Post-Quantum Cryptography (PQC)

To mitigate transition risk, security architects are deploying hybrid cryptographic schemes that combine classical and PQC algorithms. This ensures security even if one layer is broken.

• Dual Signing: A document is signed with both ECDSA and CRYSTALS-Dilithium; both must validate.
• Composite Encryption: Data is encrypted using a classical key encapsulation mechanism (KEM) and a PQC KEM, with the session key derived from both shared secrets.
• This approach maintains backward compatibility while introducing quantum resistance.

A primary driver for immediate PQC adoption in healthcare is the HNDL threat. Adversaries are currently intercepting and storing encrypted long-lived patient records (e.g., genomic sequences) with the expectation of decrypting them once a cryptographically relevant quantum computer (CRQC) becomes available.

• Data Longevity: Protected Health Information (PHI) often requires confidentiality for decades.
• Forward Secrecy: PQC ensures that sessions encrypted today cannot be retroactively broken in the future.

PQC algorithms generally involve larger key sizes and ciphertexts compared to classical ECC, impacting network overhead and storage.

• CRYSTALS-Kyber-768: Public key size is ~1,184 bytes vs. 32 bytes for ECC Curve25519.
• Signature Size: CRYSTALS-Dilithium signatures are ~2,420 bytes, significantly larger than ECDSA.
• Optimization: Hardware acceleration and instruction set extensions (e.g., AVX2) are critical for maintaining low latency in federated learning aggregation rounds.

PQC signature schemes are categorized by their state management requirements, which is critical for fault-tolerant distributed systems.

• Stateless (SPHINCS+, Dilithium): No secret state needs to be maintained between signatures, making them robust against system crashes and cloning—ideal for virtualized healthcare cloud environments.
• Stateful (XMSS, LMS): Require tracking a one-time signature index; reusing a state value catastrophically breaks security. These are better suited for firmware signing in controlled hardware security modules (HSMs).

The mathematical foundation underlying most NIST-standardized PQC algorithms. Lattice-based schemes derive their security from the computational hardness of problems like Learning With Errors (LWE) and Short Integer Solution (SIS) on high-dimensional lattices.

• Resistant to both classical and Shor's algorithm attacks
• Forms the basis for CRYSTALS-Kyber (key encapsulation) and CRYSTALS-Dilithium (digital signatures)
• Enables advanced constructions like fully homomorphic encryption

A cryptographic primitive enabling computation directly on encrypted data without decryption. When combined with PQC, HE provides long-term confidentiality for sensitive medical computations in untrusted cloud environments.

• Fully Homomorphic Encryption (FHE) supports arbitrary computations on ciphertexts
• Allows federated model aggregation without exposing individual patient gradients
• PQC-secured HE ensures quantum-resistant encrypted computation

A protocol enabling multiple healthcare institutions to jointly compute functions over private inputs while revealing only the agreed output. PQC-hardened SMPC ensures long-term security against future quantum adversaries.

• Enables private set intersection for patient cohort discovery
• Protects model weights during collaborative inference
• Quantum-secure commitment schemes prevent retroactive decryption

A mathematical framework providing provable privacy guarantees through calibrated noise injection. While PQC protects data in transit and at rest, differential privacy protects against inference-based attacks on the trained model itself.

• Epsilon (ε) quantifies the privacy loss budget
• Prevents membership inference attacks on federated models
• Complements PQC for defense-in-depth privacy architecture

A hardware-based approach using quantum mechanical principles to establish information-theoretically secure encryption keys. Unlike PQC, QKD requires specialized photonic infrastructure but offers provable security independent of computational assumptions.

• Detects eavesdropping through quantum state disturbance
• Limited by distance and requires trusted nodes
• Often deployed alongside PQC in hybrid quantum-safe networks

The architectural principle of designing systems to rapidly swap cryptographic primitives without system redesign. Essential for healthcare organizations preparing for the post-quantum transition.

• Enables seamless migration from RSA/ECC to PQC algorithms
• Supports hybrid certificates combining classical and quantum-safe keys
• Required by NIST SP 800-208 for federal systems