Lesson 5.4: Quantum Networking: Where It Fits in the Timeline. Interactive lesson covering QKD, quantum repeaters, first mover organizations, the PQC-and-QKD parallel tracks framing, and common misconceptions about quantum networking replacing PQC migration.
Unit 5 · Level 4 → 5: Optimized, Certified, Future-Ready
Quantum Networking — Where It Fits in the Timeline
At some point in almost every PQC conversation, someone raises quantum networking. Sometimes it sounds hopeful: "Won't quantum internet just solve all of this?" Sometimes it sounds dismissive: "Why are we doing PQC migration if QKD is coming anyway?"
Both framings contain a misconception. This lesson gives you the accurate picture, what quantum networking is, what it is not, where it stands in 2025, and most importantly, why it is a parallel track to PQC migration rather than a replacement for it.
The core framing to hold: PQC and quantum networking are not competing solutions to the same problem. PQC protects classical networks against quantum computers, and you need it now. Quantum networking adds a physics-based security layer on top of PQC-protected infrastructure, and it is arriving incrementally, starting with point-to-point links, over the next decade. You need both, in sequence. PQC migration cannot wait for quantum networking to mature.
Part 2 — What quantum key distribution actually is
Quantum Key Distribution (QKD) is a method for establishing a shared cryptographic key between two parties using quantum mechanical properties, specifically, the behavior of individual photons transmitted over a fiber optic or free-space channel.
The core principle
In classical cryptography, a key exchange like ECDH depends on mathematical hardness, an eavesdropper could theoretically capture and record the exchange, then break it later with sufficient compute. In QKD, the key material is encoded in quantum states. Any attempt to observe or copy a quantum state disturbs it in a measurable way, the laws of physics guarantee that eavesdropping is detectable.
This is what makes QKD fundamentally different from any software-based cryptography: its security guarantee comes from physics, not from mathematical assumptions that could theoretically be overturned by a future algorithm or a sufficiently powerful computer.
Post-Quantum Cryptography
Mathematical hardness
Security depends on the difficulty of solving mathematical problems (lattices, hash functions) that no known quantum algorithm can solve efficiently. Security is computational, it requires assuming no such algorithm will be found.
Software-deployable todayNo new hardware requiredWorks over any networkNIST standardizedComputational security assumption
Quantum Key Distribution
Physics-based security
Security depends on quantum mechanical laws, any eavesdropping attempt disturbs the quantum channel and is detectable. Security is information-theoretic, it does not rely on computational assumptions.
A common misconception is that QKD is a full communication security solution. It is not, it is a key distribution mechanism. QKD establishes shared key material between two points. The actual data encryption still uses classical or post-quantum symmetric cryptography (typically AES-256, which is already quantum-safe). QKD also does not provide authentication on its own, you still need digital signatures and a PKI to verify identity.
What this means in practice: A QKD-secured link still needs PQC-protected classical cryptography for authentication, key confirmation, and data encryption. QKD adds a physics-based layer that protects the key exchange itself, but it does not eliminate the need for PQC. The two systems work together, not instead of each other.
The distance problem
QKD over fiber has a fundamental distance limitation. Photons are absorbed and scattered by fiber optic cable, and quantum states cannot be amplified the way classical signals can (amplifying a quantum state would destroy the information it carries, this is the no-cloning theorem). Current deployed QKD links operate reliably up to about 100–150 km over standard fiber. Beyond that, quantum repeaters are required, and quantum repeaters remain an active research challenge, not a deployed technology.
Satellite-based QKD has demonstrated longer distances, China's Micius satellite has achieved QKD links of over 1,200 km, but satellite systems introduce their own latency, availability, and cost constraints.
Part 3 — The quantum networking timeline
Quantum networking is not a single event, it is a multi-decade technology development trajectory with distinct phases. Click each phase to see what it involves and what it means for your planning horizon.
2020 — 2025 (Now)
Prepare and Deploy Quantum-Safe — PQC is the urgent task
NIST standards published. Hybrid TLS deployments beginning. Migration planning underway across enterprise and government.
This is the window we are in. NIST published FIPS 203, 204, and 205 in 2024. Early adopters are deploying hybrid TLS. Government agencies have received migration mandates. The primary task for every organization in this window is completing a CBOM, deploying PQC in critical systems, and documenting compliance. QKD activity in this window is limited to research labs and a small number of dedicated point-to-point trial deployments. PQC migration cannot wait for quantum networking to mature, cryptographically relevant quantum computers may arrive within this decade.
2026 — 2029
PQC migration in full swing: QKD point-to-point scaling
Enterprise PQC migration accelerates. First commercial QKD networks operating in major cities and between data centers.
