Alerta

POST-QUANTUM KEY AGREEMENT MECHANISM FOR PRESERVING CONFIDENTIALITY OF DIGITALLY TRANSMITTED SECRET AND METHOD THEREOF

Resumen de: WO2026164509A1

The invention relates to an improved post-quantum cryptographic system for preserving confidentiality of an agreed secret parameter in a transaction over a data communication network. The system includes a cryptographic unit with a key generation module and a cryptographic module deployed at a sender, a recipient, and a CA on a server. The CA authenticates the transaction by verifying a sender identifier provided by the recipient. The key generation module generates private seeds of at least 128 bits using a TRNG or PRNG and derives partial and final agreed secret parameters from the KAZ-KA Problem, with a trapdoor randomly selected from a public list. The cryptographic module forms the agreed secret parameter y, derives sk = KDF(y), and uses it for symmetric encryption of an electronic or digital message M via a corresponding symmetric cryptosystem.

END-TO-END TRANSPORT LAYER SECURITY

Resumen de: US20260230303A1

0000 The present disclosure relates to exchanging information between a start node and an end node. Based on the information session keys for a connection comprising the start node, the end node, and at least one intermediate node are established. The session keys include a data encryption session key and a Message Authentication Code (MAC) session key. The data is encrypted using the data encryption session key at the start node. MAC is generated using the MAC session key. The encrypted data is relayed, via the at least one intermediate node, from the start node to the end node without the at least one intermediate node re-encrypting the data.

BIOMETRIC RELIANT SYSTEM AND METHOD

Resumen de: US20260230340A1

0000 A biometric blockchain system is provided with a card body dimensioned to approximate a standard credit card, a biometric sensor module embedded in the card body and configured to capture fingerprint or facial data, embedded electronics including at least one microcontroller unit, a cryptographic processor, and non-volatile memory, communication interfaces including at least one of near field communication or bluetooth low energy or ultra-wide band, and a power source. The biometric sensor module captures biometric data, the embedded electronics generate a cryptographic key from the biometric data using a biometric key derivation function, and the cryptographic key enables access to a private blockchain ledger for secure interactions among users with compatible cards. The card body comprises a core layer comprising a substrate film, a core sheet comprising a component section with an antenna structure and a system-in-package, and a crosslinked polymer composition disposed on both sides of the substrate film.

METHODS AND SYSTEMS FOR ENHANCING DETECTION OF FRAUDULENT AUTHENTICATION DATA

Resumen de: AU2025203775A1

A method for enhancing detection of fraudulent authentication data includes receiving, by an electronic device, data during an authentication transaction, computing a feature vector from the received data, and normalizing the feature vector. The method also includes encoding the normalized feature vector into qubits, expanding, using at least one quantum algorithm, the normalized feature vector into a high-dimensional space, and detecting in the high-dimensional space anomalies indicative of fraud based on the qubits. Furthermore, the method includes calculating, based on the detected anomalies, a confidence score reflecting a likelihood that the received data is genuine and comparing the confidence score against a threshold value. In response to determining the confidence score fails to satisfy the threshold value, the method determines that the received data requires secondary authentication. A method for enhancing detection of fraudulent authentication data includes receiving, by an electronic device, data during an authentication transaction, computing a feature vector from the received data, and normalizing the feature vector. The method also includes encoding the normalized feature vector into qubits, expanding, using at least one quantum algorithm, the normalized feature vector into a high-dimensional space, and detecting in the high-dimensional space anomalies indicative of fraud based on the qubits. Furthermore, the method includes calculating, based on the detected

KEY ESTABLISHMENT AND SECURE COMMUNICATIONS BASED ON SATELLITE ENTROPY SOURCES

Resumen de: US20260230315A1

0000 Systems and techniques for secure communications and distribution of random values, produced from at least two satellite entropy sources, are described. These random values may be provided by respective quantum random number generators (QRNGs) at separate satellites, and optionally combined with values from ground-based entropy sources (e.g., QRNGs at terrestrial locations). An example method includes: receiving a first random value and a second random value via at least one satellite communication, where the first random value is generated by a first QRNG at a first satellite, and the second random value is generated by a second QRNG at a second satellite; and generating a cryptographic key based on the first random value and the second random value. The cryptographic key may be produced by a key derivation function that combines the random values, and the cryptographic key may be used to establish a secure communication session.

