# quantakrypto > quantakrypto is an applied post-quantum cryptography (PQC) practice. We help organisations become quantum-ready before "Q-day" through cryptographic audits and certification, open-source tooling, training, and published research. Our recommendations rest on the asymmetry of consequences — migrating too early is recoverable engineering overhead; migrating too late is unrecoverable. Key facts: - Domain: https://quantakrypto.com - Offering pillars: Audits, Tools, Teaching (Learning), Research. Engagements funnel through four services: certification, education, audits, and migrations. - Reference content: a Standards hub (/standards) explaining the NIST algorithms, deployment profiles, compliance mandates, and interchange formats behind a PQC migration, and a Guides hub (/guides) with practical explainers organised by service. - Audits come in three tiers (Crypto-Agility Readiness, Standard Audit, Enterprise/Regulated) and always begin with a paid scoping & discovery call. - We audit against the finalised NIST standards (ML-KEM / FIPS 203, ML-DSA / FIPS 204, SLH-DSA / FIPS 205) and map findings to ISO/IEC 27001, DORA, NIS2, CNSA 2.0, BSI TR-02102, and ANSSI guidance. - A certificate is a point-in-time assessment, not a guarantee; an annual renewal keeps the posture current. - The quantakrypto MCP (post-quantum tools for AI coding agents) is available both hosted at https://mcp.quantakrypto.com (OAuth 2.1, 30-day tokens) and as an open-source server developers can self-host. - Post-quantum credentials are Bitcoin-blockchain tamper-proof: each is SHA-256 fingerprinted and timestamped via OpenTimestamps, with a public verification page and downloadable .ots proof. - Credentials come in two families: certificates earned by people (online-exam and course-completion; instructor-led virtual training is coming soon) and badges earned by repositories (automated readiness badges, minted only when the audit scan, conformance run, and endpoint probe have each passed or been marked not applicable, with at least one actual pass; expert-verified badges coming soon). Course certificates are LinkedIn-ready and tamper-proof. Full taxonomy in the "How it works" panel on /app/credentials. - The /learning page lists every published course (data-driven from the course store, so new courses appear automatically) and you can subscribe for updates on new courses and certifications. - The site is built with Next.js, TypeScript, and Tailwind CSS, with i18n structured for multiple locales (currently English only). ## Core pages - [Home](https://quantakrypto.com/): Overview of the four pillars, latest writing, conformance & compliance, and the Practitioner course. - [Financial services](https://quantakrypto.com/industries/financial-services): Post-quantum readiness for financial entities. DORA applies directly since 17 January 2025 with supervisors behind it, PCI DSS v4's cryptography requirements became mandatory on 31 March 2025, and financial retention periods outlive the cryptography protecting the records. Makes no claim about sector clients; the argument is about obligations and data lifetimes. - [Audit](https://quantakrypto.com/audit): The three audit tiers, the five-step methodology, the bug classes we target, and the standards we map against. - [Tools](https://quantakrypto.com/tools): Open-source tooling (all published as @quantakrypto/*, Apache-2.0) — qScan (CLI scanner, 14 languages + infrastructure config), qProbe (live TLS/SSH endpoint prober, ownership-gated), Sieve (ML-KEM/ML-DSA/SLH-DSA conformance battery), the quantakrypto MCP (local stdio + hosted OAuth endpoint), the BYOK Agent library (LLM triage/remediation), and a CI Action. - [qScan](https://quantakrypto.com/tools/qscan): The open-source CLI that finds quantum-vulnerable cryptography across 14 source languages, dependency manifests and infrastructure config, scores harvest-now-decrypt-later exposure, and exports a CycloneDX CBOM, SARIF, ISO 27001 A.8.24 evidence or OpenVEX. Runs locally, nothing is uploaded: `npx @quantakrypto/qscan ./`. Includes an honest comparison against pqcscan, IBM CBOMkit and sonar-cryptography. - [Check post-quantum TLS support](https://quantakrypto.com/tools/pq-check): Whether a domain negotiates a hybrid post-quantum TLS key exchange (X25519MLKEM768), how to check it with one command, and how to read the result. The hosted browser checker is not live yet; the qProbe CLI answers the question today. - [crypto-agility.json validator](https://quantakrypto.com/tools/crypto-agility-validator): Paste or fetch a manifest and check it against the draft schema, in the browser, nothing to install. - [Credential hash