Why Quantum Key Distribution (QKD) is redefining the future of cybersecurity in Europe

As the quantum revolution gathers pace, one technology is attracting growing interest from researchers, industry and policymakers alike: Quantum Key Distribution (QKD). Promising an unrivalled level of security for digital communications, QKD is at the heart of a white paper published by Télécom SudParis, a leading French engineering school belonging to the Institut Mines-Télécom. This document, which is both educational and strategic, provides a comprehensive overview of the scientific, industrial and political advances linked to QKD.

A response to a systemic threat: the programmed end of classical cryptography

Current cryptography is based on assumptions of mathematical complexity: breaking an algorithm like RSA or ECC requires colossal computing power... at least until the arrival of quantum computers. By exploiting the properties of the qubit (superposition, entanglement), these new machines could eventually break these codes in a matter of seconds. This changeover will make current security systems obsolete in the medium term.

Two responses are emerging: post-quantum cryptography (PQC), which proposes new algorithms that are resistant to quantum attacks, and QKD, which proposes a paradigm shift: basing security not on mathematical assumptions, but on the inviolable laws of quantum physics.

QKD: how does it work? Physics at the service of absolute confidentiality

Quantum Key Distribution (QKD) works on a principle that may seem simple, but is revolutionary in its implications: using the laws of quantum mechanics to generate and share an encryption key that no-one can intercept without being detected.

The classic scenario: Alice, Bob... and the spy Eve

In educational explanations, three characters are generally used:

• Alice, the sender of a message ;
• Bob, the recipient ;
• and Eve, the potential spy trying to intercept the message.

Alice and Bob want to send each other a secure message. To do this, they must first agree on a secret key, which will be used to encrypt and then decrypt the message. In conventional systems, this key is exchanged using mathematical algorithms, which could be broken by a quantum computer.

With QKD, this key sharing is achieved by sending single photons down a quantum channel, for example an optical fibre or a laser beam in the air or via satellite.

Quantum magic: why a spy can't remain invisible

What makes QKD unique is that it exploits two fundamental properties of quantum physics:

1. Heisenberg's indeterminacy principle: certain physical quantities (such as the polarisation of a photon) cannot be measured without disturbing the system.
2. The impossibility of copying an unknown quantum state: known as the quantum non-cloning theorem.

This means that if Eve tries to intercept the photons to extract the key, she inevitably disturbs their state, which Bob will be able to detect statistically. In this way, any attempt at espionage is immediately visible: we know that a third party has been trying to eavesdrop.

Key generation: random polarisation and data sorting

The best-known protocol, BB84, works as follows:

• Alice sends Bob a series of photons polarised in two random patterns (e.g. rectilinear or diagonal).
• Bob measures each photon with a base chosen at random.
• Then, via a traditional public channel (unsecured but authenticated), Alice and Bob compare the databases used without revealing the results.
• They only keep the cases where their basic choice was identical: this is their shared secret key.

If they detect an abnormally high error rate, they know that Eve has tried to interfere, and they reject the key. Otherwise, they may consider it reliable.

A key... to encrypt as before

Once the key has been generated, it can be used with a conventional encryption algorithm, such as :

• the One-Time Pad (OTP), which offers perfect theoretical security if the key is as long as the message and used only once;
• modern symmetrical algorithms (AES, etc.) for practical use in existing infrastructures.

In this scheme, QKD does not replace encryption algorithms, but reinforces their security by ensuring that the key cannot be intercepted.

A hybrid, yet tamper-proof system

It is important to understand that QKD :

• does not protect the content of the message itself (this is the role of the encryption algorithm),
• guarantees that the key used has not been stolen or copied,
• and can detect any interception attempt, something that conventional cryptography cannot do.

In other words, with QKD, you don't just make an attack difficult: you make it physically impossible without being detected. This is a major breakthrough.

In a nutshell

QKD is to cybersecurity what GPS is to navigation: a radical paradigm shift. By relying on physics rather than mathematics, it makes it possible to guarantee the confidentiality of exchanges even in the face of tomorrow's quantum computers.

Real-life applications: from finance to healthcare, QKD for sensitive sectors

One of the great merits of the Télécom SudParis white paper is that it does not confine Quantum Key Distribution (QKD) to a theoretical or long-term vision. On the contrary, it shows that this technology can meet immediate needs in sectors that are already exposed to growing cyber threats and where resilience has become strategic.

Banks and financial institutions: protecting the digital economy

In a world where banking transactions are carried out on a massive scale and in real time, data security is critical. Banks must guarantee :

• confidentiality of transactions ;
• integrity of operations ;
• protecting the personal data of millions of customers.

