标题： 量子随机数生成器与后量子密码算法的集成 显示英文标题

标题： Integration of quantum random number generators with post-quantum cryptography algorithms

摘要： 随着量子技术的进步，密码学相关的量子计算机（CRQCs）的能力对流行密码协议的安全性构成了更大的威胁。 在这种情况下，后量子密码学（PQC）已成为延长现有公钥基础设施（PKI）系统寿命的潜在解决方案。 然而，PQC协议在密钥生成和封装过程中依赖于高质量的随机性，熵源的质量可能对整个系统的安全性产生深远影响。 在本工作中，我们展示了一个概念验证，通过基于PQC的传输层安全协议（TLS）在通信网络中集成量子随机数生成（QRNG）设备。 使用开源密码库和商用QRNG硬件，我们通过熵即服务（EaaS）模型演示了它们作为熵源的使用。 我们强调了两个特定的用例：一个完全虚拟化的私有PKI网络和与外部支持PQC的服务器的连接。 实验结果表明，EaaS QRNG能够在密码管理系统中实现实时熵监测和质量评估，对TLS握手时间的影响可以忽略不计。 显示英文摘要

摘要： As quantum technologies advance, the security of popular cryptographic protocols becomes more threatened by the capabilities of Cryptographically Relevant Quantum Computers (CRQCs). In this scenario, Post-Quantum Cryptography (PQC) has become a potential solution to prolong the life of existing Public Key Infrastructure (PKI) systems. However, PQC protocols depend on high-quality randomness for key generation and encapsulation procedures, with the quality of the entropy source potentially having a profound impact on the security of the overall system. In this work, we demonstrate a proof-of-concept enabling the incorporation of Quantum Random Number Generation (QRNG) devices within communication networks using PQC-based Transport Layer Security (TLS).Using open-source cryptographic libraries and commercial QRNG hardware, we demonstrate their use as entropy sources via an Entropy-as-a-Service (EaaS) model. We highlight two particular use cases: a fully virtualized private PKI network and a connection to an external PQC-enabled server. Experimental results show that EaaS QRNG enables real-time entropy monitoring and quality assessment in cryptographic management systems, with negligible impact on TLS handshake time.