SGX-QKMS: Remotely Attested Key Relaying in Quantum Key Distribution Networks
Year: 2026
Type: conference-paper
Abstract: Trusted-node QKD networks extend QKD by relaying keys across intermediate sites, but end-to-end confidentiality then depends on every relay remaining trustworthy. We present SGX-QKMS, an overlay QKMS that terminates inter-KME channels inside Intel SGX enclaves and releases relay key material only after remote attestation of the peer KME’s enclave identity and platform status. SGX-QKMS specifies a minimal inter-KME HTTPS relay protocol (softstate reservations, idempotent batching, and hop receipts) and an attestation-bound enrollment workflow that binds a KME’s TLS identity to an attested measurement. The design supports progressive rollout by forming attested “islands” within partially upgraded QKDN graphs and preferentially routing over attested paths. A Rust/Fortanix EDP prototype validates measurement reproducibility and sensitivity: clean rebuilds preserve MRENCLAVE, while code or embedded trustanchor changes produce distinct measurements that enable measurement-pinned policy.
Language: English
Subfield: Artificial Intelligence
Field: Computer Science
Domain: Physical Sciences
Open Access status: hybrid
OpenAlex ID: W7204757266