{"product_id":"heqa-security","title":"HEQA Security — From the Ground Up: Why \"QKD First\" is the Most Practical and Secure Transition Path to Quantum Security","description":"\u003cp class=\"wp-block-paragraph\"\u003e\u003cspan dir=\"auto\"\u003eIf a routine software update can lead to Blue Screens of Death for airports, banks, broadcasters, and hospitals worldwide, why would our supposedly “quantum-safe” plan involve performing *more software surgery* all at once? There’s a more robust way: \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003estart with the fiber, not with end-point-by-end-point operations.\u003c\/span\u003e\u003c\/strong\u003e\u003cbr\u003e\u003c\/p\u003e\n\u003cp\u003e\u003cspan id=\"elementor-toc__heading-anchor-1\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/p\u003e\n\u003ch2 class=\"wp-block-heading\"\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003eExecutive Summary\u003c\/span\u003e\u003c\/em\u003e\u003c\/h2\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eThe prevailing approach\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e: take inventory of all your encrypted data, upgrade everything to PQC, and then (maybe) later deploy QKD on a few “special” links. This is well-intentioned, but it’s expensive, slow, prone to integration vulnerabilities, and fails to immediately harden the places attackers most covet: the pipes between large data centers.\u003c\/span\u003e\u003ca href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/quantum-readiness-migration-post-quantum-cryptography?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003c\/a\u003e\u003csup data-fn=\"57784845-eda5-4535-8080-7f86e746cf4e\" class=\"fn\"\u003e\u003ca id=\"57784845-eda5-4535-8080-7f86e746cf4e-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#57784845-eda5-4535-8080-7f86e746cf4e\"\u003e\u003cspan dir=\"auto\"\u003e1\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003c\/p\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003ePQC is essential\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e, and NIST’s 2024 standards (FIPS 203–205) are a milestone. But the PQC migration is not a simple “software-only” switch; it stresses hardware\/firmware, increases handshake sizes, and has already caused middleware failures in real-world applications\u003c\/span\u003e\u003csup data-fn=\"5522524e-a238-4996-91f1-e103a3fda662\" class=\"fn\"\u003e\u003ca id=\"5522524e-a238-4996-91f1-e103a3fda662-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#5522524e-a238-4996-91f1-e103a3fda662\"\u003e\u003cspan dir=\"auto\"\u003e.\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003c\/p\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eQKD adds a layer that PQC does not\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e: physically verifiable key delivery. It runs out-of-band, reduces uptime risk during changes, and immediately hardens the data flows on your most valuable links (DC↔DC, DC↔Cloud, HQ↔DC, backbone). You can deploy QKD to a small footprint first and then gradually roll out PQC across your network.\u003c\/span\u003e\u003cbr\u003e\u003cbr\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eQKD is being piloted and deployed worldwide (EU testbeds and operator trials; US DoE-backed demonstration programs; national-level programs in Japan, Singapore, South Korea; China’s vast network). While security agencies remain split, \u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003eoperating\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e experience\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e is accumulating across large-scale \u003csup data-fn=\"d3a0755d-174f-4ccb-a9cf-7a5cac0810ce\" class=\"fn\"\u003e\u003ca id=\"d3a0755d-174f-4ccb-a9cf-7a5cac0810ce-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#d3a0755d-174f-4ccb-a9cf-7a5cac0810ce\"\u003einfrastructure\u003c\/a\u003e\u003c\/sup\u003e projects and operators.\u003c\/span\u003e\u003csup data-fn=\"d3a0755d-174f-4ccb-a9cf-7a5cac0810ce\" class=\"fn\"\u003e\u003ca id=\"d3a0755d-174f-4ccb-a9cf-7a5cac0810ce-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#d3a0755d-174f-4ccb-a9cf-7a5cac0810ce\"\u003e\u003cspan dir=\"auto\"\u003e\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003c\/p\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cspan dir=\"auto\"\u003eYes, I have skin in the game—I build quantum-safe networks for a living. If I thought “deploying PQC all at once” was the faster path to security, I’d say so. The argument here is simple: \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eQKD-first, then PQC,\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e is a pragmatic deployment order that reduces operational risk, immediately increases network resilience, and ultimately reaches the same goal with less cost and fuss—\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003ea hybrid PQC+QKD deployment.\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e\u003c\/span\u003e\u003c\/p\u003e\n\u003chr class=\"wp-block-separator has-alpha-channel-opacity is-style-dots\"\u003e\n\u003cp\u003e\u003cspan id=\"elementor-toc__heading-anchor-2\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/p\u003e\n\u003ch2 class=\"wp-block-heading\"\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003eWhat Today’s “Consensus” Says—and Where It Over-Relies on Software\u003c\/span\u003e\u003c\/em\u003e\u003c\/h2\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cspan dir=\"auto\"\u003eRegulators prioritize PQC because it scales, in principle, without re-laying fiber. In 2024, NIST finalized \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eML-KEM\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e (key establishment), \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eML-DSA\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e (lattice-signatures), and \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eSLH-DSA\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e (hash-based signatures) as FIPS 203–205. The UK’s National Cyber Security Centre (NCSC), for example, has published a public roadmap to deploy PQC broadly (with reporting suggesting deployment for large institutions is expected by 2035). These statements aren’t wrong, just incomplete\u003c\/span\u003e\u003csup data-fn=\"cb8d84da-f75a-4a98-b54c-2a69456aa702\" class=\"fn\"\u003e\u003ca id=\"cb8d84da-f75a-4a98-b54c-2a69456aa702-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#cb8d84da-f75a-4a98-b54c-2a69456aa702\"\u003e\u003cspan dir=\"auto\"\u003e.4\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003c\/p\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eWhat is often overlooked:\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e “Software-only” isn’t actually software-only.\u003c\/span\u003e\u003c\/p\u003e\n\u003cul class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eLarger messages and keys. FIPS\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e\u003cspan\u003e \u003c\/span\u003e203’s ML-KEM-768 uses a \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e1184-byte public key\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e and a \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e1088-byte ciphertext\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e; ML-DSA-65 (Dilithium level) signature sizes are ~\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e3.3 KB\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e\u003cspan\u003e \u003c\/span\u003eand public keys are ~\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e1.9 KB\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e. These are orders of magnitude larger than current X25519\/ECDSA handshakes and signatures and have real-world ripple effects on devices and middleware. \u0026lt;sup\u0026gt;\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003csup data-fn=\"4a13af53-eb99-428e-ae9b-102afe2298d5\" class=\"fn\"\u003e\u003ca id=\"4a13af53-eb99-428e-ae9b-102afe2298d5-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#4a13af53-eb99-428e-ae9b-102afe2298d5\"\u003e\u003cspan dir=\"auto\"\u003e5\u0026lt;\/sup\u0026gt;\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/nvlpubs.nist.gov\/nistpubs\/FIPS\/NIST.FIPS.203.ipd.pdf\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eReal-world issues have already emerged.