Quantum Optics Jena said this week that its ELVIS entanglement-based quantum key distribution platform is the first commercial QKD system to complete an independent hardware-security evaluation under ISO/IEC 23837, the international standard the industry has been waiting on to move from lab curiosity to certifiable infrastructure.
Three Months, Six Side-Channel Attacks
The evaluation was run over three months by TUV Informationstechnik (TUViT), the Essen-based independent test lab better known for Common Criteria hardware audits. TUViT subjected ELVIS to six targeted side-channel attacks aimed at its lasers, single-photon detectors and optical components, the same class of attack that has repeatedly cracked earlier QKD prototypes in the literature. TUViT reported no major vulnerabilities or exploitable weaknesses, and no successful attacks.
Why ISO/IEC 23837 Matters
ISO/IEC 23837, published in 2023, is the first international standard covering security requirements, test methods and evaluation for QKD hardware. Governments and regulated buyers in energy, finance and defense have been reluctant to procure QKD kit without a certification pathway analogous to Common Criteria for classical crypto. TUViT lead expert Sven Bettendorf called the ELVIS result the "first concrete step" toward that pathway.
QuNET+BlueCert And The German Quantum-Safe Push
The methodology TUViT used was developed under QuNET+BlueCert, a Fraunhofer-backed German research initiative building certification standards for quantum communications. QOJ chief executive Kevin Fueschel said future ELVIS releases will be pushed through the same audit as the company scales sales into critical-infrastructure customers. The milestone lands in a busy week for quantum: Qunnect and Monarch Quantum unveiled a rack-mount networking partnership, enQase and Light Rider integrated dQKD entropy with crypto agility, and IonQ signed an MOU with Sandia on national-security co-design.
Reporting based on coverage from The Quantum Insider and Quantum Computing Report.