verifier](https://quantakrypto.com/tools/credential-hash-verifier): Recompute a credential's SHA-256 fingerprint and check it against the published OpenTimestamps proof, without trusting us. - [Proposals](https://quantakrypto.com/proposals): Work QuantaKrypto has put to standards bodies, published in full whether or not it was accepted. Includes the TLS session-resumption recheck position paper submitted to the IAB post-quantum authentication workshop, and the crypto-agility manifest proposal for a machine-readable way to ask a deployment what cryptography it runs. - [Key generator](https://quantakrypto.com/tools/key-generator): Generate RSA, elliptic curve, ML-KEM and ML-DSA key pairs in the browser, at random or derived from a seed phrase, and compare their sizes side by side. Runs entirely client-side; no key is transmitted. RSA has no seed option because RSA key generation is a prime search rather than a derivation. - [Encrypt and sign playground](https://quantakrypto.com/tools/crypto-playground): Encrypt and decrypt with RSA, ECDH and ML-KEM, and sign and verify with RSA, ECDSA and ML-DSA, in the browser. Shows the encapsulated key and the message ciphertext as separate outputs, because ML-KEM agrees a shared secret rather than encrypting the message. - [Docs](https://quantakrypto.com/docs): Documentation hub — the toolkit, the MCP server, and the standards & guides reference. - [MCP server](https://quantakrypto.com/mcp): The quantakrypto MCP gives AI coding agents first-class post-quantum capabilities — inventory the cryptography in a repo, explain the exposure, and propose hybrid migrations, right in the editor. It is available two ways: (1) **hosted & OAuth-secured** — connect to the managed server live at https://mcp.quantakrypto.com (OAuth 2.1 sign-in, 30-day tokens), nothing to run; (2) **self-hosted** — the server is open source, so developers can run it locally (npx @quantakrypto/mcp) or host their own gateway (Apache-2.0, source: https://github.com/quantakrypto/mcp-gateway). - [Learning](https://quantakrypto.com/learning): The learning hub — features the Practitioner track, explains the verifiable/tamper-proof (OpenTimestamps, LinkedIn-ready) certifications, and lists every published course. Includes a subscribe form for updates on new courses and certifications. - [Credentials](https://quantakrypto.com/credentials): Verifiable, tamper-proof post-quantum credentials for people and organizations — SHA-256 + OpenTimestamps (Bitcoin-anchored) tamper-proofing, one-click Add-to-LinkedIn, public verification pages, and embeddable badges. Free signup ("Enroll now"); the Education Center dashboard is at /dashboard. - [Courses](https://quantakrypto.com/courses): Structured post-quantum courses. Enrol free, complete lessons, pass the exam, and earn a verifiable credential (e.g. Certified Post-Quantum Practitioner). Payment gateway not yet wired — enrolment is free during preview. - [Certification](https://quantakrypto.com/certification): Conformance certification — proving an ML-KEM / ML-DSA / SLH-DSA implementation actually follows FIPS 203/204/205, including the input checks the test vectors miss. - [Migration](https://quantakrypto.com/migration): Post-quantum migration — inventory, a roadmap sequenced by data shelf life and deadlines, and hybrid TLS rollout without breaking production. - [Standards](https://quantakrypto.com/standards): Reference hub explaining the PQC standards, policies, and formats (see the full list below). - [Guides](https://quantakrypto.com/guides): Practical PQC explainers organised by whether you need to learn, audit, migrate, or certify. - [About](https://quantakrypto.com/about): Our principles, the team, and why post-quantum migration is urgent now. - [Blog](https://quantakrypto.com/blog): Audit reports, research, methodology, conformance notes, and PQC news. RSS feed (all posts, newest first): https://quantakrypto.com/rss.xml - [PQC Observatory](https://quantakrypto.com/observatory): Our own daily measurement of post-quantum adoption on the public web. A fixed panel of hosts is probed once a day with a single read-only TLS handshake, and the result is the share negotiating a hybrid post-quantum key exchange (X25519MLKEM768). This is original data, not a third-party figure. - [PQC Observatory methodology](https://quantakrypto.com/observatory/methodology): How the Observatory measures hybrid post-quantum TLS adoption: the fixed public panel, one read-only handshake per host per day, and what the figure explicitly does not mean. The number is a share of hosts, not of traffic, which is why it is lower than traffic-weighted figures such as Cloudflare's. - [crypto-agility.json](https://quantakrypto.com/crypto-agility): The