Why can't we just use a software pseudo-random number generator? They're fast, cheap, and proven.

Classical PRNGs are deterministic: an adversary who learns the seed can reproduce every output, past and future. Lenstra et al. (2012) showed 0.2% of real-world RSA public keys shared prime factors due to weak entropy at key generation, allowing trivial private-key recovery. Quantum randomness is non-deterministic by physics, not by obscurity — a seed cannot exist because there is no hidden variable to steal.

How does a satellite actually generate and distribute quantum randomness?

An onboard photon source (typically a laser attenuated to single-photon level or a spontaneous parametric down-conversion crystal) produces photons whose measurement outcomes — polarisation, arrival time, or path — are intrinsically random per quantum mechanics. These raw bits are post-processed into a certified entropy stream and then downlinked optically or via RF to authorised ground receivers. Ground nodes seed their local DRBGs (Deterministic Random Bit Generators) with this certified entropy, replacing or supplementing classical entropy harvesting.

Couldn't we just buy QRNG entropy as a cloud service from a commercial provider?

You could, and several vendors (ID Quantique, Quantinuum) offer exactly that. The problem is trust: you cannot independently verify that the vendor's source is truly quantum, has not been backdoored, or will remain available during a geopolitical crisis. A sovereign constellation means your own engineers operate and audit the payload, and the entropy stream is not routed through a foreign commercial network at any point.

What orbits work best, and why not GEO?

LEO (400–600 km) is strongly preferred because photon loss scales with the square of distance. A GEO satellite at 35,786 km would suffer roughly 40 dB more free-space path loss than a 550 km LEO satellite, making single-photon delivery practically impossible with reasonable apertures. LEO constellations of 18–24 microsatellites provide continuous global coverage with acceptable link budgets.

How do we verify that the entropy the satellite sends is genuinely quantum and hasn't been tampered with?

There are two complementary checks. First, device-independent or semi-device-independent protocols use Bell inequality violations measured on the satellite to certify randomness without trusting the hardware completely — though this is still experimental at orbital scale. Second, statistical test suites (NIST SP 800-90B, DIEHARD, TestU01) applied continuously to the downlinked stream catch any systematic bias introduced by tampering or hardware degradation. A cryptographically authenticated command-and-telemetry channel (per CCSDS 352.0-B-1) prevents injection attacks on the downlink itself.

What is the realistic procurement and deployment timeline for a sovereign QRNG constellation?

From programme launch to first operational downlink, expect 5–8 years: roughly 2 years for payload technology qualification, 1–2 years for satellite integration, and 1 year for launch campaign and on-orbit commissioning. A phased approach — starting with one or two demonstrators — can compress risk but extends the time to full 24-hour coverage. Nations with existing small-satellite programmes (ESA member states, India, Japan, UAE) can shave 12–18 months off the timeline.

How does space-based QRNG complement Post-Quantum Cryptography (PQC)?

PQC algorithms (CRYSTALS-Kyber, CRYSTALS-Dilithium, SPHINCS+ — now NIST standards) are computationally hard for quantum computers to break, but they still depend on high-quality entropy for key generation, nonce selection, and padding. A compromised entropy source can undermine even a mathematically sound PQC scheme. Space-based QRNG provides the certified entropy seed that PQC algorithms assume but cannot themselves guarantee.

Are there international arms-control or dual-use export restrictions on quantum satellite payloads?

Yes. Single-photon detectors, entangled-photon sources, and related photonics components are frequently controlled under the Wassenaar Arrangement (category 6.A.005 and related), restricting exports from signatory states. Nations building sovereign constellations must either develop domestic photonics supply chains, negotiate bilateral technology-transfer agreements, or accept that key components may be unavailable during diplomatic tensions — which is precisely the risk a sovereign programme is meant to eliminate.

16.1.4Experimental

Quantum Random Number Distribution

Bank teller at a computer terminal processing a secure financial transaction — Contactless payment terminals gain unbreakable security as satellite-sourced quantum random numbers protect every cashless transaction customers make.

Satellite Quantum Random Numbers Reach End Users

1
QRNG Satellite
Photon detector generates certified random bits
2
Optical Downlink
Encrypted beam to ground station receiver
3
Key Distillation
Raw bits sifted, verified, privacy-amplified
4
Secure Application
Banks, VPNs, e-government consume true randomness

A QRNG satellite harvests photon noise, downlinks the output, and distributes verified random keys to critical infrastructure users.

Page in the build queue

This application has its place in the atlas. The full page — short and long descriptions, what-matters bullets, sovereignty rationale, and the eight-field architecture block — is being written next.

Maturity reading: Engineering proven; commercial, regulatory or technical gates remain. Phase 1 built §4.1 (Maritime Intelligence) end-to-end as the depth-and-format reference. Section 4 is the next section to graduate from scaffold to full content; the rest follow on the roadmap.

Related applications

16.1.3 · Previous

Post-Quantum Crypto Migration

All in quantum & sovereign cryptographic infrastructure

16.1.5 · Next

Quantum-Safe Government Comms

Bring this into your sovereign programme.

All solutions Speak with engineering