A threat modeling framework for central banks evaluating quantum threats, offline payment risks, and system-level resilience.
Unlike commercial banking systems where financial fraud is localized, a successful attack against a central bank digital currency can destabilize a nation's monetary sovereignty. Nation-state adversaries equipped with cryptanalytically relevant quantum computers will target central bank minting master keys and interbank clearing hubs.
Designing offline retail CBDC capabilities that survive total telecommunication or power grid blackouts. We analyze hardware-enforced trusted execution environments (TEE) and post-quantum zero-knowledge proofs that prevent double-spending in offline hardware devices.
Architecting selective privacy models that preserve consumer privacy for small-value everyday transactions while providing cryptographically verifiable audit trails for high-value wholesale transfers to enforce AML/CFT mandates.