An authenticated symmetric encryption mode. This project uses AES-256-GCM for bulk file encryption after a key is derived from hybrid key agreement.
Data that is authenticated but not encrypted by an AEAD mode such as AES-GCM. This project authenticates container metadata as associated data so tampering with metadata causes decryption failure.
Encrypted bytes. For ML-KEM, ciphertext is the encapsulation output used by the recipient to recover the same shared secret. For AES-GCM, ciphertext is the encrypted file content plus authentication tag.
Algorithms such as RSA, X25519, Ed25519, and traditional elliptic-curve cryptography. They are widely deployed today, but public-key classical algorithms are expected to be vulnerable to sufficiently capable quantum computers.
The recipient-side ML-KEM operation that uses a private key and KEM ciphertext to recover a shared secret.
The sender-side ML-KEM operation that uses a recipient public key to produce a KEM ciphertext and shared secret.
A formal validation process for specific cryptographic modules and configurations. This project does not claim FIPS validation.
A key derivation function based on HMAC-SHA256. This project uses it to derive a 32-byte AES key from combined ML-KEM and X25519 shared-secret material.
A transition approach that combines classical and post-quantum mechanisms. In this project, X25519 and ML-KEM shared secrets are combined before HKDF derives the AES key. Hybrid design is not the same thing as production assurance.
Key derivation function. A KDF turns input key material into one or more keys for a specific purpose.
A standardized post-quantum digital signature algorithm, formerly associated with Dilithium. ML-DSA provides signatures. It does not encrypt files.
A standardized post-quantum key encapsulation mechanism, formerly associated with Kyber. ML-KEM establishes shared key material. It does not encrypt bulk file contents by itself.
Cryptography designed to resist known attacks from sufficiently capable quantum computers. Post-quantum does not mean unbreakable.
Secret key material that must be protected. In this project, private-key files are not encrypted at rest and must be treated as educational artifacts.
Key material intended to be shared. Recipient public keys are used for encryption key establishment. Signer public keys are used for verification.
Bytes produced with a private signing key that allow verification with the corresponding public key. Signatures provide authenticity and integrity, not confidentiality.
An attack model where an adversary records encrypted data today and attempts to decrypt it in the future when stronger cryptanalytic tools or quantum computers are available.