Achieving Quantum-Safe Networks: The power of practical experience
Combining innovation and real-world expertise for Quantum Security
Quantum computing will deliver many benefits to the world’s economies and to society in general. But each new development in this field also brings us closer to Q-Day: the day when a quantum computer becomes mature enough to break current cryptographic methods, including encryption.
With Q-Day on the horizon, many network equipment vendors are now promoting their solutions as being “quantum-safe” — yet very few hit that target. That’s because quantum-safe isn’t a label you can attach to any product. It’s an outcome earned through years of research, innovation, trials and actual deployments in real network environments, coupled with a robust ecosystem of partners all working toward the same goal.
What defines success in quantum-safe networking?
For a network to be considered truly quantum-safe, it must be backed by the following:
1. Real-world deployments
Quantum-safe networking solutions need to be scalable, adaptable, evolvable, and cost-effective. Testing those principles and characteristics through pilots and proof-of-concepts in controlled environments is one thing. Actually deploying quantum-safe solutions in live networks, especially those used by mission-critical infrastructure operators, is another thing altogether — but it’s an area where Nokia has already shown proven success.
We’re proud to lead the charge in securing the digital future with more than 100 live deployments of our Quantum-Safe Networks (QSN) solution in mission-critical environments. While the confidentiality of our clients in sectors like defense and finance prevents us from publicizing specific references, our track record speaks volumes about our commitment to excellence. For instance, our collaboration with SK Broadband has enabled the deployment of a quantum-secure network to protect Korea Hydro and Nuclear Power’s IT infrastructure. Additionally, our partnership with UltraEdge is pioneering the deployment of quantum-secure network solutions for edge data centers. With these clients, QSN stands as a bulwark against the looming threats posed by a cryptographically relevant quantum computer and “harvest now, decrypt later” (HNDL) activities, providing unparalleled security and peace of mind.
Of course, that doesn’t mean we’re also not involved in ground-breaking trials to actively shape the evolution of the quantum-safe future. Through our work with Proximus, for example, we were the first to use hybrid quantum encryption keys in a live optical network, successfully encrypting and transmitting messages between two datacenters in Belgium. With the GRNET-led HellasQCI consortium, we demonstrated hybrid quantum key generation in a complex optical network topology across three locations in Greece. With Lyntia, we are pioneering the deployment of quantum cryptography systems for data networks using low-latency fibers, enhancing the security and integrity of fiber-optic links between data centers.
2. Experience across all regions and sectors
Quantum-safe networking isn't limited to telecommunications service providers. Mosca’s quantum risk theorem and the HNDL threat highlight the necessity for every industry to prepare for Q-Day, which is approaching faster than many realize. This emphasizes the critical need for network equipment vendors to possess knowledge and expertise across diverse sectors. The technologies, solutions, and overall approaches proposed for governments, defense, finance, power utilities, healthcare, education, or any other mission-critical industry need to reflect the unique challenges faced by each industry and the specific results they seek to achieve, even though they all aim for the same ultimate Quantum-safe outcome.
Nokia has seen this unfold as we already have a QSN footprint in all these industries, either directly or through our global and regional partnerships with industry-expert system integrators.
3. Knowledge of industry/government standards
Governments and industry associations are actively developing standards, frameworks, and regulations to guide and enforce the protection of mission-critical infrastructure from emerging quantum threats. In the United States, the Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and National Institute of Standards and Technology (NIST) have created a Quantum-Readiness Roadmap, offering recommendations for organizations on how to begin preparing for post-quantum cryptographic standards. Additionally, the National Security Memorandum on Quantum Computing outlines strategies for maintaining America’s leadership in quantum computing while mitigating cryptographic risks.
In Europe, the NIS2 Directive aims to enhance cybersecurity across the EU by setting stricter security requirements for mission-critical industries. There is also the Digital Operational Resilience Act (DORA), which focuses on ensuring the operational resilience of financial entities against ICT-related disruptions. Other notable initiatives include the World Economic Forum's Quantum Computing Governance Principles, which guides organizations in transitioning to quantum-secure systems, as well as its Quantum Security for the Financial Sector white paper that emphasizes the need for a global effort to bolster defenses against emerging quantum threats.
In our work with standards bodies and government security regulators, we’ve come to recognize the importance of being able to guide our customers through the application of all the recommendations of the NIST roadmap and other regionally applicable regulations. Also, our optical networking technologies were the first in the industry to achieve NIST’s Federal Information Processing Standards (FIPS) 140-3 Security Level 2 Validation certification, setting a new benchmark for securing mission-critical optical networks. Two years in the making, this certification underscores our commitment to investing time and resources into post-quantum cryptography — and to advancing security standards across the industry.
4. An outcome-based approach
Many network equipment vendors approach quantum security from a technology-first perspective. However, given the rapid evolution of digital technologies and the cybersecurity landscape, this approach can quickly become limiting. Instead, it’s more effective to adopt an outcome-based strategy. With this approach, the primary goal is to help enterprises and service providers achieve quantum safety and crypto-resilience through a defense-in-depth framework, using multiple complementary solutions across various layers of the network. Given the heterogeneous nature of networks, adaptability is key to ensuring this quantum-safe outcome in a scalable and economical manner. Effective risk mitigation strategies are essential to achieving this goal. The specific solutions used to reach this outcome are secondary to the overall objective of ensuring robust, adaptable protection.
This is the approach we take at Nokia. By focusing first on the outcome and then tailoring our technology choices to achieve the outcome, we’re better positioned to help organizations today and, thanks to the ongoing research and innovations emerging from Nokia Bell Labs, as we advance further into the quantum technology era.
How partnerships help achieve quantum-safe outcomes
In a field as complex as quantum security, no single company will have all the necessary expertise in-house. Achieving quantum-safe outcomes requires innovation in connectivity enablement; quantum key creation, distribution, and orchestration; and so many other areas. That’s why it’s imperative for any network equipment vendor to foster a culture of collaboration and build an ecosystem of partners who can assist them in both creating and delivering value to their customers.
-
Value creation: This involves bringing in complementary partners to help the network equipment vendor ideate and advance solutions that make it possible for enterprises to realize quantum-safe outcomes faster. At Nokia, we don’t make quantum key distribution (QKD) platforms. Instead, we’ve curated an open ecosystem of QKD partners whose expertise we can leverage to operationalize resilient, agile quantum-safe solutions that work in sync with our IP and optical connectivity enablers.
-
Value delivery: This involves partnering with service providers, global and regional system integrators, and value-added resellers who have intimate knowledge and reach into specific customer segments, industries, or regions. Bringing together our leading networking technologies with expert partners who possess deep IT knowledge across a wide variety of industries (and can offer managed, wholesale, or retail services to those industries) helps extend our reach so we can bring quantum-safe outcomes to more enterprises in more places. Those enterprises also gain the benefit of working with an entity they already know and trust to bring them the best solutions for their business.
Tapping into the power of n
Although Q-Day is unlikely to occur within the next two to three years, enterprises, particularly those in mission-critical sectors, shouldn't wait for a tipping point to act. Transforming critical industries requires time and meticulous planning. Addressing risk in light of increasing probabilities and evolving regulations necessitates proactive measures. Our proven QSN technology is available now and, because it is backed by the right partners and the right approach, can help companies achieve quantum-safe outcomes today.
That said, staying quantum-safe is a long-term journey. By leveraging the power of n (that is, the exponential capabilities we can access through our vast network of specialized partners), driving forward with the continuous innovations of Nokia Bell Labs, and never losing sight of the quantum-safe outcome, we know we’ll be able to help companies be ready for Q-Day now and over the long term.
