A field deployment by Quantum Corridor, Ciena, and Toshiba has demonstrated quantum-safe optical encryption at 1.6 Tb/s over a commercial fiber link, combining post-quantum cryptography and quantum key distribution in a real-world setting
Quantum Corridor, Ciena, and Toshiba have jointly demonstrated high-speed quantum-safe encryption across a live commercial fiber network, validating the simultaneous use of post-quantum cryptography (PQC) and quantum key distribution (QKD) at a data rate of 1.6 terabits per second (Tb/s). The field trial was conducted on Quantum Corridor's operational fiber infrastructure, linking data center nodes between Chicago, Illinois, and Hammond, Indiana. This deployment marks a significant step in testing quantum-resistant security protocols under real-world network conditions, where both mathematical and quantum-physical defenses are required to address emerging cryptographic threats.
Hybrid Encryption Approach
The experimental setup integrated Ciena's Waveserver platform, equipped with WaveLogic 6 Extreme (WL6e) coherent optics, to deliver wire-speed AES-256-GCM encryption at the optical layer. The system ran NIST-certified post-quantum cryptographic algorithms in parallel with Toshiba's QKD servers, which supplied quantum-generated symmetric key material directly to the encryption modules. This hybrid approach is designed to counter "harvest now, decrypt later" attacks, where adversaries may store encrypted data for future decryption using quantum computers. By combining PQC and QKD, the system aims to provide layered security that is resilient to both classical and quantum computational threats.
Network Integration and Upgrade Path
The trial operated over Quantum Corridor's production photonic line system, with the new 1.6 Tb/s encrypted channel running alongside existing 800 Gb/s WaveLogic 5 Extreme (WL5e) encrypted traffic. Notably, the demonstration showed that legacy 800G optical links could be upgraded to support PQC algorithms through software updates, without the need to replace physical line hardware. Toshiba's photonic multiplexing capability enabled both QKD channels and classical data traffic to coexist on a single fiber pair, eliminating the requirement for dedicated dark fiber and reducing infrastructure costs. This coexistence is a key engineering challenge for scaling quantum-secure networks beyond laboratory environments.
Performance Metrics and Operational Considerations
During the field deployment, the system maintained a total encrypted optical capacity of 1.6 Tb/s, with continuous key refresh provided by the QKD servers. The encryption modules operated at wire speed, and the integration of PQC algorithms was achieved without measurable degradation of throughput or latency under test conditions. The trial did not report independent third-party verification or peer-reviewed publication, and the long-term stability of QKD key rates and error rates under varying network loads remains to be established. However, the demonstration provides a practical benchmark for hybrid quantum-safe encryption in a commercial setting, complementing earlier laboratory and cross-state QKD experiments.
Context in Quantum Networking
Quantum Corridor's deployment builds on previous QKD demonstrations and is part of a broader effort to develop quantum-resistant network infrastructure for research, defense, finance, and AI workloads. The company is expanding its planned 263-mile fiber network to serve institutions requiring high-bandwidth, quantum-secure data transmission. The integration of PQC and QKD in a live network environment reflects a growing industry focus on hybrid cryptographic solutions, as highlighted in related initiatives such as recent entanglement-based network tests in Albuquerque. The transition from laboratory prototypes to operational systems will require further validation of performance, reliability, and interoperability with existing network infrastructure.
Quantum key distribution (QKD) is a cryptographic protocol that uses quantum states-typically single photons-to generate and distribute symmetric encryption keys between network endpoints. The security of QKD relies on the fundamental properties of quantum measurement: any attempt to intercept or measure the quantum states disturbs them, revealing the presence of an eavesdropper. However, QKD alone does not replace classical cryptography; it must be combined with secure authentication and robust implementation to provide end-to-end security. Post-quantum cryptography (PQC), by contrast, consists of mathematical algorithms designed to resist attacks from both classical and quantum computers, and can be deployed on conventional hardware. Hybrid systems that combine QKD and PQC are being explored to address both current and future cryptographic risks, but their practical deployment at scale remains an active area of research and engineering.