Crypto-Agility Manifest, a `/.well-known/crypto-agility.json` file that lets a site publish its post-quantum posture in machine-readable form. Think security.txt for cryptographic posture. We authored the IETF Internet-Draft (draft-acosta-crypto-agility-manifest); it is a draft, not a ratified standard. Includes the public adopter registry, validated on submit and re-checked daily. - [Public audits](https://quantakrypto.com/audits): Published post-quantum audit reports with named reviewers, severity-ranked findings, and a counted remediation record linking the upstream fixes. Individual reports live at /audits//. - [Readiness](https://quantakrypto.com/readiness): The quantum readiness model and score, plus a free self-assessment at /readiness/assessment. - [Infrastructure](https://quantakrypto.com/infrastructure): Post-quantum exposure in the platform around your code: CI/CD signing, secrets at rest, Kubernetes PKI, message brokers, databases, IaC, and token encryption. 18 infrastructure surfaces, ranked so harvest-now-decrypt-later exposure comes first. - [Open source](https://quantakrypto.com/open-source): Sustained contributions to external open-source projects, including the post-quantum transition for Nostr and Marmot. - [Knowledge base](https://quantakrypto.com/knowledge): Plain-language reference on the quantum threat, standards, migration, and security practice, plus a glossary (/knowledge/glossary) and an FAQ (/knowledge/faq). - [Training](https://quantakrypto.com/training): Post-quantum training and certification for individuals, with team rollout at https://quantakrypto.com/corporate-training and a live instructor-led session at https://quantakrypto.com/cryptography-masterclass. - [AI assistant](https://quantakrypto.com/assistant): An assistant grounded in the knowledge base and in your own scanned posture. - [Collaborations](https://quantakrypto.com/collaborations): Educational institutions we work with, each verified by a backlink. - [Organizations](https://quantakrypto.com/organizations): Public profiles for organizations tracking their post-quantum readiness with us. - [Contact](https://quantakrypto.com/contact): Start an engagement. https://quantakrypto.com/book schedules a call directly. - [Brand](https://quantakrypto.com/brand): Logos, colours, and usage rules. - [Secure organization](https://quantakrypto.com/secure-organization): Book a paid discovery call and get an indicative scope and pricing. ## Selected writing - [Post-quantum migration is a risk-asymmetry problem, not a timeline bet](https://quantakrypto.com/blog/risk-asymmetry-not-a-timeline-bet) - [From the audit floor: replay-attackable post-quantum prekeys](https://quantakrypto.com/blog/audit-floor-replay-attackable-prekeys) - [X-Wing and the TLS group: choosing a hybrid KEM combiner](https://quantakrypto.com/blog/x-wing-and-the-tls-group) - [Sieve: conformance testing ML-KEM and ML-DSA against the bugs that matter](https://quantakrypto.com/blog/sieve-conformance-testing-ml-kem-ml-dsa) - [The crypto inventory: finding every place asymmetric crypto hides](https://quantakrypto.com/blog/the-crypto-inventory) ## Standards reference - [The PQC standards landscape (start here)](https://quantakrypto.com/standards/pqc-standards-overview): How the algorithms, policies, and formats fit together. - [FIPS 203 (ML-KEM)](https://quantakrypto.com/standards/fips-203-ml-kem): The post-quantum key-encapsulation standard; replaces RSA/ECDH key exchange. - [FIPS 204 (ML-DSA)](https://quantakrypto.com/standards/fips-204-ml-dsa): Module-lattice digital signatures; replaces RSA/ECDSA signatures. - [FIPS 205 (SLH-DSA)](https://quantakrypto.com/standards/fips-205-slh-dsa): Stateless hash-based signatures for maximum-assurance, long-lived trust anchors. - [SP 800-208 (stateful hash-based signatures)](https://quantakrypto.com/standards/sp-800-208-stateful-hash-signatures): LMS/HSS and XMSS for firmware/code signing. - [CNSA 2.0](https://quantakrypto.com/standards/cnsa-2-0): The NSA algorithm suite for national-security systems; exclusive use by 2033, no hybrid requirement. - [TLS hybrid key exchange](https://quantakrypto.com/standards/tls-hybrid-key-exchange): X25519MLKEM768 — the standard defence against harvest-now-decrypt-later. - [ISO/IEC 27001 A.8.24 (use of cryptography)](https://quantakrypto.com/standards/iso-27001-a8-24-cryptography): The ISMS governance hook for PQC readiness. - [NSM-10 & OMB M-23-02](https://quantakrypto.com/standards/nsm-10-omb-m-23-02): The US federal cryptographic-inventory mandate; 2035 mitigation target. - [FIPS 140-3 and post-quantum cryptography](https://quantakrypto.com/standards/fips-140-3): What module validation actually proves, and the three