A NON-PROFIT · PUBLIC INFRASTRUCTURE FOR POST-QUANTUM CRYPTOGRAPHY
We run the official NIST tests on any post-quantum implementation, log the result in a public ledger, and let anyone reproduce it. Free for everybody.
The mechanism that keeps every TLS certificate on the internet honest — a public, append-only record anyone can check — applied to post-quantum cryptography.
A small binary that reads one JSON request and writes one JSON answer. Zig, Rust, Go, C, Python, WASM — the harness does not care what you wrote it in.
A fixed container runs three batteries: the official NIST vectors plus edge cases, timing-leak measurement, and interoperability against independent implementations.
Result, source commit, vector set and container digest are signed and appended to a public transparency log. Anyone reruns it and gets the same bytes.
FOUR LEVELS · EACH SAYS EXACTLY WHAT WAS CHECKED
All official ACVP vectors; invalid keys, implicit rejection, serialization edge cases.
Constant-time measurement, fuzzing, no secret-dependent division in the binary.
Keys from one implementation, ciphertexts from another, decapsulation by a third.
Signed human review. Reputation from track record, not from a license.
| IMPLEMENTATION | LANGUAGE | ML-KEM | ML-DSA | LEVEL | LAST RUN |
|---|---|---|---|---|---|
| mlkem-zig | Zig | 240/240 | — | L1 | 2026-10-30 |
| liboqs | C | not yet run | not yet run | — | — |
| Go crypto/mlkem | Go | not yet run | — | — | — |
| libcrux | Rust | not yet run | not yet run | — | — |
| CIRCL | Go | not yet run | not yet run | — | — |
A record says "passed these tests, reproducibly". It never says "secure". Negative results are published with the same weight as positive ones.
FOR BUILDERS
Students, solo developers, small teams: the same verification the big libraries get, with no lab and no invoice. Every commit, every time. AI agents can call it through MCP.
Read the docsFOR ENTERPRISES
The public registry is free and open. For closed code, regulated environments and deadlines, the commercial arm offers what the lab queue cannot: continuous verification today, and a straight path to CAVP when you need the certificate.
Your inventory of cryptography, continuously verified, inside your perimeter.
Verified post-quantum libraries and containers, with updates and an SLA.
Pass the NIST demo server before you pay a lab. One submission instead of three.
Signed post-quantum readiness reports for DORA, NIS2 and central-bank requirements.
Quantum Commons is a non-profit foundation with open governance. The specification, the tooling and the log are public goods. The founding builder is INAI; the technical committee is whoever shows up and does the work.