发表机构
Universidad Carlos III de Madrid（马德里卡洛斯三世大学）
机构由 AI 辅助整理，请以论文原文为准。AI 中文总结
本研究基于开源QKD网络仿真平台Quditto，通过新增云原生编排、后量子节点集成等功能，打造可扩展的QKD-PQC混合网络仿真平台，验证了其亚线性编排扩展与端到端混合密钥建立能力，支撑大规模量子安全网络研究。
AI 中文摘要
向量子安全网络的持续转型推动了融合量子密钥分发（Quantum Key Distribution，QKD）与后量子密码（Post-Quantum Cryptography，PQC）的混合网络架构的发展。然而，QKD-PQC混合网络架构的实验评估仍受限于量子硬件成本高昂、可及性有限，以及现有仿真平台对QKD-PQC混合网络的支持不足。Quditto是一款最初为QKD网络设计的开源仿真平台，无需专用物理量子基础设施即可开展经济高效且可复现的实验。在此基础上，本研究将Quditto打造为具备自动化可扩展云原生编排能力的QKD-PQC混合网络仿真平台。该平台主要有四项贡献：一是云原生编排器，可在云和多集群环境中实现全自动化基础设施部署；二是优化的资源调配工作流，支持大规模量子安全网络仿真；三是后量子节点的原生集成，可实现QKD-PQC混合网络的统一仿真；四是安全密钥管理模块，提供加密材料的持久化存储与访问控制。实验验证表明，编排时间随网络规模呈亚线性增长，且在典型的脊叶架构部署中成功实现了端到端QKD-PQC混合密钥建立，从而为大规模异构网络环境下量子安全网络机制的系统性评估提供了支撑。
英文摘要
The ongoing transition toward quantum-safe networking has motivated the development of hybrid network architectures integrating Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC). However, the experimental evaluation of hybrid QKD-PQC network architectures remains constrained by the high cost and limited accessibility of quantum hardware, as well as by the limited support for hybrid QKD-PQC networks in existing emulation platforms. Quditto is an open-source emulation platform originally designed for QKD networks that enables cost-effective and reproducible experimentation without requiring dedicated physical quantum infrastructure. Building on this foundation, this work presents Quditto as a hybrid QKD-PQC network emulation platform featuring automated and scalable cloud-native orchestration. The proposed platform introduces four principal contributions: a cloud-native orchestrator enabling fully automated infrastructure deployment across cloud and multi-cluster environments; an optimized provisioning workflow enabling large-scale quantum-safe network emulation; native integration of post-quantum nodes enabling unified emulation of hybrid QKD-PQC networks; and a secure key management module providing persistent and access-controlled storage of cryptographic material. Experimental validation demonstrates sublinear orchestration-time scaling with network size and successful end-to-end hybrid QKD-PQC key establishment on a representative spine-leaf deployment, thereby enabling the systematic evaluation of quantum-safe networking mechanisms in large-scale heterogeneous network environments.
