A method for creating an encryption key (K* E2E ) comprising a preparation step and a subsequent key agreement step, wherein in the preparation step, a. a first QKD device (A1) at a first location (A) and a second QKD device (B2) at a second location (B) distant from the first location (A) together create a quantum secured key (K QKD ) according to a QKD protocol communicating via a first quantum channel and a second quantum channel , respectively, with at least one common intermediate quantum node (TN) for transmitting or receiving a quantum information according to the QKD protocol and communicating via an authenticated digital distillation channel separate from the first and second quantum channel for transmitting and receiving a control information according to the QKD protocol, b. a first encryption device (ENC-A) at the first location (A) and a second encryption device (ENC-B) at the second location (B) together create a symmetrically encrypted channel between the first location (A) and the second location (B), wherein the symmetrically encrypted channel is encrypted with the quantum secured key (K QKD ) and wherein, in the key agreement step, a first key agreement device (PQC-A) at the first location (A) and a second key agreement device (PQC-B) at the second location (B) together create the encryption key (K* E2E ) via the symmetrically encrypted channel , using an asymmetric key exchange procedure operating with respective private / public key pairs according to a public-key protocol, wherein key material to be exchanged for creating the encryption key (K* E2E ) is transferred via the symmetrically encrypted channel between the first location (A) and the second location (B). a. a first QKD device (A1) at a first location (A) and a second QKD device (B2) at a second location (B) distant from the first location (A) together create a quantum secured key (K QKD ) according to a QKD protocol communicating via a first quantum channel and a second quantum channel , respectively, with at least one common intermediate quantum node (TN) for transmitting or receiving a quantum information according to the QKD protocol and communicating via an authenticated digital distillation channel separate from the first and second quantum channel for transmitting and receiving a control information according to the QKD protocol, b. a first encryption device (ENC-A) at the first location (A) and a second encryption device (ENC-B) at the second location (B) together create a symmetrically encrypted channel between the first location (A) and the second location (B), wherein the symmetrically encrypted channel is encrypted with the quantum secured key (K QKD ) and wherein, in the key agreement step, a first key agreement device (PQC-A) at the first location (A) and a second key agreement device (PQC-B) at the second location (B) together create the encryption key (K* E2E ) via the symmetrically encrypted channel , using an asymmetric key exchange procedure operating with respective private / public key pairs according to a public-key protocol, wherein key material to be exchanged for creating the encryption key (K* E2E ) is transferred via the symmetrically encrypted channel between the first location (A) and the second location (B). <EOS>