[{"data":1,"prerenderedAt":145},["ShallowReactive",2],{"blog-\u002Fblog\u002Fdisadvantages-of-qkd":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":7,"body":8,"canonical":7,"category":86,"date":87,"description":88,"draft":89,"extension":90,"faqs":91,"findingsSource":7,"geo":104,"howto":7,"howtoTitle":7,"image":7,"industries":106,"keyFindings":7,"meta":108,"modified":7,"navigation":109,"path":110,"pullquote":7,"recommendations":7,"references":111,"related":118,"seo":131,"seoTitle":132,"signposts":7,"slug":133,"stats":134,"stem":137,"tags":138,"tldr":143,"__hash__":144},"blog\u002Fblog\u002Fdisadvantages-of-qkd.md","What Are the Disadvantages of QKD?","ArcQubit Team",null,{"type":9,"value":10,"toc":77},"minimark",[11,16,29,35,39,44,48,55,59,67,71],[12,13,15],"h2",{"id":14},"the-answer-up-front","The answer, up front",[17,18,19,20,24,25,28],"p",{},"Quantum Key Distribution (QKD) has five main disadvantages: it works only over short distances, needs expensive dedicated hardware, has exploitable flaws in real-world devices, cannot authenticate the other party on its own, and does not scale well beyond point-to-point links. These limits are why agencies such as the U.S. NSA recommend post-quantum cryptography (PQC) rather than QKD for defending against the quantum threat ",[21,22,23],"span",{},"1",", ",[21,26,27],{},"2",".",[17,30,31],{},[32,33,34],"em",{},"Last verified: Oct. 2, 2026.",[12,36,38],{"id":37},"distance-limits-and-no-amplification","Distance limits and no amplification",[17,40,41,42,28],{},"QKD sends information on individual photons, and photons degrade over optical fiber. Practical links top out at roughly 100 to 200 kilometers without special relay nodes. The deeper problem is that you cannot simply boost the signal: the no-cloning theorem means measuring or copying a quantum state destroys it, so the standard optical amplifiers that carry classical traffic across continents do not work for QKD ",[21,43,23],{},[12,45,47],{"id":46},"high-cost-and-real-world-device-flaws","High cost and real-world device flaws",[17,49,50,51,24,53,28],{},"QKD requires dedicated equipment such as single-photon detectors, quantum light sources, and in many designs its own fiber channel. That is expensive to deploy and maintain. And while the underlying physics is sound, real hardware is imperfect. Researchers have broken QKD implementations in the lab by exploiting device weaknesses, using techniques such as detector blinding and Trojan-horse attacks. The security proof assumes ideal devices; the devices are not ideal ",[21,52,23],{},[21,54,27],{},[12,56,58],{"id":57},"authentication-denial-of-service-and-scaling","Authentication, denial of service, and scaling",[17,60,61,62,64,65,28],{},"QKD distributes a key, but it cannot tell you who is on the other end. It still needs a separate, classically authenticated channel to prevent a man-in-the-middle attack, so it does not remove the dependence on conventional cryptography ",[21,63,27],{},". Because interfering with a quantum channel disrupts transmission entirely, QKD links are also easy to deny service to: an attacker who blocks or floods the line stops the exchange. Finally, scaling past a single point-to-point link requires trusted intermediate relay nodes, which reintroduce the very trust and insider-risk problems QKD was meant to avoid ",[21,66,27],{},[12,68,70],{"id":69},"why-pqc-is-the-recommended-path","Why PQC is the recommended path",[17,72,73,74,76],{},"Post-quantum cryptography avoids all of these constraints. It runs as software on the hardware and networks you already own, scales across the internet, authenticates, and is standardized (ML-KEM, ML-DSA, SLH-DSA). That is why national guidance, including from the NSA, points organizations toward PQC rather than QKD as the main defense against quantum attacks on cryptography ",[21,75,27],{},". QKD may suit a few niche, high-value point-to-point links, but it is not a general replacement for public-key cryptography.",{"title":78,"searchDepth":79,"depth":79,"links":80},"",2,[81,82,83,84,85],{"id":14,"depth":79,"text":15},{"id":37,"depth":79,"text":38},{"id":46,"depth":79,"text":47},{"id":57,"depth":79,"text":58},{"id":69,"depth":79,"text":70},"Research","2026-10-02","The main disadvantages of Quantum Key Distribution: distance limits, cost, device flaws, authentication gaps, and scaling, and why agencies recommend PQC instead.",false,"md",[92,95,98,101],{"q":93,"a":94},"What are the main disadvantages of QKD?","Short transmission distance, high cost for dedicated hardware, implementation flaws in real-world devices, an inability to authenticate the other party on its own, and poor scalability beyond point-to-point links [1], [2].",{"q":96,"a":97},"Why can't you amplify a QKD signal?","The no-cloning theorem means measuring or copying a quantum state destroys it, so standard optical amplifiers cannot boost the signal. That caps practical distance and forces trusted relay nodes [1].",{"q":99,"a":100},"Does QKD remove the need for authentication?","No. QKD cannot verify who is on the other end by itself. It still requires a separate, classically authenticated channel to prevent man-in-the-middle attacks [2].",{"q":102,"a":103},"Why do agencies prefer PQC over QKD?","Post-quantum cryptography runs on existing hardware and networks, scales, and authenticates, so agencies such as the NSA recommend PQC rather than QKD for protecting systems against quantum threats [2].",[105],"global",[107],"Cross-Sector",{},true,"\u002Fblog\u002Fdisadvantages-of-qkd",[112,115],{"label":113,"url":114},"European Union Agency for Cybersecurity (ENISA), \"Post-Quantum Cryptography: Current State and Quantum Mitigation,\" ENISA","https:\u002F\u002Fwww.enisa.europa.eu\u002Fpublications\u002Fpost-quantum-cryptography-current-state-and-quantum-mitigation",{"label":116,"url":117},"National Security Agency, \"Quantum Key Distribution (QKD) and Quantum Cryptography (QC),\" NSA Cybersecurity Guidance","https:\u002F\u002Fwww.nsa.gov\u002FCybersecurity\u002FQuantum-Key-Distribution-QKD-and-Quantum-Cryptography-QC\u002F",[119,122,125,128],{"label":120,"url":121},"Quantum Sensing, Computing, Communications: A Primer","\u002Fblog\u002Fquantum-sensing-computing-communications-primer",{"label":123,"url":124},"Post-Quantum Cryptography Explained","\u002Fblog\u002Fpost-quantum-cryptography-explained",{"label":126,"url":127},"Hybrid vs. Pure Post-Quantum Key Exchange","\u002Fblog\u002Fhybrid-vs-pure-post-quantum",{"label":129,"url":130},"What Is Q-Day?","\u002Fblog\u002Fwhat-is-q-day",{"title":5,"description":88},"Disadvantages of QKD (and Why Governments Prefer PQC)","disadvantages-of-qkd",[135,136],"QKD over standard optical fiber is typically limited to roughly 100 to 200 kilometers without trusted relay nodes, because quantum signals cannot be amplified (industry and standards sources, 2025).","The U.S. National Security Agency does not recommend QKD for securing national security systems and favors post-quantum cryptography instead (NSA).","blog\u002Fdisadvantages-of-qkd",[139,140,141,142],"post-quantum cryptography","quantum-safe algorithms","quantum risk","primer","QKD is limited by short distance, high dedicated-hardware cost, implementation flaws in real devices, a need for separate authentication, and poor scalability, which is why agencies favor post-quantum cryptography.","0kEKCMQrsVZpPYMHf0HVnRhqAWXekcKY41pGuQBLDUY",1792182883664]