systemslibrarian 

Microsoft.Extensions.DependencyInjection integration for PostQuantum.FileEncryption, for .NET 8 and .NET 10. Adds AddPqFileEncryption(), AddPqHybridFileEncryption(), and AddPqSigning() extension methods that... More information

Open-source (MIT) post-quantum hybrid public-key encryption for PostQuantum.FileEncryption, for .NET 8 and .NET 10. Adds X25519 + ML-KEM-768 (FIPS 203) hybrid recipient encryption and multi-recipient support on... More information

Open-source (MIT), fail-closed file and stream encryption for .NET 8 and .NET 10. Constant-memory chunked streaming encrypts files of any size — multi-gigabyte backups and media run in roughly 130 KB of working... More information

Command-line file encryption and signing built on PostQuantum.FileEncryption: `pqfe encrypt` / `pqfe decrypt` for the FROZEN .pqfe v2 container format, plus `pqfe keygen` / `pqfe sign` / `pqfe verify` for... More information

Production-oriented preview library for JOSE-style post-quantum tokens in controlled .NET issuer/verifier systems. Provides ML-DSA-65 signatures (FIPS 204), optional hybrid X-Wing-style confidentiality (X25519... More information

Open-source (MIT) post-quantum hybrid detached signatures for PostQuantum.FileEncryption, for .NET 8 and .NET 10. Signs any file or stream — typically a .pqfe container — with Ed25519 + ML-DSA-65 (FIPS 204)... More information

Defense-in-depth file upload pipeline for ASP.NET Core 8, 9, and 10. An 8-layer validation and encrypted-storage pipeline lifted from a production document-intake workflow: size + batch limits, extension... More information

[SUPERSEDED — use PostQuantum.AspNetCore instead.] ASP.NET Core authentication handler for PostQuantum.Jwt — adds AddPqJwtBearer() so post-quantum (ML-DSA-65) tokens slot into the standard authentication... More information

High-level hybrid post-quantum cryptography for .NET 8 and .NET 10. Combines classical primitives (X25519, Ed25519) with NIST-standardized post-quantum algorithms (ML-KEM-768, ML-DSA-65) for hybrid key... More information

AWS KMS envelope-key provider for PostQuantum.FileEncryption, for .NET 8 and .NET 10. AwsKmsContentKeyProvider implements the IContentKeyProvider seam over AWS KMS GenerateDataKey/Decrypt: every file is... More information

`dotnet new` templates for PostQuantum.Jwt: scaffold a JOSE-style post-quantum token ASP.NET Core API (pqjwt-webapi) or a console app (pqjwt-console) that signs with ML-DSA-65 and validates fail-closed.... More information

Azure Key Vault / Managed HSM envelope-key provider for PostQuantum.FileEncryption, for .NET 8 and .NET 10. AzureKeyVaultContentKeyProvider implements the IContentKeyProvider seam over Key Vault wrap/unwrap... More information

Roslyn analyzers for PostQuantum.Jwt: PQJWT001 forbids inspecting JOSE header fields (alg/jwk/jku/x5u/x5c) — the verification key comes from a trusted key ring, never the token — and PQJWT002 flags per-call... More information

Shamir's Secret Sharing over GF(2^8) with authenticated, strict-CBOR share files: split signing keys and recovery keys K-of-N among trustees; ML-DSA-65 share authentication; information-theoretic security... More information

An opinionated, secure-by-default Argon2id password hashing library for .NET 8, 9, and 10. Provides memory-hard protection against GPU/ASIC attacks with RFC 9106 / OWASP-aligned parameters, a self-describing... More information

`dotnet new` templates for starting projects that use PostQuantum.Hybrid: pqhybrid-app (console), pqhybrid-webapi (ASP.NET Core), pqhybrid-envelope (file-encryption CLI). Install with `dotnet new install... More information

Roslyn analyzers for PostQuantum.Hybrid. Detects common misuse patterns at build time: undisposed hybrid private keys, encapsulation results, and key pairs.

ASP.NET Core extensions for PostQuantum.Hybrid: dependency-injection helpers for loading hybrid KEM and signature keys from configuration, plus opinionated IHybridKeyProvider abstractions.

Opinionated, misuse-resistant message envelopes for PostQuantum.Hybrid. HybridEnvelope.Seal / Open wrap KEM + HKDF + AES-GCM into one call; SignedHybridEnvelope.Seal / Open add hybrid authentication on top.

Test helpers for projects that consume PostQuantum.Hybrid. Cached deterministic test keys (HybridTestKeys), fake KemKeyProvider / SignatureKeyProvider, and tamper-injection helpers for negative-path tests.