  With the development of quantum computers, traditional cryptographic systems
are facing more and more serious security threats. Fortunately, quantum key
distribution (QKD) and post-quantum cryptography (PQC) are two cryptographic
mechanisms with quantum-resistant security, and both will become important
solutions for future information security. However, neither of them is perfect,
and they are complementary. Quantum key distribution has unconditional security
that post-quantum cryptography does not have, and PQC can provide secure and
convenient authentication for QKD networks. In this paper, we propose two
protocols based on PQC to realize the full authentication of the QKD data
post-processing, and we only need to assume the short-term security of PQC
algorithm to ensure the long-term quantum resistant security of distributed
keys. We found that for the above two authentication protocols, attackers
cannot successfully implement replay attacks. These authentication protocols
can solve the problems of the current pre-shared key authentication in the
application of large-scale quantum key distribution networks, and are expected
to realize a key distribution mechanism with practical operability and quantum
resistant security, which will be beneficial to promote the deployment and
application of quantum key distribution networks.