QKD would make it possible to establish tamper-proof communication channels between data centres, between branches and headquarters, or even between international financial institutions. Quantum keys could be used to secure :

• interbank transfers ;
• private blockchain protocols ;
• communications between ATMs and central servers.

The strategic value of the financial sector makes it an early candidate for large-scale adoption of QKD.

Governments and defence: vital digital sovereignty

QKD was initially developed in a military context. Today, it is used again and again in sensitive government communications, whether :

• between ministries (defence, interior, foreign affairs) ;
• between embassies and central services (non-European scenarios) ;
• between intelligence services.

QKD would ensure that exchanges of classified data remain inviolable, even in the age of quantum computers. It could also secure crisis communication systems, diplomatic networks and critical command structures.

In a tense geopolitical context, where targeted state attacks are on the rise, sovereign technologies are a must.

Health and telemedicine: guaranteeing patient privacy

The healthcare sector has become a priority target for cyber attacks. The cause:

• the value of medical data ;
• their centralisation in hospitals or cloud services;
• the development of telemedicine, accentuated by the Covid-19 crisis.

With QKD, hospitals, laboratories, clinics and e-health platforms can :

• exchange medical records in an ultra-secure way;
• protect data from wearable biosensors (connected watches, assistive devices);
• Secure real-time communications between doctors, specialists and patients.

This approach would be particularly relevant for cross-border healthcare networks, European digital health projects or the management of genomic databases.

IoT and 5G: securing a world of connected objects

The Internet of Things (IoT) is everywhere: homes, factories, cars, smart cities. These objects exchange massive quantities of data, often sensitive data, in poorly protected environments.

QKD can meet a number of needs:

• secure communications between sensors in industrial, agricultural or energy networks;
• protect critical links in 5G architectures, particularly in edge segments (Mobile Edge Computing);
• provide on-demand quantum keys to encrypt data streams with minimal latency.

In these environments, where computing power is limited, the use of QKD keys makes it possible to combine lightness, security and scalability.

Critical infrastructures (OIV): guaranteeing the nation's continuity

Vital Infrastructure Operators (VIOs) - in transport, energy, telecoms and water - are the backbone of modern society. An attack on their systems could have systemic effects: power cuts, train stoppages, water contamination, and so on.

Thanks to QKD, these operators can :

• secure their industrial control protocols (SCADA, OT);
• protect their internal supervision networks ;
• prevent malicious actors from intercepting or modifying control signals.

In an age of cyber attacks on pipelines, power stations and telecoms networks, secure quantum channels are an essential guarantee of sovereignty and stability.

In a nutshell: technology for global security

These use cases show that QKD is not a distant experiment reserved for laboratories. It is a credible, operational and strategic response to cybersecurity needs in the most sensitive areas. By combining cutting-edge science, industrial vision and ethical thinking, QKD could become the backbone of digital security in the 21st century.

A booming technology, but not without its challenges

Quantum Key Distribution (QKD) is becoming increasingly popular around the world. Buoyed by promises of unrivalled security, it is benefiting from massive public support, industrial investment and rapid scientific progress. However, the Télécom SudParis white paper adopts a clear-sighted stance: while the potential is considerable, QKD still faces technological, economic, human and regulatory obstacles that need to be overcome in order to move from the laboratory to industrialisation.

1. Still limited in scope: the distance wall

One of the major technical challenges of today's QKD is its limited range. Commercial systems based on optical fibres generally reach 80 to 100 km, beyond which the quantum signal becomes too weak to be exploited. Unlike conventional communications, it is not possible to amplify a quantum signal without disturbing its state.

Solutions are emerging:

• Satellite links, making it possible to reach distances of several thousand kilometres (as in China with the Micius satellite);
• Trusted nodes, intermediate relays where keys are temporarily stored - but which introduce vulnerabilities (because they themselves must be secure);
• Quantum repeaters (still experimental), which could eventually enable QKD networks to be extended on a continental scale.

Without these solutions, QKD will remain confined to metropolitan uses or short network segments, limiting its adoption in national or cross-border architectures.

2. Still prohibitively expensive: the challenge of accessibility

Another major obstacle is the cost of the equipment. Current QKD modules cost several hundred thousand euros per link, to which must be added :

• highly sensitive sensors ;
• specific fibres or dedicated optical stations ;
• ultra-precise synchronisation devices.

