Los Alamos National Labs Has Working Hub-and-Spoke Quantum Network 55
New submitter hutsell writes with this excerpt from MIT's Technology Review: "Richard Hughes and his associates at the Los Alamos National Laboratory in New Mexico announced today that they have been sending perfectly secure messages with their Quantum Internet that has been in operation for the last two and a half years."
Original paper. Unlike current quantum networks that only allow point-to-point networking, the system at Los Alamos combines traditional and quantum links to route messages through a hub while retaining the security advantages of quantum networking.
Re:Evanescent wave (Score:5, Informative)
No, it doesn't assume the optical link can't be tapped. In fact, the quantum encoding is specifically a defense against the optical link being tapped. The data is sent one photon at a time. If a tapper captures the photon (even by leakage from evanescent waves), they destroy the information --- and are neither able to know for themselves, or reliably re-send to the receiver, the bit that was sent. If the tapper doesn't capture the photon, they they haven't tapped the line. At the receiving end, getting too high a dropped bit rate (or scrambled nonsense bits) lets you know the line is compromised, while the attacker still doesn't get any useful information.
Re:So... (Score:4, Informative)
I was semi-joking; but it is actually a serious question. (To the best of my understanding) a quantum-encrypted network provides rock-solid assurance that nobody is physically tapping your lines.
All quantum crypto gives you is one time pad material that cannot be derived from previous communications.
For example say you are able to record all classical communication between parties. If at some point in the future you are able to somehow compromise the initial encryption key you would be able to go back and decrypt any communications using this key and rotated keys based on the initial key or descendants of said keys if communicated within intercepted channel after the fact.
With quantum crypto there is no longer a physical linkage possible because pad data is guaranteed to be knowable to exactly two parties.
There is still very much a real classical problem in that you need to establish a trust relationship between yourself and your communication partner to have any assurance as to which party you are actually OTPing in quantum world...This is always done using an initial classical key to protect against Active MITM of the quantum channel.
While I appreciate the value in this scheme in the real world I do wonder what the actual benefit is for things like electric grid control cited in their paper where forward secrecy has very little value to begin with.
While it is true that a compromised key could not in theory be used for long....if you already had the ability to compromise current key you could then also perform an undetectable active MITM against the quantum communication channel and from then on be privy to all new OTP/key refreshes.
Any of us can exchange data over the Internet with the same level of assurances as the best fancy quantum gear...All you need to do is exchange OTP data offline (SD card filled with a few GB of random garbage) and you are set for a very long time of guaranteed intercept free communication. Years worth of voice chatter..lifetimes worth of text messages or short control messages all for small fractiones of pennies on the dollar. Sure it does not scale but no trust relationships ever really meaningfully do.
As with the quantum gear your vulnerability is and always shall be compromise of that which hold trust/keys.