The world's first developer-native, API-first post-quantum encryption platform.
Secure your enterprise data with NIST FIPS 203 ML-KEM-1024 in two lines of code.
&color=C4ED5F&style=flat-square)
The cybersecurity industry has spent decades hardening systems against classical threats, but a new existential threat class is already in motion. Nation-state adversaries are actively executing harvest-now, decrypt-later (HNDL) attacks — systematically collecting encrypted enterprise data today, intending to decrypt it once quantum computers break traditional public-key algorithms like RSA and ECC.
Despite this looming crisis and strict cryptographic timelines mandated by regulators (NIST FIPS 203, India DST PQC Roadmap, EU CNSA 2.0), most encryption tools remain entirely blind to the risk.
QuantaCipher delivers NIST-standard quantum-resistant encryption that any team can deploy in under 15 minutes, requiring no cryptography expertise and no infrastructure overhaul.
// That's literally it. Your data is now quantum-safe.
const ciphertext = sdk.encryptVault("Top Secret Enterprise Data");QuantaCipher is a layered monorepo. Each layer has a single, clear responsibility:
┌─────────────────────────────────────────────────────────────────┐
│ quantacipher-web (SaaS) │
│ Dashboard · API Key Management · Compliance Reports │
├─────────────────────────────────────────────────────────────────┤
│ quantacipher-gateway (API Server) │
│ Ciphertext Ingestion · Receipts · Billing · Rate Limiting │
│ ↑ Only ever sees ciphertext — never plaintext │
├──────────────────────────┬──────────────────────────────────────┤
│ quantacipher-sdk-js │ quantacipher (Python SDK) │
│ TypeScript · Node.js │ Python 3.8+ │
├──────────────────────────┼──────────────────────────────────────┤
│ quantacipher-wasm │ quantacipher-python │
│ Rust → WebAssembly │ Rust → PyO3 native extension │
├──────────────────────────┴──────────────────────────────────────┤
│ quantacipher-core (Rust) │
│ ML-KEM-1024 (FIPS 203) + AES-256-GCM · KEM/DEM Hybrid │
│ Cryptography executes 100% locally │
└─────────────────────────────────────────────────────────────────┘
The entire KEM/DEM encryption process executes 100% locally inside the client runtime — in a WASM sandbox in JavaScript, or as a native Rust extension in Python.
Plaintext never leaves your machine. The gateway never has your keys.
Only the resulting ciphertext (and any provided unencrypted metadata for billing/tracking) reaches the QuantaCipher API Gateway, which validates format and issues a cryptographic receipt — without ever being able to read the payload data.
For permanent immutable records — compliance event logs, audit timestamps, data you need to prove existed but will never read back.
- An ephemeral ML-KEM-1024 keypair is generated locally in milliseconds
- Data is encrypted using the ephemeral public key
- The private key is immediately and permanently discarded
- The sealed
QZ_VAULT_V1:...ciphertext is produced — undecryptable by anyone, including you
Note: Vault mode is irreversible sealing by design. If you need tamper-evidence for records you must later read, use a signed hash chain or timestamped digest instead.
For confidential enterprise data exchange where the user needs to decrypt later.
- A persistent ML-KEM-1024 keypair is generated locally — user saves the private key
- Data is encrypted using the public key
- Only ciphertext travels over the network
- The user decrypts locally at any time using their private key
| Package | Registry | Language | Description |
|---|---|---|---|
@quantalabss/quantacipher-sdk |
npm | TypeScript/Node.js | Developer SDK — encryption + signing |
@quantalabss/quantacipher-wasm |
npm | WASM (Rust→JS) | Compiled WebAssembly engine |
quantacipher |
PyPI | Python | Python SDK with native Rust bindings |
quantacipher-core |
crates.io | Rust | Pure Rust cryptographic engine |
npm install quantacipher-sdkimport { QuantaCipher, QuantaCipherSign, AlgorithmId } from 'quantacipher-sdk';
const sdk = new QuantaCipher({ apiKey: 'qz_live_...' });
// ── VAULT MODE: Seal data permanently ────────────────────────────
const auditLog = JSON.stringify({ userId: 'U-001', action: 'FUNDS_TRANSFER', amount: 50000 });
const sealed = sdk.encryptVault(auditLog);
// sealed = "QZ_VAULT_V1:..." — no one can ever decrypt this
// ── SECURE MODE: Encrypt + Decrypt ───────────────────────────────
const keys = sdk.generateKeypair(); // runs locally in WASM
const ciphertext = sdk.encryptSecure("Confidential data", keys.publicKey);
const plaintext = sdk.decryptSecure(ciphertext, keys.privateKey);
// plaintext === "Confidential data" ✅
// ── SIGN MODE (v2): Post-Quantum Signing ─────────────────────────
const signer = new QuantaCipherSign();
const kp = signer.generateSigningKeyPair(); // ML-DSA-44 or Falcon-512
const sig = signer.signPayload("My document", kp.private_key);
const valid = signer.verifySignature("My document", sig, kp.public_key);
// valid === true ✅pip install quantacipherfrom quantacipher import QuantaCipher
sdk = QuantaCipher(api_key="qz_live_...")
