Quantum-Resilient
Cryptography, Detection & Remediation

Quantum + Cryptography + Always On. QCrypton is a quantum-resilient cryptography, threat detection, noise reachability analysis, and automated remediation platform. It combines post-quantum encryption (HPKE, AES-256-GCM, LSH-256), quantum key distribution (BB84 with enhanced eavesdrop detection), FTQC attack cost estimation (32 algorithms with 2-level validation), quantum noise reachability analysis (12 noise types, 6 QEC codes, 720 evaluations), HSM/KMS integration (6 providers), code scanning (6 languages), 13 runtime threat scanners, 36 attack simulator scenarios, provider-agnostic AI triage agent (Claude, GPT, Gemini, Ollama) with confidence scoring and reasoning, noise collapse for ML-based false positive suppression, intelligence graph with attack path visualization and reachability analysis, automated crypto remediation with agentic PR generation for GitHub, autonomous PQC migration agent with dependency-aware multi-turn AI workflow, crypto threat intelligence with 25+ quantum milestones and dynamic risk multipliers, runtime TLS monitoring for cipher suite and certificate quantum assessment, supply chain crypto audit across 5 ecosystems (npm, pip, Go, Cargo, Maven), natural language console for conversational security workflows, predictive models for quantum timeline forecasting and MTTR trend analysis, parallel sweep engine for org-wide concurrent scanning, migration optimizer with 4 cost/risk strategies, workflow automation (8 rules: auto-assign, SLA escalation, Jira tickets, auto-remediate, Slack/Teams notify, CI/CD gate, auto-close), Jira bidirectional sync, IDE extensions for 6 editors (VS Code, JetBrains, Cursor, Windsurf, Copilot, Neovim), SBOM dependency graph with vulnerability overlay, MTTR tracking, compliance dashboards (SOC 2, ISO 27001, PCI-DSS, NIST CSF, HIPAA, CNSA 2.0), security posture score gauge (6-factor weighted scoring), finding detail drawer with AI reasoning, saved filter views, Cmd+K command palette, keyboard shortcuts, role-based views (Developer, AppSec Lead, CISO), dark/light theme, WCAG 2.1 accessibility, Stripe billing, SAML/OAuth/OIDC SSO, SCIM 2.0 provisioning, IP allowlisting, per-user rate limiting, and multi-tenant RBAC.

The attack cost engine estimates the quantum resources needed to break cryptographic algorithms. For each of 32 algorithms, it calculates: logical qubits, T-gate count, T-depth, CNOT count, circuit depth, and physical qubit requirements under surface code error correction with magic state distillation. Includes 2-level attack optimization validation: Level 1 checks claims against theoretical lower bounds (Beauregard's 2n+1 qubits for Shor's, BBBV theorem for Grover's, T-depth/T-gate consistency), and Level 2 validates scaling trends using power-law regression across algorithm families. Based on published research from Gidney & Ekerå (2021), Grassl et al. (2016), Häner et al. (2020), and the ETRI QCrypton FTQC model. Configurable physical error rates let you model current (1e-2) through future (1e-5) quantum hardware.

QCrypton uses a surface code model (Fowler et al., 2012) to estimate physical qubits. The formula accounts for: (1) code distance calculated from the target logical error rate, (2) data qubits = logicalQubits x 2d², (3) magic state distillation factories for T-gate synthesis (15-to-1 protocol), (4) routing overhead (~50%). For example, RSA-2048 requires 4,098 logical qubits, which maps to ~3.5M physical qubits at error rate 1e-3 (code distance 17), or ~1M physical qubits at error rate 1e-4 (code distance 9).

HPKE (Hybrid Public Key Encryption, RFC 9180) uses DHKEM(X25519) for key agreement + AES-256-GCM for encryption. In PSK mode, a pre-shared key is mixed into the key schedule alongside the X25519 shared secret. Even if a quantum computer breaks X25519, the PSK still protects the ciphertext — the attacker would need both the private key AND the PSK.

QCrypton integrates with 6 providers: Entrust nShield (9 PQC algos, FIPS 140-3 Level 3), AWS KMS, Azure Key Vault, Google Cloud KMS, Thales Luna HSM, and a built-in Software HSM for development/testing.

No. All algorithms run on classical hardware. The FTQC resource estimation calculates physical qubit requirements mathematically — it doesn't require quantum hardware. Cryptographic operations use Node.js built-in crypto. For PQC operations (ML-KEM, ML-DSA), connect to a FIPS 140-3 validated HSM.

QCrypton does both. The remediation engine (remediate.js) provides automated fixes: Code remediation generates patches to replace weak crypto (MD5→SHA3-256, DES/RC4→AES-256-GCM, HMAC-MD5→HMAC-SHA3-256) across 6 languages with dry-run support. Autonomous PR generation (pr-orchestrator.js) goes further — it scans your GitHub repository via API, generates patches, creates a branch, commits all fixes atomically, and opens a pull request automatically. No local git clone required. The PQC Migration Agent (migration-agent.js) is a multi-turn AI workflow that inventories all cryptographic usage, maps dependency chains, plans migration order (leaf-first), and generates sequential PRs via GitHub — powered by Claude, GPT, or Gemini. The Migration Optimizer recommends the best strategy (risk-first, effort-first, dependency-first, or balanced) based on your findings. Config remediation takes an insecure server config and returns a corrected one with TLS, auth, rate limiting, sandboxing, and PCI compliance. Input sanitization strips injection and exfiltration patterns instead of blocking requests. For algorithms requiring architectural migration (RSA, ECDSA, Ed25519), QCrypton provides migration guides pointing to the HSM module for PQC alternatives (ML-KEM, ML-DSA, SLH-DSA).

Six options: (A) Express middleware — app.use('/api', defenderMiddleware()) to block threats, or remediationMiddleware() to auto-sanitize. (B) Node.js library — const { scanners, remediate } = require('qcrypton'). (C) REST API client — new DefenderClient('http://localhost:3000'). (D) CI/CD gate — runGateWithFix(scanResult, policy, { autoFix: true }). (E) Multi-language SDKs — native clients for Python (pip install qcrypton), Go, Java, Ruby, and Rust. (F) Any HTTP client — standard REST API works with any language. All SDKs cover the full platform: 13 scanners, threat intelligence, TLS monitoring, supply chain audit, migration agent, NL console, predictive models, parallel sweep, and migration optimizer endpoints. CLI commands include qcrypton threat-intel, qcrypton tls-probe <host>, qcrypton supply-chain <path>, and qcrypton migration-agent.