1.6T quantum-safe communications

1 00:00:00,000 --> 00:00:01,915 Hi, I'm Paola Osorio, product line manager 2 00:00:01,915 --> 00:00:04,230 for optical systems at Ciena. 3 00:00:04,230 --> 00:00:06,420 Data security has never been more critical, 4 00:00:06,420 --> 00:00:07,980 especially with the looming threat of 5 00:00:07,980 --> 00:00:09,690 quantum computers capable of 6 00:00:09,690 --> 00:00:11,820 breaking classical encryption methods. 7 00:00:11,820 --> 00:00:15,045 Cyber threats are becoming smarter and more aggressive. 8 00:00:15,045 --> 00:00:17,535 Hackers are already engaging in "harvest now, 9 00:00:17,535 --> 00:00:19,560 decrypt later" schemes that involve 10 00:00:19,560 --> 00:00:22,470 intercepting and storing encrypted high-value data, 11 00:00:22,470 --> 00:00:23,955 with the intention of unlocking it 12 00:00:23,955 --> 00:00:26,730 once capable quantum computers become available. 13 00:00:26,730 --> 00:00:29,115 For enterprises and network operators, 14 00:00:29,115 --> 00:00:30,960 protecting intellectual property, 15 00:00:30,960 --> 00:00:33,390 confidential records, personal data, 16 00:00:33,390 --> 00:00:35,880 and app-to-app communications between locations, 17 00:00:35,880 --> 00:00:38,010 or data centers, is essential. 18 00:00:38,010 --> 00:00:41,085 High-speed, layer 1 quantum-safe encryption, 19 00:00:41,085 --> 00:00:43,050 is key to ensuring the confidentiality 20 00:00:43,050 --> 00:00:44,880 of sensitive data as it moves 21 00:00:44,880 --> 00:00:46,650 from one location to a device 22 00:00:46,650 --> 00:00:48,945 or application in another location. 23 00:00:48,945 --> 00:00:50,940 Ciena's Waveserver family, powered 24 00:00:50,940 --> 00:00:52,800 by WaveLogic coherent technology, 25 00:00:52,800 --> 00:00:56,025 provides industry-leading wire-speed optical encryption, 26 00:00:56,025 --> 00:00:58,305 in a compact modular form factor. 27 00:00:58,305 --> 00:01:00,585 Ciena was first to introduce 200G, 28 00:01:00,585 --> 00:01:03,300 400G and 800G encryption, 29 00:01:03,300 --> 00:01:05,370 and now extends its market leadership 30 00:01:05,370 --> 00:01:06,600 with an industry-first 31 00:01:06,600 --> 00:01:10,620 programmable 1.6T quantum-safe encryption solution, 32 00:01:10,620 --> 00:01:13,020 supporting both Quantum Key Distribution (QKD) 33 00:01:13,020 --> 00:01:14,310 system interworking, 34 00:01:14,310 --> 00:01:16,890 and Post-Quantum Cryptography (PQC) algorithms. 35 00:01:16,890 --> 00:01:20,010 Modern encryption relies on key exchange algorithms to 36 00:01:20,010 --> 00:01:21,210 generate a shared secret 37 00:01:21,210 --> 00:01:23,100 between two communicating parties, 38 00:01:23,100 --> 00:01:24,330 which is then used by 39 00:01:24,330 --> 00:01:28,200 an AES-256 engine to encrypt and decrypt data. 40 00:01:28,200 --> 00:01:30,915 While AES-256 symmetric encryption 41 00:01:30,915 --> 00:01:32,805 is resistant to quantum threats, 42 00:01:32,805 --> 00:01:34,950 today's key exchange protocols are 43 00:01:34,950 --> 00:01:36,510 vulnerable as quantum computers 44 00:01:36,510 --> 00:01:37,875 could break them in hours, 45 00:01:37,875 --> 00:01:40,710 posing a significant security risk. 46 00:01:40,710 --> 00:01:42,765 With Ciena's Waveserver, 47 00:01:42,765 --> 00:01:45,090 operators get a simple, high-speed, 48 00:01:45,090 --> 00:01:48,360 ultra-low-latency encryption solution that is always on, 49 00:01:48,360 --> 00:01:51,330 ensuring critical data is protected all the time. 50 00:01:51,330 --> 00:01:53,940 It encrypts the entire OTN payload 51 00:01:53,940 --> 00:01:57,300 using an AES-256-GCM encryption engine, 52 00:01:57,300 --> 00:01:59,460 securing all upper-layer data 53 00:01:59,460 --> 00:02:01,590 and protocol headers transparently. 54 00:02:01,590 --> 00:02:04,875 Additionally, FIPS 140-3 Level 2 55 00:02:04,875 --> 00:02:06,780 and Common Criteria certifications 56 00:02:06,780 --> 00:02:09,690 enable deployments across industries like finance, 57 00:02:09,690 --> 00:02:12,360 government, healthcare, and utilities. 