CRYPTOGRAPHIC SCHEMES FOR HYBRID CLASSICAL-QUANTUM COMPUTER SYSTEMS

Resumen de: AU2025211157A1

In a general aspect, hybrid classical-quantum cryptographic systems are presented. In some implementations, a hybrid computer system includes a quantum computing system and a classical computing system configured to obtain a message to send to a recipient; obtain a shared secret that includes a quantum logic circuit and is known by the recipient; generate an encrypted version of the message based on the quantum logic circuit; and send the encrypted version of the message to the recipient.

ENCRYPTED COMMUNICATION METHOD, NON-TRANSITORY COMPUTER-READABLE RECORDING MEDIUM, AND CONNECTED DEVICE

Resumen de: US20260230317A1

0000 In an encrypted communication method, a public key (a first encryption key) is generated using a random seed stored in advance, a random number to be shared with a connected device to be communicated with is obtained through communication using the public key (the first encryption key) generated, and encrypted communication with the connected device is performed using a cryptographic scheme that is usable by using the obtained random number as a symmetric key (a second encryption key).

A SYSTEM FOR CRYPTOGRAPHIC AGILITY WITH PROXY TASK MANAGEMENT

Resumen de: US20260230313A1

A method of cryptographic agility for post-quantum cryptography by swapping a ciphersuite is provided. The method can include performing, by a configuration agent or proxy, cryptography based on a current ciphersuite. The method can further include receiving, by the configuration agent and from a configuration orchestrator, instructions to invoke a protocol to swap the current ciphersuite. The method can further include invoking, by the configuration agent, the protocol to swap the current ciphersuite. The method can further include communicating, by a quantum secure layer (QSL) agent, a next ciphersuite from a set of ciphersuites to a key distribution center (KDC). The next ciphersuite can comprise a post-quantum ciphersuite, such as a next asymmetric or symmetric algorithm, cryptographic random number generator, or cryptographic hash function. The method can further include replacing the current ciphersuite with the next ciphersuite and performing cryptography based on the next ciphersuite.

PROVIDING QUANTUM-SAFE COMMUNICATIONS SECURITY OVER AN INSECURE NETWORK

Resumen de: US20260230310A1

An initial true random number is generated. A hybrid key pair is generated based on the initial true random number. The hybrid key pair includes a first key pair generated by a quantum-safe cryptographic algorithm and a second key pair generated by a cryptographic algorithm. A system request is provided to an entropy service. The system request includes the hybrid key pair. Quantum entropy data included in a response received from the entropy service is decrypted. The response includes a public key associated with the entropy service. The decrypted encrypted quantum entropy data is utilized for cryptographic operations.

Method and System for Quantum Computations with Resource Management and Secure Encryption

ANALYZING METHOD AND MODULE FOR A QUANTUM KEY DISTRIBUTION NETWORK

Resumen de: EP4787772A1

0001 A method for analyzing a quantum key distribution network, QKDN, wherein a QKDN analyzer module measures a key system attribute, KSA, of the QKDN and/or checks a functionality of the QKDN; a QKDN analyzer device for analyzing a QKDN, QKD nodes for a QKDN, a QKDN and a computer program product.

