PQC Tool

Post-Quantum Cryptography (PQC) is a class of cryptographic algorithms specifically designed to resist attacks from quantum computers. Traditional algorithms such as RSA, ECDSA, and DH rely on the hardness of integer factorization and discrete logarithm, problems that Shor's algorithm can solve in polynomial time on a quantum computer.

NIST launched its PQC standardization process in 2016 and, after multiple rounds of selection, formally released the standards in 2024. ML-KEM (formerly Kyber) was selected as the key encapsulation mechanism standard, and ML-DSA (formerly Dilithium) was selected as the digital signature standard.

This tool implements ML-KEM and ML-DSA operations locally in your browser using WebAssembly, so you can experience core post-quantum cryptographic operations directly without relying on any server.

ML-KEM (Module-Lattice-Based Key Encapsulation Mechanism) is a lattice-based key encapsulation mechanism used to securely negotiate shared secrets between communicating parties. It offers three primary parameter sets: ML-KEM-512, ML-KEM-768, and ML-KEM-1024, corresponding to NIST security levels 1, 3, and 5 respectively.

ML-DSA (Module-Lattice-Based Digital Signature Algorithm) is used for digital signatures, supporting ML-DSA-44, ML-DSA-65, and ML-DSA-87. It replaces RSA/ECDSA for identity authentication, certificate issuance, firmware signing, and other use cases.

• Key Sizes: ML-KEM public keys are around 1 KB, ciphertexts around 1.5 KB; ML-DSA signatures are approximately 2.5–5 KB.
• Performance: Fast key generation with efficient signing/verification, suitable for deployment on resource-constrained devices.
• Security Proof: Based on the hardness of the Shortest Vector Problem (SVP) on lattices, no known classical or quantum attack can break it in reasonable time.

The core design principle of this tool is "100% frontend-only operation." All ML-KEM encapsulation/decapsulation, ML-DSA signing/verification, and keypair generation operations run locally in your browser using WebAssembly. Your keys, ciphertexts, and signatures are never sent to any server, nor is your input stored anywhere.

For operations involving highly sensitive information (such as generating long-term post-quantum keypairs), we recommend working offline or in a controlled environment, or carefully securing your secret key before copying to external systems. Always remember: the security of post-quantum cryptography depends on keeping your secret key confidential — no matter how strong the algorithm is, a leaked secret key means complete compromise.