Make Any Device Quantum-Safe
in 3 Lines of Code
The only IoT-native PQC SDK with FIPS 203/204/205 compliance, Rust memory safety, fleet-scale key management, and hardware abstraction for Cortex-M, ESP32 & RISC-V.
Everything You Need for Quantum-Safe IoT
From cryptographic primitives to fleet-scale key management — one SDK for the entire device lifecycle
IoT-First Design
The only open-source PQC SDK designed specifically for IoT and embedded devices. Not a server library ported down — built from the ground up for constrained environments.
Full NIST Compliance
Complete implementations of FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA). Standards-compliant and production-ready.
Memory-Safe Rust Core
Written in Rust with zeroize-on-drop for all key material, constant-time operations, and zero unsafe blocks. Buffer overflows eliminated by design.
Hardware Abstraction Layer
Pluggable HAL for ARM Cortex-M, ESP32, and RISC-V. Access hardware RNG, crypto accelerators, and secure storage through a unified trait.
Fleet-Scale Key Management
Go-based KMS with HashiCorp Vault Transit integration, PostgreSQL-backed key lifecycle, and MQTT-based device provisioning.
Hybrid Cryptography
X25519 + ML-KEM-768 hybrid key exchange for safe, incremental migration. Protected against both classical and quantum adversaries.
From Silicon to Cloud
A Rust-native SDK with Go fleet management and React operations portal
Rust Core SDK
ML-KEM, ML-DSA, SLH-DSA with hardware abstraction layer for Cortex-M, ESP32, and RISC-V
Go KMS
Fleet key management with Vault Transit, PostgreSQL key lifecycle, and MQTT device provisioning
React Portal
React 19 operations dashboard for key inventory, certificate management, and device monitoring
Up and Running in 3 Lines
Clone, build, and generate your first quantum-safe key pair in under a minute
Try the SDK
PQC-SDK vs. Alternatives
The only open-source PQC toolkit purpose-built for IoT with fleet management and hardware abstraction
| Feature | PQC-SDK | liboqs | wolfSSL PQC | Bouncy Castle PQC |
|---|---|---|---|---|
| Designed for IoT/Embedded | ✅ | ❌ | ⚠️ | ❌ |
| FIPS 203 (ML-KEM) | ✅ | ✅ | ✅ | ✅ |
| FIPS 204 (ML-DSA) | ✅ | ✅ | ✅ | ✅ |
| FIPS 205 (SLH-DSA) | ✅ | ✅ | ❌ | ✅ |
| Hybrid Crypto | ✅ | ✅ | ❌ | ❌ |
| Hardware Abstraction Layer | ✅ | ❌ | ❌ | ❌ |
| Memory-Safe (Rust) | ✅ | ❌ | ❌ | ⚠️ |
| Auto Key Zeroization | ✅ | ❌ | ⚠️ | ⚠️ |
| Fleet Key Management | ✅ | ❌ | ❌ | ❌ |
| Vault Integration | ✅ | ❌ | ❌ | ❌ |
| Device Provisioning (MQTT) | ✅ | ❌ | ❌ | ❌ |
| Web Portal | ✅ | ❌ | ❌ | ❌ |
| CLI Tool | ✅ | ❌ | ❌ | ❌ |
| Open Source | Apache 2.0 | MIT | GPLv2 | MIT |
Documentation
Everything you need to deploy, develop, and contribute
Architecture
System design, crate structure, and data flow
API Reference
KMS REST API with examples
Rust SDK Guide
Core crypto library usage and HAL integration
Deployment Guide
Docker, Kubernetes, and production ops
Development Guide
Local setup, coding standards, debugging
Security Policy
Vulnerability reporting and security info
Built in the Open
PQC-SDK is open source under Apache 2.0. Whether you're a Rust developer, embedded engineer, or IoT security professional — there's a place for you here.
Fork & Clone
Fork the repo and set up your local environment
Make Changes
Pick an issue, create a branch, and write your code
Submit PR
Run tests, push, and open a pull request