\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e When Chrome\/Cloudflare trialed hybrid post-quantum TLS, some older routers and middleware could not handle the larger handshake records—proving that a “mere software update” can introduce serious problems for network hardware\/firmware\u003c\/span\u003e\u003csup data-fn=\"2d1a7cdc-db0a-4ef9-a137-d841f5a22265\" class=\"fn\"\u003e\u003ca id=\"2d1a7cdc-db0a-4ef9-a137-d841f5a22265-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#2d1a7cdc-db0a-4ef9-a137-d841f5a22265\"\u003e\u003cspan dir=\"auto\"\u003e.6\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/quantum.lanl.gov\/cryptography.shtml?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eInventory first, everything else second.\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e US guidance (CISA\/NIST\/NSA) effectively tells you to take a full crypto inventory and engineer \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003ecrypto agility\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e first—a daunting task before the first protected session ever flips to PQC\u003c\/span\u003e\u003csup data-fn=\"bac3f83e-1a21-4ab8-8b84-7d81461c49c2\" class=\"fn\"\u003e\u003ca id=\"bac3f83e-1a21-4ab8-8b84-7d81461c49c2-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#bac3f83e-1a21-4ab8-8b84-7d81461c49c2\"\u003e\u003cspan dir=\"auto\"\u003e.7\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/quantum-readiness-migration-post-quantum-cryptography?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cspan dir=\"auto\"\u003eNone of the above argues against PQC, but it argues against a \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003ePQC-first\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e strategy.\u003c\/span\u003e\u003c\/p\u003e\n\u003chr class=\"wp-block-separator has-alpha-channel-opacity is-style-dots\"\u003e\n\u003cp\u003e\u003cspan id=\"elementor-toc__heading-anchor-3\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/p\u003e\n\u003ch2 class=\"wp-block-heading\"\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003eWhat QKD Adds that PQC Cannot\u003c\/span\u003e\u003c\/em\u003e\u003c\/h2\u003e\n\u003cul class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003ePhysics-based key distribution. Quantum Key Distribution\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e (QKD) uses single photons; any eavesdropping causes a measurable disturbance to the signal, so you *\u003c\/span\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003eknow\u003c\/span\u003e\u003c\/em\u003e\u003cspan dir=\"auto\"\u003e* if a key exchange has been tampered with. This is \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003einformation-theoretic assurance\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e, not a wager on perfect mathematics.\u003c\/span\u003e\u003cbr\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eOut-of-band delivery, small blast radius. QKD\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e systems run parallel to the data plane on specific links, so you can harden DC↔DC, DC↔Cloud PoPs (including AWS DirectConnect, Azure ExpressRoute, and GCP Cloud Interconnect), HQ↔DC, and backbone segments without \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003emodifying every workstation, application, and firmware image\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e on Day 1.\u003c\/span\u003e\u003cbr\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eResilience to change.\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e After the CrowdStrike incident this past summer, do you really want your first “quantum-safe” step to be a mass software update to all your Windows servers, routers, and applications? Falcon sensor content updates crashed ~\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e8.5 million Windows devices; airlines and hospitals were immediately affected.\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e Start where you can add protection \u003csup data-fn=\"87d2f08d-9567-4d49-a66c-0cb369938be5\" class=\"fn\"\u003e\u003ca id=\"87d2f08d-9567-4d49-a66c-0cb369938be5-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#87d2f08d-9567-4d49-a66c-0cb369938be5\"\u003ewithout\u003c\/a\u003e\u003c\/sup\u003e affecting uptime.\u003c\/span\u003e\u003csup data-fn=\"87d2f08d-9567-4d49-a66c-0cb369938be5\" class=\"fn\"\u003e\u003ca id=\"87d2f08d-9567-4d49-a66c-0cb369938be5-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#87d2f08d-9567-4d49-a66c-0cb369938be5\"\u003e\u003cspan dir=\"auto\"\u003e\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/www.reuters.com\/technology\/microsoft-says-about-85-million-its-devices-affected-by-crowdstrike-related-2024-07-20\/?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cspan dir=\"auto\"\u003eI’ve already analyzed this reasoning—and US agency skepticism—in detail; suffice it to say, \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003ePQC and QKD are complementary\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e layers that are made antagonistic if we force an either\/or model\u003c\/span\u003e\u003csup data-fn=\"3adf6ae6-64ce-4ca4-a126-f91794783bd2\" class=\"fn\"\u003e\u003ca id=\"3adf6ae6-64ce-4ca4-a126-f91794783bd2-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#3adf6ae6-64ce-4ca4-a126-f91794783bd2\"\u003e\u003cspan dir=\"auto\"\u003e.9\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003c\/p\u003e\n\u003chr class=\"wp-block-separator has-alpha-channel-opacity is-style-dots\"\u003e\n\u003cp\u003e\u003cspan id=\"elementor-toc__heading-anchor-4\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/p\u003e\n\u003ch2 class=\"wp-block-heading\"\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003eWhat the World is Actually Doing\u003c\/span\u003e\u003c\/em\u003e\u003c\/h2\u003e\n\u003ch3 class=\"wp-block-heading\"\u003e\u003cspan dir=\"auto\"\u003e1. United States\u003c\/span\u003e\u003c\/h3\u003e\n\u003cul class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eStandards:\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e\u003cspan\u003e \u003c\/span\u003eNIST’s FIPS 203–205 are final—PQC is the official baseline. NSA’s \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eCNSA 2.0\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e sets a PQ timeline for National Security Systems. (Notably, the NSA has long been cautious to negative on QKD for NSS.)\u003c\/span\u003e\u003csup data-fn=\"d6ae9b80-8c79-4925-8615-f91233c3ddbb\" class=\"fn\"\u003e\u003ca id=\"d6ae9b80-8c79-4925-8615-f91233c3ddbb-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#d6ae9b80-8c79-4925-8615-f91233c3ddbb\"\u003e\u003cspan dir=\"auto\"\u003e10\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/csrc.nist.gov\/pubs\/fips\/203\/ipd\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003ePilot Programs and Testbeds:\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e The US Department of Energy and Oak Ridge National Laboratory demonstrated quantum key distribution (QKD)-secured links on in-service fiber for a utility (EPB of Chattanooga) as part of a broader “quantum internet” initiative. This means: \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003epolicy leads PQC development; R\u0026amp;D drives QKD\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e for high-reliability backbones.