The rapid advances in quantum computing pressure the existing essential cryptographic algorithms. In this context, Quantum Key Distribution (QKD) has been proposed as a quantum safe solution for key distribution. However, current QKD systems require an authenticated classical channel which relies on pre-shared symmetric keys that are manually distributed and do not guarantee the identity of the hardware that hosts them. This paper proposes a novel scheme, the Physically Unclonable Quantum Key Distribution (PU-QKD) system, to intrinsically authenticate the communicating endpoints in QKD. The PU-QKD scheme leverages classical Physical Unclonable Functions (PUFs) to encode the data transmission in discrete variable QKD protocols (e.g., BB84). Our scheme maintains the information-theoretic security of QKD protocols by integrating the PUF as an additional layer. Authentication is bound to hardware, providing a robust fingerprint, while lower post-processing overhead increases key rates. Additionally, the proposed scheme is resilient against state-of-the-art PUF vulnerabilities, such as modeling attacks.

The emergence of quantum computing poses a threat to classical cryptography algorithms, necessitating a shift to quantum secure cryptography. Hybrid protocols combining at least one classical and one quantum-resistant cryptographic algorithm are becoming the standard for securing communications. In this work, we present our novel solution for integrating three different cryptographic assumptions (two of them quantumresistant) into hybrid network security protocols, ensuring that three different cryptographic assumptions must be broken before the protocol becomes vulnerable. Our solution allows for a seamless integration of classical and post-quantum (PQ) cryptography, and quantum key distribution (QKD) into existing network security protocols (e.g., TLS, IPsec) without any major modifications to the protocols themselves. This crypto-agility ensures the mitigation of some of the most well known challenges of both PQ cryptography and QKD. Our findings demonstrate the feasibility of such triple-hybrid network security protocols, showing non-substantial decrease in performance and almost no added packet overhead compared to state of the art protocols. In exchange, we pave the way towards next generation networks where the potential of new quantum-resistant cryptographic schemes can be leveraged in a dynamic and agile fashion, thus fostering a new era of unbreakable communication systems.

This paper presents the implementation of a fully functional 5G network on a compact, energy-efficient edge micro datacenter, showcasing features such as workload prediction and preemptive scaling. The network extends across multiple edge micro datacenters and incorporates quantum-secure connectivity. Our demonstration provides a blueprint for forward-looking 5G deployments aiming to meet challenging latency and throughput requirements while complying with stringent security requirements. Measurements are performed for network throughput and latency as well as for CPU load of the different components of the 5G deployment, including distributed unit, centralised unit control and user planes, 5G core and the RAN intelligent controller. Additionally, an intelligent workload prediction mechanism, based on an LSTM model, enables preemptive scaling of the centralised unit’s user plane. This proactive approach helps to mitigate bottlenecks as the number of users connecting to the network increases.

Quantum key distribution (QKD) is a symmetric key exchange mechanism designed to enhance the security of current communication systems. Although QKD provides unconditional security, it also comes with deployment challenges. One challenge is the distance limitation between the transmitter and receiver, which restricts the large-scale adoption of QKD. To overcome this, trusted relays are used as intermediate nodes, allowing QKD to evolve from distance-limited point-to-point connections to unlimited QKD networks (QKDN). With an increasing deployment of QKD and a growing number of applications requesting keys, quality of service (QoS) constraints must be set for efficient key resource management to alleviate the risk of rejecting application requests. In this work, we integrate key delivery delay and maximum requested key size as QoS constraints in a novel key allocation algorithm built on three QKDN layers – quantum, key management and service. Moreover, we design key relaying using quantum key pools and virtual quantum key pools as storage mechanisms. We use static and dynamic weights for relay path computation and evaluate their impact on the proposed key allocation strategies with QoS constraints and find that static weights show a good overall performance for QKDN, while performance with dynamic weights varies based on historical key consumption data.

The reliance on asymmetric public key cryptography (PKC) and symmetric encryption for cyber-security in current telecommunication networks is threatened by the emergence of powerful quantum computing technology. This is due to the ability of quantum computers to efficiently solve problems such as factorization or discrete logarithms, which are the basis for classical PKC schemes. Thus, the assumption that communications networks are secure no longer holds true. Quantum Key Distribution (QKD) and post-quantum cryptography (PQC) are the first cyber-security technologies that allow communications to resist the attacks of a quantum computer. To achieve quantum-resistant communications, the aforementioned technologies need to be incorporated into a network security protocol such as Transport Layer Security (TLS). In this paper, we describe and implement two novel, hybrid solutions in which QKD and PQC are combined inside TLS for achieving quantum-resistant authenticated key exchange: Concatenation and Exclusively-OR (XOR). We present the results, in terms of complexity and security enhancement, of integrating state-of-the-art QKD and PQC technologies into a practical, industry-ready TLS implementation. Our findings demonstrate that the adoption of a PQC-only approach enhances the TLS handshake performance by approximately 9 % compared to classical methods. Furthermore, our hybrid PQC-QKD quantum-resistant TLS comes at a performance cost of approximately 117 % during the key establishment process. In return, we substantially augment the security of the handshake, paving the road for the development of future-proof quantum-resistant communication systems based on QKD and PQC.

We experimentally demonstrate a 5G digital fronthaul network that relies on multi-adaptive bandwidth/bitrate variable transceivers (BVTs) and an autonomic software-defined networking (SDN) control system for partially-disaggregated wavelength division multiplexing (WDM)/space division multiplexing (SDM). Transmission of 256-QAM 760.32 MHz orthogonal frequency-division multiplexing (OFDM) radio signal is performed, with a total radio transmission capacity of 5.667 Gb/s. Digitized signal samples are carried as a 22.25 Gb/s digitized radio-over-fiber (DRoF) data stream and transmitted over a WDM/SDM infrastructure including 40-wavelength 100-GHz arrayed waveguide gratings (AWGs) and 19-core fiber. The autonomic SDN controller deploys a control loop for the multi-adaptive OFDM-based BVTs that monitors the per-subcarrier signal to noise ratio (SNR) and assigns the optimal constellation based on the actual signal degradation. An error vector magnitude (EVM) below the targeted 2.1% is achieved while setting up connections in less than 5 s.

Two pulse shapes for IR-UWB transmission under the Russian spectral emission mask are proposed and their potential experimentally demonstrated. Pulses based on the hyperbolic secant square function and the frequency B-spline wavelet are shown to enable transmission of 1.25Gbit/s signals, reaching a maximum transmission distance of 6.5 m.

For the first time Ultra-Wideband record data transmission rates up to 35.1 Gbps and 21.6 Gbps are achieved, compliant with the restrictions on the effective radiated power established by both the United States Federal Communications Commission and the European Electronic Communications Committee, respectively. To achieve these record bit rates, the multi-band approach of Carrierless Amplitude Phase modulation scheme was employed. Wireless transmissions were achieved with a BER below the 7% overhead FEC threshold of 3.810-3.