things procurement conflates: FIPS 140-3 (the module), ACVP/CAVP (the algorithm against NIST test vectors), and conformance testing (spec adherence including required rejections). Note the date: on 21 September 2026 every remaining FIPS 140-2 certificate moves to the CMVP historical list. - [PQC deadlines and mandates](https://quantakrypto.com/standards/pqc-deadlines): Every post-quantum deadline that binds an organisation on one axis: NIST IR 8547 (deprecated 2030, disallowed 2035), CNSA 2.0 (firmware signing 2030, everything else 2033), NSM-10 (mitigate by 2035), NIS2 and DORA (in force now, governance duties rather than dated algorithm changes), and ISO 27001 A.8.24. Includes which one binds you first. - [NIST PQC migration timeline (IR 8547)](https://quantakrypto.com/standards/nist-pqc-migration-timeline-ir-8547): Quantum-vulnerable algorithms deprecated after 2030, disallowed after 2035. - [CycloneDX CBOM](https://quantakrypto.com/standards/cbom-cyclonedx): Machine-readable cryptographic inventory. - [SARIF](https://quantakrypto.com/standards/sarif-code-scanning): Interchange format for crypto-finding scan results. - [NIS2 Directive](https://quantakrypto.com/standards/nis2-directive): The EU cybersecurity directive's cryptography obligations, and what post-quantum readiness evidence satisfies them. - [PCI DSS v4 cryptography](https://quantakrypto.com/standards/pci-dss-4-cryptography): Requirements 4.2.1.1 (inventory of trusted keys and certificates protecting PAN in transit) and 12.3.3 (cipher suites documented and reviewed at least every 12 months, with a plan for cryptographic vulnerabilities), both mandatory from 31 March 2025. PCI DSS sets NO post-quantum requirement and no quantum deadline; 12.3.3 is crypto-agility written in audit language and is where the question arrives. - [DORA](https://quantakrypto.com/standards/dora): The EU financial-sector resilience regulation, its cryptography and crypto-agility expectations, and what an auditor asks for. - [Crypto-Agility Manifest](https://quantakrypto.com/standards/crypto-agility-manifest): The specification behind crypto-agility.json. An IETF Internet-Draft we authored, not a ratified standard. - [OpenVEX](https://quantakrypto.com/standards/openvex): Exploitability assertions for flagged cryptographic components. ## Guides - [Harvest now, decrypt later](https://quantakrypto.com/guides/harvest-now-decrypt-later): The threat model that makes PQC urgent today, and Mosca's inequality. - [Crypto-agility](https://quantakrypto.com/guides/crypto-agility): Designing systems that can swap algorithms without re-architecting. - [Building a cryptographic inventory](https://quantakrypto.com/guides/cryptographic-inventory): The mandatory first step — you can't migrate what you can't see. - [A post-quantum migration roadmap](https://quantakrypto.com/guides/pqc-migration-roadmap): Sequencing the move to PQC by data shelf life and policy deadline. - [Migrating TLS to hybrid key exchange](https://quantakrypto.com/guides/migrating-tls-to-hybrid): Rolling out X25519MLKEM768 without breaking classical clients. - [Conformance-testing your PQC implementation](https://quantakrypto.com/guides/pqc-conformance-testing): Why passing NIST's test vectors is not the same as conforming. - [A post-quantum cryptography primer](https://quantakrypto.com/guides/post-quantum-primer): The 10-minute orientation to the threat, the standards, and the deadlines. - [Hybrid key exchange, explained](https://quantakrypto.com/guides/hybrid-key-exchange-explained): Why deployments pair a classical curve with a post-quantum KEM. - [ML-DSA vs SLH-DSA](https://quantakrypto.com/guides/ml-dsa-vs-slh-dsa): Choosing a post-quantum signature. ML-DSA for nearly everything; SLH-DSA for a small number of long-lived trust anchors where you want security that does not rest on lattice assumptions. The signature sizes are the decision: approx. 2,420 bytes against approx. 7,856 at best and 49,856 at worst. - [RSA vs ML-KEM](https://quantakrypto.com/guides/rsa-vs-ml-kem): What actually changes when you replace classical key exchange. - [Mosca's theorem explained](https://quantakrypto.com/guides/mosca-theorem-explained): The X + Y > Z inequality for deciding whether data is already at risk. - [The PQC readiness assessment](https://quantakrypto.com/guides/pqc-readiness-assessment): Turning a vague sense of quantum risk into a scored baseline. - [Finding quantum-vulnerable cryptography](https://quantakrypto.com/guides/finding-quantum-vulnerable-crypto): Detection methods across code, dependencies, certificates, and traffic. - [Enabling post-quantum TLS](https://quantakrypto.com/guides/enabling-post-quantum-tls): Turning on X25519MLKEM768 