58 00:02:12,360 --> 00:02:14,115 Each encryption module supports 59 00:02:14,115 --> 00:02:17,880 up to eight QSFP-DD ports for 400GbE clients, 60 00:02:17,880 --> 00:02:21,885 four QSFP-DD800 ports for 800GbE clients, 61 00:02:21,885 --> 00:02:25,050 and two WaveLogic 6 Extreme coherent line ports, 62 00:02:25,050 --> 00:02:26,880 each offering line capacity up to 63 00:02:26,880 --> 00:02:31,935 1.6Tb/s with highly programmable baud up to 200Gbaud. 64 00:02:31,935 --> 00:02:35,205 A single chassis can host up to four modules, 65 00:02:35,205 --> 00:02:38,595 delivering 12.8T of encrypted line capacity 66 00:02:38,595 --> 00:02:40,350 in just 2 rack units. 67 00:02:40,350 --> 00:02:41,910 To address the threat posed by 68 00:02:41,910 --> 00:02:44,325 quantum computers on key exchange protocols, 69 00:02:44,325 --> 00:02:46,605 our solution implements two approaches: 70 00:02:46,605 --> 00:02:48,120 Quantum Key Distribution (QKD) 71 00:02:48,120 --> 00:02:49,980 and Post-Quantum Cryptography (PQC). 72 00:02:49,980 --> 00:02:52,050 QKD systems leverage the principles of 73 00:02:52,050 --> 00:02:53,790 quantum mechanics to securely 74 00:02:53,790 --> 00:02:56,175 generate and distribute cryptographic keys, 75 00:02:56,175 --> 00:02:57,420 making them inherently 76 00:02:57,420 --> 00:02:59,505 resistant to eavesdropping attacks. 77 00:02:59,505 --> 00:03:01,560 Waveserver integrates seamlessly with 78 00:03:01,560 --> 00:03:03,660 any external QKD system using 79 00:03:03,660 --> 00:03:06,690 the ETSI GS QKD 014 standard, 80 00:03:06,690 --> 00:03:09,570 enabling a solution that is mathematically proven to 81 00:03:09,570 --> 00:03:12,855 provide unconditional security for in-flight data. 82 00:03:12,855 --> 00:03:15,120 Unlike QKD, PQC relies on 83 00:03:15,120 --> 00:03:17,250 complex mathematical algorithms designed 84 00:03:17,250 --> 00:03:19,680 to remain challenging for quantum computers. 85 00:03:19,680 --> 00:03:23,610 Waveserver implements NIST-certified PQC algorithms, 86 00:03:23,610 --> 00:03:26,160 enabling a quantum-safe encryption solution 87 00:03:26,160 --> 00:03:27,555 straight out of the box, 88 00:03:27,555 --> 00:03:30,030 along with the crypto agility needed to integrate 89 00:03:30,030 --> 00:03:31,260 future protocols or 90 00:03:31,260 --> 00:03:34,170 algorithms without disrupting operations. 91 00:03:34,170 --> 00:03:35,820 Operators also have the option 92 00:03:35,820 --> 00:03:37,320 to deploy a hybrid approach, 93 00:03:37,320 --> 00:03:39,300 supporting both classical and PQC 94 00:03:39,300 --> 00:03:41,655 key exchange algorithms simultaneously. 95 00:03:41,655 --> 00:03:43,485 Organizations handling sensitive, 96 00:03:43,485 --> 00:03:45,750 mission-critical data must act now to 97 00:03:45,750 --> 00:03:47,775 combat the threat of quantum computers 98 00:03:47,775 --> 00:03:50,520 and increasingly sophisticated cyberattacks. 99 00:03:50,520 --> 00:03:53,850 Ciena's Waveserver provides an efficient and scalable way 100 00:03:53,850 --> 00:03:56,490 to protect in-flight data between locations. 101 00:03:56,490 --> 00:03:59,250 Its 1.6T quantum-safe optical 102 00:03:59,250 --> 00:04:01,050 layer encryption with support for 103 00:04:01,050 --> 00:04:03,210 QKD system interworking and 104 00:04:03,210 --> 00:04:06,240 PQC algorithms offers the highest capacity, 105 00:04:06,240 --> 00:04:09,105 highest performance secure connectivity in the market. 106 00:04:09,105 --> 00:04:11,070 It is simple to deploy and enables 107 00:04:11,070 --> 00:04:12,870 quantum-safe networks so that 108 00:04:12,870 --> 00:04:15,255 service providers, financial institutions, 109 00:04:15,255 --> 00:04:16,560 cloud providers, and 110 00:04:16,560 --> 00:04:18,645 government and research organizations 111 00:04:18,645 --> 00:04:21,563 can securely connect locations across any distance. 112 00:04:21,563 --> 00:04:23,022 For more information, please contact 113 00:04:23,022 --> 00:04:26,480 your Ciena representative.