\u003c\/span\u003e\u003cbr\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\u003cp\u003e\u003cem\u003e\u003cspan id=\"elementor-toc__heading-anchor-6\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3 class=\"wp-block-heading\"\u003e\u003cspan dir=\"auto\"\u003e2. European Union\u003c\/span\u003e\u003c\/h3\u003e\n\u003cul class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eInfrastructure:\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e\u003cspan\u003e \u003c\/span\u003eThe EuroQCI initiative is building a quantum communication backbone across the EU, featuring both terrestrial and satellite segments, and expanding the OPENQKD \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003etestbed\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e which operates in collaboration with operators such as Deutsche Telekom and Telefónica\u003c\/span\u003e\u003csup data-fn=\"9cd62085-dc8c-4878-8e9c-aa9917897e95\" class=\"fn\"\u003e\u003ca id=\"9cd62085-dc8c-4878-8e9c-aa9917897e95-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#9cd62085-dc8c-4878-8e9c-aa9917897e95\"\u003e\u003cspan dir=\"auto\"\u003e.11\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/policies\/european-quantum-communication-infrastructure-euroqci?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eIndustry Involvement:\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e Alliances like \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eQSAFE\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e and \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eNostradamus\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e\u003cspan\u003e \u003c\/span\u003e(DT, Thales, AIT, Telefonica) are designing architectures and interoperability, including test infrastructures for QKD devices\u003c\/span\u003e\u003csup data-fn=\"6846317f-6891-4482-a8c6-76b02f2c9353\" class=\"fn\"\u003e\u003ca id=\"6846317f-6891-4482-a8c6-76b02f2c9353-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#6846317f-6891-4482-a8c6-76b02f2c9353\"\u003e\u003cspan dir=\"auto\"\u003e.12\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/www.telekom.com\/en\/media\/media-information\/archive\/deutsche-telekom-partners-quantum-communication-infrastructure-642332?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eSecurity Agency Stance:\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e EU security agencies (BSI\/ANSSI and their Dutch\/Swedish counterparts) still position QKD as a “niche technology” useful only in specific point-to-point or defense-in-depth scenarios, while urging immediate migration to PQC. Herein lies the contradiction: \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003epolicy invests in QKD infrastructure, while agencies remain rooted in PQC-first. \u0026lt;sup\u0026gt;\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003c\/strong\u003e\u003csup data-fn=\"e1146fb3-56fc-4b82-9570-ec65c7869d59\" class=\"fn\"\u003e\u003ca id=\"e1146fb3-56fc-4b82-9570-ec65c7869d59-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#e1146fb3-56fc-4b82-9570-ec65c7869d59\"\u003e\u003cspan dir=\"auto\"\u003e13\u0026lt;\/sup\u0026gt;\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/cyber.gouv.fr\/sites\/default\/files\/2020\/05\/anssi-technical_position_papers-qkd.pdf?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\u003cp\u003e\u003cem\u003e\u003cspan id=\"elementor-toc__heading-anchor-7\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3 class=\"wp-block-heading\"\u003e\u003cspan dir=\"auto\"\u003e3. United Kingdom\u003c\/span\u003e\u003c\/h3\u003e\n\u003cul class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eLive Networks:\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e BT and Toshiba have \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eoperated a quantum-secured metropolitan network in London\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e (EY was among its first customers) and deployed industrial networks between research institutes\u003c\/span\u003e\u003csup data-fn=\"00c80806-25ee-472a-be7e-8bf7867c741b\" class=\"fn\"\u003e\u003ca id=\"00c80806-25ee-472a-be7e-8bf7867c741b-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#00c80806-25ee-472a-be7e-8bf7867c741b\"\u003e\u003cspan dir=\"auto\"\u003e.14\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/www.toshiba.eu\/solutions\/quantum\/wp-content\/uploads\/resources\/London-Quantum-Secured-Metro-Network.pdf?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003ePolicy:\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e\u003cspan\u003e \u003c\/span\u003eNCSC is pushing PQC hard and has published a public roadmap for large organizations that reportedly extends to 2035—again, reflecting \u003csup data-fn=\"c6e87af9-3eb4-434e-81e6-dc1c87b73f8d\" class=\"fn\"\u003e\u003ca id=\"c6e87af9-3eb4-434e-81e6-dc1c87b73f8d-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#c6e87af9-3eb4-434e-81e6-dc1c87b73f8d\"\u003ePQC\u003c\/a\u003e\u003c\/sup\u003e\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e baseline + optional high-assurance overlays\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e.15\u003c\/span\u003e\u003csup data-fn=\"c6e87af9-3eb4-434e-81e6-dc1c87b73f8d\" class=\"fn\"\u003e\u003ca id=\"c6e87af9-3eb4-434e-81e6-dc1c87b73f8d-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#c6e87af9-3eb4-434e-81e6-dc1c87b73f8d\"\u003e\u003cspan dir=\"auto\"\u003e\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/www.theguardian.com\/technology\/2025\/mar\/20\/uk-cybersecurity-agency-quantum-hackers?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\u003cp\u003e\u003cem\u003e\u003cspan id=\"elementor-toc__heading-anchor-8\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3 class=\"wp-block-heading\"\u003e\u003cspan dir=\"auto\"\u003e4. Japan\u003c\/span\u003e\u003c\/h3\u003e\n\u003cul class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eOperating Experience:\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e\u003cspan\u003e \u003c\/span\u003eNICT’s \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eTokyo QKD Network\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e has been operating since the 2010s, and current work integrates QKD with NTT’s \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eAll-Photonics Network (IOWN)\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e transport technology for the coexistence of high-capacity data and quantum keys. Japan’s \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eCRYPTREC\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e also published updated PQC guidelines in 2024. \u0026lt;sup\u0026gt;\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003csup data-fn=\"ddc8b779-fdfc-4124-be35-b7da606d07bf\" class=\"fn\"\u003e\u003ca id=\"ddc8b779-fdfc-4124-be35-b7da606d07bf-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#ddc8b779-fdfc-4124-be35-b7da606d07bf\"\u003e\u003cspan dir=\"auto\"\u003e16\u0026lt;\/sup\u0026gt;\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/www.itu.int\/en\/ITU-T\/Workshops-and-Seminars\/2023\/0724\/Documents\/Kenyoshi.pdf?