Protection Profile for Prepare and Measure Quantum Key Distribution Modules
Version 1.0

PRODUCT DESCRIPTION

Description of PP

This PP specifies the security requirements for quantum key distribution (QKD) modules using the P&M (Prepare and Measure) protocol. A QKD system establishes QKD keys by connecting two QKD modules—a QKD transmitter and a QKD receiver—and using an authenticated classical channel to ensure the sender’s identity and data integrity. In this PP, a TOE is a pair of QKD modules that can be connected via a QKD link to construct a QKD system. A TOE Security Function (TSF) provides a consistent subset of the functions expected to be required in such a QKD system.

PP security functionality

This PP requires the TOE to provide the security functions required for quantum key distribution (QKD) modules. The main ones are listed below.

• Quantum Key Distribution
  The TOE provides a quantum key distribution (QKD) function using a Prepare & Measure (P&M) protocol that complies with one or more security proofs.
• Authenticated Classical Channel for internal TOE Communication
  The TOE provides an authenticated classical channel over the QKD link between QKD modules.
• Cryptographic Operations
  The TOE provides cryptographic operations related to the QKD link. These cryptographic operations include message authentication for the authenticated classical channel and random number generation. The TOE also provides a function for destroy cryptographic keys or keying material when they are no longer needed.
• Prevention of TOE Emanation
  The TOE ensures that it does not emit any externally observable phenomena that would allow access to TSF data or user data.
  
• Resistance to Physical Attacks
  The TOE resists active probing of the TSF’s internal state via the QKD link.