Q-RAN: Quantum-Resilient O-RAN Architecture

2025-10-22

AI Summary

To address the “harvest-now-decrypt-later” (HNDL) threat and expanded attack surface posed by quantum computing to the O-RAN open architecture, this paper proposes the first end-to-end post-quantum secure framework covering all O-RAN interfaces. Methodologically, it integrates NIST-standardized ML-KEM (FIPS 203) and ML-DSA (FIPS 204), augmented with a quantum random number generator (QRNG) entropy source, to establish a high-assurance key management system; introduces a centralized post-quantum certificate authority (PQ-CA) based on the SMO architecture; and deploys PQ-IPsec, PQ-DTLS, and PQ-mTLS across O-RAN interfaces. Experimental evaluation demonstrates full-stack post-quantum protection, robust resistance against cryptographically relevant quantum computer (CRQC) attacks, and practical deployability. The framework provides a viable, engineering-ready evolutionary pathway for quantum-resilient 6G networks.

Technology Category

• Machine Learning: Quantum Machine Learning
• Search and Optimization: Distributed Search
• Knowledge Representation and Reasoning: Qualitative Reasoning

Application Category

• Security and Privacy: Applications of cryptography
• Systems and Infrastructure for Web, Mobile and WoT: Energy management for devices in mobile Web and WoT environments
• Search and Retrieval-Augmented AI: Retrieval-Augmented Generation (RAG) and multi-modal RAG

Abstract

The telecommunications industry faces a dual transformation: the architectural shift toward Open Radio Access Networks (O-RAN) and the emerging threat from quantum computing. O-RAN disaggregated, multi-vendor architecture creates a larger attack surface vulnerable to crypt-analytically relevant quantum computers(CRQCs) that will break current public key cryptography. The Harvest Now, Decrypt Later (HNDL) attack strategy makes this threat immediate, as adversaries can intercept encrypted data today for future decryption. This paper presents Q-RAN, a comprehensive quantum-resistant security framework for O-RAN networks using NIST-standardized Post-Quantum Cryptography (PQC). We detail the implementation of ML-KEM (FIPS 203) and ML-DSA (FIPS 204), integrated with Quantum Random Number Generators (QRNG) for cryptographic entropy. The solution deploys PQ-IPsec, PQ-DTLS, and PQ-mTLS protocols across all O-RAN interfaces, anchored by a centralized Post-Quantum Certificate Authority (PQ-CA) within the SMO framework. This work provides a complete roadmap for securing disaggregated O-RAN ecosystems against quantum adversaries.

Problem

• Securing O-RAN networks against quantum computing threats
• Protecting encrypted data from Harvest Now, Decrypt Later attacks
• Implementing post-quantum cryptography across all O-RAN interfaces

Innovation

• Uses NIST-standardized Post-Quantum Cryptography for security
• Integrates Quantum Random Number Generators for entropy
• Deploys quantum-resistant protocols across all O-RAN interfaces