Open research questions in Cryptography and Data Security
25 unresolved questions extracted from the limitations and future-work sections of 299 Cryptography and Data Security papers in our library. Each links back to the study that raised it.
What the literature leaves open
CONCLUSION This work presented the design and implementation of a quantum-safe communication system that integrates Quantum Key Distribution (QKD), based on the BB84 protocol, with Post-Quantum Cryptography (PQC) and modern symmetric encryption techniques. The proposed hybrid approach ad-dresses the growing security concerns associated with tra-ditional cryptographic methods in the context of advancing quantum computing technologies,. The BB84 protocol demonstrated consistent performance in generating secure keys, with a low Quantum Bit Error Rate (QBER), allowing reliable detection of potential eaves-dropping attempts. These results are consistent with prior studies highlighting the effectiveness of BB84 in secure key exchange. In addition, the integration of PQC, partic-ularly the Kyber Key Encapsulation Mechanism, provides a quantum-resistant alternative for classical key exchange, further strengthening the system’s overall security. By combining QKD and PQC through a hybrid key derivation process, the framework achieves a layered security model that remains robust even if one component is compromised,. For data protection, the use of One-Time Pad (OTP) encryp-tion ensures strong confidentiality, while HMAC- SHA3-256 provides message integrity and authentication. Furthermore, XChaCha20-Poly1305 enables efficient and secure file en-cryption, making the system suitable for practical applications involving large data transfers. These combined mechanisms contribute to a balanced design that supports both security and performance. Experimental evaluation confirms the reliability and effec-tiveness of the proposed system. The framework achieved high success rates in key generation, encryption, and decryption, with minimal delays and no observed authentication fail-ures. Compared to conventional cryptographic approaches, the proposed model offers improved resilience against quantum-based threats while maintaining practical feasibility through simulation-based implementation. Overall, this research demonstrates that integrating quantum and post-quantum techniques can form a strong foundation for next-generation secure communication systems. The pro-posed framework helps bridge the gap between theoretical advancements in quantum cryptography and real-world imple-mentation, contributing toward the development of scalable and future-ready communication infrastructures. FUTURE WORK While the proposed system shows promising results, several directions can be explored to further enhance its capabilities: • Real-World Quantum Hardware Integration: Future implementations can focus on deploying the system using actual quantum communication hardware, such as photon sources and detectors, instead of relying solely on simu-lation environments.
While the proposed system shows promising results, several directions can be explored to further enhance its capabilities: • Real-World Quantum Hardware Integration: Future implementations can focus on deploying the system using actual quantum communication hardware, such as photon sources and detectors, instead of relying solely on simu-lation environments. Page 785 www.rsisinternational.org INTERNATIONAL JOURNAL OF LATEST TECHNOLOGY IN ENGINEERING, MANAGEMENT & APPLIED SCIENCE (IJLTEMAS) ISSN 2278-2540 | DOI: 10.51583/IJLTEMAS | Volume XV, Issue VI, June 2026 • Advanced QKD Protocols: Exploring alternative QKD protocols, such as E91 or Measurement-Device- Independent QKD (MDI-QKD), could improve security and reduce vulnerabilities related to device imperfections. • • • Improving Key Generation Efficiency: Further opti-mization of error correction and privacy amplification techniques may help reduce noise effects and increase key generation rates. Scalability and Multi-User Support: Extending the system to support multiple users and larger quantum networks would enhance its applicability in real-world communication infrastructures. Integration of Additional PQC Algorithms: Incorpo-rating other post-quantum algorithms, such as NTRU or Dilithium, can provide greater flexibility and strengthen the hybrid security model. • Real-Time Application Development: The framework can be extended into practical applications such as secure messaging or file-sharing platforms with web or mobile interfaces. • Performance Optimization: Future work can focus on reducing computational overhead and improving latency to enable smoother real-time communication. • Advanced Security Analysis: Further investigation into side-channel attacks, quantum hacking strategies, and more sophisticated adversarial models would help en-hance the system’s overall resilience. In summary, the proposed hybrid quantum-safe communica-tion system provides a strong foundation for ongoing research in secure communication technologies and supports the de-velopment of practical, scalable solutions for the emerging quantum era. REFERENCES 1. X. Wu, B. Zhang, G. Chen, and D. Jin, “A Scalable Quantum Key Distribution Network Testbed Using Parallel Discrete-Event Simulation,” ACM Transactions on Modeling and Computer Simulation, vol. 32, no. 2, article 11, pp. 1–25, Feb. 2022. doi: 10.1145/3490029. 2. I. Gkouliaras, A. Kordas, K. Vlachos, and C. Kollmitz, “NuQKD: A Modular Quantum Key Distribution Simulation Framework,” Ad-vanced Physics Research, vol. 3, no. 1, pp. 1–15, Jan. 2024. doi: 10.1002/apxr.202400016. 3. S. Mangini, M. Grossi, M. W. Johnson, and R.