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\u003cp\u003e\u003cem\u003e\u003cspan id=\"elementor-toc__heading-anchor-9\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3 class=\"wp-block-heading\"\u003e\u003cspan dir=\"auto\"\u003e5. Singapore\u003c\/span\u003e\u003c\/h3\u003e\n\u003cul class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eRegulator-Led Adoption:\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e The national \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eQuantum-Safe Network (NQSN\/NQSN+)\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e is piloting QKD and quantum-safe communication for banks and critical infrastructure. The government has committed \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e~S$300 million\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e to a national quantum strategy, and \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eS$100 million\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e via the Monetary Authority of Singapore’s (MAS) Financial Sector Technology and Innovation (FSTI) Scheme 3.0 to foster the adoption of quantum technologies (including QKD) in finance. \u0026lt;sup\u0026gt;\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003csup data-fn=\"ee44758a-8a3b-46af-9793-2799a10203c9\" class=\"fn\"\u003e\u003ca id=\"ee44758a-8a3b-46af-9793-2799a10203c9-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#ee44758a-8a3b-46af-9793-2799a10203c9\"\u003e\u003cspan dir=\"auto\"\u003e17\u0026lt;\/sup\u0026gt;\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e \u003c\/p\u003e\n\u003cp\u003e\u003cem\u003e\u003cspan id=\"elementor-toc__heading-anchor-10\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3 class=\"wp-block-heading\"\u003e\u003cspan dir=\"auto\"\u003e6. South Korea\u003c\/span\u003e\u003c\/h3\u003e\n\u003cul class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eNational Backbone:\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e\u003cspan\u003e \u003c\/span\u003eSK Broadband\/ID Quantique built an \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e~800 km QKD network\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e connecting \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e48 government agencies\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e; SKT actively participates in standardization efforts for combining QKD with PQC for quantum-safe communication\u003c\/span\u003e\u003csup data-fn=\"8c7275a9-95dd-49e5-82c9-ebea615c4131\" class=\"fn\"\u003e\u003ca id=\"8c7275a9-95dd-49e5-82c9-ebea615c4131-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#8c7275a9-95dd-49e5-82c9-ebea615c4131\"\u003e\u003cspan dir=\"auto\"\u003e.18\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/www.idquantique.com\/quantum-safe-security\/nation-wide-quantum-safe-key-distribution-network-in-south-korea\/?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e \u003c\/p\u003e\n\u003cp\u003e\u003cem\u003e\u003cspan id=\"elementor-toc__heading-anchor-11\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003ch3 class=\"wp-block-heading\"\u003e\u003cspan dir=\"auto\"\u003e7. China\u003c\/span\u003e\u003c\/h3\u003e\n\u003cul class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eNational-level scale:\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e This integrated terrestrial and celestial network combines a\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e \u0026gt;12,000 km\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e Beijing-Shanghai fiber optic backbone with\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e satellite links\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e, providing users with\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e ~12,900 km\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e of Quantum Key Distribution (QKD) coverage – the largest deployment of its kind in the world to date. China is the only country that has mandated (rather than just requested) post-quantum-safe measurement technologies to be operational in several key industries. In fact, China\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e specifically mandates Quantum Key Distribution (QKD\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e\u003cspan\u003e \u003c\/span\u003e), not Post-Quantum Cryptography (PQC). \u0026lt;sup\u0026gt;\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003csup data-fn=\"acbd6561-99f0-4566-906c-9ef4cbc53dc7\" class=\"fn\"\u003e\u003ca id=\"acbd6561-99f0-4566-906c-9ef4cbc53dc7-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#acbd6561-99f0-4566-906c-9ef4cbc53dc7\"\u003e\u003cspan dir=\"auto\"\u003e19\u0026lt;\/sup\u0026gt;\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\u003cdiv aria-hidden=\"true\" class=\"wp-block-spacer\"\u003e\u003cbr\u003e\u003c\/div\u003e\n\u003chr class=\"wp-block-separator has-alpha-channel-opacity is-style-dots\"\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e \u003c\/p\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e \u003c\/p\u003e\n\u003cp\u003e\u003cem\u003e\u003cspan id=\"elementor-toc__heading-anchor-12\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003ch2 class=\"wp-block-heading\"\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003eSoftware isn't \"free\": The hidden costs of a PQC-first approach\u003c\/span\u003e\u003c\/em\u003e\u003c\/h2\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cspan dir=\"auto\"\u003e\u003c\/span\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003eLet's talk frankly about the friction you'll encounter if you try to upgrade everything at once:\u003c\/span\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003cul class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eInventory is mandatory, and time-consuming.\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e All credible roadmaps start with automated\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e crypto-discovery\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e (where is RSA\/ECC used? which libraries? which versions? who owns it?). This consumes significant time and budget before the first PQC handshake takes effect\u003c\/span\u003e\u003csup data-fn=\"107f1065-51e1-4f79-9c29-6832698099f7\" class=\"fn\"\u003e\u003ca id=\"107f1065-51e1-4f79-9c29-6832698099f7-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#107f1065-51e1-4f79-9c29-6832698099f7\"\u003e\u003cspan dir=\"auto\"\u003e. 20\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/quantum-readiness-migration-post-quantum-cryptography?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eHardware\/firmware realities.\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e Larger keys and handshake operations stress IoT devices, routers, and firewalls; even well-resourced web stacks have shown\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e middlebox failures\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e in PQC tests. Expect vendor firmware updates, protocol stack upgrades, and interoperability testing\u003c\/span\u003e\u003csup data-fn=\"5d2401f3-8c64-4fe3-90a4-f6faebdc820a\" class=\"fn\"\u003e\u003ca id=\"5d2401f3-8c64-4fe3-90a4-f6faebdc820a-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#5d2401f3-8c64-4fe3-90a4-f6faebdc820a\"\u003e\u003cspan dir=\"auto\"\u003e. 21\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/quantum.lanl.gov\/cryptography.shtml?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eAlgorithm agility is core to design. NIST\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e explicitly warns to remain agile, as even PQC algorithms may be deprecated. This means more migrations later. QKD keys don’t depend on unbroken math\u003c\/span\u003e\u003csup data-fn=\"2b6b4a4f-38c8-420f-b14a-14445020bc13\" class=\"fn\"\u003e\u003ca id=\"2b6b4a4f-38c8-420f-b14a-14445020bc13-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#2b6b4a4f-38c8-420f-b14a-14445020bc13\"\u003e\u003cspan dir=\"auto\"\u003e. 22\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/csrc.nist.gov\/pubs\/ir\/8547\/ipd?