Table of Contents
Fetching ...

Quantum-Classical Hybrid Encryption Framework Based on Simulated BB84 and AES-256: Design and Experimental Evaluation

Hector E Mozo

TL;DR

The paper tackles the need for quantum-resistant secure file encryption by proposing a modular architecture that pairs a simulated BB84 quantum key exchange with AES-256 encryption, HMAC integrity, and optional post-quantum Dilithium signatures. Implemented in Python, the framework emphasizes modularity, visualizing the key distribution process and enabling easy substitution of primitives to align with PQC standards. Experimental results from 16 tests demonstrate stable performance (approximately 1.1–1.7 seconds per operation, depending on file type) and robust integrity validation under adversarial scenarios. This work provides a practical, extensible platform for quantum-aware cybersecurity that supports education, research, and secure communications with strong observability and reproducibility.

Abstract

This paper presents the design, implementation, and evaluation of a hybrid encryption framework that combines quantum key distribution, specifically a simulated BB84 protocol, with AES-256 encryption. The system enables secure file encryption by leveraging quantum principles for key generation and classical cryptography for data protection. It introduces integrity validation mechanisms, including HMAC verification and optional post-quantum digital signatures, ensuring robustness even in the presence of quantum-capable adversaries. The entire architecture is implemented in Python, with modular components simulating quantum key exchange, encryption, and secure packaging. Experimental results include visual testing of various attack scenarios, such as key tampering, HMAC failure, and file corruption, demonstrating the effectiveness and resilience of the approach. The proposed solution serves as a practical foundation for quantum-aware cybersecurity systems.

Quantum-Classical Hybrid Encryption Framework Based on Simulated BB84 and AES-256: Design and Experimental Evaluation

TL;DR

The paper tackles the need for quantum-resistant secure file encryption by proposing a modular architecture that pairs a simulated BB84 quantum key exchange with AES-256 encryption, HMAC integrity, and optional post-quantum Dilithium signatures. Implemented in Python, the framework emphasizes modularity, visualizing the key distribution process and enabling easy substitution of primitives to align with PQC standards. Experimental results from 16 tests demonstrate stable performance (approximately 1.1–1.7 seconds per operation, depending on file type) and robust integrity validation under adversarial scenarios. This work provides a practical, extensible platform for quantum-aware cybersecurity that supports education, research, and secure communications with strong observability and reproducibility.

Abstract

This paper presents the design, implementation, and evaluation of a hybrid encryption framework that combines quantum key distribution, specifically a simulated BB84 protocol, with AES-256 encryption. The system enables secure file encryption by leveraging quantum principles for key generation and classical cryptography for data protection. It introduces integrity validation mechanisms, including HMAC verification and optional post-quantum digital signatures, ensuring robustness even in the presence of quantum-capable adversaries. The entire architecture is implemented in Python, with modular components simulating quantum key exchange, encryption, and secure packaging. Experimental results include visual testing of various attack scenarios, such as key tampering, HMAC failure, and file corruption, demonstrating the effectiveness and resilience of the approach. The proposed solution serves as a practical foundation for quantum-aware cybersecurity systems.

Paper Structure

This paper contains 17 sections, 10 equations, 6 figures, 4 tables.

Figures (6)

  • Figure 1: Illustrates linear activation and real-time monitoring of each module, including decryption coordination.
  • Figure 2: Decryption error triggered by incorrect Key B.The system correctly halts decryption when the subset key does not match the original quantum key, preventing unauthorized access and ensuring message integrity through HMAC validation.
  • Figure 3: Rejection of corrupted file input due to invalid encoding.A modified or corrupted .bb84 file is detected during base64 decoding. The system refuses to proceed with decryption, illustrating its resilience to malformed ciphertext or tampering.
  • Figure 4: Combined decryption failure from invalid file and incorrect key.Both inputs are compromised: the file is structurally invalid and the provided key does not match. The system returns a dual-layered rejection to avoid partial failures or ambiguous states.
  • Figure 5: Encryption Metrics Report. Metrics correlate with comparative features discussed in Table \ref{['tab:filetype_metrics']}.
  • ...and 1 more figures