We found it was regularly scanned for DICOM but never for HL7 or FHIR, indicating that despite their widespread use and importance for patient data security, the security of these services remains underexplored.
Measuring Healthcare Data Leaks and Security Flaws at Internet Scale · 2026Limited to small-scale scenarios Overcome the malicious auditors' issue Prevent the malicious and delayed auditors information accuracy confidentiality safeguarding robustness against adaptive targeted message attacks No guarantee to perform auditing duties on time No dynamic data update management High computational cost Cannot maintain information accuracy across multiple replica setups ARTICLE IN PRESS ARTICLE IN PRESS ACCEPTED MANUSCRIPT ARTICLE…
Designing a layered framework to secure data via improved multi-stage lightweight cryptography in IoT–Cloud systems · 2026 · DOIAlthough the hybrid signature system that combines Dilithium and ECDSA seem promising, further investigation into How to cite this article: Bhabad H P, Rajawat A (May 22, 2026) Enhancing Blockchain Security for Electronic Health Records with Hybrid Encryption and Anti-Quantum Signatures.
<p>Enhancing Blockchain Security for Electronic Health Records with Hybrid Encryption and Anti-Quantum Signatures</p> · 2026 · DOIDue to DP's inability to have zeros in the mechanism, the design of privacy mechanisms that optimize the worst-case utility is underexplored, and this work shows that PML is a privacy measure that is perfectly suited for this purpose.
Worst-Case Utility Privacy Mechanism via Pointwise Maximal Leakage · 2026The paper is limited to the potentially realistic discussion of the prospects of homomorphic encryption to the inference of the LLM, especially in the context of situations in which the absolute confidentiality of data is of paramount importance, like in asking clinical questions.
Reasoning Under Encryption: Assessing the Use of Large Language Models in Privacy-Preserving Drug Research · 2026 · DOI, [3, 6, 36, 38], selecting compatible proof systems and building blocks to obtain a practically efficient instantiation poses an interesting open problem.
bPk <sup>#</sup> : Delegatable Pseudonyms And Their Applications to National eID Systems · 2026 · DOIBuilding upon these findings, future research will focus on developing an AI- enabled adaptive mechanism that dynamically balances privacy preservation and operational efficiency in distributed supply chains. Finally, while this study establishes protocol feasibility and favorable simulated behavior, real-world deployment introduces additional system-level considerations—including certificate lifecycle management, participant churn, network volatility, and organizational governance—that are not captured in the current evaluation and warrant further investigation.
A privacy-preserving distributed protocol for secure data sharing in untrusted supply chain · 2026 · DOIThird, Future research should focus on (1) reducing the proof size of Zero-Knowledge proofs for deep neural networks, (2) integrating hardware security modules (HSMs) optimized for lattice-based cryptography to accelerate edge authentication, and (3) developing migration strategies for legacy IoT devices that lack the computational resources for ML-DSA, potentially relying on hybrid mode where gateways perform the heavy lifting.
Nevertheless, they demonstrate that a pure DP mechanism can be transformed into a time-oblivious with nearly the same privacy and utility guarantees, although the efficiency of this transformation remains an open problem due to its reliance on manipulating countably many probability values.
Despite significant progress in FHE operations and bootstrapping, its large-scale application still faces three principal challenges: heavy computational and storage 1) Co-optimization between software…
The experimental evaluation lacks testing on realistic large-scale cloud datasets with millions of documents and dynamic insertion/deletion operations; scalability of the key-aggregate mechanism and optimized indexing to production-scale encrypted cloud environments remains unvalidated.
