Hybrid Key Orchestration of PQC and QKD for Adaptive Quantum-Safe Networks
Year: 2025
Type: conference-paper
Abstract: Quantum computing is growing rapidly, and traditional cryptographic algorithms are becoming obsolete. Practical frameworks are needed for the dynamic integration of quantum and post-quantum security mechanisms into network infrastructures. Conventional key management systems are largely static, relying on isolated cryptographic domains and fixed rekey policies, which restrict their ability to adjust to evolving quantum channel conditions or changes in key availability. This paper presents the Quantum-Enhanced Decision Framework with Key Orchestrator (QEDF-KO), a crypto-agile, standardscompliant architecture that dynamically synchronizes Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) to provide adaptive, quantum-resistant key management at the IPsec/IKEv2 control plane. Unlike static techniques, hybrid QEDF-KO deploys a real-time analytical control layer that uses derived closed-form models to quantify key demand, compute the QKD coverage ratio, and predict expected rekey latency and composite security strength. The framework applies analytical derivations to achieve sub-10-millisecond rekey latency under optimal quantum key conditions, ensuring continuous, resilient, and adaptive quantum-safe performance by seamlessly transitioning to PQC-based key generation when quantum key availability decreases, while maintaining uninterrupted operation. The model enables deterministic, zero-downtime transitions by precisely defining three operational zones: like PQC-dominant, hybrid, and QKD-dominant. QEDF-KO extends prior art by providing a deployable, auditable orchestration engine that quantitatively selects, blends, and continuously monitors essential sources. The results demonstrate analytical validation against Monte Carlo simulation and real-world benchmarks, including metro QKD links$\boldsymbol{\geq} \mathbf{1 0} \boldsymbol{k} \boldsymbol{b} / \boldsymbol{s}$and PQC TLS/IKEv2 handshakes ˜10 ms. This enables resilient quantum-safe operation in diverse, dynamic network environments, information-theoretic security uplift, and sub-10 ms rekeying.
Institution: Multimedia University
Language: English
Subfield: Atomic and Molecular Physics, and Optics
Field: Physics and Astronomy
Domain: Physical Sciences
Open Access status: hybrid
OpenAlex ID: W7171715326