rey128989/pqc-server repository overview

⁠Universal PQC Backend

Secure. Scalable. Quantum-Safe.

The Universal PQC Backend is an industrial-grade secure storage and messaging platform designed for the post-quantum era. It leverages CRYSTALS-Dilithium5 for quantum-resistant transport security and AES-256-GCM for encryption-at-rest, ensuring data remains confidential against both classical and future quantum threats.

⁠📄 Research & Documentation

This project is backed by a formal technical paper detailing the cryptographic implementation and performance benchmarks.

• Official DOI: 10.5281/zenodo.19024628⁠
• Full Paper (Zenodo): Read the Publication⁠
• ResearchGate: View Preprint & Stats⁠

⁠🏗️ System Architecture

The platform is engineered as a hybrid C++/Python stack, tracking post-quantum transport security with classical symmetric encryption-at-rest.

⁠Technical Stack

• Security Foundation: OQS-OpenSSL 1.1.1 + liboqs 0.8.0.
• Transport: CRYSTALS-Dilithium5 (Signatures) & Kyber768 (KEM).
• Rest Security: AES-256-GCM with atomic key rotation.
• Infrastructure: Multi-stage Docker (Ubuntu 22.04 LTS base).

⁠🚀 Core Features

• Quantum-Safe Transport: Communication is secured using a custom OpenSSL build with Dilithium5 signatures and Kyber key encapsulation.
• Encrypted Persistence: Data is stored in a robust SQLite database, transparently encrypted with AES-256-GCM.
• Dual-Stack API: Serves gRPC and HTTP/REST simultaneously.
• Cloud Scalability: Built-in support for offloading large encrypted files to AWS S3.
• Secure File Transfer: Streaming upload/download capabilities with automatic encryption.

⁠📊 Performance Benchmarks

⁠🛠️ Installation & Run Context

The entire system is containerized. Building the image compiles the full custom cryptographic toolchain.

⁠Prerequisites

• Docker & Docker Compose
• Linux Environment (Ubuntu 20.04+ recommended)

⁠Run Command

To run the server instance manually using this image:

docker run -d --name pqc-server \
  -p 50051:50051 -p 8080:8080 \
  -v "$(pwd)/certs:/app/certs" \
  -v "$(pwd)/data:/app/data" \
  rey128989/pqc-server:latest

⁠⚙️ Configuration

Configuration parameters are managed natively via config.json.

{
  "address": "0.0.0.0:50051",
  "storage_path": "data/storage.bin",
  "http_api_key": "your-secure-api-key",
  "use_s3": false,
  "s3_bucket": "my-secure-bucket"
}

⁠⭐ Drop a Star or Say Hi!

If this backend is helping you with your deployment or ongoing academic research, please head over and drop a star on the project repository. I would love to hear what workflows you are building—feel free to open an issue or start a thread just to connect:

👉 Official GitHub Repository: Sujithb128989/Quantum-Safe-Backend⁠

⁠📜 License & Acknowledgments

Copyright (c) 2026 Sujith B. All rights reserved.
Licensed under the Apache License, Version 2.0.

Special thanks to:

• Open Quantum Safe⁠: For liboqs and the OQS-OpenSSL fork.
• @Mester-Oxdan⁠: For system and compilation support.

Disclaimer: This software is intended for industrial research and forward-looking security implementation. While it utilizes NIST-selected algorithms, it has not undergone FIPS 140-3 certification.