The proposed key-aggregate keyword retrieval scheme has been evaluated only in single-user scenarios; the extension to multi-user environments with concurrent access and differentiated permissions for encrypted cloud data retrieval requires development of new protocols and security proofs.
By contrast, the role of solver in the subsequent instance-solving stage remains under-explored, and existing attacks often rely on ad-hoc model-specific solvers.
From Regression to Prior-Aware Inference: Solving the ILWE Family in Randomness Leakage Attacks against ML-DSA · 2026The Bloom filter mentioned in the title is not discussed in detail in the provided excerpt, leaving its specific role, advantages, and integration unclear.
The security analysis relies on the random oracle model assumption, but the practical implications and potential vulnerabilities in instantiating random oracles are not discussed.
No discussion of practical scalability limits or performance degradation when the number of documents n or keyword dictionary size m becomes very large in real-world cloud deployments.
Nevertheless, current IoMRT data sharing schemes are lacking in terms of supporting efficient forward secrecy; when secret key for a robotic nurse as a data requester is compromised, all the historically shared data with this robotic nurse will be leaked.
A puncturable attribute-based data sharing scheme for the Internet of Medical Robotic Things · 2021 · DOI
Most-cited papers in Cryptography and Data Security
- Secure Multi-Party Computation for Machine Learning: A Survey · IEEE Access · 2024 · 110 citations
- SecureRC: A system for privacy-preserving relation classification using secure multi-party computation · Computers & Security · 2023 · 30 citations
- E-TPE: <u>E</u> fficient <u>T</u> humbnail- <u>P</u> reserving <u>E</u> ncryption for Privacy Protection in Visual Sensor Networks · ACM Transactions on Sensor Networks · 2023 · 17 citations
- Maintaining Security of Patient Data by Employing Private Blockchain and Fog Computing Technologies based on Internet of Medical Things · Informatica · 2024 · 15 citations
- A Framework for Privacy-Preserving Multiparty Computation with Homomorphic Encryption and Zero-Knowledge Proofs · Informatica · 2024 · 15 citations
- A puncturable attribute-based data sharing scheme for the Internet of Medical Robotic Things · Library Hi Tech · 2021 · 11 citations
- PrSChain: A Blockchain Based Privacy Preserving Approach for Data Service Composition · Informatica · 2023 · 9 citations
- Securing Decentralized Storage in Blockchain: A Hybrid Cryptographic Framework · Cybernetics and Information Technologies · 2024 · 9 citations
- A Survey about Post Quantum Cryptography Methods · EAI Endorsed Transactions on Internet of Things · 2024 · 9 citations
- Secrets at work · Organizational Behavior and Human Decision Processes · 2024 · 7 citations
Most recent work
- PCL-BPRE: privacy-preserving certificateless-based broadcast proxy re-encryption for data sharing in cloud-based IIoT · Future Generation Computer Systems · 2026
- On The Multi-target Security of Post-Quantum Key Encapsulation Mechanisms · IACR Communications in Cryptology · 2026
- Identity Crisis in Confidential Computing: Formal Analysis of Attested TLS · 2026
- Homomorphic Encryption in Finance: Training and Inference on Encrypted Data with Concrete ML · Afyon Kocatepe University Journal of Sciences and Engineering · 2026
- Protecting HWSNs from Super Adversaries with Robust Certificateless Signcryption · Telecom · 2026
- Authenticated encryption from packed secret sharing: Scalable one-pass lightweight design with provable security · Journal of Information Security and Applications · 2026
- Dynamic Multi-Key Block Binary Ring-Compact Bootstrapping · Mathematics · 2026
- A Bloom filter-based dynamic symmetric searchable encryption scheme over cloud data · Cybersecurity · 2026
- UNLOCKING SECURE SEARCH: KEY-AGGREGATE TECHNIQUES FOR ENCRYPTED CLOUD DATA RETRIEVAL · International Journal of Engineering Research and Science & Technology · 2026
- Dynamic Disjunctive Hierarchical Secret Sharing Scheme Using Elliptic Curves · Mathematics in Computer Science · 2026
Find a gap in your own Cryptography and Data Security sub-topic
This page shows what the Cryptography and Data Security literature already flags as unresolved. To narrow it to your specific question, run the guided finder — it searches the gap library on demand and checks candidates against 250M+ OpenAlex works.
Open the Research Gap Finder →