first pulsed laser light so that the number of photons of the first pulsed laser light has any one of a plurality of candidate values that are values equal to or smaller than 1. Further, the output apparatus includes a light intensity determination unit that determines whether or not a light intensity of a second pulsed laser light is in a predetermined range, and an information output unit that outputs specifying information for specifying the first pulsed laser light corresponding to second pulsed laser light of which the light intensity is not in the predetermined range to an input apparatus.

Abstract: A transmitter provides an optical signal for transmitting a quantum key over a network. The transmitter comprises a first generator configured to generate a quantum signal, the quantum signal comprising a sequence of frames. The transmitter comprises a second generator configured to generate a pilot signal. The pilot signal comprises a sequence of signatures that is in synchrony with the sequence of frames. The transmitter comprises an optical modulator configured to generate the optical signal by modulating an optical carrier based on the quantum signal and the pilot signal. A corresponding receiver is proposed for receiving the optical signal and for extracting the quantum key.

Abstract: Elliptic Curve Cryptography (ECC) can provide security against quantum computers that could feasibly determine private keys from public keys. A server communicating with a device can store and use PKI keys comprising server private key ss, device public key Sd, and device ephemeral public key Ed. The device can store and use the corresponding PKI keys, such as server public key Ss. The key use can support all of (i) mutual authentication, (ii) forward secrecy, and (iii) shared secret key exchange. The server and the device can conduct an ECDHE key exchange with the PKI keys to mutually derive a symmetric ciphering key K1. The device can encrypt a device public key PK.Device with K1 and send to the server as a first ciphertext. The server can encrypt a server public key PK.Network with at least K1 and send to the device as a second ciphertext.

Abstract: Quantum network nodes use light from a laser to stimulate emission of single photons. A detection station detects arrival of the photons from the quantum network nodes at a photon arrival detector. In time slots between single photon emissions, the quantum network node supply light from the laser to the detection station. The detection station measures a phase differences between light from a reference laser and the light received from different quantum network nodes in said time slots. The detection station has optical phase and/or frequency modulators between the optical inputs for light from the quantum network nodes and the photon arrival detector.