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cspan dir=\"auto\"\u003eI’m not advocating avoiding PQC. I am advocating doing\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e PQC after you lock down your largest pipes\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e with a technology that won't impact uptime when changing engines in flight.\u003c\/span\u003e\u003c\/p\u003e\n\u003chr class=\"wp-block-separator has-alpha-channel-opacity is-style-dots\"\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e \u003c\/p\u003e\n\u003cp\u003e\u003cem\u003e\u003cspan id=\"elementor-toc__heading-anchor-13\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003ch2 class=\"wp-block-heading\"\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003eThe Practical Flow: QKD first, then PQC\u003c\/span\u003e\u003c\/em\u003e\u003c\/h2\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eStart where the adversary gains the most\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e (and your blast radius is smallest):\u003c\/span\u003e\u003c\/p\u003e\n\u003col class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eSecure the core network.\u003c\/span\u003e\u003c\/strong\u003e\u003cstrong\u003e\u003cbr\u003e\u003c\/strong\u003e\n\u003cul class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eDC↔DC Cross Connects\u003c\/span\u003e\u003c\/strong\u003e\u003cstrong\u003e\u003cbr\u003e\u003c\/strong\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eHQ↔Datacenter\u003c\/span\u003e\u003c\/strong\u003e\u003cstrong\u003e\u003cbr\u003e\u003c\/strong\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eDC↔Cloud Onramps\u003c\/span\u003e\u003c\/strong\u003e\u003cstrong\u003e\u003cbr\u003e\u003c\/strong\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eBackbone links\u003c\/span\u003e\u003c\/strong\u003e\u003cstrong\u003e\u003cbr\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003eThese are the \"big pipes.\" QKD sits next to the data plane, immediately hardening\u003c\/span\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003e all\u003c\/span\u003e\u003c\/em\u003e\u003cspan dir=\"auto\"\u003e key exchanges for data flows traversing these links, regardless of what each application or TLS protocol stack is currently doing.\u003c\/span\u003e\u003cbr\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eMeasure Key Metrics.\u003c\/span\u003e\u003c\/strong\u003e\u003cstrong\u003e\u003cbr\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003eTrack secure key rate, link stability, detected interference, and mean time to recovery on your quantum channels. Use these metrics to benchmark resilience improvements.\u003c\/span\u003e\u003cbr\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eLayer in PQC Methodically.\u003c\/span\u003e\u003c\/strong\u003e\u003cstrong\u003e\u003cbr\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003eAfter the core security is assured, examine cryptographic assets layer-by-layer and upgrade stacks to ML-KEM\/ML-DSA\/SLH-DSA. Even if software changes break, your high-value data in transit remains protected.\u003c\/span\u003e\u003cbr\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eEnd state:\u003c\/span\u003e\u003c\/strong\u003e\u003cspan\u003e \u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eHybrid PQC+QKD\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e, which is the defense-in-depth pattern already being designed (and standardized towards) by the telco world\u003c\/span\u003e\u003csup data-fn=\"e1279472-53b6-4e19-82ff-329e6633f18c\" class=\"fn\"\u003e\u003ca id=\"e1279472-53b6-4e19-82ff-329e6633f18c-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#e1279472-53b6-4e19-82ff-329e6633f18c\"\u003e\u003cspan dir=\"auto\"\u003e. 23\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/www.cmorg.org.uk\/sites\/default\/files\/2025-06\/CMORG%20-%20Guidance%20for%20Post-Quantum%20Cryptgraphy%20-%20April%202025%20-%20TLP%20CLEAR%20%281%29.pdf?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ol\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cspan dir=\"auto\"\u003eThis flow is similar to how operators in London, Berlin, Madrid, etc., are learning — \u003csup data-fn=\"4b66c247-4f0f-4a42-9030-a1f983853172\" class=\"fn\"\u003e\u003ca id=\"4b66c247-4f0f-4a42-9030-a1f983853172-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#4b66c247-4f0f-4a42-9030-a1f983853172\"\u003edeploying\u003c\/a\u003e\u003c\/sup\u003e\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e Quantum Key Distribution (QKD) on production fiber, then iterating\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e. 24\u003c\/span\u003e\u003c\/p\u003e\n\u003ch2 class=\"wp-block-heading\"\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003eCommon Objections Addressed \u003c\/span\u003e\u003c\/em\u003e\u003c\/h2\u003e\n\u003cul class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e\"Our national agencies consider QKD a niche technology.\"\u003c\/span\u003e\u003cbr\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003eIt's true that European security agencies (Germany's BSI\/France's ANSSI, and their Dutch\/Swedish counterparts) prioritize PQC and today label QKD \"niche.\" Both things can be true: their caution about wholesale replacement\u003c\/span\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003e and\u003c\/span\u003e\u003c\/em\u003e\u003cspan dir=\"auto\"\u003e the value of QKD as a\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e defense-in-depth\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e layer on a relatively small number of critical links. That's precisely where I recommend you start\u003c\/span\u003e\u003csup data-fn=\"16261c2f-25d0-4453-831f-c753a9222e5d\" class=\"fn\"\u003e\u003ca id=\"16261c2f-25d0-4453-831f-c753a9222e5d-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#16261c2f-25d0-4453-831f-c753a9222e5d\"\u003e\u003cspan dir=\"auto\"\u003e. 25\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/cyber.gouv.fr\/sites\/default\/files\/2020\/05\/anssi-technical_position_papers-qkd.pdf?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e\"Trusted nodes weaken security.\"\u003c\/span\u003e\u003cbr\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003eTrusted relays are a\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e clear engineering tradeoff\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e, not a fatal flaw — especially on operator-controlled metro\/backbone links where the facilities, racks, and lines are hardened. Today, QKD with secure nodes protects these large links; entanglement-based QKD is the future upgrade that pushes trust to zero — but not a prerequisite to genuinely reduce risk now\u003c\/span\u003e\u003csup data-fn=\"6ec66a4e-f552-4637-baea-9ded7aa0996f\" class=\"fn\"\u003e\u003ca id=\"6ec66a4e-f552-4637-baea-9ded7aa0996f-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#6ec66a4e-f552-4637-baea-9ded7aa0996f\"\u003e\u003cspan dir=\"auto\"\u003e. 26\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/www.nict.go.jp\/en\/press\/2025\/09\/16-1.html?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e\"Isn't QKD still a science project?