PQC deployment becomes standard practice. Most major TLS implementations include ML-KEM by default. Certificate authorities are issuing ML-DSA certificates. For quantum networking: commercial QKD deployments are operating in metropolitan networks, primarily financial districts, government corridors, and data center interconnects in cities like Tokyo, London, and Singapore where QKD infrastructure is already being laid. Enterprise adoption remains limited to organizations with dedicated budget for quantum-enhanced security (financial sector, defense, critical infrastructure). Quantum repeaters are in advanced research phases but not commercially deployed.
PQC migration largely complete for well-resourced organizations. Early quantum repeater networks enable longer-distance QKD. Enterprise evaluation begins.
By 2029–2030, organizations that began PQC migration in 2024–2026 should have completed their critical system migrations. Certificate authority hierarchies are fully PQC-enabled. The focus shifts to governance, monitoring, and crypto-agility maintenance. For quantum networking: quantum repeater technology is approaching commercial viability, enabling city-to-city QKD links without satellite relay. Early quantum networking standards are being developed (ITU-T and ETSI have active working groups). Enterprise organizations in high-assurance sectors begin evaluating QKD for data center interconnects and backbone links. The 2029 horizon is the outer edge of broad enterprise adoption for QKD, most organizations will not need it before then.
2035 and beyond
Quantum internet — long-horizon vision
Multi-node quantum networks enabling distributed quantum computing, quantum-secured communications at scale, and new cryptographic possibilities.
The long-horizon vision of a "quantum internet" involves not just QKD but full quantum networking, transmitting and processing quantum states across networks, enabling distributed quantum computing, quantum-secured cloud storage, and capabilities that do not yet have classical analogs. This is genuinely transformative technology, but it remains a research agenda rather than an engineering roadmap. The organizations doing the most serious long-horizon work are national labs (US DOE quantum network initiative), academic consortia (European Quantum Internet Alliance), and a small number of deep-technology companies. For planning purposes: acknowledge this horizon exists, but do not let it delay any PQC migration decision you need to make today.
Part 4 — First movers: who is deploying quantum networking now
Quantum networking is not purely theoretical. A small number of organizations have deployed real, operational QKD infrastructure. Click each to see what they've built and why it matters.
Toshiba Europe
Quantum network vendor
● Deployed
Toshiba's quantum key distribution system holds the world record for QKD distance over fiber, exceeding 600 km in laboratory conditions using a technique called twin-field QKD. In deployment, Toshiba has operated commercial QKD links for financial institutions in Tokyo and has a presence in the UK quantum network testbed. Toshiba's approach is significant because it demonstrates QKD is not just a research curiosity, it is a commercial product with paying enterprise customers. For practitioners: Toshiba is among the vendors whose product certifications are worth watching as PKIC and ETSI develop quantum network security standards.
LuxQuanta
Continuous-variable QKD
● Deployed
LuxQuanta is a Barcelona-based quantum networking company using continuous-variable QKD (CV-QKD), which encodes key material in the amplitude and phase of coherent laser pulses rather than individual photons. CV-QKD systems can use standard telecom components, potentially lowering the cost and complexity of deployment compared to single-photon approaches. LuxQuanta is active in the European quantum communication infrastructure initiative (EuroQCI) and has deployed pilot links with European data center operators. Its significance: CV-QKD represents a path to broader enterprise adoption by reducing the specialized hardware requirement that makes single-photon QKD expensive.
ID Quantique
QKD pioneer, Switzerland
● Deployed
ID Quantique (IDQ) is the longest-operating commercial QKD vendor, founded in 2001. IDQ has deployed QKD systems in banking networks in Geneva, government networks in South Korea, and has partnerships with Nokia and SK Telecom for quantum-secured mobile networks. IDQ is also active in quantum random number generation (QRNG), which is relevant to PQC because random number generation quality is a prerequisite for strong cryptographic key material. IDQ's longevity in the market is significant: it demonstrates that QKD is a fundable, sustainable commercial activity, not just a government research program.
IonQ / broader quantum ecosystem
Quantum computing + networking convergence
◐ In development
IonQ and other quantum computing companies (IBM, Google, QuEra) represent the convergence point between quantum computing and quantum networking. Quantum computers need quantum networks to communicate, distributed quantum computing requires quantum channels that can transmit entangled states between processors. While most of IonQ's near-term work is in quantum computing rather than networking per se, the development of quantum networking standards and infrastructure will be shaped by what quantum computers need to communicate. The broader significance: the organizations building quantum computers are also the ones who will define the quantum networking protocols of the 2035+ era.
Part 5 — Four misconceptions about quantum networking
These misunderstandings come up regularly in organizational conversations about PQC strategy. Click each one to see the accurate correction.
