100 Gbps Quantum-safe IPsec VPN Tunnels over 46 km Deployed Fiber
Abstract: We demonstrated for the first time quantum-safe high-speed 100 Gbps site-to-site IPsec tunnels secured using Quantum Key Distribution (QKD) technology. The demonstration was conducted between two JPMorgan Chase Data Centers (DCs) in an air-gapped environment over 46 km of deployed telecom fiber across Singapore achieving 45 days of continuous operation. Two different Virtual Private Network (VPN) tunnel configurations were tested: (1) a QKD-secured VPN tunnel configuration with a maximum throughput of 80 Gbps and (2) a multi-VPN tunnel configuration exhibiting 12 QKD-secured VPN tunnels with a throughput of 8.39 Gbps per tunnel resulting in an aggregated throughput of 99.62 Gbps for all tunnels. For the QKD system performance, we achieved an average Secret Key Rate (SKR) of 7.4 kbps (about 29 AES-256 keys per second), an average Quantum Bit Error Rate (QBER) of 0.8% and an average visibility of 98.6%. We utilized the ETSI-QKD-014 REST-based Application Programming Interface (API) to exchange the QKD generated keys between the key management server in the QKD system and the next-generation firewalls in order to encrypt and decrypt the data. The data was encrypted by the quantum-safe keys using the AES-256-GCM cipher suite with a key refresh rate of 120 seconds without affecting the VPN tunnel connectivity and performance
- B. Aiyer, J. Caso, P. Russell, and M. Sorel, “New survey reveals $2 trillion market opportunity for cybersecurity technology and service providers,” Governance, vol. 1, pp. 2–0, 2022.
- V. Scarani, H. Bechmann-Pasquinucci, N. J. Cerf, M. Dušek, N. Lütkenhaus, and M. Peev, “The security of practical quantum key distribution,” Reviews of modern physics, vol. 81, no. 3, p. 1301, 2009.
- C. Elliott, A. Colvin, D. Pearson, O. Pikalo, J. Schlafer, and H. Yeh, “Current status of the darpa quantum network,” in Quantum Information and computation III, vol. 5815. SPIE, 2005, pp. 138–149.
- J. Dynes, A. Wonfor, W.-S. Tam, A. Sharpe, R. Takahashi, M. Lucamarini, A. Plews, Z. Yuan, A. Dixon, J. Cho et al., “Cambridge quantum network,” npj Quantum Information, vol. 5, no. 1, p. 101, 2019.
- A. Aguado, V. Lopez, D. Lopez, M. Peev, A. Poppe, A. Pastor, J. Folgueira, and V. Martin, “The engineering of software-defined quantum key distribution networks,” IEEE Communications Magazine, vol. 57, no. 7, pp. 20–26, 2019.
- S.-K. Liao, W.-Q. Cai, J. Handsteiner, B. Liu, J. Yin, L. Zhang, D. Rauch, M. Fink, J.-G. Ren, W.-Y. Liu et al., “Satellite-relayed intercontinental quantum network,” Physical review letters, vol. 120, no. 3, p. 030501, 2018.
- M. Pistoia, O. Amer, M. R. Behera, J. A. Dolphin, J. F. Dynes, B. John, P. A. Haigh, Y. Kawakura, D. H. Kramer, J. Lyon et al., “Paving the way toward 800 gbps quantum-secured optical channel deployment in mission-critical environments,” Quantum Science and Technology, vol. 8, no. 3, p. 035015, 2023.
- J. Y. Cho and A. Sergeev, “Using qkd in macsec for secure ethernet networks,” IET Quantum Communication, vol. 2, no. 3, pp. 66–73, 2021.
- C. Kaufman, P. Hoffman, Y. Nir, P. Eronen, and T. Kivinen, “Rfc 7296: Internet key exchange protocol version 2 (ikev2),” 2014.
- S. Ullah, J. Choi, and H. Oh, “Ipsec for high speed network links: Performance analysis and enhancements,” Future Generation Computer Systems, vol. 107, pp. 112–125, 2020.
- P. Zhang, N. Chen, S. Shen, S. Yu, S. Wu, and N. Kumar, “Future quantum communications and networking: A review and vision,” IEEE Wireless Communications, 2022.
- W.-Y. Hwang, “Quantum key distribution with high loss: Toward global secure communication,” Phys. Rev. Lett., vol. 91, p. 057901, Aug 2003.
- H.-K. Lo, X. Ma, and K. Chen, “Decoy state quantum key distribution,” Phys. Rev. Lett., vol. 94, p. 230504, Jun 2005.
- C. C. W. Lim, M. Curty, N. Walenta, F. Xu, and H. Zbinden, “Concise security bounds for practical decoy-state quantum key distribution,” Phys. Rev. A, vol. 89, p. 022307, Feb 2014.
- B. Elaine, “Recommendation for key management, part 1: General - nist special publication 800-57 part 1 revision 5,” NIST Special Publication, pp. 40–41, 2020.
Paper Prompts
Sign up for free to create and run prompts on this paper.