\"\u003c\/span\u003e\u003cbr\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003eIt used to be, but no longer. Look at the\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e EuroQCI\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e initiative, the\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e OPENQKD\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e report, the\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e BT\/Toshiba London metro network\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e,\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e NICT's Tokyo network\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e,\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e SK Broadband's 800km deployment\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e, and the\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e US Department of Energy's sponsored demonstration projects\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e. These aren't lab curiosities — they're how operators learn to run and maintain quantum-safe backbones at scale. \u0026lt;sup\u0026gt;\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003csup data-fn=\"b9d73c45-b27b-4b1d-9931-189b4c49d50d\" class=\"fn\"\u003e\u003ca id=\"b9d73c45-b27b-4b1d-9931-189b4c49d50d-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#b9d73c45-b27b-4b1d-9931-189b4c49d50d\"\u003e\u003cspan dir=\"auto\"\u003e27\u0026lt;\/sup\u0026gt;\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/policies\/european-quantum-communication-infrastructure-euroqci?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e\"What about uptime and risk?\"\u003c\/span\u003e\u003cbr\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003eUnlike PQC, QKD is deployed\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e alongside\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e the data path, not embedded within it. If a QKD device restarts, it does not blue-screen terminals. This is in stark contrast to CrowdStrike's software update, which took\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e ~8.5 million Windows devices\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e offline and grounded flights. When modernizing, pick the first step that\u003c\/span\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003e reduces\u003c\/span\u003e\u003c\/em\u003e\u003cspan dir=\"auto\"\u003e operational risk\u003c\/span\u003e\u003csup data-fn=\"2fe8e1d4-8433-41a8-b93c-9701fec798d8\" class=\"fn\"\u003e\u003ca id=\"2fe8e1d4-8433-41a8-b93c-9701fec798d8-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#2fe8e1d4-8433-41a8-b93c-9701fec798d8\"\u003e\u003cspan dir=\"auto\"\u003e. 28\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/www.reuters.com\/technology\/microsoft-says-about-85-million-its-devices-affected-by-crowdstrike-related-2024-07-20\/?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\u003chr class=\"wp-block-separator has-alpha-channel-opacity is-style-dots\"\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e \u003c\/p\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cspan dir=\"auto\"\u003e\u003cspan id=\"elementor-toc__heading-anchor-15\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/span\u003e\u003c\/p\u003e\n\u003ch2 class=\"wp-block-heading\"\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003eCosts and ROI (the part the Board will ask about)\u003c\/span\u003e\u003c\/em\u003e\u003c\/h2\u003e\n\u003cul class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003ePQC-first\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e strategies require upfront\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e inventorying, firmware upgrades, interoperability testing\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e, and application refactoring. These are necessary but won’t provide noticeable short-term risk reduction for your most valuable flows until most of the work is done\u003c\/span\u003e\u003csup data-fn=\"80914e2f-8366-4927-94be-1b4f67d35eae\" class=\"fn\"\u003e\u003ca id=\"80914e2f-8366-4927-94be-1b4f67d35eae-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#80914e2f-8366-4927-94be-1b4f67d35eae\"\u003e\u003cspan dir=\"auto\"\u003e. 29\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e \u003c\/p\u003e\n\u003cul class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eQKD-first\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e strategies focus limited CapEx\/OpEx on a tiny number of high-\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003evalue links\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e, provide measurable security assurance (eavesdropping is detectable), and\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e do not threaten Service Level Agreements (SLAs)\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e during software migration. In other words: boost network security posture with the\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e highest ROI, minimize change risk\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e—and lay the groundwork for smooth PQC (performance, quality, and control) addition.\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e\u003c\/span\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ul\u003e\n\u003chr class=\"wp-block-separator has-alpha-channel-opacity is-style-dots\"\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e \u003c\/p\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cspan dir=\"auto\"\u003e\u003cspan id=\"elementor-toc__heading-anchor-16\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/span\u003e\u003c\/p\u003e\n\u003ch2 class=\"wp-block-heading\"\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003eWhat comes next (entanglement \u0026amp; integration)\u003c\/span\u003e\u003c\/em\u003e\u003c\/h2\u003e\n\u003chr class=\"wp-block-separator has-alpha-channel-opacity is-style-dots\"\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cspan dir=\"auto\"\u003eThe roadmap isn’t “QKD\u003c\/span\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003e or\u003c\/span\u003e\u003c\/em\u003e\u003cspan dir=\"auto\"\u003e PQC,” but\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e QKD + PQC\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e, then evolving as\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e entanglement\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e networks mature. NICT recently demonstrated\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e integration of QKD with high-capacity optical transmission\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e on NTT's Open APN, and the US DOE blueprint efforts are working to build a US quantum internet—both point to a future where classic and quantum layers co-evolve. Early QKD adopters will already have the operational experience required to upgrade. 30\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003csup data-fn=\"a1ae79ac-0a79-4dfa-88c6-fd4b049228cb\" class=\"fn\"\u003e\u003ca id=\"a1ae79ac-0a79-4dfa-88c6-fd4b049228cb-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#a1ae79ac-0a79-4dfa-88c6-fd4b049228cb\"\u003e\u003cspan dir=\"auto\"\u003enict.go.jp\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/www.nict.go.jp\/en\/press\/2025\/09\/16-1.html?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003c\/a\u003e\u003cspan dir=\"auto\"\u003e\u003c\/span\u003e\u003c\/p\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e \u003c\/p\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cspan dir=\"auto\"\u003e\u003cspan id=\"elementor-toc__heading-anchor-17\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/span\u003e\u003c\/p\u003e\n\u003ch2 class=\"wp-block-heading\"\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003eHow to brief your CISO in 15 minutes\u003c\/span\u003e\u003c\/em\u003e\u003c\/h2\u003e\n\u003col class=\"wp-block-list\"\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eDefine core flows\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e (DC↔DC, DC↔Cloud, HQ↔DC).\u003c\/span\u003e\u003cbr\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eDeploy QKD on those links\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e; integrate with data path's existing key management\/encryption.