Adaptive quantum privacy gateway (aqpg)

Resumen de: GB2703677A

A data transfer request is received and related contextual metadata is retrieved including data sensitivity, required confidentiality duration, and quantum cryptographic threat intelligence. A threat level for the transfer is assessed and a necessary quantum-resistant encryption strength is indicated, based on which an encryption algorithm is selected and applied to balance strength and performance. User-defined consent parameters associated with the data transfer are retrieved, and compliance is observed through routing or transformation (e.g., anonymisation) of the data to control recipients, geographic restrictions, and data usage. System performance and environmental impact is optimised whilst meeting cryptographic and consent requirements. The system dynamically assesses recent algorithm developments and quantum cryptanalysis breakthroughs to select an efficient algorithm that still meets the security requirements of the data. Adjustments may include selecting alternative cryptographic algorithms known for lower energy consumption or reducing the operational frequency of certain resource-intensive tasks. The system can proactively schedule or rate-limit non-critical data transfers during periods of peak computational load to ensure sufficient resources remain available for high-priority communications. Fig. 3

METHOD AND SYSTEM TO ESTIMATE RISK FOR A SOFTWARE APPLICATION DUE TO QUANTUM THREAT

Resumen de: EP4773541A1

Conventional risk estimation techniques perform dynamic analysis of application or use models which require training data. Present disclosure provides method and system to estimate risk for a software application due to quantum threat by static analysis. A set of records pertaining to the application is received and parsed to obtain application, crypto and platform parameters. In addition, list of quantum vulnerable algorithms, number of Qubits required to break a cryptographic algorithm used by the application and a current Qubit number are also received. Then, value of Quantum Day is determined based on the current Qubit number and the number of Qubits required to break the cryptographic algorithm used by the application. Further, SOD (Severity, Occurrence, Detection) scores are calculated for each parameter, and they are multiplied to determine Risk Priority Number (RPN) for each parameter. Finally, RPNs of all parameters are summed up to estimate overall risk of the application.

QUANTUM KEY DISTRIBUTION IN AN OPTICAL NETWORK AND QUANTUM-SECURED OPTICAL CHANNELS

Resumen de: US2025106012A1

Systems and methods for quantum key distribution in an optical network and quantum-secured optical channels. A node for operation in an optical network includes one or more degrees each connected to a corresponding optical span including one or more fibers; and one or more Quantum-Optical Service modules (QOSM) for each of the one or more degrees, each QOSM supporting Quantum Key Distribution (QKD) for establishing a quantum-secured channel and Optical Service Channel (OSC) functionality over the quantum-secured channel. A line amplifier system for operation in an optical network includes one or more optical amplifiers configured to amplify optical channels over an optical span in the optical network; and a trusted quantum repeater, connected to the optical span, and configured to support QKD for establishing a first quantum-secured channel and a second quantum-secured channel and OSC functionality over the first quantum-secured channel and the second quantum-secured channel.

FABRICATION METHOD, QUANTUM RANDOM NUMBER SECURITY CHIP, AND METHOD FOR GENERATING QUANTUM KEY

Resumen de: EP4787148A2

The present disclosure provides a fabrication method, a quantum random number security chip, and a method for generating a quantum key, which mainly relate to the field of quantum random number generation technology. The fabrication method includes: providing a quantum entropy source die and a security processing module on a first surface of a substrate and a second surface of the substrate respectively to form a three-dimensional stacked structure, where a plurality of copper pillars are disposed on the second surface of the substrate; performing a molding process on the first surface of the substrate and the second surface of the substrate to obtain an encapsulation structure encapsulating the substrate, where the plurality of copper pillars have bumps exposed outside the encapsulation structure; and rerouting a substrate pad disposed on the second surface of the substrate to a fan-out region of the substrate by using a wafer-level fan-out method, such that the bumps of the plurality of copper pillars exposed outside the encapsulation structure serve as external pins of the quantum random number security chip, thereby obtaining the quantum random number security chip.

