alaniz-cipher

The Alaniz Cipher v3 Sheaf-Based Post-Quantum Encryption via Vector-Valued Finite Field Permutations A cryptographic primitive based on the Nonlinear Sheaf Morphism Inversion Problem NL-SMIP: a polynomial system with secret coefficients coupled by sheaf cohomology over graphs. Paper v3 : L. Alani...

wolfCOSE

wolfCOSE wolfCOSE is a lightweight C library implementing CBOR RFC 8949, COSE RFC 9052/9053, and post-quantum ML-DSA for COSE RFC 9964 using wolfSSL as the crypto backend. Main Features Complete RFC 9052 message set : all six COSE message types, including multi-signer COSESign and multi-recipient...

op4

op4 — Secure Terminal Messenger Op4 is a terminal-based encrypted messaging application written in Rust. It provides end-to-end encrypted private messaging with post-quantum cryptography, routed entirely through the Tor network so that neither the content of your messages nor your IP address is...

PQC-Scanner

The PQC Network Scanner is a purpose‑built assessment tool designed to help organisations understand their cryptographic exposure as they transition toward a post‑quantum security posture. Unlike traditional TLS scanners that focus solely on certificate validity or classical cryptographic strengt...

quantum-security-project

OWASP Quantum Security Project Prepare Today. Protect tomorrow. An official OWASP community project mapping the security risks of the quantum era in a practical, vendor-neutral, and risk-based way - the antidote to hype and fear. Status: Bootstrap phase. The OWASP Top 10 for Quantum Security Risk...

nixos-config

Lan Tian's NixOS Configuration This repository holds the configuration files for all my NixOS systems. Features Full system root-on-tmpfs, using impermanence Nftables instead of iptables Secret management with sops-nix QEMU user mode emulation for most architectures Nix Flakes with Nixpkgs patchi...

age

-man%20page-lightgrey%3E age is a simple, modern and secure file encryption tool, format, and Go library. It features small explicit keys, post-quantum support, no config options, and UNIX-style composability. root@kitploit: $ age-keygen -o key.txt Public key:...

sslscan

sslscan2 sslscan 버전 2가 출시되었습니다. 여기에는 백엔드 스캔 코드의 주요 재작성이 포함되어 있어 더 이상 많은 검사에서 OpenSSL 버전에 의존하지 않습니다. 즉, 컴파일된 OpenSSL 버전에 관계없이 기존 프로토콜SSLv2 및 SSLv3은 물론 TLSv1.3도 지원할 수 있습니다. 이것은 대부분 jtesta의 작업 덕분에 가능해졌으며, 그가 백엔드 재작성의 대부분을 담당했습니다. 기타 주요 변경 사항은 다음과 같습니다: 서버 키 교환 그룹 열거. 서버 서명 알고리즘 열거. SSLv2 및 SSLv3 프로토...

foxguard v0.13.0

foxguard Fast local security scanning for code, secrets, dependencies, and crypto risk. Integrated into 0sec, the open cybersecurity harness. root@kitploit: npx foxguard . Why 200+ built-in rules across 12 source languages, plus config and manifest checks Taint tracking for 14 languages, with...

rust_citadel

Citadel Post-quantum hybrid encryption and key management server. Citadel combines X25519 + ML-KEM-768 for key encapsulation and AES-256-GCM for data encryption, following NIST's hybrid approach for the post-quantum transition. Applications encrypt and decrypt data through a REST API. Citadel...

QuantumLock

QuantumLock Specification Unbreakable, Quantum-Ready, Forever. HTML Mirror: https://roxanneardary.com/quantumlock-specification/ Vision QuantumLock is an open-source protocol specification designed to make Bitcoin more resilient against the development of quantum computing and other emerging...

CVE-2026-23006-Kyber-Ciphertext-Length-Side-Channel

CVE-2026-23006 – Kyber 암호문 길이 부채널 프로그램 코드 Python root@kitploit: kyberlengthleak.py - Leaks secret key bit based on ciphertext length import random Simulate encapsulation: ciphertext length depends on message bit def encapsulatepk, bit: In a flawed implementation, the ciphertext size varies based ...

