PQCToolkit Post-Quantum Crypto

PQCToolkit brings next-generation post-quantum cryptography to your Android device — the same algorithms standardized by NIST to resist attacks from quantum computers. All operations run 100% locally on your device. No accounts, no servers, no telemetry. Your keys and messages never leave your phone. ⚛️ NIST-STANDARDIZED ALGORITHMS - ML-KEM / CRYSTALS-Kyber (FIPS 203) — Key encapsulation for secure message encryption - ML-DSA / CRYSTALS-Dilithium (FIPS 204) — Digital signatures for document authentication - Three security levels for each algorithm: 128-bit, 192-bit, and 256-bit post-quantum security 🔑 KEY GENERATION Generate post-quantum key pairs in seconds directly on your device. Choose between ML-KEM (for encryption) and ML-DSA (for signatures) at three security levels each. Keys are stored encrypted using the Android Keystore system — protected by your device's secure hardware. 🔒 ENCRYPT MESSAGES Encrypt any text message for a recipient using their ML-KEM public key. The app automatically looks up the recipient's key on PQCServer, or you can paste the key manually. Output is a compact JSON envelope compatible with pqctoolkit.com — you can encrypt on Android and decrypt on the web, and vice versa. 🔓 DECRYPT MESSAGES Decrypt messages encrypted for you using your ML-KEM secret key. Simply paste the JSON envelope and the app decrypts it instantly using your locally stored key. ✏️ SIGN DOCUMENTS Sign any text or document with your ML-DSA secret key. The output is a JSON envelope containing the original message and its post-quantum digital signature — proof that the content is authentic and has not been tampered with. ✔️ VERIFY SIGNATURES Verify the authenticity of a signed message using the signer's ML-DSA public key. Instantly confirms both the identity of the signer and the integrity of the content. 👤 KEY MANAGER Store and manage multiple PQC identities on your device. Publish your public key to PQCServer — a post-quantum key directory — so others can encrypt messages for you automatically. Export encrypted backups of your private keys protected by a passphrase, and restore them on any device. 🌐 PQCSERVER INTEGRATION PQCToolkit integrates with PQCServer (pqcserver.com), an open post-quantum key directory. Publish your public key once, and anyone using PQCToolkit, PQCMail, or any compatible app can find your key and send you encrypted messages. 🛡️ PRIVACY & SECURITY - All cryptography runs on your device — no cloud processing - Private keys protected by Android Keystore (hardware-backed TEE) - Encrypted key backups with PBKDF2-SHA256 (310,000 iterations) + AES-256-GCM - Zero telemetry, zero analytics, zero ads - No account required - Open source 📦 TECHNICAL DETAILS Powered by Bouncy Castle 1.78 — a certified Java implementation of NIST FIPS 203 and FIPS 204. No native libraries, no WebAssembly — pure Java running on the standard Android JVM. Compatible with Android 8.0 (API 26) and above. Quantum computers are coming. Your data should be ready.