\u003c\/span\u003e\u003cbr\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003ePerform crypto asset inventory\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e and plan PQC upgrades based on\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e crypto agility\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e.\u003c\/span\u003e\u003csup data-fn=\"80b9c7f0-ce67-4a7b-bb62-da0929a16e6c\" class=\"fn\"\u003e\u003ca id=\"80b9c7f0-ce67-4a7b-bb62-da0929a16e6c-link\" href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#80b9c7f0-ce67-4a7b-bb62-da0929a16e6c\"\u003e\u003cspan dir=\"auto\"\u003e 31\u003c\/span\u003e\u003c\/a\u003e\u003c\/sup\u003e\u003ca href=\"https:\/\/www.cisa.gov\/resources-tools\/resources\/quantum-readiness-migration-post-quantum-cryptography?utm_source=chatgpt.com\" rel=\"noopener\" target=\"_blank\"\u003e\u003cbr\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eRoll out PQC\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e application\/domain by application\/domain;\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e monitor for regressions.\u003c\/span\u003e\u003c\/strong\u003e\u003cbr\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eWork towards a hybrid model\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e (QKD-protected key delivery + PQC in the protocols).\u003c\/span\u003e\u003cbr\u003e\n\n\u003c\/li\u003e\n\n\u003cli\u003e\n\n\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eTrack key performance indicators\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e (key rate, interference events, handshake success rate, SLA impact).\u003c\/span\u003e\u003cbr\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ol\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e \u003c\/p\u003e\n\u003cp class=\"has-text-align-center wp-block-paragraph\"\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eThat's it. Calm. Boring. Defensible.\u003c\/span\u003e\u003c\/strong\u003e\u003c\/p\u003e\n\u003chr class=\"wp-block-separator has-alpha-channel-opacity is-style-dots\"\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cspan dir=\"auto\"\u003e\u003cspan id=\"elementor-toc__heading-anchor-18\" class=\"elementor-menu-anchor\"\u003e\u003c\/span\u003e\u003c\/span\u003e\u003c\/p\u003e\n\u003ch2 class=\"wp-block-heading\"\u003e\u003cem\u003e\u003cspan dir=\"auto\"\u003eConclusion\u003c\/span\u003e\u003c\/em\u003e\u003c\/h2\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cspan dir=\"auto\"\u003eWe all carry biases—mine included. But facts speak for themselves:\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e PQC is necessary, and QKD can be deployed now\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e on specific links carrying your highest-value data. You don’t need to choose; you need to do things\u003c\/span\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003e in sequence\u003c\/span\u003e\u003c\/strong\u003e\u003cspan dir=\"auto\"\u003e. Start at the pipes.\u003c\/span\u003e\u003c\/p\u003e\n\u003chr class=\"wp-block-separator has-alpha-channel-opacity is-style-dots\"\u003e\n\u003cdiv aria-hidden=\"true\" class=\"wp-block-spacer\"\u003e\u003cbr\u003e\u003c\/div\u003e\n\u003cp class=\"wp-block-paragraph\"\u003e\u003cem\u003e\u003cstrong\u003e\u003cspan dir=\"auto\"\u003eBy Nir Bar Lev, CEO, HEQA Security\u003c\/span\u003e\u003c\/strong\u003e\u003c\/em\u003e\u003c\/p\u003e\n\u003cdiv aria-hidden=\"true\" class=\"wp-block-spacer\"\u003e\u003cbr\u003e\u003c\/div\u003e\n\u003chr class=\"wp-block-separator has-alpha-channel-opacity\"\u003e\n\u003col class=\"wp-block-footnotes\"\u003e\n\n\u003cli id=\"57784845-eda5-4535-8080-7f86e746cf4e\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.cisa.gov\/resources-tools\/resources\/quantum-readiness-migration-post-quantum-cryptography?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#57784845-eda5-4535-8080-7f86e746cf4e-link\" aria-label=\"Jump to footnote 1\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"5522524e-a238-4996-91f1-e103a3fda662\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/csrc.nist.gov\/pubs\/fips\/203\/ipd\u003c\/span\u003e\u003cbr\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#5522524e-a238-4996-91f1-e103a3fda662-link\" aria-label=\"Jump to footnote 2\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"d3a0755d-174f-4ccb-a9cf-7a5cac0810ce\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/digital-strategy.ec.europa.eu\/en\/policies\/european-quantum-communication-infrastructure-euroqci?\u003c\/span\u003e\u003cbr\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#d3a0755d-174f-4ccb-a9cf-7a5cac0810ce-link\" aria-label=\"Jump to footnote 3\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"cb8d84da-f75a-4a98-b54c-2a69456aa702\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/csrc.nist.gov\/pubs\/fips\/203\/ipd\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#cb8d84da-f75a-4a98-b54c-2a69456aa702-link\" aria-label=\"Jump to footnote 4\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"4a13af53-eb99-428e-ae9b-102afe2298d5\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/nvlpubs.nist.gov\/nistpubs\/FIPS\/NIST.FIPS.203.ipd.pdf\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#4a13af53-eb99-428e-ae9b-102afe2298d5-link\" aria-label=\"Jump to footnote 5\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"2d1a7cdc-db0a-4ef9-a137-d841f5a22265\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/quantum.lanl.gov\/cryptography.shtml?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#2d1a7cdc-db0a-4ef9-a137-d841f5a22265-link\" aria-label=\"Jump to footnote 6\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"bac3f83e-1a21-4ab8-8b84-7d81461c49c2\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.cisa.gov\/resources-tools\/resources\/quantum-readiness-migration-post-quantum-cryptography?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#bac3f83e-1a21-4ab8-8b84-7d81461c49c2-link\" aria-label=\"Jump to footnote 7\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\n\u003cli id=\"87d2f08d-9567-4d49-a66c-0cb369938be5\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.reuters.com\/technology\/microsoft-says-about-85-million-its-devices-affected-by-crowdstrike-related-2024-07-20\/?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#87d2f08d-9567-4d49-a66c-0cb369938be5-link\" aria-label=\"Jump to footnote reference 8\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"3adf6ae6-64ce-4ca4-a126-f91794783bd2\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/heqa-sec.com\/blog\/the-peculiar-stance-of-nist-and-the-nsa-on-quantum-cryptography-and-why-theyre-wrong\/\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#3adf6ae6-64ce-4ca4-a126-f91794783bd2-link\" aria-label=\"Jump to footnote reference 9\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"d6ae9b80-8c79-4925-8615-f91233c3ddbb\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/csrc.nist.gov\/pubs\/fips\/203\/ipd\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#d6ae9b80-8c79-4925-8615-f91233c3ddbb-link\" aria-label=\"Jump to footnote reference 10\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"9cd62085-dc8c-4878-8e9c-aa9917897e95\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/digital-strategy.ec.europa.eu\/en\/policies\/european-quantum-communication-infrastructure-euroqci?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#9cd62085-dc8c-4878-8e9c-aa9917897e95-link\" aria-label=\"Jump to footnote reference 11\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"6846317f-6891-4482-a8c6-76b02f2c9353\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.telekom.com\/en\/media\/media-information\/archive\/deutsche-telekom-partners-quantum-communication-infrastructure-642332?