Q-RAN: Quantum-Resilient O-RAN Architecture

TL;DR

This paper introduces Q-RAN, a comprehensive framework that integrates post-quantum cryptography and quantum-safe protocols into O-RAN networks to defend against emerging quantum threats and ensure future-proof security.

Contribution

It presents a complete quantum-resistant security architecture for O-RAN, including implementation details of PQ cryptographic protocols and integration with existing network components.

Findings

Successful integration of PQC protocols into O-RAN interfaces

Deployment of quantum random number generators for cryptographic entropy

Roadmap for securing disaggregated O-RAN against quantum attacks

Abstract

The telecommunications industry faces a dual transformation: the architectural shift toward Open Radio Access Networks (O-RAN) and the emerging threat from quantum computing. O-RAN disaggregated, multi-vendor architecture creates a larger attack surface vulnerable to crypt-analytically relevant quantum computers(CRQCs) that will break current public key cryptography. The Harvest Now, Decrypt Later (HNDL) attack strategy makes this threat immediate, as adversaries can intercept encrypted data today for future decryption. This paper presents Q-RAN, a comprehensive quantum-resistant security framework for O-RAN networks using NIST-standardized Post-Quantum Cryptography (PQC). We detail the implementation of ML-KEM (FIPS 203) and ML-DSA (FIPS 204), integrated with Quantum Random Number Generators (QRNG) for cryptographic entropy. The solution deploys PQ-IPsec, PQ-DTLS, and PQ-mTLS protocols across all O-RAN interfaces, anchored by a centralized Post-Quantum Certificate Authority (PQ-CA) within the SMO framework. This work provides a complete roadmap for securing disaggregated O-RAN ecosystems against quantum adversaries.