Quipu: post-quantum encryption in pure Rust, with a Python wheel
Protecting data that must stay secret ten years from now is a problem for today : an adversary can capture your encrypted traffic now and decrypt it once quantum capability exists ( harvest now, decrypt later ). Quipu is a free hybrid post-quantum encryption library for data at rest: it combines proven classical cryptography with the new kind, so that it only breaks if both fall at once. Pure…
Quipu is a free hybrid post-quantum encryption library for data at rest, combining classical cryptography with quantum-resistant methods to ensure security against future threats. Written in pure Rust, the library offers memory safety, eliminating the need for a garbage collector or first-party unsafe features. For those who prefer Python, Quipu provides a native Python wheel via PyO3, streamlining the installation process and eliminating the need for multiple bindings.
The library utilizes well-established encryption algorithms, such as XChaCha20-Poly1305 for authenticated encryption, Argon2id for key derivation, and X25519 + ML-KEM-1024 for post-quantum key exchange, along with Ed25519 + ML-DSA-87 for signatures. With a security level equivalent to NIST category 5 (CNSA 2.0), Quipu adheres to standard, verified primitives, ensuring a reliable defense against both classical and quantum attacks.
Despite its impressive features, Quipu is currently not independently audited, meaning users should treat it as software for review and experimentation rather than a secure solution for high-value secrets. The source code is freely available on GitHub, allowing users to audit the format and composition of Quipu. The library is openly licensed under AGPL-3.0, with documentation provided on crates.io and PyPI, enabling easy installation and adoption across different programming environments.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
