systemslibrarian 

Microsoft.Extensions.DependencyInjection integration for PostQuantum.FileEncryption, for .NET 8 and .NET 10. Adds AddPqFileEncryption(), AddPqHybridFileEncryption(), and AddPqSigning() extension methods that... More information

Open-source (MIT) post-quantum hybrid public-key encryption for PostQuantum.FileEncryption, for .NET 8 and .NET 10. Adds X25519 + ML-KEM-768 (FIPS 203) hybrid recipient encryption and multi-recipient support on... More information

Command-line file encryption and signing built on PostQuantum.FileEncryption: `pqfe encrypt` / `pqfe decrypt` for the FROZEN .pqfe v2 container format, plus `pqfe keygen` / `pqfe sign` / `pqfe verify` for... More information

Open-source (MIT), fail-closed file and stream encryption for .NET 8 and .NET 10. Constant-memory chunked streaming encrypts files of any size — multi-gigabyte backups and media run in roughly 130 KB of working... More information

Open-source (MIT) post-quantum hybrid detached signatures for PostQuantum.FileEncryption, for .NET 8 and .NET 10. Signs any file or stream — typically a .pqfe container — with Ed25519 + ML-DSA-65 (FIPS 204)... More information

Production-quality library for JOSE-style post-quantum tokens in controlled .NET issuer/verifier systems. Provides ML-DSA-65 signatures (FIPS 204), optional hybrid X-Wing-style confidentiality (X25519 +... More information

Azure Key Vault / Managed HSM envelope-key provider for PostQuantum.FileEncryption, for .NET 8 and .NET 10. AzureKeyVaultContentKeyProvider implements the IContentKeyProvider seam over Key Vault wrap/unwrap... More information

AWS KMS envelope-key provider for PostQuantum.FileEncryption, for .NET 8 and .NET 10. AwsKmsContentKeyProvider implements the IContentKeyProvider seam over AWS KMS GenerateDataKey/Decrypt: every file is... More information

[SUPERSEDED — use PostQuantum.AspNetCore instead.] ASP.NET Core authentication handler for PostQuantum.Jwt — adds AddPqJwtBearer() so post-quantum (ML-DSA-65) tokens slot into the standard authentication... More information

`dotnet new` templates for PostQuantum.Jwt: scaffold a JOSE-style post-quantum token ASP.NET Core API (pqjwt-webapi) or a console app (pqjwt-console) that signs with ML-DSA-65 and validates fail-closed.... More information

Clean, high-level key management and rotation for post-quantum-ready encryption in .NET. Implements the envelope-encryption pattern (256-bit content keys wrapped by a key-encryption key) with a secure local KEK... More information

Defense-in-depth file upload pipeline for ASP.NET Core 8, 9, and 10. An 8-layer validation and encrypted-storage pipeline lifted from a production document-intake workflow: size + batch limits, extension... More information

Post-quantum / hybrid key wrapping for ASP.NET Core Data Protection. Plugs in as an IXmlEncryptor / IXmlDecryptor so cookie keys, antiforgery keys, session tickets, and any IDataProtector-protected payload at... More information

An opinionated, secure-by-default Argon2id password hashing library for .NET 8, 9, and 10. Provides memory-hard protection against GPU/ASIC attacks with RFC 9106 / OWASP-aligned parameters, a self-describing... More information

High-level hybrid post-quantum cryptography for .NET 8 and .NET 10. Combines classical primitives (X25519, Ed25519) with NIST-standardized post-quantum algorithms (ML-KEM-768, ML-DSA-65) for hybrid key... More information

Roslyn analyzers for PostQuantum.Jwt: PQJWT001 forbids inspecting JOSE header fields (alg/jwk/jku/x5u/x5c) — the verification key comes from a trusted key ring, never the token — and PQJWT002 flags per-call... More information

`dotnet new` templates for starting projects that use PostQuantum.Hybrid: pqhybrid-app (console), pqhybrid-webapi (ASP.NET Core), pqhybrid-envelope (file-encryption CLI). Install with `dotnet new install... More information

ASP.NET Core Identity integration for Argon2id.PasswordHasher. Provides an IPasswordHasher<TUser> implementation backed by secure-by-default Argon2id, with automatic rehash-on-login... More information

Roslyn analyzers that catch dangerous misuse of the PostQuantum.FileEncryption family at compile time, before it ships: hard-coded passphrases (PQFE101), raw private-key bytes written to disk instead of a... More information

PostQuantum.LMS.Signer is a pure-managed .NET implementation of NIST SP 800-208 / RFC 8554 stateful hash-based signatures (LMS and HSS), built for firmware signing, secure boot, and code signing in the... More information