1const e="1.9.2",t="Orbital Quantum Key Distribution",n="experimental",a="Distributing provably unbreakable encryption keys between ground stations via single-photon transmission through a low-orbit quantum payload.",i=`Classical key exchange is a solved problem until it isn't â and quantum computers will break RSA and elliptic-curve cryptography at a date no intelligence agency will announce in advance. Orbital QKD sidesteps that threat entirely: a satellite transmits single photons entangled or prepared in quantum states that are physically impossible to intercept without detection, giving two ground stations a shared secret key whose security is guaranteed by physics, not computational hardness. Nations that depend on commercially brokered encryption have no visibility into when those primitives will be deprecated or compromised. 2 3The satellite stack for QKD is modest by orbital standards but optically demanding. The payload is a photon source â typically a weakly-attenuated laser or an entangled-pair source â paired with precise pointing optics to hit a 30â50 cm telescope aperture on the ground from 400â600 km altitude during a 5â10 minute pass. Atmospheric turbulence and daylight background photons are the principal engineering constraints; most operational demonstrations (Micius, QKDSat) run night passes to maximise signal-to-noise. A constellation of a dozen or more satellites eliminates single-point pass-window dependency and enables city-to-city key relay across intercontinental distances without trusting intermediate nodes. 4 5The operational outcome is a sovereign key-distribution backbone that feeds classified government networks, central bank communications and military command links with keys whose integrity cannot be retroactively compromised by a future adversary harvesting today's ciphertext. Unlike a VPN or HSM upgrade, this capability cannot be purchased as a subscription from a foreign vendor and remain trustworthy â the photon source, the detector, and the satellite bus must be under national custody for the security argument to hold.`,o=["A quantum computer running Shor's algorithm will render today's public-key infrastructure obsolete; QKD provides forward-secrecy that no classical upgrade can match.","China's Micius satellite demonstrated 1,200 km intercontinental QKD in 2017, proving the physics works and establishing a geopolitical benchmark every peer nation must now respond to.","Any foreign-operated QKD service introduces a trusted-node problem: the vendor's ground infrastructure can be compelled, surveilled or backdoored under its home jurisdiction's law.","Key generation rates from current LEO QKD payloads are 1â10 kbps per pass, sufficient for one-time-pad encryption of high-value command traffic but requiring constellation scale for broadband key supply."],r=[{title:"Satellite-based entanglement distribution over 1,200 kilometres â Nature (via ESA coverage)",url:"https://www.esa.int/Enabling_Support/Preparing_for_the_Future/Discovery_and_Preparation/Quantum_technologies_for_space",snippet:"ESA's quantum technology programme documents the physical basis and near-term roadmap for satellite QKD, including entanglement-based protocols and the engineering constraints of photon transmission through the atmosphere."},{title:"ITU-T Y.3800 â Overview on Networks Supporting Quantum Key Distribution",url:"https://www.itu.int/rec/T-REC-Y.3800/en",snippet:"The ITU standardisation of QKD network architecture defines trusted-node models, key relay protocols and the interface between quantum and classical network layers, setting the interoperability baseline any sovereign system must conform to."}],s={score:10,summary:"Entrusting national encryption key distribution to a foreign satellite operator is a structural intelligence vulnerability that no treaty or SLA can neutralise.",reasons:["The security proof for QKD is only valid end-to-end if every node â including the satellite bus, photon source and ground detector â is under national custody; a foreign-built or foreign-operated payload breaks the chain of trust unconditionally.","Harvest-now, decrypt-later attacks mean adversaries are already archiving today's ciphertext to decrypt once quantum computers mature; sovereign QKD is the only mechanism that makes historical interception permanently worthless.","Export-control regimes (US ITAR, Wassenaar Arrangement) classify photon entanglement sources and single-photon detectors as dual-use items, creating a supply-chain dependency that can be severed during a geopolitical crisis precisely when secure communications are most critical."]},l={payload:"Decoy-state BB84 attenuated laser QKD transmitter, 850 nm wavelength, 100 MHz pulse rate; 15 cm Cassegrain transmit telescope with tip-tilt active pointing to 1 µrad accuracy; optional entangled-photon pair source for BBM92 protocol; integrated quantum random number generator for key sifting",busClass:"12U to 16U cubesat, 20â28 kg, 40W average payload power; reaction-wheel attitude control to 0.01° pointing stability; GPS-disciplined timing to 1 ns synchronisation with ground station",orbit:"Circular LEO at 400â550 km, sun-synchronous or low-inclination depending on ground station latitude; 12-satellite walker constellation for 4â6 passes per station pair per night; night-pass operations preferred to suppress solar background photons",groundSegment:"Dedicated optical ground stations with 60 cm receive telescopes, single-photon avalanche diode (SPAD) arrays, adaptive optics for turbulence correction; minimum 2 stations per protected city pair;
5 fibre-connected to national crypto key management infrastructure; S-band TT&C for housekeeping on a separate link",dataPipeline:"On-board sifting of raw quantum bit stream; authenticated classical reconciliation channel over S-band; privacy amplification executed on sovereign hardware-security modules at ground station; final keys injected into national key management system (NKMS) via air-gapped or encrypted fibre; no raw photon or key data transits commercial internet",endUserDelivery:"Symmetric keys delivered to classified government network encryption devices (Type-1 equivalent), central bank settlement systems and military command terminals via NKMS API; key availability dashboard for security operations; automated alerts when key buffer drops below mission-defined threshold",timeToLaunch:"Single demonstrator satellite with 2 ground stations in 30 months from contract; operational 12-satellite constellation with national NKMS integration in 54 months",caveats:"Key generation rates of 1â10 kbps per pass are insufficient for bulk data encryption; QKD supplements, not replaces, post-quantum classical cryptography for high-bandwidth links. Single-photon detector arrays and entangled-photon sources are Wassenaar dual-use items â procurement must route through nationally approved suppliers (European, Japanese or domestic); US-origin components require ITAR export licence which may be withheld."},c={number:e,title:t,maturity:n,shortDescription:a,longDescription:i,whatMatters:o,references:r,sovereignty:s,architecture:l};export{l as architecture,c as default,i as longDescription,n as maturity,e as number,r as references,a as shortDescription,s as sovereignty,t as title,o as whatMatters};
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.