These costs put QKD out of the reach of SMEs, local authorities and mass-market users. They also hinder its integration into critical environments subject to strict budgetary constraints (public health, education, defence, etc.).

The White Paper therefore stresses the urgent need to :

• miniaturise components (for example in the form of SFP modules that can be inserted into existing network equipment);
• reduce energy consumption ;
• standardise production lines to drive down costs.

The medium-term objective is to reduce prices by a factor of 10 to 100, to make QKD competitive with conventional security solutions.

3. A lack of standards: an obstacle to massification

QKD is based on a new technology, still in the industrial prototyping phase. As a result, there are no truly operational standards guaranteeing interoperability between systems from different suppliers or their compatibility with current network infrastructures.

This poses a number of problems:

• Difficulty of integration into IP/SDN architectures ;
• The impossibility of planning public purchases on the basis of clear standards;
• dependence on proprietary solutions or technologies from outside Europe.

To remove this obstacle, the White Paper calls for standardisation work to be accelerated within the ITU, ETSI, 3GPP and the European consortia involved in the CiViQ, OpenQKD and EuroQCI projects.

Like Wi-Fi or Bluetooth, QKD can only be deployed on a large scale with stable, open and recognised technical standards.

4. A lack of skills: the human brake

Finally, QKD - like all quantum technologies - suffers from a massive shortage of trained talent. This shortage is felt at every level:

• researchers in applied quantum physics and optics;
• engineers capable of integrating QKD components into telecoms networks;
• technicians to install, maintain and diagnose systems;
• decision-makers and public purchasers aware of the technology and the issues involved.

The quantum sector is still young and little-known, and suffers from fierce global competition for talent. However, the deployment of large-scale QKD networks will require thousands of qualified professionals by 2030.

The White Paper stresses the urgent need to develop initial and continuing training, to attract young people to these fields and to create a genuine policy for training trainers.

Summary

QKD is advancing fast, but it remains a cutting-edge technology, with all the fragilities that implies. For its promises to become reality, we will need :

• invest in R&D for transponders, satellites and integrated photonics;
• supporting local industrialisation and reducing costs;
• building a European standards framework ;
• and, above all, training on a massive scale.

Only then will QKD be able to move from the experimental stage to become a universal foundation of digital trust, accessible to all the critical sectors of our societies.

Unprecedented European mobilisation

Faced with the emergence of quantum communications as a new geopolitical and industrial challenge, Europe has taken the measure of the strategic urgency. It does not intend to leave the technological monopoly to the American and Chinese giants, who are investing massively in this field. To this end, the European Union has launched a series of structuring initiatives around QKD - seen as the foundation of a future sovereign and interoperable quantum communications infrastructure.

EuroQCI: a quantum backbone for the whole of the EU

The EuroQCI (European Quantum Communication Infrastructure) project, launched in 2019 by the European Commission in partnership with ESA, aims to deploy a pan-European quantum network based on QKD. It is based on a hybrid architecture combining :

• terrestrial links based on secure fibre optics ;
• space links using quantum satellites, to cover long distances and isolated areas.

Main objectives:

• securing intergovernmental and critical communications at European level ;
• offer a shared infrastructure for data centres, public authorities, universities and sensitive industries;
• stimulate the development of a European industry capable of producing certified, competitive QKD modules.

The ambition is clear: to make Europe a sovereign player in the future quantum Internet and avoid strategic dependence on solutions developed outside the EU.

FranceQCI: the national pilot for France

As a key member of EuroQCI, France has launched its own pilot project: FranceQCI. This programme is coordinated by Orange, in partnership with :

• Manufacturers (Thales, Airbus, Veriqloud, CryptoNext);
• Research organisations (CNRS, Sorbonne University, Université Côte d'Azur);
• public players (DGAC - Direction générale de l'aviation civile); aims to test under real conditions the implementation of a national QKD mini-network.

This demonstrator will enable :

• validate technological choices ;
• identify the conditions for large-scale deployment;
• and analyse the economic and legal models for a national quantum network.

FranceQCI is acting as an experimental laboratory for future Europe-wide rollouts.

CiViQ, OpenQKD, Quantum Flagship: innovation on a continental scale

Alongside these deployment projects, several European programmes are aimed at developing the fundamental technological building blocks and structuring the ecosystem.

CiViQ (Continuous Variable Quantum Communications)

This Quantum Flagship project explores a QKD approach based on continuous variables (CV-QKD), which is easier to integrate into existing optical networks. CiViQ is working on :

• the miniaturisation of equipment;
• interoperability with conventional networks;
• drastically reducing production costs (target: factor 100 within 10 years).

