Quantum Key Distribution (QKD) Explained

Quantum Key Distribution (QKD) uses the laws of physics to share keys with provable security. It is real, deployed in places — but surrounded by hype. Here is a clear, honest explanation.

How QKD Works

QKD (the original BB84 protocol, 1984) lets two parties exchange a secret key using photons. Each bit is encoded in a quantum state (e.g. polarisation) of a photon. The fundamental principle: measuring a quantum state disturbs it. Any eavesdropper intercepting the photons inevitably changes them, and the legitimate parties detect the disturbance.

After exchanging photons and comparing a subset publicly to detect tampering, the parties distil a shared secret key. The key's security is information-theoretic — it does not depend on computing power, classical or quantum.

What QKD Is Good At

• Detecting eavesdropping: interception is physically noticeable.
• Information-theoretic key security: no computational assumptions.
• Long-term confidentiality of the key: a key established by QKD stays secret even against future quantum computers.

The Limitations

• Requires dedicated hardware: fibre-optic or free-space optical links. Not deployable over the ordinary internet.
• Distance limits: photons attenuate in fibre; without trusted repeaters, range is ~100-250 km. Repeaters either must be trusted (breaking end-to-end security) or require quantum repeaters (still experimental).
• Cost: specialised equipment, dedicated infrastructure.
• Only key exchange: QKD establishes a key; you still need strong symmetric encryption (AES-256) and authentication to use it safely.
• Authentication problem: to prevent man-in-the-middle, QKD needs an authenticated classical channel — which itself needs cryptography (often a pre-shared key or a small amount of symmetric key material).
• Denial of service: an attacker can always cut the fibre. QKD detects eavesdropping but cannot prevent jamming.

Where QKD Is Deployed

• China: the largest QKD network, including a satellite-to-ground link (Micius) and backbone fibre networks for government and finance.
• Europe: pilot QKD networks (e.g. SECOQC legacy, current EU Quantum Flagship projects) and metropolitan testbeds.
• UK, US, Japan, Israel: research and limited commercial deployments for high-value links.

These deployments protect specific, high-value links — between data centres, government sites, financial hubs — where dedicated fibre is justified.

QKD vs Post-Quantum Cryptography

| | QKD | PQC (ML-KEM) | |---|---|---| | Foundation | Physics | Mathematics | | Deployable over internet | No | Yes | | Cost | High (hardware) | Low (software) | | Scalability | Limited | Internet-scale | | Security type | Information-theoretic | Computational | | Standards | Some (ETSI, ITU) | NIST FIPS |

For almost everyone, PQC is the practical answer. QKD is a complementary tool for narrow, high-value links.

The Honest Takeaway

QKD is genuine and valuable, but it is not a general-purpose solution and it is not a substitute for post-quantum cryptography. Be sceptical of vendors who imply that buying a QKD box makes you "quantum-safe" — you still need strong symmetric encryption, authentication, and software-based key exchange for everything else.

Bottom Line

QKD offers a unique, physics-based guarantee for key exchange in specific high-value scenarios. For the rest of us, post-quantum cryptography plus AES-256 is the practical, scalable path to quantum safety — and it is available today, in software, without dedicated fibre.