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#6846317f-6891-4482-a8c6-76b02f2c9353-link\" aria-label=\"Jump to footnote reference 12\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"e1146fb3-56fc-4b82-9570-ec65c7869d59\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/cyber.gouv.fr\/sites\/default\/files\/2020\/05\/anssi-technical_position_papers-qkd.pdf?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#e1146fb3-56fc-4b82-9570-ec65c7869d59-link\" aria-label=\"Jump to footnote reference 13\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"00c80806-25ee-472a-be7e-8bf7867c741b\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.toshiba.eu\/solutions\/quantum\/wp-content\/uploads\/resources\/London-Quantum-Secured-Metro-Network.pdf?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#00c80806-25ee-472a-be7e-8bf7867c741b-link\" aria-label=\"Jump to footnote reference 14\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"c6e87af9-3eb4-434e-81e6-dc1c87b73f8d\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.theguardian.com\/technology\/2025\/mar\/20\/uk-cybersecurity-agency-quantum-hackers?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#c6e87af9-3eb4-434e-81e6-dc1c87b73f8d-link\" aria-label=\"Jump to footnote reference 15\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"ddc8b779-fdfc-4124-be35-b7da606d07bf\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.itu.int\/en\/ITU-T\/Workshops-and-Seminars\/2023\/0724\/Documents\/Kenyoshi.pdf?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#ddc8b779-fdfc-4124-be35-b7da606d07bf-link\" aria-label=\"Jump to footnote reference 16\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"ee44758a-8a3b-46af-9793-2799a10203c9\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/nqsn.sg\/?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#ee44758a-8a3b-46af-9793-2799a10203c9-link\" aria-label=\"Jump to footnote reference 17\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"8c7275a9-95dd-49e5-82c9-ebea615c4131\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.idquantique.com\/quantum-safe-security\/nation-wide-quantum-safe-key-distribution-network-in-south-korea\/?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#8c7275a9-95dd-49e5-82c9-ebea615c4131-link\" aria-label=\"Jump to footnote reference 18\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"acbd6561-99f0-4566-906c-9ef4cbc53dc7\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/merics.org\/en\/report\/chinas-long-view-quantum-tech-has-us-and-eu-playing-catch\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#acbd6561-99f0-4566-906c-9ef4cbc53dc7-link\" aria-label=\"Jump to footnote reference 19\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"107f1065-51e1-4f79-9c29-6832698099f7\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.cisa.gov\/resources-tools\/resources\/quantum-readiness-migration-post-quantum-cryptography?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#107f1065-51e1-4f79-9c29-6832698099f7-link\" aria-label=\"Jump to footnote reference 20\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"5d2401f3-8c64-4fe3-90a4-f6faebdc820a\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/quantum.lanl.gov\/cryptography.shtml?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#5d2401f3-8c64-4fe3-90a4-f6faebdc820a-link\" aria-label=\"Jump to footnote reference 21\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"2b6b4a4f-38c8-420f-b14a-14445020bc13\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/csrc.nist.gov\/pubs\/ir\/8547\/ipd?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#2b6b4a4f-38c8-420f-b14a-14445020bc13-link\" aria-label=\"Jump to footnote reference 22\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"e1279472-53b6-4e19-82ff-329e6633f18c\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.cmorg.org.uk\/sites\/default\/files\/2025-06\/CMORG%20-%20Guidance%20for%20Post-Quantum%20Cryptography%20-%20April%202025%20-%20TLP%201%\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#e1279472-53b6-4e19-82ff-329e6633f18c-link\" aria-label=\"Jump to footnote reference 23\"\u003e\u003cspan dir=\"auto\"\u003e\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"4b66c247-4f0f-4a42-9030-a1f983853172\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.toshiba.eu\/solutions\/quantum\/wp-content\/uploads\/resources\/London-Quantum-Secured-Metro-Network.pdf?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#4b66c247-4f0f-4a42-9030-a1f983853172-link\" aria-label=\"Jump to footnote reference 24\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"16261c2f-25d0-4453-831f-c753a9222e5d\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/cyber.gouv.fr\/sites\/default\/files\/2020\/05\/anssi-technical_position_papers-qkd.pdf?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#16261c2f-25d0-4453-831f-c753a9222e5d-link\" aria-label=\"Jump to footnote reference 25\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"6ec66a4e-f552-4637-baea-9ded7aa0996f\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.nict.go.jp\/en\/press\/2025\/09\/16-1.html?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#6ec66a4e-f552-4637-baea-9ded7aa0996f-link\" aria-label=\"Jump to footnote reference 26\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"b9d73c45-b27b-4b1d-9931-189b4c49d50d\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/digital-strategy.ec.europa.eu\/en\/policies\/european-quantum-communication-infrastructure-euroqci?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#b9d73c45-b27b-4b1d-9931-189b4c49d50d-link\" aria-label=\"Jump to footnote reference 27\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"2fe8e1d4-8433-41a8-b93c-9701fec798d8\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.reuters.com\/technology\/microsoft-says-about-85-million-its-devices-affected-by-crowdstrike-related-2024-07-20\/?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#2fe8e1d4-8433-41a8-b93c-9701fec798d8-link\" aria-label=\"Jump to footnote reference 28\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"80914e2f-8366-4927-94be-1b4f67d35eae\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.cisa.gov\/resources-tools\/resources\/quantum-readiness-migration-post-quantum-cryptography?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#80914e2f-8366-4927-94be-1b4f67d35eae-link\" aria-label=\"Jump to footnote reference 29\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"a1ae79ac-0a79-4dfa-88c6-fd4b049228cb\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.nict.go.jp\/en\/press\/2025\/09\/16-1.html?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#a1ae79ac-0a79-4dfa-88c6-fd4b049228cb-link\" aria-label=\"Jump to footnote reference 30\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\u003cli id=\"80b9c7f0-ce67-4a7b-bb62-da0929a16e6c\"\u003e\n\n\u003cspan dir=\"auto\"\u003ehttps:\/\/www.cisa.gov\/resources-tools\/resources\/quantum-readiness-migration-post-quantum-cryptography?\u003cspan\u003e \u003c\/span\u003e\u003c\/span\u003e\u003ca href=\"https:\/\/heqa-sec.com\/blog\/start-at-the-pipes-why-qkd%e2%80%91first-is-the-level-headed-safer-on%e2%80%91ramp-to-quantum%e2%80%91safe\/#80b9c7f0-ce67-4a7b-bb62-da0929a16e6c-link\" aria-label=\"Jump to footnote reference 31\"\u003e\u003cspan dir=\"auto\"\u003e↩︎\u003c\/span\u003e\u003c\/a\u003e\n\n\u003c\/li\u003e\n\n\n\u003c\/ol\u003e","brand":"HEQA Security","offers":[{"title":"Default Title","offer_id":49978147012856,"sku":null,"price":0.0,"currency_code":"TWD","in_stock":true}],"url":"https:\/\/www.twinlight-tech.com\/en\/products\/heqa-security","provider":"我的商店","version":"1.0","type":"link"}