Skip to main content

IKE for IPsec with QKD

Document Type Expired Internet-Draft (individual)
Expired & archived
Authors Shota Nagayama , Rodney Van Meter
Last updated 2015-04-30 (Latest revision 2014-10-27)
RFC stream (None)
Stream Stream state (No stream defined)
Consensus boilerplate Unknown
RFC Editor Note (None)
IESG IESG state Expired
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:


Quantum Key Distribution (QKD) is a mechanism for creating shared, secret, random bits. This document describes extensions to the IKEv2 protocol to use random bits created via QKD as keys for IPsec. The Diffie-Hellman key agreement mechanism is replaced with QKD. The use of QKD-generated keys with standard IPsec will extend the lifetime of privacy guarantees for IPsec-protected data: future technological advances that break Diffie-Hellman key exchange will not disclose data until such time as the encryption algorithm used for the IPsec tunnel is broken.


Shota Nagayama
Rodney Van Meter

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)