QUANTUM READY INTELLIGENT SECURITY GATEWAY

Resumen de: US2025112897A1

Techniques for applying a quantum ready intelligent security gateway are disclosed. In some embodiments, a system/process/computer program product for applying a quantum ready intelligent security gateway (e.g., a quantum ready intelligent security gateway that supports quantum key distribution (QKD) and/or post-quantum cryptography (PQC) for providing a secure tunnel to the mobile network) includes monitoring network traffic on a mobile network at a security gateway to identify a new session; determining meta information associated with the new session by extracting the meta information from the network traffic via one or more interfaces; and enforcing a security policy on the new session at the security gateway based on the meta information to apply context-based security in the mobile network.

一种基于抗量子算法的国密IPSec协议实现方法及系统

Resumen de: CN122513082A

本发明公开了一种基于抗量子算法的国密IPSec协议实现方法及系统，包括：发起方向响应方发送第一消息，第一消息为封装有建议载荷的SA载荷，建议载荷中包含有抗量子算法标识的变换载荷；响应方向发起方发送第二消息，所述第二消息为响应方接受的SA载荷，以及响应方的抗量子签名密钥、加密密钥的证书载荷；发起方和响应方交换数据，形成第三消息和第四消息，所述第三消息和第四消息包括nonce和身份标识ID载荷，均采用临时密钥Sk进行国密对称算法进行加密保护，并各自使用抗量子签名密钥进行签名；发起方与响应方交换经国密对称算法加密的鉴别数据，形成第五消息和第六消息，并使用对方的抗量子签名密钥进行签名验证。提供抵抗量子计算威胁的安全网络通信。

一种基于集成光量子芯片的纠缠-干涉互补性验证装置及方法

Resumen de: CN122513022A

本发明提供一种基于集成光量子芯片的纠缠‑干涉互补性验证装置及方法，装置包括：片上量子比特干涉单元、路径探测器单元和测量单元；片上量子比特干涉单元包括依次分布在目标量子比特的光子传播路径上的第一分束器、相位调制器和第二分束器；路径探测器单元包括依次分布在路径探测器的光子传播路径上的第三分束器和可调耦合器；测量单元包括相互连接的单光子探测器阵列和数据采集与处理模块；其中，片上量子比特干涉单元的输出端和路径探测器单元的输出端分别连接至测量单元的输入端。本发明在集成光量子芯片上验证纠缠与干涉的互补关系，为片上量子计量和信息处理提供了核心器件。

兼容国际标准的双轨制可重构后量子密码处理方法、装置及存储介质

Resumen de: CN122513078A

本发明公开了一种兼容国际标准的双轨制可重构后量子密码处理方法、装置及存储介质，处理方法包括：根据上层握手协议指令动态配置可重构计算阵列的标准轨模式或高防轨模式；前者，配置互连网络为全局蝶形交叉拓扑，执行基于素数模的多项式运算；后者，配置互连网络为局部二维网格拓扑，针对模数执行加法‑乘法全域混合盲化并利用多相分解完成局部短卷积运算；两种模式的底层流水线寄存器均由同一扩频多相交织时钟网络提供时序驱动。本发明在晶体管级别复用了底层乘加单元，通过路由重构实现数论变换与脉动阵列的纳秒级切换，并利用扩频多相交织时钟对双轨进行无差别的物理能量平摊防护，克服了标准合规与极限物理防御的技术矛盾。

量子加密方法、量子解密方法及装置

Resumen de: CN122513085A

本发明提供一种量子加密方法、量子解密方法及装置，涉及信息安全技术领域，该方法包括通过客户端与服务端交互生成公共矩阵，并由双方分别生成各自的私钥分片和公钥分量，最终合成完整公钥，实现了私钥的分散存储。基于此，客户端利用合成后的公钥对明文进行加密，确保了加密过程的安全性。该方案无需依赖额外的硬件安全设备，仅通过软件协同方式即可将私钥分散存储于两端，有效避免了私钥在单一终端内存中存储易被窃取的风险，即使客户端设备丢失或服务端被攻击，攻击者也无法获取完整私钥，提升了私钥存储的安全性，同时兼顾了用户使用的便捷性。同时，通过客户端与服务端协同完成解密操作，有效防止了私钥单点泄露导致的数据安全风险。

