Complying with the NIST post-quantum cryptography standards and decentralizing artificial intelligence: methodology for quantum-resistant and privacy-preserving digital identity systems

Introduction Digital identity infrastructures used in electronic passports, national eID schemes, and federated authentication systems rely predominantly on centralised registries and classical public key cryptography. These architectures enable large-scale identity correlation, mass data aggregation, and single points of compromise, while remaining vulnerable to quantum attacks against RSA and elliptic-curve cryptography. There is no deployed identity framework that simultaneously provides post-quantum security, cryptographic privacy guarantees, and decentralised trust. Methods This study proposes a quantum-proof digital passport architecture combining lattice-based post-quantum cryptography, decentralised blockchain identifiers, and transformer-based decentralised artificial intelligence. The framework employs NIST-aligned post-quantum key encapsulation and digital signatures, zero-knowledge proofs for selective disclosure of identity attributes, and homomorphic encryption for encrypted identity verification. Blockchain oracles and decentralised identifiers enforce credential integrity and auditability without reliance on central identity providers. Transformer attention mechanisms support adaptive identity validation while preventing persistent identity profiling. Results Architectural analysis shows that the proposed system prevents quantum-enabled credential forgery, retrospective decryption, and cross-service identity linkability. Zero-knowledge verification removes plaintext exposure of personal data, and decentralised credential control eliminates central compromise vectors. The design remains interoperable with existing passport and eID infrastructures. Discussion The results demonstrate that secure post-quantum digital identity requires the combined application of quantum-resistant cryptography, decentralised governance, and cryptographic privacy enforcement.