in OpenSSL 3.5+, nginx and Go 1.24+. Usually a verification job rather than a configuration one, because both OpenSSL 3.5 and Go 1.24 offer it by default. The two things that go wrong: an explicit group list (or a non-nil Go CurvePreferences) that silently disables it, and middleboxes that cannot handle a ClientHello spanning more than one TCP segment. - [Migrating RSA and ECDH to ML-KEM](https://quantakrypto.com/guides/migrating-rsa-ecdh-to-ml-kem): Replacing classical key establishment beyond TLS. - [Implementing crypto-agility](https://quantakrypto.com/guides/crypto-agility-implementation): Concrete patterns for swappable cryptography. - [A FIPS 203 conformance checklist](https://quantakrypto.com/guides/fips-203-conformance-checklist): The checks an ML-KEM implementation must pass. - [ACVP vs conformance vs FIPS 140-3](https://quantakrypto.com/guides/acvp-vs-conformance-vs-fips-140-3): What each validation actually proves. - [Enforcing PQC mandates in CI](https://quantakrypto.com/guides/enforcing-pqc-mandates-in-ci): Turning a deadline into a build gate, and why a regulatory deadline cannot be baselined away. - [Verifying quantakrypto attestations](https://quantakrypto.com/guides/verifying-quantakrypto-attestations): Checking a credential's Bitcoin-anchored timestamp yourself, without trusting us. ## Directories Sourced listings of other people's work. Every entry states what its subject says about itself and links to where it says it, each category publishes its inclusion rule, and nothing is ranked or scored. quantakrypto is deliberately absent from the specialist-firms index, because publishing a directory and appearing in it are not compatible. - [The post-quantum ecosystem, indexed](https://quantakrypto.com/indexes): Hub over the four directories below. - [Open-source post-quantum projects](https://quantakrypto.com/indexes/open-source-projects): Third-party libraries and implementations. Our own tools are at /tools instead. - [Post-quantum podcasts](https://quantakrypto.com/indexes/podcasts): Shows covering post-quantum cryptography. - [Post-quantum specialist firms](https://quantakrypto.com/indexes/consultancies): Companies whose stated specialism is PQC. Generalist consultancies are out of scope, and the criteria say so. - [Standards and research bodies](https://quantakrypto.com/indexes/standards-and-research): The organisations writing the post-quantum standards. ## Legal - [Privacy Policy](https://quantakrypto.com/privacy): Data minimisation — the tools and MCP don't retain your code; minimal account data (email + token); consent-gated Google Analytics; Google/GitHub OAuth; your rights. All code is open source and auditable. - [Terms & Conditions](https://quantakrypto.com/terms): Terms for the site, the hosted MCP, the open-source tools (Apache-2.0), and professional services. ## Contact - Email: hello@quantakrypto.com - To start: request a paid discovery call at https://quantakrypto.com/contact ## QuantaKrypto Labs - /labs: guided practical labs, part of the Education Center; current exercises are in Spanish. - [Events & workshops](https://quantakrypto.com/events): upcoming QuantaKrypto sessions. - [LABITCONF 2026](https://quantakrypto.com/events/labitconf-2026): October 31 agenda and official session links. - [Choose Bitcoin or Nostr](https://quantakrypto.com/events/labitconf-2026/workshops): two demos: UTXO exposure and hybrid messages. - [Interactive labs](https://quantakrypto.com/labs): guided hybrid messages and read-only UTXO exposure analysis. - [UTXO exposure guide](https://quantakrypto.com/labs/exposicion-utxos): examples, evidence, and public address lookup limitations. - /labs/exposicion-utxos#wallets: wallet options and practical receive/send guidance; exposure reduction is not post-quantum security. ## Free beginner video courses - [Free video courses](https://quantakrypto.com/courses/videos): Short, single-question videos with captions, transcripts and linked explanatory guides. No account is needed. - [Quantum computing and encryption for beginners](https://quantakrypto.com/courses/videos/quantum-computing-for-beginners): Sixteen lessons on encryption, qubits, the quantum threat and post-quantum security. Individual lesson pages use the existing knowledge and guide library. - [Phishing for beginners](https://quantakrypto.com/courses/videos/phishing-for-beginners): Twelve short lessons on checking misleading messages, links, calls and payment changes, with reporting and recovery guidance. - [Cybersecurity basics for beginners](https://quantakrypto.com/courses/videos/cybersecurity-for-beginners): Twelve practical lessons on passwords, passkeys, device updates, backups and safer everyday habits.