Post-Quantum Secure Federated Learning Protocol for Weak-Trust Environments

Anh-Tu Tran, Van-Quyet Nguyen, The Dung Luong

Ruozhou Zuo, Haibo Tian, Zhiyuan An +1 more

Ansh Goel, Aryan Nair, Diksha Chawla +3 more

ABSTRACT Objective To design a secure Federated Learning (FL) framework for Internet of Medical Things (IoMT) that protects sensitive patient data from both classical and quantum attacks. Methods Proposed the QSFedMA‐IoMT protocol integrating quantum and classical security techniques. Utilized entanglement‐based E91 protocol for generating a highly secure root key to establish trust. Applied BB84 protocol for efficient generation of per‐round session keys during FL updates. Incorporated classical cryptographic scheme AES‐GCM for secure communication. Employed privacy‐enhancing techniques such as norm‐clipping and Gaussian noise to mitigate information leakage during model training. Results Our work demonstrates robust resistance against both classical and quantum adversaries, while enhancing data privacy through secure key distribution and differential privacy mechanisms. It ensures the integrity of model updates within the federated learning process and achieves an effective balance between strong security guarantees and computational efficiency, making it well‐suited for IoMT environments. Conclusion The QSFedMA‐IoMT protocol delivers a robust and practical hybrid framework for securing federated learning in healthcare systems. By integrating E91 and BB84 protocols, it strengthens key management and trust establishment. The combination of quantum security with classical privacy‐preserving techniques ensures resilience, scalability, and efficiency. Overall, this work provides a promising direction for secure and privacy‐aware federated learning in next‐generation IoMT applications.

Wei‐Min Shi, Zi-Xuan Xu, Yu‐Guang Yang +1 more

Ariq Arsalan, Eko Hari Rachmawanto, Christy Atika Sari

Federated Learning (FL) enables collaborative machine learning by aggregating local models from decentralized clients without sharing raw data. However, the parameter exchange process in standard FL architectures is vulnerable to emerging quantum computing threats. Specifically, Shor's algorithm, executable on large-scale quantum computers, can break conventional asymmetric cryptography such as RSA and ECDH in polynomial time, thereby threatening the security of FL systems that rely on these traditional public-key infrastructures for parameter exchange. This study addresses this vulnerability by implementing the recently standardized post-quantum cryptographic protocol, ML-KEM (Module-Lattice-Based Key-Encapsulation Mechanism), within a FedAvg-based FL architecture. The integration is designed to secure the parameter exchange pipeline without compromising the neural network's performance. Experimental results on a simulated environment utilizing the MNIST dataset demonstrate that the ML-KEM integration preserves 100% of the global model accuracy. Furthermore, the cryptographic latency overhead introduced by encapsulation and decapsulation remains highly efficient, proving its potential as a robust security layer. While current evaluations focus on small-scale deployments, the proposed architecture establishes a foundational post-quantum security framework for future privacy-preserving distributed learning systems.

S Ravikumar, K. Vijay, Anirudhan Kasthuri +2 more