Site-To-Site Tunnel Authentication by Quantum Keys

A framework for authenticating firewall and encryption devices (FEDs) as endpoints of a secure tunnel using quantum-based secrets keys are provided. The secure tunnel is between two network sites. A quantum key distribution (QKD) subsystem is collocated, in part, with a first network site in another part, with a second network site. The QKD subsystem generates and shares at least one quantum-based secret key with respective key hosts in the first network site and second network site. Each FED obtains the same quantum-based secret key from the respective key host and authenticate each other as endpoints of the secure tunnel to be established between the first network site and the second network site through the public network. The authentication may be repeated.