Open-source post-quantum projects
Libraries, reference implementations and integrations that ship post-quantum algorithms as usable code, with the licence and language each one states.
What is in this index
Included: projects whose post-quantum implementation is the product, published under an open licence, with source anyone can read. Excluded: commercial products with an open-source component. Our own tooling is listed here too, on the same test as everything else and marked as ours in every place it appears, so you can discount it if you want to.
One entry here is ours and is marked as such. It also lives, with the rest of our work, on the tools page.
| Name | What it is | Detail | Why | Sources |
|---|---|---|---|---|
| Dilithium | The official reference implementation of the Dilithium signature scheme, with an AVX2 version, from the pq-crystals team. | CAVX2FIPS 204 | Why this is listed Dilithium The reference and AVX2 implementations of the FIPS 204 scheme are all the repository holds, readable in public, which is what this category asks of an entry. | 1 source Sep 4, 2026 |
| Kyber | The official reference implementation of the Kyber key encapsulation mechanism, from the pq-crystals team. | Creference implementationKEM | Why this is listed Kyber The reference implementation is the whole repository rather than a component of a product, and its LICENSE offers it under CC0 or Apache 2.0, which is both limbs of this rule. | 1 source Sep 4, 2026 |
| liboqs | A C library of quantum-safe algorithms from the Open Quantum Safe project, released under the MIT licence. | CMITlibrary | Why this is listed liboqs The library of quantum-safe algorithms is the whole deliverable rather than a component of a product, published under MIT with its C source readable in the open repository. | 2 sources Sep 3, 2026 |
| mldsa-native | A portable C90 implementation of the ML-DSA signature standard, supported by the Post-Quantum Cryptography Alliance. | C90FIPS 204Apache 2.0 | Why this is listed mldsa-native It ships one thing, a C90 implementation of FIPS 204, under Apache 2.0, ISC and MIT, and versions and gets reviewed on its own rather than inside a product. | 1 source Sep 4, 2026 |
| mlkem-native | A portable C90 implementation of ML-KEM with machine-checked proofs over its C and its assembly. | C90FIPS 203CBMC proofs | Why this is listed mlkem-native A FIPS 203 implementation offered under Apache 2.0, ISC and MIT, where the proved C and assembly is the whole of what the repository ships. | 1 source Sep 4, 2026 |
| noble-post-quantum | A minimal JavaScript implementation of ML-KEM, ML-DSA, SLH-DSA and Falcon, with no dependencies. | TypeScriptFIPS 203 to 205MIT | Why this is listed noble-post-quantum The package is nothing but ML-KEM, ML-DSA, SLH-DSA and Falcon in readable TypeScript under MIT, so the implementation is the product rather than a feature inside one. | 1 source Sep 4, 2026 |
| Open Quantum Safe | The umbrella project behind liboqs and its protocol integrations, hosted by the Linux Foundation's Post-Quantum Cryptography Alliance. | umbrella projectLinux Foundation | Why this is listed Open Quantum Safe Listed as the project rather than a codebase: both lines it publishes, the open source liboqs library and the protocol integrations, are post-quantum software and nothing else. | 2 sources Sep 4, 2026 |
| oqs-provider | An OpenSSL 3 provider from the Open Quantum Safe project that exposes quantum-safe KEMs and signatures, under the MIT licence. | CMITOpenSSL provider | Why this is listed oqs-provider Its only purpose is exposing quantum-safe KEMs and signatures through OpenSSL, published as MIT source, which is the test here rather than the project's own testing-vehicle framing. | 1 source Sep 4, 2026 |
| pqc-toolspublished by us | Our own scanning, conformance and CI tooling for post-quantum readiness, under Apache 2.0. | TypeScriptApache-2.0zero runtime deps | Why this is listed pqc-tools The post-quantum tooling is the product and it is published under Apache 2.0, which is the same test every other entry here passes, and it is marked as ours because we publish this directory. | 1 source Sep 4, 2026 |
| PQClean | Clean, portable, tested C implementations of the schemes in the NIST post-quantum project, used as a source by other libraries. | retiredCreference implementations | Why this is listed PQClean Its stated objective is the standalone C implementations themselves, released under CC0 with per implementation licence files, and other projects vendor them directly, so the implementation is the product. | 1 source Sep 4, 2026 |
| pqm4 | Post-quantum implementations for the ARM Cortex-M4 with an automated testing and benchmarking framework around them. | CARM Cortex-M4benchmarking | Why this is listed pqm4 The Cortex-M4 implementations and the harness around them are the entire repository, licensed per directory with Apache-2.0 and CC0 elsewhere, and this category does not ask for active maintenance. | 1 source Sep 4, 2026 |
| SPHINCS+ | The SPHINCS+ reference code accompanying the NIST submission, placed in the public domain by its authors. | Cpublic domainhash-based signatures | Why this is listed SPHINCS+ The submission software is the repository's entire content, placed in the public domain and offered under CC0-1.0, the BSD Zero Clause Licence and MIT, so anyone can read and reuse it. | 1 source Sep 4, 2026 |
Every outbound link here is the subject’s own, and carries nofollow. Listing is not endorsement.