IPsec based on Quantum Key Distribution: Adapting non-3GPP access to 5G Networks to the Quantum Era

TL;DR

This paper introduces a quantum-safe IPsec mechanism for 5G networks using Quantum Key Distribution, demonstrating faster setup times and enhanced security in heterogeneous 5G environments.

Contribution

It presents the first integration of QKD with IPsec for non-3GPP access in 5G, including experimental validation with commercial QKD equipment.

Findings

QKD-based IPsec setup is 4.62% faster than PSK-based systems.

QKD provides Information-Theoretic Security for 5G communications.

Experimental validation confirms feasibility in real-world testbeds.

Abstract

The advent of quantum computing will pose great challenges to the current communication systems, requiring essential changes in the establishment of security associations in traditional architectures. In this context, the multi-technological and heterogeneous nature of 5G networks makes it a challenging scenario for the introduction of quantum communications. Specifically, 5G networks support the unification of non-3GPP access technologies (i.e. Wi-Fi), which are secured through the IPsec protocol suite and the Non-3GPP Interworking Function (N3IWF) entity. These mechanisms leverage traditional public key cryptography and Diffie-Hellman key exchange mechanisms, which should be updated to quantum-safe standards. Therefore, in this paper we present the design and development of a Quantum Key Distribution (QKD) based non-3GPP access mechanism for 5G networks, integrating QKD keys with IPsec tunnel establishment. Besides, we also demonstrate the feasibility of the system by experimental validation in a testbed with commercial QKD equipment and an open-source 5G core implementation. Results show that the time required to complete the authentication and IPsec security association establishment is 4.62% faster than traditional cryptography PSK-based systems and 5.17% faster than the certificate-based system, while ensuring Information-Theoretic Security (ITS) of the QKD systems.