Classical key exchange is a solved problem until it isn't — and quantum computers will break RSA and elliptic-curve cryptography at a date no intelligence agency will announce in advance. Orbital QKD sidesteps that threat entirely: a satellite transmits single photons entangled or prepared in quantum states that are physically impossible to intercept without detection, giving two ground stations a shared secret key whose security is guaranteed by physics, not computational hardness. Nations that depend on commercially brokered encryption have no visibility into when those primitives will be deprecated or compromised.
The satellite stack for QKD is modest by orbital standards but optically demanding. The payload is a photon source — typically a weakly-attenuated laser or an entangled-pair source — paired with precise pointing optics to hit a 30–50 cm telescope aperture on the ground from 400–600 km altitude during a 5–10 minute pass. Atmospheric turbulence and daylight background photons are the principal engineering constraints; most operational demonstrations (Micius, QKDSat) run night passes to maximise signal-to-noise. A constellation of a dozen or more satellites eliminates single-point pass-window dependency and enables city-to-city key relay across intercontinental distances without trusting intermediate nodes.
The operational outcome is a sovereign key-distribution backbone that feeds classified government networks, central bank communications and military command links with keys whose integrity cannot be retroactively compromised by a future adversary harvesting today's ciphertext. Unlike a VPN or HSM upgrade, this capability cannot be purchased as a subscription from a foreign vendor and remain trustworthy — the photon source, the detector, and the satellite bus must be under national custody for the security argument to hold.
Frequently asked
Can orbital QKD actually be hacked?
The quantum channel itself is physically tamper-evident: any eavesdropping disturbs the photon states and is detectable. However, the classical authenticated channel used to reconcile keys, and the ground hardware endpoints, remain vulnerable to conventional cyberattack. Owning the satellite eliminates one foreign-intelligence attack surface — the space segment — but ground-station security is equally critical.
Why not just use post-quantum cryptography software instead?
Post-quantum cryptography (PQC) algorithms like NIST FIPS 203 are based on mathematical hardness assumptions that could, in principle, be broken by future algorithmic advances even without a quantum computer. QKD security rests on the laws of physics, not computational assumptions. For nation-states protecting secrets with 30-year classification lifetimes, the two approaches are best deployed together as a hybrid architecture.
How many satellites does a sovereign QKD constellation need?
A single satellite provides one or two contact windows per ground station per day, which is insufficient for continuous operational use. A minimum viable sovereign constellation for 24-hour key refresh across a nation's five to ten critical sites typically requires 6–12 LEO satellites. China's follow-on constellation plans exceed 30 satellites for continental coverage, according to statements by the Chinese Academy of Sciences.
Does this require a new ground network or can we use existing optical telescopes?
Existing astronomical telescopes have been used in demonstrators (including Micius experiments using Vienna and Tenerife stations), but operational QKD ground stations require purpose-built pointing and tracking systems accurate to sub-microradian levels, single-photon detectors, and timing synchronisation better than 1 ns. Retrofitting is possible but upgrading to sovereign operational standards typically means new dedicated facilities.
What is the 'trusted node' problem and why does it matter for sovereignty?
Because photons cannot be amplified without destroying the quantum state, QKD networks today use 'trusted nodes' — intermediate relay points that decrypt and re-encrypt key material. If any trusted node is foreign-owned or compromised, end-to-end quantum security is broken. Sovereign ownership of every node in the chain — satellite, ground station, and relay — is therefore the only way to achieve genuine security independence.
Is there an international treaty or framework governing orbital QKD?
Not yet. The UN Office for Outer Space Affairs (UN-OOSA) and ITU have begun scoping work, and ETSI's QKD Industry Specification Group has published interface standards, but no binding international framework governs orbital QKD security certification, spectrum use of optical payloads, or cross-border key transit. Nations that move first will shape the rules — a strong argument for building rather than waiting.
What does 'experimental' maturity mean in practice for a procurement decision?
It means the physics is proven and in-orbit demonstrations have succeeded (Micius, 2016–2020; SpeQtre CubeSat, 2023), but no constellation is commercially operational at scale. Procurement today means funding a development programme, not buying a service with an SLA. Expect mission risk budgets typical of TRL 6–7, and plan for technology refresh cycles as detector and source technology matures.
Could we simply buy QKD-as-a-service from a commercial provider?
Commercial QKD satellite services are beginning to emerge (e.g. early offerings from ID Quantique partnered with various national programmes), but purchasing key material as a service fundamentally defeats the security model: you must trust the provider not to log, copy, or be compelled to disclose keys by a foreign court. For any application where the adversary might be the provider's home jurisdiction, service procurement is not an option — ownership is.