PrivateSphare

PrivateSphare PrivateSphare is a secure, anonymous, zero-knowledge file storage and sharing platform. It allows users to upload files and receive a human-readable 24-word passphrase for retrieval. No accounts, no tracking, and no unencrypted data ever touches the server's persistent storage. 🛡️ Ke...

nexus-os

Nexus OS The Governed Agentic AI Operating System 66 Crates | 675 Commands | 86 Pages | 5,229 Tests | 10/10 OWASP | Zero Stubs Local-first. Air-gappable. Post-quantum ready. Built in Rust. Architecture | Quick Start | Features | Audit Status | Docs Nexus OS is an AI agent operating system where...

camel-pqc-tls

Post-Quantum TLS with Apache Camel This repository contains three examples demonstrating Post-Quantum Cryptography PQC TLS 1.3 handshakes with Apache Camel, using the X25519MLKEM768 hybrid key exchange. X25519MLKEM768 combines classical X25519 elliptic curve Diffie-Hellman with ML-KEM-768 , a...

CVE-2026-22001-SPHINCS-WOTS-Weak-Randomness-Forgeable-Signature

CVE-2026-22001 – SPHINCS+ WOTS+ 약한 난수 서명 위조 개요 SPHINCS+ 포스트퀀텀 서명 체계의 한 구현이 WOTS+ 서명 생성 중 결함이 있는 난수 생성기를 사용합니다. 동일한 nonce k가 여러 서명에 걸쳐 재사용되어, 공격자가 개인 키를 복구하고 임의의 메시지를 위조할 수 있습니다. 취약점 세부 정보 유형: 암호학적 난수 생성 실패 영향: 완전한 키 노출, 서명 위조. 근본 원인: WOTS+ 서명 알고리즘은 각 서명마다 고유한 난수 값 k에 의존합니다. k의 재사용은 시드를 드러내는 대수적 관...

ejbca-pqc-lab

EJBCA Pure PQC Lab — ML-DSA-65 Two-Tier PKI Hierarchy A hands-on implementation of NIST FIPS 204 ML-DSA in a two-tier PKI hierarchy using EJBCA Community Edition. 📖 Full walkthrough: Building a Post-Quantum PKI: How I Signed a Root CA and Sub CA Using ML-DSA on EJBCA What This Lab Builds A comple...

git-remote-pqcrypt

git-remote-pqcrypt root@kitploit: THIS IS AN EXPERIMENTAL PROJECT, there hasnt been a formal security audit. DO NOT rely on this for any critical repositories. git-remote-pqcrypt is an encrypted Git remote helper similar to gcrypt. It stores Git packfiles and repository metadata encrypted at rest...

LR-WebPKI

LR+ WebPKI 평가 아티팩트 이 패키지는 최종 확정된 LR+ 참조 구현, 프로덕션 재구성 래퍼, 테스트, 그리고 WebPKI CA 컨텍스트에 대한 컨텍스트 폐쇄형 양자 후 인증을 위한 생성된 평가 출력물을 포함합니다. 이 패키지는 의도적으로 연구 로그 스냅샷이 아닌 제출 아티팩트로 작성되었습니다. 대상 이름, 파일 이름, 모듈 이름, 보고서는 안정적인 구현 용어를 사용합니다. 내용물 root@kitploit: src/lrplus/ LR+ 참조 모듈 scripts/ 코퍼스 다운로드, 빌드, 재구성, 평가, 검증 스크립트...

CVE-2026-4567-Post-Quantum-KEM-Timing-Side-Channel-Kyber-Decapsulation-

2. CVE-2026-4567 – 포스트퀀텀 KEM 타이밍 부채널 Kyber 역캡슐화 개요 Kyber KEM 역캡슐화의 취약한 구현은 암호문 거부 단계의 타이밍 차이를 통해 비밀 키 비트를 유출하여 전체 키 복구를 가능하게 합니다. 심각도: 치명적 개인 키 손상 취약한 서버 C 및 공격 스크립트 Python root@kitploit: // kybervulndecaps.c - Simulated vulnerable Kyber decapsulation include include include include // Secret key...