"QKD is coming soon, we can delay PQC migration until then."▼
Misconception — this framing reverses the urgency
Broad enterprise QKD deployment is years to decades away. PQC migration addresses a threat that exists today, the Harvest Now, Decrypt Later (HNDL) attack means adversaries are already recording encrypted traffic to decrypt once cryptographically relevant quantum computers arrive. Waiting for QKD means your already-harvested data cannot be protected retroactively. PQC migration is urgent and available now. QKD is a future enhancement, not a replacement that justifies delay.
"QKD makes PQC unnecessary, physics beats math."▼
Misconception — they solve different parts of the problem
QKD protects key exchange over a dedicated optical link. It does not protect authentication (you still need digital signatures to know who you're talking to), it does not encrypt data (you still need AES or equivalent), and it only works between two endpoints connected by a direct quantum channel. PQC protects all of these things, authentication, key exchange, data encryption, over any network, including the internet, without dedicated hardware. QKD and PQC are complementary layers in a complete security architecture, not alternatives to each other.
"A quantum internet will look just like the regular internet, but quantum."▼
Misconception — quantum networks are fundamentally different infrastructure
Classical internet packets can be copied, stored, re-routed, and amplified. Quantum states cannot, the no-cloning theorem prevents copying a quantum state, and amplification destroys it. A quantum internet will not replace the classical internet; it will run alongside it as a specialized layer for specific use cases (key distribution, distributed quantum computing, quantum-secured communications for high-assurance environments). Most data communication will continue to use classical networks protected by PQC for decades and possibly indefinitely.
"If I deploy QKD, my organization is fully quantum-safe."▼
Misconception — QKD is one layer, not a complete solution
A QKD deployment protects the key exchange on the specific fiber link where it is deployed. Your TLS certificates, code signatures, email encryption, VPN credentials, identity tokens, and every other cryptographic system in your organization still need PQC migration. QKD at one point in your network does not protect any other system. An organization that deploys QKD on its data center backbone while leaving its certificate infrastructure on ECDSA has a quantum-safe key distribution link and a vulnerable PKI, and the PKI vulnerability can be exploited remotely without ever touching the QKD link.
Part 6 — Applying this in your context
Persona A — Motivated Learner
The parallel tracks framing, PQC now, quantum networking later, is one of the most useful things you can bring to any conversation about the quantum security landscape. It resolves the "why bother with PQC if QKD is coming?" question cleanly, which is a question that delays organizational action far too often.
If you're following the Web3 and decentralized PKI space (covered in Lesson 5.8), note that decentralized identity systems built on blockchain infrastructure face an identical challenge: the cryptographic keys used in most blockchain systems (secp256k1, Ed25519) are broken by Shor's algorithm. QKD does nothing to address this, those systems need PQC migration just as much as traditional PKI does, and the QKD infrastructure being built for enterprise networks does not extend into decentralized systems.
Persona B — SMB Decision-Maker
The practical question for an SMB is simple: do you need to think about quantum networking? Almost certainly not, not yet, and possibly not for a decade or more. Quantum networking infrastructure requires dedicated hardware, specialized technical expertise, and procurement relationships with a small number of vendors. It is relevant to financial institutions, government agencies, defense contractors, and critical infrastructure operators at this stage.
What you do need is PQC migration, and you need it whether or not you ever deploy QKD. When vendors or advisors suggest you can defer PQC planning until "the quantum networking situation clarifies," that is not correct advice. PQC migration protects data that exists today. Quantum networking protects future key exchanges. They are not substitutes.
Persona C — IT Professional
The operational implication of the parallel tracks framing is that your architecture should accommodate both layers eventually. If you are designing new high-assurance network infrastructure, data center interconnects, government backbone links, financial messaging networks, it is worth understanding whether your fiber vendors and network equipment suppliers are planning QKD compatibility into their roadmaps, even if you are not deploying it now.
The crypto-agility you build into your systems for PQC migration is the same architectural property that will make it easier to add a QKD layer when the time comes. An architecture that can swap algorithms can also add protocol layers. Building crypto-agility now is not just a PQC migration investment, it is an investment in your organization's ability to incorporate quantum networking without a second round of infrastructure re-engineering.
?
Comprehension check
Question 1 of 3
An executive says: "I've read that quantum key distribution provides physics-based security guarantees. Doesn't that mean we should wait for QKD to mature before investing in PQC migration?" What is the most accurate and complete response?
Question 2 of 3
Why can quantum states not be amplified the way classical network signals can? What is the security implication of this property?
Question 3 of 3
A financial institution has deployed QKD on its data center interconnect link. Their CISO declares the organization "fully quantum-safe." What is the most significant gap in this assessment?
–
out of 3 correct
Coming up next
Lesson 5.5 — PKIC Working Groups: How to Participate Meaningfully