The Basque Academic and Research Network i2basque, managed by Ikerbasque, the Basque Foundation for Science, will be part of a testbed for an experiment taking place between 15 and 20 November. The experiment will demonstrate the feasibility of implementing secure connectivity solutions and networks based on a defence-in-depth security approach — a cybersecurity strategy that uses multiple layers of independent security controls.
To this end, the optimal connectivity solution will be provided using the key distribution mechanisms available between network locations: Quantum Key Distribution (QKD) or Post-Quantum Cryptography (PQC). This will be achieved through the use of the QuLore¹ framework, developed by EHU (University of the Basque Country), together with two key management systems (KMS) developed within the Research and Education (R&E) community: edukms, provided through SURF, and vMKS, developed by EHU.
Specifically, the experiment will demonstrate secure communications resilient to quantum threats at three different levels:
- At network level, between two corporate networks using IPsec.
- At optical level, over DWDM systems.
- At application level, between end-user applications.
The demonstration will include several links:
- Two pairs of optical transmission systems enabling multiple data signals to be transmitted over a single optical fibre using different light beams or wavelengths (colours) within the infrared spectrum (DWDM). These will be deployed between the CIENA and PCCS locations at the SuperComputing Exhibition Hall, and two sites on EHU's Bizkaia campus: the Bilbao School of Engineering and the Advanced Aeronautical Manufacturing Centre (CFAA) in Zamudio.
- Two IPsec-protected links (IPsec being a suite of standards that secures communications over public IP networks or the Internet), using post-quantum cryptographic protocols (PQC). These links will be established between PCCS and SURF's facilities in Amsterdam, and between the latter and CFAA in Zamudio.
- IP links between various end-user applications. In this case, an open-source videoconferencing application has been modified to use quantum-safe keys to encrypt audio and video traffic. These keys can be obtained directly through QKD (Quantum Key Distribution) or via a key relay system.
For further information, please refer to the document attached below:
.png)
