https://github.com/backbone-hq/pqcrypto
👻 Post-quantum cryptography for Python.
https://github.com/backbone-hq/pqcrypto
cryptography key-exchange post-quantum-cryptography public-key-cryptography python signature-scheme
Last synced: 5 days ago
JSON representation
👻 Post-quantum cryptography for Python.
- Host: GitHub
- URL: https://github.com/backbone-hq/pqcrypto
- Owner: backbone-hq
- License: apache-2.0
- Created: 2020-09-07T00:14:24.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2025-04-30T20:21:27.000Z (12 days ago)
- Last Synced: 2025-04-30T20:35:29.623Z (12 days ago)
- Topics: cryptography, key-exchange, post-quantum-cryptography, public-key-cryptography, python, signature-scheme
- Language: Python
- Homepage:
- Size: 92.8 KB
- Stars: 65
- Watchers: 6
- Forks: 23
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# 
# 👻 Post-Quantum Cryptography
In recent years, there has been a substantial amount of research on quantum computers – machines that exploit quantum mechanical phenomena to solve mathematical problems that are difficult or intractable for conventional computers. If large-scale quantum computers are ever built, they will be able to break many of the public-key cryptosystems currently in use. This would seriously compromise the confidentiality and integrity of digital communications on the Internet and elsewhere. The goal of post-quantum cryptography (also called quantum-resistant cryptography) is to develop cryptographic systems that are secure against both quantum and classical computers, and can interoperate with existing communications protocols and networks.
## 🎯 Purpose
PQCrypto provides tested, ergonomic **Python 3** CFFI bindings to implementations of quantum-resistant cryptographic algorithms that were submitted to the [NIST Post-Quantum Cryptography Standardization](https://csrc.nist.gov/projects/post-quantum-cryptography/post-quantum-cryptography-standardization) process.
This library focuses exclusively on post-quantum cryptography for Python, adhering to the Unix philosophy of doing one thing well. The cryptographic primitives are designed to be composable with existing cryptographic libraries, enabling simple integration of post-quantum cryptography into existing applications without sacrificing security or performance.
## 💾 Installation
You can install PQCrypto using your package manager of choice.
Pre-compiled wheels are available for common platforms and Python versions.
Using `uv`:
```bash
uv add pqcrypto
```
Using `poetry`:
```bash
poetry add pqcrypto
```
Using `pip`:
```bash
pip install pqcrypto
```
## 🔐 Key Encapsulation
A Key Encapsulation Mechanism (KEM) is a cryptographic primitive used to securely establish a shared secret key between two parties over an insecure channel. Unlike traditional asymmetric encryption, which focuses on encrypting arbitrary messages, a KEM is specifically designed for the secure transmission of symmetric keys.
```python
from secrets import compare_digest
from pqcrypto.kem.mceliece8192128 import generate_keypair, encrypt, decrypt
# Alice generates a (public, secret) key pair
public_key, secret_key = generate_keypair()
# Bob derives a secret (the plaintext) and encrypts it with Alice's public key to produce a ciphertext
ciphertext, plaintext_original = encrypt(public_key)
# Alice decrypts Bob's ciphertext to derive the now shared secret
plaintext_recovered = decrypt(secret_key, ciphertext)
# Compare the original and recovered secrets in constant time
assert compare_digest(plaintext_original, plaintext_recovered)
```
## ✒️ Signing
Digital signatures are cryptographic mechanisms that provide authentication, non-repudiation, and integrity to digital messages or documents. They allow the recipient to verify that a message was created by a known sender and hasn't been altered during transmission.
```python
from pqcrypto.sign.sphincs_shake_256s_simple import generate_keypair, sign, verify
# Alice generates a (public, secret) key pair
public_key, secret_key = generate_keypair()
# Alice signs her message using her secret key
signature = sign(secret_key, b"Hello world")
# Bob uses Alice's public key to validate her signature
assert verify(public_key, b"Hello world", signature)
```
## 📋 Available Algorithms
### Key Encapsulation Mechanisms
```
- hqc_128
- hqc_192
- hqc_256
- mceliece348864
- mceliece348864f
- mceliece460896
- mceliece460896f
- mceliece6688128
- mceliece6688128f
- mceliece6960119
- mceliece6960119f
- mceliece8192128
- mceliece8192128f
- ml_kem_1024
- ml_kem_512
- ml_kem_768
```
### Signature Algorithms
```
- falcon_1024
- falcon_512
- falcon_padded_1024
- falcon_padded_512
- ml_dsa_44
- ml_dsa_65
- ml_dsa_87
- sphincs_sha2_128f_simple
- sphincs_sha2_128s_simple
- sphincs_sha2_192f_simple
- sphincs_sha2_192s_simple
- sphincs_sha2_256f_simple
- sphincs_sha2_256s_simple
- sphincs_shake_128f_simple
- sphincs_shake_128s_simple
- sphincs_shake_192f_simple
- sphincs_shake_192s_simple
- sphincs_shake_256f_simple
- sphincs_shake_256s_simple
```
## 🙏 Credits
The C implementations used herein are derived from the [PQClean](https://github.com/pqclean/pqclean/) project.
---
Built with ❤️ by [Backbone](https://backbone.dev)