Skip to content

Welcome to KeySupport.net

KeySupport.net is a specialized infrastructure and research hub dedicated to high-assurance certificate validation, U.S. Federal PKI (FPKI) interoperability, and Post-Quantum Cryptography (PQC) readiness.

At the core of this ecosystem is the Certificate Validation Service (VSS), a modernized, RESTful JSON API designed to simplify complex X.509 cryptographic validation.

Core Infrastructure

Our platform is accessible across several domains:

Key Pillars

1. Certificate Validation Service (VSS)

A high-performance REST API built on Spring Boot 4 and OpenJDK 25. It abstracts away the heavy lifting of X.509 path building, revocation checking, and policy enforcement, returning clean, actionable JSON responses. Explore the API Reference →

2. Experimental PQC Reference Implementation

Our entire transport layer operates on a custom-compiled stack (Nginx + OpenSSL 3.6.3), actively negotiating TLS 1.3 Hybrid Key Exchange (ML-KEM) to provide quantum-resistant secure channels today. Read about our PQC Architecture →

3. Open-Source Integrations

We provide native tools and reference implementations to interface with the VSS ecosystem: * KeySupport Validator: A native mobile app for Android (Jetpack Compose) and iOS (SwiftUI) that reads PIV/CAC cards over NFC and validates them instantly. * Python Client & FPKI Analysis: A robust Python CLI utility that automates the extraction and validation of upstream Federal PKI intermediate certificates. * Java Client: A native enterprise interface for Java applications.

Explore the sidebar navigation to dive deeper into our validation APIs, architectural philosophy, and legacy EKMS history.