Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Lecture notes in computer science

A NIST-Aligned Post-Quantum Secure Aggregation Method for Federated Learning

Anh-Tu Tran, Van-Quyet Nguyen, The Dung Luong

Published Oct 11, 2026• 0 citations
Publisher
DOI
10.1007/978-981-92-5641-9_17

Related papers

Post-quantum Privacy-Preserving Aggregation in Federated Learning Based on Lattice

Ruozhou Zuo, Haibo Tian, Zhiyuan An +1 more

Lecture notes in computer science•Jan 1, 2022•4 citations

Post-Quantum Secure Federated Learning Protocol for Weak-Trust Environments

芯雨 何

Computer Science and Application•Jan 1, 2026•0 citations

Quantum-Safe Federated Learning: PQC-Protected Secure Aggregation with ML-KEM and ML-DSA

Ezekiel Ologunde

•Jan 1, 2026•0 citations

Enhancing Quantum Security over Federated Learning via Post-Quantum Cryptography

Pingzhi Li, Tianlong Chen, Junyu Liu

Federated learning (FL) has become one of the standard approaches for deploying machine learning models on edge devices, where private training data are distributed across clients, and a shared model is learned by aggregating locally computed updates from each client. While this paradigm enhances communication efficiency by only requiring updates at the end of each training epoch, the transmitted model updates remain vulnerable to malicious tampering, posing risks to the integrity of the global model. Although current digital signature algorithms can protect these communicated model updates, they fail to ensure quantum security in the era of large-scale quantum computing. Fortunately, various post-quantum cryptography algorithms have been developed to address this vulnerability, especially the three NIST-standardized algorithms - Dilithium, FALCON, and SPHINCS+.In this work, we empirically investigate the impact of these three NIST-standardized PQC algorithms for digital signatures within the FL procedure, covering a wide range of models, tasks, and FL settings. Our results indicate that Dilithium stands out as the most efficient PQC algorithm for digital signature in federated learning. Additionally, we offer an in-depth discussion of the implications of our findings and potential directions for future research.

arXiv:2409.04637•IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA)•Oct 28, 2024•13 citations

A Post-quantum Secure Aggregation for Federated Learning

Shisong Yang, Yuwen Chen, Shanshan Tu +1 more

Federated learning is a privacy-preserving machine learning paradigm consisting of local model training, global model aggregation, and global model distribution. Recent research found that model aggregation can reveal the participants’ privacy. To preserve the participants’ privacy, multi-party computation-based secure aggregation is used in federated learning with mobile device participants. The character of the mobile device requires that secure aggregation can be efficient in computation and robust to the dropout. However, prior works need multi rounds, increase computation cost related to the dropped participants, and fails to resist quantum attacks. To solve these issues, we propose a 3-round post-quantum secure protocol for federated learning. In the proposed protocol, single-masking generated by homomorphic Pseudorandom Generator based on learning with round encrypts single user's model. After all the encrypted models are aggregated fast, additively homomorphic decryption based on Shamir secret share guarantee the robustness and performance induced by the dropped participants. All message exchange is based on a post-quantum secure channel constructed with the first post-quantum cryptography standard, Kyber KEM. In post-quantum security, security analysis demonstrates that the proposed protocol can preserve privacy under the sem-honest adversaries setting, and the experimental results show higher running time efficiency.

International Conference on Communication and Network Security (ICCNS)•Dec 1, 2022•9 citations

A secure quantum federated learning for lightweight quantum clients

Wei‐Min Shi, Zi-Xuan Xu, Yu‐Guang Yang +1 more

Chinese Journal of Physics•Jul 6, 2026•0 citations
Federated learning (FL) has become one of the standard approaches for deploying machine learning models on edge devices, where private training data are distributed across clients, and a shared model is learned by aggregating locally computed updates from each client. While this paradigm enhances communication efficiency by only requiring updates at the end of each training epoch, the transmitted model updates remain vulnerable to malicious tampering, posing risks to the integrity of the global model. Although current digital signature algorithms can protect these communicated model updates, they fail to ensure quantum security in the era of large-scale quantum computing. Fortunately, various post-quantum cryptography algorithms have been developed to address this vulnerability, especially the three NIST-standardized algorithms - Dilithium, FALCON, and SPHINCS+.In this work, we empirically investigate the impact of these three NIST-standardized PQC algorithms for digital signatures within the FL procedure, covering a wide range of models, tasks, and FL settings. Our results indicate that Dilithium stands out as the most efficient PQC algorithm for digital signature in federated learning. Additionally, we offer an in-depth discussion of the implications of our findings and potential directions for future research.
Federated learning is a privacy-preserving machine learning paradigm consisting of local model training, global model aggregation, and global model distribution. Recent research found that model aggregation can reveal the participants’ privacy. To preserve the participants’ privacy, multi-party computation-based secure aggregation is used in federated learning with mobile device participants. The character of the mobile device requires that secure aggregation can be efficient in computation and robust to the dropout. However, prior works need multi rounds, increase computation cost related to the dropped participants, and fails to resist quantum attacks. To solve these issues, we propose a 3-round post-quantum secure protocol for federated learning. In the proposed protocol, single-masking generated by homomorphic Pseudorandom Generator based on learning with round encrypts single user's model. After all the encrypted models are aggregated fast, additively homomorphic decryption based on Shamir secret share guarantee the robustness and performance induced by the dropped participants. All message exchange is based on a post-quantum secure channel constructed with the first post-quantum cryptography standard, Kyber KEM. In post-quantum security, security analysis demonstrates that the proposed protocol can preserve privacy under the sem-honest adversaries setting, and the experimental results show higher running time efficiency.