OpenQKD

Launched in 2019, OpenQKD is a Europe-wide field test programme with more than 30 industrial and academic partners. It enables:

• test real-life use cases (e-health, finance, cloud, critical infrastructures);
• evaluate the performance of the various QKD technologies available in Europe;
• and create a base for the first pre-commercial networks.

Quantum Flagship

With a budget of €1 billion over ten years, this programme is one of the pillars of Europe's quantum technology strategy. It covers :

• basic research ;
• development of components (sensors, computers, networks);
• talent development and standardisation.

It brings together more than 200 partners from industry, research and education, and acts as a driving force for European sovereignty in quantum technology.

A call to structure the ecosystem: building Europe's quantum sovereignty together

One of the strongest messages in the white paper published by Télécom SudParis is that QKD is not just a technology, it is a systemic issue. And like all disruptive innovations, it can only reach its full potential if a coherent, sovereign and interoperable ecosystem is structured. This requires convergent efforts in four fundamental areas.

1. Initial and continuing training: building a generation of quantum talent

The skills gap is currently one of the main obstacles to the development of quantum technology in Europe. The white paper warns that without engineers, researchers, technicians and managers trained in the principles and uses of quantum technologies, massive investment will have no lasting effect.

To meet this challenge, a number of levers are proposed:

• Create interdisciplinary degree courses in engineering schools, universities and specialist masters, combining quantum physics, computing, telecoms and cyber security.
• Strengthen continuing training to enable existing professionals (IT, networks, security, defence, health, etc.) to upgrade their skills without leaving their jobs.
• Encourage the training of trainers, by supporting teaching chairs, CIFRE doctorates and centres of excellence such as Quantum-Saclay and EduQuantum.
• Targeting managers and decision-makers, with specific courses to help them understand the strategic challenges of quantum technology and steer innovation.

The stated aim for 2030 is to train more than 1,600 engineers specialising in quantum communications in France alone.

2. Supporting innovation: finance, protect, accelerate

The white paper also highlights a paradox: France has some brilliant start-ups in the quantum field, but many are struggling to scale up for lack of appropriate funding, industrial visibility or sufficient protection of their intellectual property.

Recommendations include:

• Strengthen targeted public funding schemes, such as the France 2030 calls for projects, or European funding schemes like the EIC Accelerator.
• Facilitating access to public-private partnerships, by supporting cooperation between start-ups, major groups and academic laboratories.
• Prevent the flight of strategic technologies, by supporting start-ups in protecting their patents, their industrial development and their European foothold.

Particular attention is paid to the risk of takeovers by non-European capital, which could result in the loss of critical know-how.

3. Standardisation and certification: creating a common European language

Today, the development of quantum technologies suffers from a lack of clear standards. Without shared standards, it is difficult to ensure system interoperability, guarantee security or build a competitive industry.

The White Paper therefore stresses the need :

• Accelerate standardisation work at international level, via institutions such as the ITU (International Telecommunications Union) and ETSI (European Telecommunications Standards Institute).
• Implement certification processes for QKD devices, to validate their robustness, compliance and safety in critical environments.
• Involve manufacturers from the design phase of standards, to ensure that standards are practical, compatible and can be integrated into existing networks.

Successful standardisation will also enable European players to take a leading role in future global quantum communication infrastructures.

4. Industrialisation and technological sovereignty: building a competitive industry in Europe

Finally, no transition can succeed without a solid, autonomous industrial base. The development of QKD will depend heavily on the ability to produce reliable, secure equipment that can be integrated into existing networks at reasonable cost.

This implies :

• Miniaturisation of QKD equipment to make it compatible with current infrastructures (cards, SFP modules, etc.);
• The development of European supply chains, avoiding dependence on non-European suppliers for critical components (photonics, cryogenics, optics, etc.);
• Alignment between prototypes and mass production, with industrial partners involved from the earliest design phases;
• And consideration must be given to the energy impact of these new facilities, so that they are compatible with climate objectives and increasing energy constraints.

In short, structuring the QKD ecosystem means much more than developing a technology: it means orchestrating an industrial and strategic transformation, at the intersection of research, innovation, training and digital sovereignty.

A long-term vision: towards a truly quantum Internet

While QKD (Quantum Key Distribution) is today the most mature technology for quantum communications, it is only the first step in a much larger and more ambitious project: the creation of a quantum Internet, i.e. a global network in which quantum computers, sensors, repeaters, memories and quantum cryptography devices interact in a distributed, secure and resilient way.

