Skip to content

Post-Quantum Cryptography (PQC) Readiness

The service operates as an Experimental PQC Reference Implementation.

  1. Transport Layer

    • Negotiates TLS 1.3 Hybrid Key Exchange (ML-KEM).
    • Powered by a custom-compiled stack running OpenSSL 3.6.3 and an Nginx proxy.
    • Exposes Post-Quantum named groups (e.g., SecP384r1MLKEM1024, X25519MLKEM768) natively to capable clients.

  2. Java Engine

    • Upgraded to Spring Boot 4 and OpenJDK 25.
    • Provides native ML-DSA signature verification support for next-generation certificate chains.
    • Utilizes jdk.tls.namedGroups injection to ensure outbound certificate authority and revocation connections operate over quantum-resistant channels.