QNSI platform
What is SSE-X?
Also known as Searchable Symmetric Encryption with eXtended PQC.
QNSI's searchable encryption layer - clients can query encrypted indexes without the server seeing plaintext. PQC-wrapped data keys protect the underlying AES-256-GCM symmetric encryption. Used in vault search, storage search, and encrypted vector search for RAG.
Decision context
Why SSE-X matters
Searchable encryption attempts to support useful queries while limiting plaintext exposure, but leakage depends on the construction, access pattern, query pattern, index design and threat model. PQC key wrapping protects key establishment; it does not remove searchable-encryption leakage by itself.
How to evaluate SSE-X
Document the exact leakage profile, server knowledge, index update process, key hierarchy, query authorization and deletion behaviour. Test result correctness and unauthorized access on production-equivalent data. Separate protection of wrapped keys from claims about query, access-pattern or plaintext confidentiality.
QNSI platform
QNSI platform evidence boundary
QNSI platform terms describe intended control or evidence boundaries. Their presence in documentation is not proof that a customer deployment executed them. Verify the selected service path, tenant policy, custody provider, production record, and independent evidence before relying on the term in an assurance decision.
FAQ
Common questions
What is SSE-X?
QNSI's searchable encryption layer - clients can query encrypted indexes without the server seeing plaintext. PQC-wrapped data keys protect the underlying AES-256-GCM symmetric encryption. Used in vault search, storage search, and encrypted vector search for RAG.
Why does SSE-X matter?
Searchable encryption attempts to support useful queries while limiting plaintext exposure, but leakage depends on the construction, access pattern, query pattern, index design and threat model. PQC key wrapping protects key establishment; it does not remove searchable-encryption leakage by itself.
How should SSE-X be evaluated?
Document the exact leakage profile, server knowledge, index update process, key hierarchy, query authorization and deletion behaviour. Test result correctness and unauthorized access on production-equivalent data. Separate protection of wrapped keys from claims about query, access-pattern or plaintext confidentiality.
What is SSE-X also known as?
SSE-X is also known as Searchable Symmetric Encryption with eXtended PQC. QNSI's searchable encryption layer - clients can query encrypted indexes without the server seeing plaintext. PQC-wrapped data keys protect the underlying AES-256-GCM symmetric encryption. Used in vault search, storage search, and encrypted vector search for RAG.
More