Quantum Key Distribution (QKD) has long been regarded as a specialist technology requiring dedicated hardware. A new approach integrates quantum-safe keys directly into the network.
In cooperation with CUbIQ Technologies and additional partners, HPE has developed a new approach to quantum-safe network encryption. Rather than treating Quantum Key Distribution (QKD) as a standalone system, the solution embeds it directly into the network: a QKD pluggable module inside the router generates quantum keys over an optical link.
In a working prototype, those keys are used for MACsec, the Layer 2 security protocol that encrypts Ethernet connections between network elements. The result: data traffic protected by keys derived from the principles of quantum physics.
A Network Architecture Shift
Conventional QKD deployments rely on separate appliances. These systems generate quantum keys and then distribute them to routers, firewalls, or encryption platforms. For network operations teams, that translates into additional hardware, separate management systems, and integration overhead.
The new model flips that logic. The router remains the central network platform, while QKD runs purely as a module within the device. This eliminates the need for a dedicated management layer for QKD hardware.
The module can be managed through the existing router platform and integrated seamlessly into all established network workflows, which significantly reduces operational complexity.
Getting Started Without Standalone Quantum Hardware
For operators, this approach offers a notably low barrier to entry for QKD. Higher-performance modules can be swapped in much like any other optical transceiver — without overhauling the underlying infrastructure.
The QKD pluggable modules are currently still at the prototype stage. However, the router platforms tested to date already support the ingestion of external quantum keys for use with IPsec or MACsec encryption.
This incremental deployment model is particularly relevant across Gulf Nations, where digital transformation efforts are underway across smart cities, cloud infrastructure, and public sectors such as healthcare and financial services. Consequently, this ambition demands simplified network operations and scalable architectures, but most importantly, it requires embedding robust security mechanisms into existing networks.
Quantum-Safe Cryptography: Especially Critical for Financial Services
One risk that weighs particularly heavily on the financial sector is the so-called “store now, decrypt later” threat. Attackers are already intercepting large volumes of encrypted data and archiving it for the long term. Once sufficiently powerful cryptanalytic methods become available – through quantum computers, for instance – that data can be decrypted retroactively.
For short-lived data, the long-time horizon may render this moot. But for information with lasting sensitivity – financial transactions, personally identifiable data, or confidential business processes – decryption years after the fact could prove highly damaging.
“For Gulf nations, this issue requires significant attention. Major investments in digital banking, fintech ecosystems, and cross-border payment infrastructure are increasing the volume of sensitive financial and consumer data that must remain secure for several decades.”
Regulatory Landscape
Gulf nations are already embedding cryptographic resilience into national cybersecurity and infrastructure strategies, with a strong focus on roadmaps for a migration to post-quantum cryptography (PQC).
In this context, the industry is pursuing two complementary tracks: new mathematical approaches under the banner of Post-Quantum Cryptography (PQC), and physics-based methods such as Quantum Key Distribution (QKD). While PQC relies on novel cryptographic algorithms designed to resist quantum attacks, QKD leverages the principles of quantum physics to exchange keys over optical links. Any eavesdropping attempt disturbs the quantum state of the transmitted photons and can therefore be detected.
In 2025, the UAE established a National Encryption Policy and issued its executive regulation, which calls on government entities to transition from traditional encryption methods toward post-quantum cryptography. The policy aims to support forward-planning and a safer migration to quantum computing, with the UAE Cybersecurity Council overseeing its alignment with post-quantum encryption standards.2
Elsewhere in the Gulf, Saudi Arabia’s National Cybersecurity Authority (NCA) outlines mandatory cryptography requirements through the Essential Cybersecurity Controls and National Cryptographic Standards. The NCA also identifies Cryptography and Quantum Security as one of eight priority pillars aimed at advancing the Kingdom’s cybersecurity ecosystem, strengthening international partnerships, and developing innovative solutions to emerging cybersecurity challenges.
Globally, momentum around post-quantum regulation is accelerating. In the United States, the National Institute of Standards and Technology (NIST) has already standardised several post-quantum cryptographic algorithms. These new schemes are intended to eventually replace classical public-key methods such as RSA and ECC, and U.S. federal agencies and their suppliers are expected to migrate on a phased timeline.
A Hybrid Approach to Quantum Security
The trajectory of quantum computing remains difficult to predict. What experts do agree on is that the transition to quantum-safe methods will take years. Whether physics-based approaches like Quantum Key Distribution will play a major role in the long run is a matter of ongoing debate. Proponents see QKD as an additional layer of security, while other experts argue that mathematical post-quantum algorithms can already be implemented on today’s hardware and are therefore sufficient for many use cases.
The most likely outcome is a hybrid approach: new cryptographic algorithms form the foundation of future security, while quantum-based technologies are deployed where particularly stringent protection requirements apply.
For enterprises and network operators across the Gulf Nations, the key consideration is how quickly and efficiently quantum-safe infrastructure can be deployed while safeguarding essential services, economic stability, and digital infrastructure.
This opinion piece is authored by Gert Grammel, Quantum Security Lead, HPE.
