QKDLite for Secure File Transfer

About QKDLite

QKDLite, by pQCee, is a set of middleware modules that are designed for businesses to connect easily and securely to QKD infrastructures with minimal changes to the applications. It abstracts away the protocol complexities for integrating with technical standards such as ETSI QKD 014, PKCS#11, RFC8784, FIPS 197, and PCI-DSS to present a unified interface that focuses on secure key generation and management. For more information, please visit our website.

Demo configuration:
  • Type of Keys: AES-256 keys
  • Size of Key pool: 20 keys
  • Key replenishment cycle: 10 mins
  • Key cleanup cycle: Key cleanup checks performed every hour. Each decryption key has to be consumed within 55 minutes after encryption.
Equipment:
  • QKDLite v3
  • Thales Luna HSM
  • Toshiba Test QKD network
QKDLite diagram

Key Generation

Available keys at HSM_A: -
Available keys at HSM_B: -

File Encryption

QKDLite connected to: HSM_A

Select file to upload and encrypt. (Max file size: 10MB)


File Decryption

QKDLite connected to: HSM_B

Select encrypted .qkde file to upload for decryption. (Max file size: 10MB)


Available Demo Scenarios

  1. Click "Add a key".
  2. QKDLite_A will retrieve a QKD key from SAE_A, and inject into HSM_A.
  3. QKDLite_A will sync with QKDLite_B.
  4. QKDLite_B will retrieve the same QKD key from SAE_B, and inject into HSM_B.
  5. Available keys at HSM_A and HSM_B will increase.
  1. Click "Choose file" to select a test file to encrypt. Do not choose a file that contains any sensitive or private information.
  2. Click "Encrypt" to use HSM_A to encrypt the file using a QKD Key.
  3. The encrypted file (with extension .qkde) will be downloaded into your download folder.
  4. The number of keys in HSM_A will decrease.
  5. The encrypted file can now be transferred to your communicating party. Your communicating party has to decrypt the file before the cleanup cycle happens.
  1. Click "Choose file" to select the encrypted file to decrypt. Do not choose a file that contains any sensitive or private information.
  2. Click "Decrypt" to use HSM_B to decrypt the file using the same QKD Key.
  3. The number of keys in HSM_B will decrease.
  4. The decrypted file (if successful) will be displayed.

Please contact info@pqcee.com if you have any questions on this demo.