中国物理B ›› 2026, Vol. 35 ›› Issue (4): 40305-040305.doi: 10.1088/1674-1056/ae3301

• • 上一篇    下一篇

Schemes of IPsec integrated with quantum key distribution

Chun-Hui Zhang(张春辉)1,2,3, Wen-Xuan Zhang(张文轩)1,2,3, Xing-Yu Zhou(周星宇)1,2,3, Yuan Cao(曹原)1,2,3, Jun Wang(汪军)4, Jian Li(李剑)1,2,3, and Qin Wang(王琴)1,2,3,†   

  1. 1 Institute of Quantum Information and Technology, Nanjing University of Posts and Telecommunications, Nanjing 210003, China;
    2 Key Laboratory of Broadband Wireless Communication and Sensor Network Technology, Ministry of Education, Nanjing University of Posts and Telecommunications, Nanjing 210003, China;
    3 Telecommunication and Networks, National Engineering Research Center, Nanjing University of Posts and Telecommunications, Nanjing 210003, China;
    4 E-Quantum Information Technology Co., Ltd., Nanjing 211112, China
  • 收稿日期:2025-10-16 修回日期:2025-11-18 接受日期:2026-01-04 发布日期:2026-04-01
  • 通讯作者: Qin Wang E-mail:qinw@njupt.edu.cn
  • 基金资助:
    This work was supported by the Jiangsu Provincial Key R&D Program for Industrialization Prospects and Key Core Technology Project (Grant No. BE2022071), and the National Natural Science Foundation of China (NSFC) (Grant Nos. 62471248, 62201276, and 12074194).

Schemes of IPsec integrated with quantum key distribution

Chun-Hui Zhang(张春辉)1,2,3, Wen-Xuan Zhang(张文轩)1,2,3, Xing-Yu Zhou(周星宇)1,2,3, Yuan Cao(曹原)1,2,3, Jun Wang(汪军)4, Jian Li(李剑)1,2,3, and Qin Wang(王琴)1,2,3,†   

  1. 1 Institute of Quantum Information and Technology, Nanjing University of Posts and Telecommunications, Nanjing 210003, China;
    2 Key Laboratory of Broadband Wireless Communication and Sensor Network Technology, Ministry of Education, Nanjing University of Posts and Telecommunications, Nanjing 210003, China;
    3 Telecommunication and Networks, National Engineering Research Center, Nanjing University of Posts and Telecommunications, Nanjing 210003, China;
    4 E-Quantum Information Technology Co., Ltd., Nanjing 211112, China
  • Received:2025-10-16 Revised:2025-11-18 Accepted:2026-01-04 Published:2026-04-01
  • Contact: Qin Wang E-mail:qinw@njupt.edu.cn
  • Supported by:
    This work was supported by the Jiangsu Provincial Key R&D Program for Industrialization Prospects and Key Core Technology Project (Grant No. BE2022071), and the National Natural Science Foundation of China (NSFC) (Grant Nos. 62471248, 62201276, and 12074194).

PDF (PC)

0

赞

摘要： With the rapid advancement of quantum computing, traditional security protocols based on classical encryption algorithms are increasingly vulnerable to potential quantum attacks. The current IPsec protocol, which relies on classical cryptographic methods, is insufficient to withstand such threats, thereby compromising the security of long-term data transmission. To address this issue, we propose integrating quantum key distribution (QKD) into the internet protocol security (IPsec) protocol, thereby enhancing its resilience against quantum computing attacks. Here, two schemes that merge QKD-generated keys with classical cryptographic keys are designed to enhance both security and stability. Furthermore, we conduct a comprehensive evaluation of the performance of various QKD protocols implemented with the scheme, along with an assessment of its overall efficacy across a topological network configuration. This approach not only ensures secure data transmission in the era of quantum computing but also highlights the potential application value of integrating QKD with IPsec, providing valuable insights for the design and implementation of future quantum-secure communication systems.

关键词: quantum key distribution, internet protocol security, internet key exchange

Abstract: With the rapid advancement of quantum computing, traditional security protocols based on classical encryption algorithms are increasingly vulnerable to potential quantum attacks. The current IPsec protocol, which relies on classical cryptographic methods, is insufficient to withstand such threats, thereby compromising the security of long-term data transmission. To address this issue, we propose integrating quantum key distribution (QKD) into the internet protocol security (IPsec) protocol, thereby enhancing its resilience against quantum computing attacks. Here, two schemes that merge QKD-generated keys with classical cryptographic keys are designed to enhance both security and stability. Furthermore, we conduct a comprehensive evaluation of the performance of various QKD protocols implemented with the scheme, along with an assessment of its overall efficacy across a topological network configuration. This approach not only ensures secure data transmission in the era of quantum computing but also highlights the potential application value of integrating QKD with IPsec, providing valuable insights for the design and implementation of future quantum-secure communication systems.

Key words: quantum key distribution, internet protocol security, internet key exchange

中图分类号:  (Quantum cryptography and communication security)

  • 03.67.Dd
03.67.Hk (Quantum communication)