PQC-Scanner

The PQC Network Scanner is a purpose‑built assessment tool designed to help organisations understand their cryptographic exposure as they transition toward a post‑quantum security posture. Unlike traditional TLS scanners that focus solely on certificate validity or classical cryptographic strengt...

alaniz-cipher

The Alaniz Cipher v3 Sheaf-Based Post-Quantum Encryption via Vector-Valued Finite Field Permutations A cryptographic primitive based on the Nonlinear Sheaf Morphism Inversion Problem NL-SMIP: a polynomial system with secret coefficients coupled by sheaf cohomology over graphs. Paper v3 : L. Alani...

wolfCOSE

wolfCOSE wolfCOSE is a lightweight C library implementing CBOR RFC 8949, COSE RFC 9052/9053, and post-quantum ML-DSA for COSE RFC 9964 using wolfSSL as the crypto backend. Main Features Complete RFC 9052 message set : all six COSE message types, including multi-signer COSESign and multi-recipient...

nixos-config

Lan Tian's NixOS Configuration This repository holds the configuration files for all my NixOS systems. Features Full system root-on-tmpfs, using impermanence Nftables instead of iptables Secret management with sops-nix QEMU user mode emulation for most architectures Nix Flakes with Nixpkgs patchi...

age

-man%20page-lightgrey%3E age is a simple, modern and secure file encryption tool, format, and Go library. It features small explicit keys, post-quantum support, no config options, and UNIX-style composability. root@kitploit: $ age-keygen -o key.txt Public key:...

op4

op4 — Secure Terminal Messenger Op4 is a terminal-based encrypted messaging application written in Rust. It provides end-to-end encrypted private messaging with post-quantum cryptography, routed entirely through the Tor network so that neither the content of your messages nor your IP address is...

git-remote-pqcrypt

git-remote-pqcrypt root@kitploit: THIS IS AN EXPERIMENTAL PROJECT, there hasnt been a formal security audit. DO NOT rely on this for any critical repositories. git-remote-pqcrypt is an encrypted Git remote helper similar to gcrypt. It stores Git packfiles and repository metadata encrypted at rest...

quantum-security-project

OWASP Quantum Security Project Prepare Today. Protect tomorrow. An official OWASP community project mapping the security risks of the quantum era in a practical, vendor-neutral, and risk-based way - the antidote to hype and fear. Status: Bootstrap phase. The OWASP Top 10 for Quantum Security Risk...

sslscan

sslscan2 sslscan バージョン 2 がリリースされました。これにはバックエンドスキャンコードの大幅な書き換えが含まれており、多くのチェックで OpenSSL のバージョンに依存しなくなりました。これにより、コンパイル時にリンクされた OpenSSL のバージョンに関係なく、レガシープロトコル（SSLv2 や SSLv3）のサポートに加え、TLSv1.3 もサポートできるようになりました。 これは主に jtesta の作業によって可能になりました。彼はバックエンドの書き換えの大部分を担当しました。 その他の主な変更点は以下の通りです。 サーバーの鍵交換グループの列挙...

PQCrypto-LWEKE

FrodoKEM：基于带误差学习问题的密钥封装 该C语言库实现了 FrodoKEM ，一种基于已被充分研究的带误差学习（LWE）问题 1,3 的 IND-CCA 安全密钥封装（KEM）协议，而 LWE 问题又与通用“代数非结构化”格上的猜想困难问题密切相关。本软件包还包含 Python 参考实现。FrodoKEM 被推测能够抵御量子计算机攻击。 FrodoKEM 包含两个主要变体： 一个 标准 变体（简称为 FrodoKEM ），不对密钥对的重用施加任何限制（即，它适用于大量密文可能被加密到单个公钥的应用场景），以及 一个 临时 变体（称为 eFrodoKEM...

rust_citadel

Citadel Post-quantum hybrid encryption and key management server. Citadel combines X25519 + ML-KEM-768 for key encapsulation and AES-256-GCM for data encryption, following NIST's hybrid approach for the post-quantum transition. Applications encrypt and decrypt data through a REST API. Citadel...

QuantumLock

QuantumLock Specification Unbreakable, Quantum-Ready, Forever. HTML Mirror: https://roxanneardary.com/quantumlock-specification/ Vision QuantumLock is an open-source protocol specification designed to make Bitcoin more resilient against the development of quantum computing and other emerging...

CVE-2026-23006-Kyber-Ciphertext-Length-Side-Channel

CVE-2026-23006 – Kyber Ciphertext Length Side‑Channel Program Code Python root@kitploit: kyberlengthleak.py - Leaks secret key bit based on ciphertext length import random Simulate encapsulation: ciphertext length depends on message bit def encapsulatepk, bit: In a flawed implementation, the...

PrivateSphare

PrivateSphare PrivateSphare is a secure, anonymous, zero-knowledge file storage and sharing platform. It allows users to upload files and receive a human-readable 24-word passphrase for retrieval. No accounts, no tracking, and no unencrypted data ever touches the server's persistent storage. 🛡️ Ke...

nexus-os

Nexus OS The Governed Agentic AI Operating System 66 Crates | 675 Commands | 86 Pages | 5,229 Tests | 10/10 OWASP | Zero Stubs Local-first. Air-gappable. Post-quantum ready. Built in Rust. Architecture | Quick Start | Features | Audit Status | Docs Nexus OS is an AI agent operating system where...

camel-pqc-tls

Post-Quantum TLS with Apache Camel This repository contains three examples demonstrating Post-Quantum Cryptography PQC TLS 1.3 handshakes with Apache Camel, using the X25519MLKEM768 hybrid key exchange. X25519MLKEM768 combines classical X25519 elliptic curve Diffie-Hellman with ML-KEM-768 , a...

CVE-2026-22001-SPHINCS-WOTS-Weak-Randomness-Forgeable-Signature

CVE-2026-22001 – SPHINCS+ WOTS+ Weak Randomness Signature Forgery Overview An implementation of the SPHINCS+ post‑quantum signature scheme uses a flawed random number generator during WOTS+ signature generation. The same nonce k is reused across multiple signatures, allowing an attacker to recove...

ejbca-pqc-lab

EJBCA Pure PQC Lab — ML-DSA-65 Two-Tier PKI Hierarchy A hands-on implementation of NIST FIPS 204 ML-DSA in a two-tier PKI hierarchy using EJBCA Community Edition. 📖 Full walkthrough: Building a Post-Quantum PKI: How I Signed a Root CA and Sub CA Using ML-DSA on EJBCA What This Lab Builds A comple...

LR-WebPKI

LR+ WebPKI 评估工件 本包包含最终版 LR+ 参考实现、生产重建包装器、测试以及针对 WebPKI CA 上下文中的上下文封闭后量子认证生成的评估输出。 该包有意作为提交工件而非研究日志快照编写：目标名称、文件名、模块名称和报告均使用稳定的实现术语。 内容 root@kitploit: src/lrplus/ LR+ 参考模块 scripts/ 语料库下载、构建、重建、评估和检查 config/ 固定的重建和下载配置 results/ 论文使用的生成生产输出 audit/ 来源报告和输出哈希清单 backups/ 重建前输入语料库备份的清单 data/ccadbfull/...

CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-

2. CVE-2026-4567 – Post-Quantum KEM Timing Side-Channel Kyber Decapsulation Overview A vulnerable implementation of the Kyber KEM decapsulation leaks secret key bits through timing differences in the ciphertext rejection step, enabling full key recovery. Severity: Critical Private Key Compromise...