Sparkle tests quantum-safe IPsec over satellite links

Sparkle and Hellas Sat have completed a trial that extends quantum-safe IPsec protection from data centers to a live geostationary satellite link. The test connects Sparkle’s Metamorfosis facility in Athens with Hellas Sat’s ground infrastructure in Cyprus, covering approximately 72,000 kilometers. While the satellite component adds novelty, the core development is the ability to maintain consistent cryptographic security across terrestrial and orbital transport layers without altering the underlying security model.

What the trial achieved

The deployment uses Sparkle’s Quantum Safe Interconnect software to automate key delivery and rotation for IPsec traffic. The system is designed to defend against both future quantum-enabled decryption and the immediate risk of encrypted data being intercepted and stored for later decryption. Because the solution is software-based, it can be layered onto existing network and security infrastructure without requiring dedicated hardware.

For data center operators, the trial demonstrates that quantum-safe encryption need not be confined to a single network domain. Traffic can move from a data center over fiber, transition to a satellite uplink, and terminate at a remote facility—all while maintaining the same cryptographic controls. This could simplify security management for enterprises serving remote industrial sites, islands, maritime environments, or government facilities where satellite connectivity remains essential.

Operational considerations

The trial highlights several practical challenges. A geostationary satellite path of 72,000 kilometers introduces latency that terrestrial links do not face, and quantum-safe encryption does not mitigate this physical constraint. The announcement does not disclose throughput, packet overhead, key rotation frequency under sustained traffic, or whether the security layer affected application performance across the satellite path. These details will be critical if the service moves from technical validation to production.

Sparkle has not specified which post-quantum cryptographic algorithms are used, leaving questions about interoperability, certification, and alignment with evolving standards. For infrastructure buyers, understanding algorithm choices and how they integrate with existing security appliances will be necessary before adoption.

Operationally, the greater challenge may lie in management rather than encryption. Data center teams will need centralized policy enforcement, audit trails, and predictable failure handling—especially when links degrade or shift between terrestrial and satellite paths. Satellite networks are inherently less deterministic than short fiber connections between facilities, which could complicate troubleshooting and performance guarantees.

Next steps for commercialization

Hellas Sat is now assessing commercial quantum-safe satellite services for enterprise customers with distributed or mission-critical operations. The company operates three geostationary satellites and two teleport facilities in Greece and Cyprus, providing the infrastructure to expand beyond a single test path. Sparkle, meanwhile, is extending a security model it has already validated in terrestrial cross-border and data center environments.

No pricing, service-level commitments, or customer rollout timelines have been disclosed. The next phase will likely focus on measurable performance metrics: throughput, latency overhead, operational stability, key management scale, and behavior when traffic transitions between terrestrial and satellite routes. These details will determine whether the solution moves from technical demonstration to routine procurement.