alaniz-cipher

The Alaniz Cipher v3 Sheaf-Based Post-Quantum Encryption via Vector-Valued Finite Field Permutations A cryptographic primitive based on the Nonlinear Sheaf Morphism Inversion Problem NL-SMIP: a polynomial system with secret coefficients coupled by sheaf cohomology over graphs. Paper v3 : L. Alani...

PQC-Scanner

The PQC Network Scanner is a purpose‑built assessment tool designed to help organisations understand their cryptographic exposure as they transition toward a post‑quantum security posture. Unlike traditional TLS scanners that focus solely on certificate validity or classical cryptographic strengt...

op4

op4 — Secure Terminal Messenger Op4 is a terminal-based encrypted messaging application written in Rust. It provides end-to-end encrypted private messaging with post-quantum cryptography, routed entirely through the Tor network so that neither the content of your messages nor your IP address is...

wolfCOSE

wolfCOSE wolfCOSE is a lightweight C library implementing CBOR RFC 8949, COSE RFC 9052/9053, and post-quantum ML-DSA for COSE RFC 9964 using wolfSSL as the crypto backend. Main Features Complete RFC 9052 message set : all six COSE message types, including multi-signer COSESign and multi-recipient...

nixos-config

Lan Tian's NixOS Configuration This repository holds the configuration files for all my NixOS systems. Features Full system root-on-tmpfs, using impermanence Nftables instead of iptables Secret management with sops-nix QEMU user mode emulation for most architectures Nix Flakes with Nixpkgs patchi...

age

-man%20page-lightgrey%3E age is a simple, modern and secure file encryption tool, format, and Go library. It features small explicit keys, post-quantum support, no config options, and UNIX-style composability. root@kitploit: $ age-keygen -o key.txt Public key:...

git-remote-gcrypt

================= git-remote-gcrypt GNU Privacy Guard-encrypted git remote :Manual section: 1 Description git-remote-gcrypt is a git remote helper to push and pull from repositories encrypted with GnuPG, using a custom format. This remote helper handles URIs prefixed with gcrypt::. Supported...

sslscan

sslscan2 sslscan 版本 2 现已发布。这包括对后端扫描代码的重大重写，这意味着许多检查不再依赖于 OpenSSL 的版本。这使得无论系统编译时使用的 OpenSSL 版本如何，都可以支持旧协议（SSLv2 和 SSLv3）以及 TLSv1.3。 这主要归功于 jtesta 的工作，他负责了大部分后端重写。 其他关键变化包括： 枚举服务器密钥交换组。 枚举服务器签名算法。 支持扫描 SSLv2 和 SSLv3 协议，但不扫描单个加密套件。 包含使用 Docker 的测试套件，以验证 sslscan 功能正确。 移除了 --http 选项，因为它已损坏且最初使用率很低。...

quantum-security-project

OWASP Quantum Security Project 今日准备，守护明日。 OWASP 官方社区项目，以务实、供应商中立且基于风险的方式梳理量子时代的安全风险——对抗炒作与恐慌的解毒剂。 状态： 引导阶段（Bootstrap phase）。OWASP 量子安全风险 Top 10 目前处于 v0.1 草案阶段，开放社区意见征求。这是我们的起点，而非最终定稿清单。 关于本项目 NIST、英国 NCSC...

codecrypt

Codecrypt La herramienta de criptografía post-cuántica. Codecrypt actualmente no recibe mantenimiento, aunque todavía lo uso con éxito. Si estás interesado en desarrollarlo/mantenerlo, escríbeme. Acerca de Este es un programa unix similar a GnuPG para cifrado y firma que utiliza únicamente...