一种基于纠缠态与稳定子码的高效量子密钥生成方法

Resumen de: CN122513093A

本申请是关于一种基于纠缠态与稳定子码的高效量子密钥生成方法，包括：构建多组原始GHZ纠缠态，将第一粒子序列和第二粒子序列分发给发送方，将第三粒子序列分发给接收方；对第一粒子序列与第二粒子序列中的每个粒子分别施加第一酉操作与第二酉操作，并与第三粒子序列组成可区分GHZ纠缠态；制备多个校验粒子，得到校验序列与对应的制备基，并进行配对，形成多个复合粒子组；通过量子纠错码对每个复合粒子组进行编码，得到复合量子系统；通过量子纠错码对复合量子系统进行解码，保留有效粒子组进行GHZ基测量，生成最终密钥。本申请能够提升密钥生成效率，并且具备单比特纠错能力，抗噪声强，同时窃听检测简捷高效。

하드웨어 보안 시스템 및 이의 동작 방법

Resumen de: WO2025125334A1

The present invention generally relates to a hardware security system (1000) comprising a first hardware security module (1110), configured to store a secret, a second hardware security module (1120), configured to store the secret, a quantum key distribution network (1200) comprising a first quantum key distribution node (1210), a second quantum key distribution node (1220) and a quantum encrypted channel (1230), wherein the first quantum key distribution node (1210) is connected to the first hardware security module (1110), and wherein the second quantum key distribution node (1220) is connected to the second hardware security module (1120). The invention further relates to method for operating the hardware security system (1000).

一种SSL/TLS深度检测方法、装置及设备

Resumen de: CN122513176A

本申请公开了一种SSL/TLS深度检测方法、装置及设备，包括：建立TCP连接后，生成两个PQC密钥封装机制的KEM密钥对；接收客户端的第一报文，回复携带第一KEM密钥对的公钥的第一响应报文，接收客户端基于公钥封装后返回的密文，利用私钥解封装，协商得到第一会话密钥；将第一报文中的密钥共享扩展key_share字段替换为第二KEM密钥对的公钥，并保留第一报文中的supported_groups扩展字段生成第二报文；向服务器发送第二报文协商得到第二会话密钥；利用第一会话密钥解密客户端的密文数据并进行DPI，利用第二会话密钥加密后传输。以此解决SSL检测存在的握手协议不兼容和密钥材料不可提取的问题。

一种国密标准后量子密码算法纯硬件加速电路及装置

Resumen de: CN122513088A

本申请公开了一种国密标准后量子密码算法纯硬件加速电路及装置，属于密码学与集成电路安全技术领域。所述电路包括密钥生成模块、签名生成模块与签名验证模块，全部采用纯硬件集成电路实现，内置国密标准后量子密码算法专用运算子单元，可完成密钥封装、数字签名与验证运算。本申请无需软件处理器参与，运算速度快、安全性高，符合国家密码管理相关标准要求，适用于各类需要抗量子计算攻击的民用电子设备。

一种用于量子网络中图态高效分发的启发式路径搜索方法

Nº publicación: CN122513090A 04/08/2026

Solicitante:

湘潭大学

Resumen de: CN122513090A

本发明提出一种用于量子网络中图态高效分发的启发式路径搜索方法。所述方法包括：定义量子网络中图态的经典存储方法，并将量子网络中的图态用经典方法存储；定义量子网络中图态变换的经典操作集合；计算量子图态操作上界以及在搜索过程中剪枝超过操作上界的集合；设计启发式搜索函数，使得在搜索过程中可以稳定地朝着目标图态进行搜索；执行搜索算法以找到从初始图态变换到目标图态的操作序列。本发明通过引入经典启发式搜索算法，对图态分发的操作序列进行智能的优化，减少图态分发过程中不必要的纠缠产生与消耗，从而提高资源的利用效率。