Practical aspects of security certification for commercial quantum technologies

Quantum random number generation (QRNG) and quantum key distribution (QKD) are the first applications of quantum physics at the level of individual quanta that have matured into commercial products. Both have been commercially available for over 10 years and increasingly adopted in information security systems. Current efforts focus on standardization and certification of QRNG and QKD devices and their components in order to validate the technology and enable more widespread adoption. Since no official certification scheme specific to quantum devices has been devised so far, alternative options must be investigated. This paper describes our approaches and efforts to enable compliance of commercial QRNG and QKD network devices with security standards such as AIS 20/31 1 and FIPS 140-2. 2