Quantum-Safe Cryptography for Social Security Data

This page is a translation of the original Portuguese text, provided for convenience. It deals with Brazilian law. If there is any discrepancy, the Portuguese version prevails. Read the original in Portuguese

Quantum computing threatens the encryption that protects the social security data of millions of Brazilians, and the transition to quantum-safe algorithms is already urgent.

What quantum-safe cryptography is and why it matters for the INSS

Social security data covers a vast universe: sensitive information on more than 40 million beneficiaries in Brazil. Contribution histories, medical expert reports, biometric data, personal ID numbers, and bank details make up a body of records that demands strong protection. Today, that protection relies on cryptographic algorithms such as RSA and ECC (Elliptic Curve Cryptography), which work because classical computers would need an impractical amount of time to break them. Quantum-safe cryptography (also called post-quantum cryptography) consists of algorithms designed to resist attacks from both classical and quantum computers.

The threat is not theoretical. Quantum computers under development by companies and governments around the world are showing steadily growing processing power. Shor’s algorithm, run on a sufficiently powerful quantum computer, can factor large integers in polynomial time, which would break RSA. Likewise, Grover’s algorithm cuts the effective security of symmetric keys in half. Consider a scenario in which social security data encrypted today is intercepted and stored by malicious actors to be decrypted later, a strategy known as “harvest now, decrypt later.”

For Brazil’s social security ecosystem, which includes the INSS (Brazil’s National Social Security Institute), the social security courts, the CNIS (National Social Information Registry), and portals such as Meu INSS, migrating to post-quantum cryptography is not just a technical matter. It is an obligation to protect the fundamental rights of insured persons, in line with the Lei Geral de Proteção de Dados (LGPD, Brazil’s General Data Protection Law) and the constitutional principle of human dignity.

The current state of post-quantum standardization and its legal implications

The U.S. National Institute of Standards and Technology (NIST) ran a post-quantum standardization process that resulted in the selection of algorithms such as CRYSTALS-Kyber (for key encapsulation) and CRYSTALS-Dilithium (for digital signatures). These algorithms are based on mathematical problems involving lattices (lattice-based cryptography), which are considered resistant to known quantum attacks. The international cryptographic community has been working intensively to validate these standards and implement them in widely used software libraries.

In the Brazilian legal context, the public key infrastructure (ICP-Brasil), which underpins the validity of digital signatures and electronic certificates in administrative and judicial proceedings, depends entirely on algorithms that will be vulnerable to quantum attacks. This means that digital signatures on INSS administrative decisions, electronic filings in social security cases, and authentication certificates in the PJe (Processo Judicial Eletrônico, Brazil’s electronic court filing system) could have their integrity compromised in a post-quantum scenario. The transition of ICP-Brasil to quantum-safe algorithms therefore directly affects the legal certainty of millions of social security cases.

Social security data encrypted today with vulnerable algorithms can be stored by attackers and decrypted once quantum computers mature, compromising decades of insured persons’ personal information.

Articles 46 and 47 of the LGPD require data processing agents to adopt technical and administrative security measures capable of protecting personal data. In our view, failing to adopt quantum-resistant encryption could, in the near future, amount to a breach of these legal obligations, especially where sensitive data is involved, such as the health information in social security medical expert reports.

Specific vulnerabilities in the social security data ecosystem

When we map the critical points of vulnerability in Brazil’s social security ecosystem, we find several layers that require attention in the transition to post-quantum cryptography.

Communications between government systems

Data traffic between the CNIS, the SABI (Sistema de Administração de Benefícios por Incapacidade, the disability benefits administration system), PLENUS, and other internal INSS systems uses TLS protocols for secure communication. TLS session keys depend on key exchange algorithms such as ECDHE, which are vulnerable to quantum attacks. If these communications are intercepted today, even though they are encrypted, all of the transmitted content could be decrypted in the future, including medical data, employment records, and benefit amounts.

Long-term storage

Social security data has one particularly relevant characteristic in this context: its life cycle is extremely long. A worker who starts contributing at 18 may have data stored for 50, 60, or more years, through the granting and ongoing payment of a retirement benefit. This means that data encrypted today with RSA-2048 will need to stay secure for decades, which is exactly the time horizon in which quantum computers capable of breaking that encryption are expected to become reality. We consider this overlap in timing one of the greatest risks to digital social security security.

Authentication and digital identity

Access to Meu INSS, Gov.br, and related systems depends on authentication mechanisms that use asymmetric cryptography. Digital certificates issued by ICP-Brasil, authentication tokens, and biometric identity verification mechanisms with digital signatures will all need to be updated to post-quantum algorithms. The need to maintain backward compatibility during the transition period makes this migration even more complex.

Migration strategies and hybrid cryptography

Migration to quantum-safe cryptography in social security systems cannot happen overnight. We recommend a phased approach that uses hybrid cryptography as an intermediate step. In hybrid cryptography, each cryptographic operation uses a classical algorithm (such as RSA or ECC) and a post-quantum algorithm (such as Kyber or Dilithium) at the same time. That way, security holds even if one of the algorithms is compromised, whether because of a flaw in the newly standardized post-quantum algorithm or because of advances in quantum computing.

International organizations such as ETSI (the European Telecommunications Standards Institute) and NIST itself recommend this gradual approach. For Brazil’s social security ecosystem, we propose the following transition steps:

First, a complete cryptographic inventory, mapping every algorithm, protocol, and certificate in use in the systems of the INSS and the social security courts. Second, hybrid cryptography for the most sensitive communications, such as the transmission of medical expert data and the financial information on benefits. Third, a gradual update of ICP-Brasil to support certificates with post-quantum algorithms, so that digital signatures on social security documents remain valid and verifiable over the long term. Fourth, re-encryption of historical archives stored with vulnerable algorithms, prioritizing data with the longest remaining life cycle.

This migration must also take into account the performance requirements of social security systems. Post-quantum algorithms based on lattices tend to produce larger keys and signatures than their classical equivalents. This can affect processing speed in systems that handle millions of daily transactions, such as the INSS benefit granting and maintenance system. We believe extensive performance testing should come before any production rollout.

The role of the social security lawyer in the post-quantum era

For professionals who practice social security law, quantum-safe cryptography may seem far removed from day-to-day work. Yet the implications are concrete and significant. The integrity of digital evidence in social security cases depends directly on the strength of the cryptographic mechanisms that protect it. A digital expert report signed with an RSA-based ICP-Brasil certificate could have its authenticity challenged in court if the underlying algorithm is shown to be insecure.

We also note that the duty to protect client data extends to a law firm’s digital environment. Social security case files contain sensitive data (medical information, financial data, personal documents) that must be protected with adequate encryption, both in transit and at rest. The gradual adoption of tools and protocols that support post-quantum cryptography should be part of the digital security planning of any firm that handles a significant volume of social security data.

It is worth stressing that data governance in the social security sector needs to evolve so that its regulatory frameworks incorporate quantum-resistance requirements. Data retention policies, incident response plans, and data protection impact assessments (provided for in the LGPD) should begin to treat quantum risk as a relevant factor in information security analysis.

Preparing for the era of quantum computing is not a futuristic concern. It is a present need that calls for coordinated action among public agencies, courts, law firms, and the developers of social security systems. The sooner this transition begins, the lower the risk of exposing data that affects the lives and dignity of millions of insured Brazilians.

This topic is directly related to cloud storage of social security data, which we cover in a dedicated article.

This topic is directly related to API economy and new services, which we cover in a dedicated article.

As informações deste artigo são de caráter informativo e não substituem consulta jurídica individualizada. Cada caso possui particularidades que exigem análise específica.