India's C-DOT unveils 14 quantum-security products, on two parallel cryptographic tracks

India's government telecom R&D centre used its 43rd Foundation Day to put 14 quantum-security products on a single stage, per the C-DOT release catalogued by idrw.org. C-DOT, the Centre for Development of Telematics under the Department of Telecommunications, did not pick one path through the post-quantum transition. It announced two, side by side: a fibre-based quantum key distribution stack and a portfolio of encryptors built around the post-quantum algorithms the US National Institute of Standards and Technology (NIST) finalised a year ago.

The threat driving this work is "harvest now, decrypt later", where adversaries record today's encrypted traffic and wait for a future quantum computer to break it. Against that horizon, two distinct cryptographic toolkits are competing for the answer. Quantum key distribution (QKD) sends encryption keys encoded in single photons over fibre, so any eavesdropper disturbs the signal and is caught. Post-quantum cryptography (PQC) is classical encryption rebuilt around mathematical problems that quantum computers are not known to solve. Each approach has different deployment economics, different supply chains, and a different trust profile. C-DOT is building both, as framed by opengovasia.com's coverage of the announcement.

The QKD side is compact. Q-AKSHAY CD is a 1U rack-mount fibre system using two protocols, Coherent One Way and Differential Phase Shift. Q-AKSHAY MD is the next-generation build, layered on Measurement Device Independent QKD, a protocol that closes the detector-side attacks that have historically haunted QKD lab demos. Underneath sit two shared components: C-SPD, a single-photon detector sub-module, and C-RD, a wideband RF driver for the modulators that shape those photons. None of this is new physics. It is the supply chain an indigenous QKD programme has to own if it does not want to import detectors and drivers from a handful of foreign vendors.

The PQC side is where the throughput ladder sits. Q-SETU runs NIST-standardised PQC at up to 80 Mbps at Layer 3, sized for IP voice and video calls. Q-VIKRAM is the defence-grade sibling at 1 Gbps, Layer 2/3. Q-MAHASETU is the commercial-grade version at 40 Gbps, Layer 2/3. Q-AMOGH is the flagship: 200 Gbps, Layer 1, sitting on the optical line itself. Two endpoints round it out: Q-DARSHAN, a quantum-safe video IP phone, and Q-VACHAN, an in-line node that protects existing IP-phone conversations. The full application framing, telecom, enterprise, wireless, optical, strategic, and defence networks, is laid out in telecomtalk's write-up of the announcement.

The ladder is the actual mapping to workloads. 80 Mbps is enough to encrypt a teleconference. 1 Gbps covers a defence site link. 40 Gbps handles enterprise backbones. 200 Gbps runs on the optical carrier itself, in front of everything else. Each tier is a different deployment decision, a different buyer, and a different upgrade cycle. C-DOT is not selling one product; it is selling a portfolio that can be slotted into each of those lanes without re-architecting the underlying network.

The release does carry one notable gap. Three of the sources covering this announcement reproduce the same C-DOT and Ministry of Communications release, and none of them carry independent validation of the throughput claims, third-party audits of the NIST PQC implementations, or evidence that any product is deployed with a named carrier or defence customer. The capability is real. The release is on the record. The fielding clock has not started. The next data point worth waiting for is a documented pilot: a defence site, a public-sector network, or a carrier trial, with measured throughput, an integration partner, and a date.

Until that lands, the 14 products stand as a portfolio that runs two cryptographic tracks in parallel, sized from 80 Mbps voice to 200 Gbps optical, with a defence-grade tier in between. C-DOT has committed the supply chain. The fielding clock has not started.