Quantum 2025 – scientific programme

Parts | Days | Selection | Search | Updates | Downloads | Help

WED-ID: Industry Day

WED-ID 6: Quantum Hardware, Software & Solutions

WED-ID 6.2: Talk

Wednesday, September 10, 2025, 15:35–15:55, ZHG006

Security evaluation and certification of QKD devices — •Marc Wehling — TÜV Informationstechnik GmbH

The threat posed by quantum computers requires a new approach to cryptographic security. Although post-quantum cryptography (PQC) offers short- and medium-term security, its underlying mathematical structure could be susceptible to future attacks. Relying on fundamental physical laws, quantum key distribution (QKD) uses photons to encode secret data. Although the security proof provides security at the protocol level, the physical implementation can be targeted in numerous ways by an eavesdropper. Security at the implementation level remains to be evaluated. However, a certification scheme approved by a national certification body is a missing cornerstone. The QuNET+BlueCert initiative aims to fill this crucial gap by developing a blueprint for QKD security evaluation.

TÜV Informationstechnik GmbH (TÜVIT) is collaborating with partners from academia and industry to take a leading role in building a test laboratory for the security evaluation of various QKD components. The aim is to develop a certification scheme that will enable industry partners to protect their products against threats.

This talk covers threats to the implementation of QKD systems, as well as the current state of QKD certification, and provides an analysis of the elements missing on the way to a complete certification scheme.

Keywords: Quantum Key Distribution; Certification; Security Analysis; Evaluation