The Télécom SudParis white paper emphasises this long-term trajectory, which calls for solid foundations to be laid today to enable the gradual evolution of existing digital infrastructures towards this new environment.

The quantum Internet: a new paradigm

A quantum Internet would do more than simply encrypt communications more effectively: it would enable quantum states (and not just traditional data) to be exchanged directly, opening the way to radically new uses, such as :

• quantum teleportation of information, already demonstrated in the laboratory;
• ultra-precise networks of distributed sensors, capable of measuring the brain's magnetic field or variations in gravity;
• quantum distributed computing applications, where several quantum processors work together remotely;
• advanced cryptography protocols, such as multi-party secret sharing and tamper-proof electronic voting.

But to achieve such a network, a number of technological building blocks still need to be developed.

Quantum repeaters: the key to scale

Today, one of the major obstacles to extending QKD is the distance limitation. Quantum signals (entangled or single photons) cannot be amplified like classical signals, because any attempt to duplicate them would destroy the quantum state.

To go beyond the few hundred kilometres reached via fibre, or the 2,000 km reached via satellite, quantum repeaters will have to be deployed. These devices, currently under development, would be capable of storing, converting and retransmitting a quantum state without measuring it, based on technologies such as :

• quantum memories with cold atoms or trapped ions ;
• distributed entanglement protocols, such as Twin Field QKD ;
• photon-matter hybrid systems.

The development and standardisation of these repeaters are seen as decisive steps towards a large-scale network.

Quantum memories: storage and synchronisation

Another challenge is the temporary storage of quantum states, to enable protocols to be synchronised, errors to be corrected and network congestion to be managed. Here, quantum memories play a role similar to that of RAM in a conventional computer.

Although they are still highly experimental, they are set to become :

• stable over several seconds to minutes ;
• compatible with the wavelengths of existing optical networks;
• miniaturisable and energy-efficient.

Towards a classical/quantum coexistence

It is unrealistic to imagine that quantum networks will completely replace traditional networks. The challenge is therefore to design hybrid architectures in which the classical layers (Internet Protocol, fibre, 5G, etc.) coexist intelligently with the quantum layers (QKD channels, quantum SDN control, intricate relays, etc.).

This implies :

• define standardised interfaces (APIs, control protocols, security, etc.);
• to design equipment that is compatible with both worlds, such as optical transceivers that integrate both a classical and a quantum channel;
• train network architects capable of thinking in terms of coexistence, gradual migration and post-quantum resilience.

ETSI, ITU and other standards bodies are actively working on this issue, as are European projects such as CiViQ and the Quantum Internet Alliance.

In summary: QKD as the foundation of the future

QKD is therefore not an end in itself, but a founding technology around which a new era in telecommunications can be organised. Both a proof of concept for quantum cryptography and a springboard for more complex networks, it is an essential foundation for building a robust, sovereign and interoperable European quantum infrastructure in the long term.

But for this future to happen, decisions and investments need to be made now.

Conclusion: building Europe's quantum future together

This Télécom SudParis white paper is not simply a state of the art of QKD technology - it is a mobilisation tool. It aims to clarify, structure and encourage action by all those in Europe who wish to take part in the transition to a trusted digital ecosystem in the quantum era.

By clearly describing the advances, technical challenges and levers for structuring, it provides a useful framework for reflection for all European countries, whatever their level of technological maturity or starting point. It also highlights the need for coordinated action between research, industry, regulation and training, in a spirit of openness and complementarity.

The recent launch of Quantum Ireland marks an important milestone for Ireland. It affirms its ambition to contribute to this European dynamic, with its unique assets:

• an agile and recognised scientific community,
• an open and innovative digital economy,
• and a culture of collaboration already rooted in key European projects.

In this context, this white paper can serve as a useful reference, not as a model, but as a point of comparison, inspiration and dialogue. It opens up prospects for concrete cooperation: on experimentation, standardisation, training of talent or the development of uses in critical sectors (health, finance, cloud, energy, etc.).

Because it is only together, as European partners, that we can ensure the emergence of a secure, resilient and accessible quantum Internet - at the service of our societies, our economies and our values.

This document is therefore also an invitation to meet, exchange ideas and build joint projects. The road to quantum is still partly to be invented. It is essential that Ireland, along with its European partners, plays a full part in this process.

📥 Download the White Paper (Click)

📺 Tune in to the Quantum Communications Seminar (In Englis) – 24/04 Organised by Télécom SudParis

🔗 Find out more about www.telecom-sudparis.eu