Feeds

Quantum crypto pitches for data centre links

100 Gbps, ten channels, one box doing real live quantum crypto today

Beginner's guide to SSL certificates

The quantum crypto business is hardly crowded, but ID Quantique is hoping to set itself apart with a 100 Gbps-capable unit.

This is hardly consumer kit, however: the target market for the QKD-plus-crypto-engine kit is outfits running multiple high capacity links, either at 1 Gbps or 10 Gbps. Think of inter-data-centre connections and you have the right idea.

CEO Gregoire Ribordy told The Register the new system, developed in partnership with venerable Australian crypto outfit Senetas, was put together with two aims in mind: addressing the heightened interest in data centre security in the wake of Edward Snowden's NSA revelations, while at the same time avoiding the complexity that arises from deploying quantum crypto on a link-by-link basis.

The new unit from ID Quantique handles key generation, key management, and encryption for up to ten links at 10 Gbps.

At the heart of it is the company's quantum random number generator, which provides random numbers for all encrypted channels, and as Ribordy pointed out, that's designed to address the post-NSA concerns about crypto.

“You need to start with very high quality keys to get good encryption keys overall,” he said. “Part of the scandal of the last six months was that random number generators didn't offer the full entropy that was expected of them.”

Keys can be exchanged either using quantum key distribution (QKD) or more familiar techniques like RSA, Ribordy said.

The unit's aggregate capacity of ten links and 100 Gbps means that even a Google, which might run as many as 30 inter-data-centre links, would only need a few units rather than one encryptor per link. That Ribordy said, makes a big difference not just to affordability, but to manageability. ®

Protecting users from Firesheep and other Sidejacking attacks with SSL

More from The Register

next story
Spies would need SUPER POWERS to tap undersea cables
Why mess with armoured 10kV cables when land-based, and legal, snoop tools are easier?
Early result from Scots indyref vote? NAW, Jimmy - it's a SCAM
Anyone claiming to know before tomorrow is telling porkies
Apple Pay is a tidy payday for Apple with 0.15% cut, sources say
Cupertino slurps 15 cents from every $100 purchase
Israeli spies rebel over mass-snooping on innocent Palestinians
'Disciplinary treatment will be sharp and clear' vow spy-chiefs
YouTube, Amazon and Yahoo! caught in malvertising mess
Cisco says 'Kyle and Stan' attack is spreading through compromised ad networks
Hackers pop Brazil newspaper to root home routers
Step One: try default passwords. Step Two: Repeat Step One until success
China hacked US Army transport orgs TWENTY TIMES in ONE YEAR
FBI et al knew of nine hacks - but didn't tell TRANSCOM
Microsoft to patch ASP.NET mess even if you don't
We know what's good for you, because we made the mess says Redmond
NORKS ban Wi-Fi and satellite internet at embassies
Crackdown on tardy diplomatic sysadmins providing accidental unfiltered internet access
prev story

Whitepapers

Providing a secure and efficient Helpdesk
A single remote control platform for user support is be key to providing an efficient helpdesk. Retain full control over the way in which screen and keystroke data is transmitted.
WIN a very cool portable ZX Spectrum
Win a one-off portable Spectrum built by legendary hardware hacker Ben Heck
Saudi Petroleum chooses Tegile storage solution
A storage solution that addresses company growth and performance for business-critical applications of caseware archive and search along with other key operational systems.
Protecting users from Firesheep and other Sidejacking attacks with SSL
Discussing the vulnerabilities inherent in Wi-Fi networks, and how using TLS/SSL for your entire site will assure security.
Security for virtualized datacentres
Legacy security solutions are inefficient due to the architectural differences between physical and virtual environments.