# ── VAULT MODE ────────────────────────────────────────────────────
sealed = sdk.encrypt_vault("Sensitive compliance record")
# sealed = "QZ_VAULT_V1:..." — permanently sealed
# ── SECURE MODE ───────────────────────────────────────────────────
keys = sdk.generate_keypair()
ciphertext = sdk.encrypt_secure("Confidential data", keys["publicKey"])
plaintext = sdk.decrypt_secure(ciphertext, keys["privateKey"])
# plaintext == "Confidential data" ✅| Feature | Description |
|---|---|
| Cryptographic Receipts | Immutable audit trail anchored to Sigstore Rekor — exact timestamps, byte counts, encryption scheme |
| HIPAA & SOC2 Readiness | Technical controls supporting your HIPAA/SOC2 compliance program. See Compliance Notes. |
| Environment Isolation | Dedicated qz_test_ and qz_live_ API key environments |
| Telemetry & Quotas | Usage analytics, rate limiting, and proactive quota alerts via email |
| Dashboard | Audit log views and usage reports at quantacipher.com |
quantacipher/
├── quantacipher-core/ # Rust crypto engine (MIT, public — crates.io)
├── quantacipher-wasm/ # Rust → WASM bindings (MIT, public — npm)
├── quantacipher-python/ # Rust → Python bindings (MIT, public — PyPI)
├── quantacipher-sdk-js/ # TypeScript SDK (MIT, public — npm)
├── quantacipher-gateway/ # API Gateway server (Proprietary)
├── quantacipher-web/ # SaaS platform / dashboard (Proprietary)
├── docs/
│ └── security/ # Internal security audit reports
├── gitbook/ # Documentation source
├── patent_draft/ # Patent specification (Proprietary)
├── LICENSE # MIT (open-source components only)
└── NOTICE.md # Full licensing breakdown
| 🌐 Platform | https://www.quantacipher.com |
| 📖 API Docs | https://quantachain.gitbook.io/quantacipher |
| 🏢 QuantaLabs | https://quantalabs.cc |
| 📦 npm (SDK) | https://www.npmjs.com/package/@quantalabss/quantacipher-sdk |
| 📦 npm (WASM) | https://www.npmjs.com/package/@quantalabss/quantacipher-wasm |
| 🐍 PyPI | https://pypi.org/project/quantacipher |
| 🦀 crates.io | https://crates.io/crates/quantacipher-core |
QuantaCipher provides the technical controls that support your organization's HIPAA and SOC2 compliance program. This includes:
- Per-request audit receipts with exact timestamps, byte counts, and encryption scheme identifiers
- Usage telemetry and rate limiting for processing integrity
- Zero-trust architecture: the gateway never sees plaintext or holds decryption keys
- Environment isolation via test/live key separation
What QuantaCipher is not: QuantaCipher is not independently audited or certified as HIPAA-compliant or SOC2-certified on your behalf. HIPAA additionally requires a Business Associate Agreement (BAA) — contact support@quantacipher.com for enterprise BAA arrangements.
The open-source components (quantacipher-core, quantacipher-wasm, quantacipher-sdk, quantacipher Python) are licensed under the MIT License — see LICENSE.
The API Gateway (quantacipher-gateway) and SaaS platform (quantacipher-web) are proprietary software — see NOTICE.md.