PQCrypto-LWEKE

FrodoKEM：基于带误差学习问题的密钥封装 该C语言库实现了 FrodoKEM ，一种基于已被充分研究的带误差学习（LWE）问题 1,3 的 IND-CCA 安全密钥封装（KEM）协议，而 LWE 问题又与通用“代数非结构化”格上的猜想困难问题密切相关。本软件包还包含 Python 参考实现。FrodoKEM 被推测能够抵御量子计算机攻击。 FrodoKEM 包含两个主要变体： 一个 标准 变体（简称为 FrodoKEM ），不对密钥对的重用施加任何限制（即，它适用于大量密文可能被加密到单个公钥的应用场景），以及 一个 临时 变体（称为 eFrodoKEM...

foxguard v0.13.0

foxguard Fast local security scanning for code, secrets, dependencies, and crypto risk. Integrated into 0sec, the open cybersecurity harness. root@kitploit: npx foxguard . Why 200+ built-in rules across 12 source languages, plus config and manifest checks Taint tracking for 14 languages, with...

rust_citadel

Citadel Post-quantum hybrid encryption and key management server. Citadel combines X25519 + ML-KEM-768 for key encapsulation and AES-256-GCM for data encryption, following NIST's hybrid approach for the post-quantum transition. Applications encrypt and decrypt data through a REST API. Citadel...

QuantumLock

QuantumLock Specification Unbreakable, Quantum-Ready, Forever. HTML Mirror: https://roxanneardary.com/quantumlock-specification/ Vision QuantumLock is an open-source protocol specification designed to make Bitcoin more resilient against the development of quantum computing and other emerging...

CVE-2026-23006-Kyber-Ciphertext-Length-Side-Channel

CVE-2026-23006 – Kyber 密文长度侧信道 程序代码（Python） root@kitploit: kyberlengthleak.py - Leaks secret key bit based on ciphertext length import random Simulate encapsulation: ciphertext length depends on message bit def encapsulatepk, bit: In a flawed implementation, the ciphertext size varies based on a...

PrivateSphare

PrivateSphare PrivateSphare is a secure, anonymous, zero-knowledge file storage and sharing platform. It allows users to upload files and receive a human-readable 24-word passphrase for retrieval. No accounts, no tracking, and no unencrypted data ever touches the server's persistent storage. 🛡️ Ke...

nexus-os

Nexus OS The Governed Agentic AI Operating System 66 Crates | 675 Commands | 86 Pages | 5,229 Tests | 10/10 OWASP | Zero Stubs Local-first. Air-gappable. Post-quantum ready. Built in Rust. Architecture | Quick Start | Features | Audit Status | Docs Nexus OS is an AI agent operating system where...

camel-pqc-tls

Apache Camel によるポスト量子 TLS このリポジトリには、X25519MLKEM768 ハイブリッド鍵交換を使用し、Apache Camel で ポスト量子暗号 PQC TLS 1.3 ハンドシェイク を実演する3つの例が含まれています。 X25519MLKEM768 は、古典的なX25519 楕円曲線ディフィー・ヘルマンと、ポスト量子の格子ベース鍵カプセル化メカニズムである ML-KEM-768 NIST FIPS 203 を組み合わせたものです。両アルゴリズムが連携して動作するため、片方が破られてもセキュリティは維持されます。 例 Example| JDK| TLS...

CVE-2026-22001-SPHINCS-WOTS-Weak-Randomness-Forgeable-Signature

CVE-2026-22001 – SPHINCS+ WOTS+ 弱随机性签名伪造 概述 SPHINCS+ 后量子签名方案的一种实现，在生成 WOTS+ 签名时使用了有缺陷的随机数生成器。同一 nonce k 在多个签名中被重复使用，使攻击者能够恢复私钥并伪造任意消息。 漏洞详情 类型： 加密随机性失败 影响： 完全密钥泄露、签名伪造。 根本原因： WOTS+ 签名算法依赖于每次签名使用唯一的随机值 k。k 的重复使用会泄露可揭示种子的代数关系。 漏洞利用演示 运行模拟： root@kitploit: python sphincsforge.py python...

ejbca-pqc-lab

EJBCA Pure PQC Lab — ML-DSA-65 Two-Tier PKI Hierarchy A hands-on implementation of NIST FIPS 204 ML-DSA in a two-tier PKI hierarchy using EJBCA Community Edition. 📖 Full walkthrough: Building a Post-Quantum PKI: How I Signed a Root CA and Sub CA Using ML-DSA on EJBCA What This Lab Builds A comple...