QuMail: A Quantum-Resilient Secure Email Framework Integrating QKD Simulation, Post-Quantum Cryptography, and Blockchain Logging

Abstract

The emergence of quantum computing poses a significant threat to classical cryptographic mechanisms such as RSA and Elliptic Curve Cryptography that are widely used to secure email communication. Traditional secure email systems rely on classical public-key infrastructure and therefore lack resilience against quantum attacks. This paper presents QuMail, a quantum-secure email client that integrates BB84-based Quantum Key Distribution (QKD) simulation, CRYSTALS-Kyber post-quantum cryptography (PQC), and blockchain-based audit logging within a unified architecture. The proposed system operates entirely at the application layer and remains compatible with existing email infrastructures using standard SMTP and IMAP protocols without requiring any server-side modification. A modular prototype was implemented using IBM Qiskit for quantum key generation and hybrid cryptographic techniques for secure message transmission. Experimental evaluation demonstrates an average latency of 120–180 ms for QKD key generation and 20–30 ms for Kyber-based encryption while maintaining minimal overhead for email transmission. The results demonstrate the feasibility of integrating quantum-resilient security mechanisms into existing email systems and highlight the potential of hybrid QKD–PQC architectures for next-generation secure communication platforms.