Quantum Key Distribution
Also known as: QKD
Definition
A key establishment method that uses the quantum-mechanical properties of photons — typically their polarization or phase state — to generate a shared secret key between two parties over a quantum channel, such that eavesdropping attempts introduce statistically detectable errors, backed by an authenticated classical channel for reconciliation and verification.
Key Points
- Distributes symmetric encryption keys, not the encrypted data itself — QKD is a key establishment method, not a full encryption system on its own
- Security rests on the physical properties of quantum measurement (observing a quantum state disturbs it), not on the difficulty of a mathematical problem, making it theoretically resistant to future quantum computing attacks that would break conventional asymmetric key exchange
- Requires an authenticated classical communication channel alongside the quantum channel to prevent man-in-the-middle attacks during key reconciliation
- Photon loss over distance limits practical range — fiber-based QKD typically requires trusted relay nodes beyond roughly 100-200km, while satellite-based QKD extends range using free-space optical links through the atmosphere
- Distinct from post-quantum cryptography, which achieves quantum resistance through new mathematical algorithms rather than physical key distribution
Concept
In practice, two parties exchange photons encoded with quantum states over a quantum channel (fiber or free-space optical), then use a classical channel to compare a subset of measurements and detect whether an eavesdropper has disturbed the transmission. If no eavesdropping is detected, the remaining, unmeasured bits form the shared secret key, which is then used with conventional symmetric encryption to protect the actual data traffic — QKD itself never carries the payload data.
Explainer
The core operational constraint on QKD deployment is distance: photon loss in optical fiber accumulates with length, and beyond a practical range — commonly cited around 100-200km for terrestrial fiber without amplification, since quantum states cannot tolerate amplification the way classical signals can — key generation rate drops to impractical levels, forcing either trusted relay nodes (which reintroduce a point of trust the end-to-end quantum security was meant to avoid) or a switch to satellite-based QKD, which routes the quantum channel through free-space optical links via a trusted satellite relay instead. This trusted-node requirement is the most commonly overlooked limitation of QKD in practice: the theoretical end-to-end security guarantee only holds between adjacent trusted nodes, not across an entire multi-hop network, unless the relay infrastructure itself is fully trusted. For CE verticals, QKD's realistic near-term relevance is concentrated in government and defense communications and critical infrastructure protection — grid control systems, for example — where the cost and complexity of dedicated quantum-secured links is justified by the sensitivity of what they protect, rather than in general commercial connectivity where conventional encryption backed by strong key management remains the practical standard.
Cite this entry
Quantum Key Distribution. ConnectedEarth Knowledge Base. https://connectedearth.space/knowledge-base/quantum-key-distribution/ (updated 13 September 2026).